last executing test programs: 4m20.662027389s ago: executing program 4 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x5) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4m18.73615154s ago: executing program 4 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) 4m18.683621262s ago: executing program 4 (id=1082): r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b5000000"], 0xc8) 4m18.614577726s ago: executing program 4 (id=1084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000000000000006600000000000000180000006e0000000000000000000000950000000000000057830000000000009500"/88, @ANYRESOCT=0x0, @ANYRESHEX], &(0x7f0000000180)='syzkaller\x00', 0x80, 0xfffffffffffffce3}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) (async) creat(&(0x7f00000004c0)='./bus\x00', 0x20) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000181401"], 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000181401"], 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x25, 0x0, @val=@perf_event={0x7}}, 0x18) (async) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x25, 0x0, @val=@perf_event={0x7}}, 0x18) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) waitid(0x1, r6, 0x0, 0x61000006, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) (async) r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000003c0)={@multicast1, @broadcast, r4}, 0xc) (async) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000003c0)={@multicast1, @broadcast, r4}, 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) (async) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r9, 0x0, 0xc8) (async) write$binfmt_aout(r9, 0x0, 0xc8) write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0301"], 0xc8) r10 = socket$l2tp(0x2, 0x2, 0x73) r11 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r11, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000280)='\b', 0x1}], 0x1}, 0x20000810) modify_ldt$write2(0x11, &(0x7f0000000380)={0x4, 0x0, 0xffffffffffffbfff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xa000, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',loose,privport,cache=fscache,uname=\x00,access=user,posixacl,appraise,context=sysadm_u,fowner<', @ANYRESDEC=r5, @ANYBLOB="2c640223fde23eb8c181e40b199d5bbd1256d780006d655e737572652c667bff0251776e65723d34c1fae85ce66bef68ec82b987cf2f24eea7343e4b1b4ca5ba000b9dfa3aa9c1454f309c3c71e5049d92b2e6c09bd5d76d11ae87202b62a6cf965b21332f0374b8ccd9b32fb955284cd549025e0e688aa9a30f06eac6c84533c3f3", @ANYRESDEC=r12, @ANYBLOB=',context=user_u,hash,mask=^MAY_WRITE,smackfstransmute=syzkaller\x00,uid>', @ANYRESDEC=r13, @ANYBLOB=',\x00']) 4m18.263022074s ago: executing program 4 (id=1086): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@dellinkprop={0x34, 0x6c, 0x1, 0x709d27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x289c}, [@IFLA_ALT_IFNAME={0x14, 0x45, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) mkdirat(0xffffffffffffff9c, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000002900030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f0000000600010000000000080005"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000101010200000000000000000a0000000c001980080002008d000000380002802c000180140003000000d914000400ff010000000000000000000000000001060003400000000008001640000000071995d4b8b59570c7f851a7cca57b3003458783fffddbc0f5a739595656cd5db3d568d2c70cb9d84c02c710"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) 4m16.389482253s ago: executing program 4 (id=1100): futex_waitv(&(0x7f0000001f00)=[{0x2, &(0x7f0000000a80)=0x8000000000000001, 0x82}, {0x4, &(0x7f0000000ac0)=0x7fffffffffffffff, 0x2}, {0x2, &(0x7f0000000b00)=0x2, 0x82}, {0x7, &(0x7f0000000b40)=0x80, 0x82}, {0x3b, &(0x7f0000000b80)=0x8, 0x82}, {0x10001, &(0x7f0000000bc0)=0x1, 0x82}, {0x200, &(0x7f0000000c00)=0x8000000000000001, 0x82}, {0x4, &(0x7f0000000c40)=0x6aad, 0x82}, {0x5, &(0x7f0000000c80)=0x9, 0x82}, {0x10, &(0x7f0000000cc0)=0x5, 0x82}, {0x8000000000000001, &(0x7f0000000d00)=0x9b, 0x2}, {0x7, &(0x7f0000000d40)=0x8000000000000000, 0x2}, {0xffffffff, &(0x7f0000000d80)=0x3, 0x82}, {0x5, &(0x7f0000000dc0)=0x5, 0x2}, {0x7, &(0x7f0000000e00)=0x2, 0x82}, {0x8, &(0x7f0000000e40)=0x1cf2, 0x82}, {0x6, &(0x7f0000000e80)=0x9, 0x82}, {0x8000000000000000, &(0x7f0000000ec0)=0x1, 0x2}, {0x9, &(0x7f0000000f00)=0x79878570, 0x82}, {0x7ff, &(0x7f0000000f40)=0x9, 0x82}, {0x5, &(0x7f0000000f80)=0x1, 0x82}, {0x400, &(0x7f0000000fc0)=0x4, 0x82}, {0x3, &(0x7f0000001000)=0xb99d, 0x82}, {0x4, &(0x7f0000001040), 0x82}, {0xc, &(0x7f0000001080)=0x2, 0x82}, {0x1, &(0x7f00000010c0)=0x3fe2, 0x2}, {0x2, &(0x7f0000001100)=0x4, 0x82}, {0x0, &(0x7f0000001140)=0x3, 0x82}, {0x4, &(0x7f0000001180)=0x76d7f66d, 0x82}, {0x800, &(0x7f00000011c0)=0x2b1b7aca, 0x2}, {0x5, 0x0, 0x2}, {0xf483, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0xfffffffffffffffa, 0x0, 0x82}, {0x62a, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x11, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0xe, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x4c5d, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x7fffffffffffffff, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x5, 0x0, 0x82}], 0x34, 0x0, &(0x7f0000002740), 0x0) 4m16.378543243s ago: executing program 32 (id=1100): futex_waitv(&(0x7f0000001f00)=[{0x2, &(0x7f0000000a80)=0x8000000000000001, 0x82}, {0x4, &(0x7f0000000ac0)=0x7fffffffffffffff, 0x2}, {0x2, &(0x7f0000000b00)=0x2, 0x82}, {0x7, &(0x7f0000000b40)=0x80, 0x82}, {0x3b, &(0x7f0000000b80)=0x8, 0x82}, {0x10001, &(0x7f0000000bc0)=0x1, 0x82}, {0x200, &(0x7f0000000c00)=0x8000000000000001, 0x82}, {0x4, &(0x7f0000000c40)=0x6aad, 0x82}, {0x5, &(0x7f0000000c80)=0x9, 0x82}, {0x10, &(0x7f0000000cc0)=0x5, 0x82}, {0x8000000000000001, &(0x7f0000000d00)=0x9b, 0x2}, {0x7, &(0x7f0000000d40)=0x8000000000000000, 0x2}, {0xffffffff, &(0x7f0000000d80)=0x3, 0x82}, {0x5, &(0x7f0000000dc0)=0x5, 0x2}, {0x7, &(0x7f0000000e00)=0x2, 0x82}, {0x8, &(0x7f0000000e40)=0x1cf2, 0x82}, {0x6, &(0x7f0000000e80)=0x9, 0x82}, {0x8000000000000000, &(0x7f0000000ec0)=0x1, 0x2}, {0x9, &(0x7f0000000f00)=0x79878570, 0x82}, {0x7ff, &(0x7f0000000f40)=0x9, 0x82}, {0x5, &(0x7f0000000f80)=0x1, 0x82}, {0x400, &(0x7f0000000fc0)=0x4, 0x82}, {0x3, &(0x7f0000001000)=0xb99d, 0x82}, {0x4, &(0x7f0000001040), 0x82}, {0xc, &(0x7f0000001080)=0x2, 0x82}, {0x1, &(0x7f00000010c0)=0x3fe2, 0x2}, {0x2, &(0x7f0000001100)=0x4, 0x82}, {0x0, &(0x7f0000001140)=0x3, 0x82}, {0x4, &(0x7f0000001180)=0x76d7f66d, 0x82}, {0x800, &(0x7f00000011c0)=0x2b1b7aca, 0x2}, {0x5, 0x0, 0x2}, {0xf483, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0xfffffffffffffffa, 0x0, 0x82}, {0x62a, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x11, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0xe, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x4c5d, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x7fffffffffffffff, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x5, 0x0, 0x82}], 0x34, 0x0, &(0x7f0000002740), 0x0) 29.637398501s ago: executing program 0 (id=4735): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xfc, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 29.584505544s ago: executing program 0 (id=4737): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 29.505946768s ago: executing program 0 (id=4739): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'F'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x200408c4) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff"], 0x80}}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x7, 0x0, &(0x7f0000000040)="581f9239658ea9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) recvmsg$kcm(r3, 0x0, 0x10020) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x8}}, @TCA_CT_MARK={0x8, 0x10, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, 0x0, 0x0) 28.972331976s ago: executing program 0 (id=4740): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x2000000000007}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r3, r1, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x12224b5, &(0x7f0000002740)=ANY=[@ANYRES16=r7, @ANYRES64=r5, @ANYRESOCT=r7, @ANYRES16=r7, @ANYRES8=r6, @ANYRESHEX=r1, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRESDEC=r6], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"df6f63dc284ed701efe4a4b20460cd6d", 0x0, 0x0, {0x7fffffffffffffff, 0x1}, {0x7, 0xff}, 0x2a, [0x1, 0x8, 0x3, 0x9, 0x62233ff5, 0x8, 0xd, 0x1, 0x9, 0x1, 0x3, 0xca, 0x1, 0xfffffffffffff000, 0x92dd, 0x3827]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"cb010000000800000053d58a45e769a5", r7, r8, {0x5, 0x3}, {0xffffffffffffffff, 0x1}, 0x10, [0x1, 0x5, 0xe46, 0x18, 0x20005, 0x10000, 0x4, 0x4, 0x4, 0x9, 0x1, 0x6506, 0xffffffff7fffffff, 0x1, 0x9, 0x7]}) r9 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x82, 0x499, &(0x7f0000000840)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x7) r10 = openat(r9, &(0x7f0000000040)='./file1\x00', 0x743043, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000080)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x8, 0x36c, &(0x7f00000023c0)="$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") r11 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r11, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xc, 0x4c831, 0xffffffffffffffff, 0x0) r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r3) ptrace$poke(0x5, r12, &(0x7f00000011c0), 0xfffffffffffffffb) 28.421436814s ago: executing program 0 (id=4742): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x1b, 0x5, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x16, &(0x7f0000000100)=""/127, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 27.800929707s ago: executing program 0 (id=4747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0xa7, &(0x7f0000006a80)={&(0x7f0000006a00)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048050}, 0x48804) 27.794748667s ago: executing program 33 (id=4747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0xa7, &(0x7f0000006a80)={&(0x7f0000006a00)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048050}, 0x48804) 23.507259351s ago: executing program 1 (id=4778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0xc000, 0x0, 0x0) syz_emit_ethernet(0x74, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)='$', 0x1, 0x0, 0x0, 0x0) 23.495087682s ago: executing program 1 (id=4779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0xc000, 0x0, 0x0) syz_emit_ethernet(0x74, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000280)={0x14, r2, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000009070004000000000005000500e00000020f0007"], 0x34}, 0x2, 0x34005}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) 23.446350434s ago: executing program 1 (id=4780): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet6(0xa, 0x3, 0x8c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x2001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@loopback}, {@dev}, {@private}]}]}}}}}}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x14, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 22.120098544s ago: executing program 1 (id=4788): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xe}, 0x4040, 0x3, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107f6ffffff000000000a0000000600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsetxattr(r0, &(0x7f0000000040)=@random={'os2.', '\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 21.218003121s ago: executing program 1 (id=4793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf25670000000c00991fcb0000004969e10000000000000080ffdd7b7564b4aa9400"/56], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) close(r0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fcntl$notify(0xffffffffffffffff, 0x402, 0x1f) (async) syz_pidfd_open(0x0, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x28, 0x41, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000100), 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_open_dev$sg(&(0x7f0000000040), 0x7fffffffffffffff, 0x585000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, 0x0, 0x10) (async) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 19.377342957s ago: executing program 1 (id=4798): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 19.364673568s ago: executing program 34 (id=4798): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 15.68652687s ago: executing program 6 (id=4832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4000c1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000580)={@void, @val={0x1, 0x0, 0x200, 0x0, 0x3d}, @mpls={[], @ipv4=@dccp={{0x18, 0x4, 0x2, 0x21, 0x83, 0x65, 0x0, 0x9, 0x21, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x44, 0xaa, 0x1, 0xf, [{@rand_addr=0x64010101, 0x7a}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x5}, {@local, 0xc}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x65}, {@multicast2, 0x101}, {@multicast2, 0x2}, {@local, 0x200}, {@rand_addr=0x64010102, 0x4}]}, @cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}]}}, {{0x4e23, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x3, "284fc8", 0x6d, "7a4097"}, "95825798b2b4a1ccb3f0c6c593c47d2fe8d1a3"}}}}, 0x8d) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pwritev2(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)="961f16dfe2aa5de05dc9f2c5070723a87b8e42c5cd6db199f6b029cdf4aba0aad398e2c39ee65b11dfd4473edd", 0x2d}, {&(0x7f0000000440)="ed5050f00c205f2245aa4726cf0772efbc6cfde0fb1eab1a77a4e7fd54b6cc05ae7493aabb0ec4f26e07e48d3efa4b9c182b717916a6f8cb3d10bc82eb822993152379ba3d579a96535b0afaa55db538bb9868f43e7f24ea4e39d25c4f095d2a6e1fd37c3572444ca1a140c233", 0x6d}], 0x2, 0xe6f, 0x5, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCFLSH(r6, 0x80045430, 0x7ffffffffffffffe) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES16=r5, @ANYBLOB="5cb962f7aa120ad1473614ab867c0b67d82eae8823d640bf61d7446846238422e8c6a8d15ca8ffa81292571a56ebcdac9d06d5fe4991c6223a72cf1c5d5d36f55cb4c08299eea483cbbcb0c5480212bc407e021e", @ANYRESOCT=r6], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080d6629dc51c9c53275789d652865bfc5d52e4e0cac92bccbc55384b8e881f6d43d3646bf976aeaa80c67804772ba032efe4653126593e7c9274a63956d815c214641850900ff01ca8c4f60fd5afc43d171f0"], 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x852) syz_io_uring_setup(0xb32, &(0x7f0000000080)={0x0, 0x10086f3, 0x2, 0x0, 0x2de}, 0x0, 0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r11}, 0xc) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 14.686752892s ago: executing program 6 (id=4835): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) 14.15927807s ago: executing program 6 (id=4841): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) socket$xdp(0x2c, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 13.19212253s ago: executing program 6 (id=4856): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x516, &(0x7f0000000540)={0x0, 0x7dc6, 0x1, 0x503fa, 0x8100014a}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x40004) syz_open_dev$evdev(0x0, 0x0, 0x822b01) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f0000000140)={0x3b, 0xc9, 0x5}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x82) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) socket$kcm(0x21, 0x2, 0xa) 11.66943658s ago: executing program 6 (id=4865): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r0, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) 11.217410094s ago: executing program 6 (id=4868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8090) 11.142779987s ago: executing program 35 (id=4868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8090) 6.449096923s ago: executing program 5 (id=4887): r0 = socket$kcm(0x21, 0x7, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f00000001c0)="aa7d219f", 0x4, 0x4000085, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x24044010) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'ip_vti0\x00', @local}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2005, 0x2, @perf_config_ext={0x2, 0x722}, 0x106200, 0x10004, 0x20da, 0x7, 0x7, 0x10020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@delneigh={0x74, 0x1d, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, r5, 0x2, 0xa, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x8, 0x56, 0x8, 0x4}}, @NDA_MASTER={0x8, 0x9, 0xb5e}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_VNI={0x8, 0x7, 0x8001}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_MASTER={0x8, 0x9, 0x6d78}, @NDA_NH_ID={0x8, 0xd, 0x7}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x74}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x401, 0x80, 0x4, 0x22af}, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000001580)={{'\x00', 0x2}, {0x27f3}, 0x1a4, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="a57360a3ea782e0536a791dc69f9bf4a88d8826ca724f05fd52d6b930f965e4ab586064a22d505220af92800fc6d484fbfcb3802b1dc70b0d651a0eab9e7ae6e13c8d082f3ca6b56c7613468efc0c9b975f859d44738483929b881cb57fe9b5c4d51b9f004ff4fd74138ad74ea8dfa74792c186a46ff7f8260423925997e210f82618a7737a3600dd369934d920c8b8b288051eda9c69c645566b1943db1060f0704964f6455297aed55a4520ee40037823ab22a2a1a99b067f729771956f19d4660b5160403807133f242bd4407c4db5e20501d5141571e90184e03bfe88917db321d9a7d532dd969c4e135", 0xec, 0x0, &(0x7f0000002640)=ANY=[], 0x110d}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0xc, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f0000002600)=ANY=[@ANYBLOB="7f454c460504028d0400000000000000020006000400000019000000380000005e020000080400000400200002"], 0x78) close(r6) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$sock_void(r2, 0x1, 0x36, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000694000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x20003db}) setsockopt$sock_attach_bpf(r0, 0x110, 0x3, 0x0, 0x0) 6.061369563s ago: executing program 5 (id=4890): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'netdevsim0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 5.966078888s ago: executing program 5 (id=4892): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000180)) 5.287657583s ago: executing program 3 (id=4896): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0xe6f3381b0883eb9b}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000010000000, 0x8}}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x4000800) syz_emit_ethernet(0xaf, 0x0, 0x0) poll(0x0, 0x0, 0x9) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) 5.131268101s ago: executing program 2 (id=4897): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000240)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x2, 0x0) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x200, 0x80000001, 0x0, 0x0, 0x6, 0x0, 0xc0}, 0x0, 0x9, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xfffb, 0x7, 0x1}]}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r2, 0x0) iopl(0x3) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) r7 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffffffffffff, 0x2c00) ioctl$BLKSECDISCARD(r7, 0x127d, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {0x8d}, {}, @raw32={[0x0, 0xfffffffd]}}], 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) 5.077136615s ago: executing program 5 (id=4898): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003440), r3) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000000)) r7 = dup(r6) r8 = socket$inet6(0x18, 0x3, 0x2) setsockopt$sock_int(r8, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) connect$inet6(r8, &(0x7f0000000140)={0x1c, 0x4e21, 0x3, @mcast2, 0xfe1}, 0x1c) write$UHID_INPUT(r7, &(0x7f0000002100)={0xb, {"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", 0x1000}}, 0x1006) 4.103533255s ago: executing program 2 (id=4899): r0 = socket$kcm(0x21, 0x7, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f00000001c0)="aa7d219f", 0x4, 0x4000085, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x24044010) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'ip_vti0\x00', @local}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2005, 0x2, @perf_config_ext={0x2, 0x722}, 0x106200, 0x10004, 0x20da, 0x7, 0x7, 0x10020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@delneigh={0x74, 0x1d, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, r5, 0x2, 0xa, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x8, 0x56, 0x8, 0x4}}, @NDA_MASTER={0x8, 0x9, 0xb5e}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_VNI={0x8, 0x7, 0x8001}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_MASTER={0x8, 0x9, 0x6d78}, @NDA_NH_ID={0x8, 0xd, 0x7}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x74}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x401, 0x80, 0x4, 0x22af}, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000001580)={{'\x00', 0x2}, {0x27f3}, 0x1a4, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="a57360a3ea782e0536a791dc69f9bf4a88d8826ca724f05fd52d6b930f965e4ab586064a22d505220af92800fc6d484fbfcb3802b1dc70b0d651a0eab9e7ae6e13c8d082f3ca6b56c7613468efc0c9b975f859d44738483929b881cb57fe9b5c4d51b9f004ff4fd74138ad74ea8dfa74792c186a46ff7f8260423925997e210f82618a7737a3600dd369934d920c8b8b288051eda9c69c645566b1943db1060f0704964f6455297aed55a4520ee40037823ab22a2a1a99b067f729771956f19d4660b5160403807133f242bd4407c4db5e20501d5141571e90184e03bfe88917db321d9a7d532dd969c4e135", 0xec, 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB], 0x110d}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0xc, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f0000002600)=ANY=[@ANYBLOB="7f454c460504028d0400000000000000020006000400000019000000380000005e020000080400000400200002"], 0x78) close(r6) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$sock_void(r2, 0x1, 0x36, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000694000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x20003db}) setsockopt$sock_attach_bpf(r0, 0x110, 0x3, 0x0, 0x0) 3.796576601s ago: executing program 8 (id=4869): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003440), r3) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000000)) r7 = dup(r6) r8 = socket$inet6(0x18, 0x3, 0x2) setsockopt$sock_int(r8, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) connect$inet6(r8, &(0x7f0000000140)={0x1c, 0x4e21, 0x3, @mcast2, 0xfe1}, 0x1c) write$UHID_INPUT(r7, &(0x7f0000002100)={0xb, {"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", 0x1000}}, 0x1006) 3.109215177s ago: executing program 5 (id=4900): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = gettid() read(r2, &(0x7f0000000600)=""/4096, 0x1000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x8, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x290) pipe(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0xa, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) rt_sigqueueinfo(r3, 0x100001f, &(0x7f00000002c0)={0x30, 0x4, 0xfffffffc}) read$usbmon(r1, 0x0, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0xec2) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000280)=0x80) io_uring_setup(0x4aeb, &(0x7f00000003c0)={0x0, 0xc89e, 0x800, 0x0, 0x2cd}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x200, 0x108, 0x12}, 0x18) 2.900226148s ago: executing program 3 (id=4901): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000eb00000000000000000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000950000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYRES8=r0, @ANYRES32, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64, @ANYRES8=r0, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000940), 0x10) listen(r5, 0x0) connect$vsock_stream(r5, &(0x7f00000000c0), 0x10) r6 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000080), 0x3, 0x451, &(0x7f0000000f80)="$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") syz_emit_ethernet(0x46, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x4c142, 0x12) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r5) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) io_uring_setup(0x899, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r10 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) close_range(r10, r10, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}]}, &(0x7f00000003c0)=0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a126ed2a0e4200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c001600050000000300000008000500", @ANYRES32=r2, @ANYBLOB], 0xb4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 2.187623695s ago: executing program 7 (id=4903): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xd, &(0x7f00000000c0), 0x4f) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000002640), 0x42) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x19, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x4, 0x6, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000100)) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010a0000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r5 = io_uring_setup(0x4dc2, &(0x7f0000000400)={0x0, 0xb239, 0x40, 0xfffffffe, 0x32c}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x7d, 0x3}]}, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0xba0, 0xffffffff, 0x110, 0x110, 0x110, 0xfeffffff, 0xffffffff, 0xad0, 0xad0, 0xad0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {}, 0x87, 0x0, 0x4, 0x5}, 0x2f2, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x800007}}}}, {{@uncond, 0x0, 0x8b0, 0x8f0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x3}, {0xf}, {0x4, 0x1}, {0x6315}, {0x5, 0x3}, {0x800, 0x1}, {0x7fffffff, 0x1}, {0x5, 0x1}, {0x401, 0x2}, {0x9}, {0x2bde40, 0x1}], [{0x1ff, 0x5}, {0x8, 0x2}, {0x1, 0x7}, {0x9, 0x4}, {0x3, 0x7}, {0x9, 0x3}, {0xfffffff9, 0xd7aa}, {0xd, 0x1}, {0x0, 0x1}, {0x4, 0x431e}, {0x8, 0x398}], 0x4, 0x4}, {[{0x8, 0x3ae289534ee0f438}, {0x992, 0x1}, {0x27, 0x2}, {0x7fffffff, 0x2}, {0x41, 0xb4f7847981607277}, {0x3, 0x2}, {0xe9c, 0x2}, {}, {0xa92, 0x2}, {0x7, 0x1}, {0x9}], [{0x3, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x8000, 0x1}, {0x6, 0x3}, {0xe, 0x1}, {0x1, 0x1}, {0x8001, 0x6a}, {0x80ff, 0xb}, {0x17d, 0xffffffff}, {0x10, 0x8}], 0x1, 0x6}, {[{0x10001, 0x3}, {0xff, 0x2}, {0x5, 0x1}, {0x8000, 0x2}, {0x3ff, 0x3}, {0x81}, {0x7, 0x3}, {0x7bf, 0x3}, {0x8, 0x1}, {0x5, 0x3}, {0x2e1, 0x1}], [{0xd9, 0xffffffa9}, {0x2, 0x2}, {0x9, 0x5}, {0x0, 0x7a6}, {0x2, 0x4}, {0x10000, 0x1}, {0x6, 0x7ad1}, {0x7f, 0x1}, {0xf, 0x5}, {0x9, 0x2}, {0x0, 0x9}], 0x8, 0x4}, {[{0xffffffff, 0x3}, {0xffff, 0x3}, {0x6}, {}, {0x4, 0x2}, {0xa6, 0x1}, {0x9, 0x1}, {0x8, 0x1}, {0x6}, {0x1000, 0x3}, {0x4, 0x2}], [{0x800, 0x3ff}, {0x5, 0x357}, {0x10000, 0x4}, {0x200006d, 0x9000}, {0x7, 0x3ff}, {0x6, 0x8000}, {0x100, 0x1}, {0x4}, {0xb, 0x95}, {0x7, 0xfffffffb}, {0x7, 0x1ff}], 0x4, 0x8}, {[{0x5, 0x1}, {0x6}, {0xff, 0x3}, {0x8000, 0x3}, {0x40002}, {0x95, 0x2}, {0x8, 0x3}, {0xfffffffd}, {0x5, 0x2}, {0x2, 0x1}, {0x4, 0x2}], [{0x40, 0x18}, {0x221, 0xff}, {0x6, 0x800}, {0x8, 0x10001}, {0x100, 0x58}, {0x8e, 0x8e}, {0x5, 0x8001}, {0x0, 0x1}, {0xe0b, 0x2}, {0x1, 0x3}, {0x8, 0x7}], 0xa, 0x5}, {[{0x4}, {0x7, 0x2}, {0x401, 0x1}, {0x280000, 0x2}, {0x0, 0x3}, {0x9, 0x3}, {0x6910, 0x2}, {0x101, 0x1}, {0xa8, 0x2}, {0xe, 0x2}, {0x7, 0x2}], [{0xa, 0x7}, {0x5, 0x5}, {0x6, 0x30000000}, {0x9, 0x1}, {0x1, 0x4}, {0x80, 0x9}, {0xbf2, 0x400003}, {0x100}, {0x9, 0x7fff}, {0x7, 0x4}, {0x2, 0x9}], 0x5, 0x9}, {[{0x6, 0x3}, {0xff, 0x1}, {0xad6d}, {0x3ff, 0x3}, {0x7fff, 0x3}, {0x2d}, {0xe, 0x1}, {0x10001}, {0x5d7, 0x3}, {0x6, 0x2}, {0x5}], [{0x2, 0x101}, {0xcf8b, 0x1}, {0x8, 0x6}, {0x2, 0x5}, {0xd51, 0x5}, {0xfffff3bc}, {0x6, 0x8001}, {0x7, 0x8}, {0x2}, {0x3, 0x9}, {0x2, 0x4000000}], 0x11, 0x9}, {[{0x7}, {0xbe2, 0x3}, {0x1, 0x1}, {0xeb, 0x3}, {0x2}, {0xb, 0x3}, {0xa, 0x3}, {0x2000}, {0xfffffffe}, {0x95, 0x1}, {0xa}], [{0x8000, 0x7f}, {0x7, 0x4}, {0x100, 0x2d}, {0x9, 0x2}, {0x80000000, 0x9}, {0xe3e, 0x10000}, {0x600, 0x1}, {0x8, 0x4}, {0x7ff, 0x9}, {0x8}, {0xffff2a8d, 0x95}], 0x1, 0x5}, {[{0x0, 0x1}, {}, {0x4, 0x1}, {0x6, 0x1}, {0x6, 0x1}, {0xf92, 0x3}, {0x3, 0x2}, {0x5, 0x1}, {0xfffffc00, 0x3}, {0x3, 0x3}, {0x10001, 0x2}], [{0xfffffffa, 0x9}, {0x2, 0x4}, {0x6c22, 0x9}, {0x9, 0x4}, {0x4, 0x9}, {0x9}, {0x2}, {0x1a4e567, 0xc2df}, {0x1, 0x7}, {0x10, 0x3b1e}, {0x3, 0xf}], 0x3, 0x2}, {[{0x5, 0x1}, {0xcd2}, {0x1, 0x2}, {0xe, 0x1}, {0x7, 0x82007afa20b1bc8a}, {0x3bc1000, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000001, 0x1}, {0x59, 0x3}, {0x8}], [{0x0, 0xfffffff9}, {0x2, 0xc}, {0x8, 0x3}, {0x7ff, 0x3}, {0xd3, 0x7}, {0x1, 0x3}, {0x7, 0x738c}, {0x6, 0xedba}, {0x6, 0x1}, {0x1, 0x8001}, {0x8, 0x2}], 0x3, 0x8}, {[{0x3, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x4}, {0xa7e, 0x1}, {0x3, 0x2}, {0x1, 0x1}, {0x5}, {0x4, 0x1}], [{0x1, 0x80000000}, {0x6, 0x8001}, {0x9, 0x5}, {0xa, 0x8}, {0x7, 0x80}, {0x1a, 0x4}, {0x4}, {0x5, 0x2}, {0x5d, 0x7ff}, {0x1e3, 0x3}, {0xffffff16, 0x2}], 0x0, 0x3}], 0x8, 0x1}}, @common=@hl={{0x28}, {0x3, 0x8}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc00) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FICLONE(r9, 0x40049409, r1) 2.072654871s ago: executing program 3 (id=4904): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 1.948927647s ago: executing program 2 (id=4905): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000bc0)={0x0, 0x4}, &(0x7f0000000c00)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000001700)={0xfa3b, 0x0, 0x2}, &(0x7f0000001740)=0x10) openat(r2, &(0x7f0000000900)='./bus\x00', 0x400240, 0xc2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001b80)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, &(0x7f0000001c40)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001d40)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x92, 0x2}, &(0x7f0000001e00)=0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00\b\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$selinux_attr(r3, &(0x7f0000000940)='system_u:object_r:ssh_agent_exec_t:s0\x00', 0x26) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x20}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000009c0)={r5, @in6={{0xa, 0x4e21, 0x6, @loopback, 0x6}}}, &(0x7f0000000a80)=0x84) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x7ff, '\x00', 0x0, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) io_submit(r11, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, r10, 0x0, 0xfffffe60, 0x800, 0x0, 0x6}]) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x3d0, 0x3d0, 0x140, 0x140, 0x210, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, &(0x7f0000000000), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], [0x0, 0xff000000, 0xffffffff, 0xff000000], 'gre0\x00', 'hsr0\x00', {0xff}, {0xff}, 0xc, 0x81, 0x2, 0x12}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0xc056, 0x5, 0x1, [0xfbff, 0xe07a, 0x0, 0xffff, 0x3, 0x5, 0xf268, 0x2, 0x3a1, 0x4, 0x5, 0x4, 0x8, 0x3, 0x9, 0x8000], 0x8}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xc, 0x6, 0x6}}}, {{@ipv6={@loopback, @loopback, [0x0, 0xffffff00, 0xffffffff, 0xffff00], [0x0, 0xffffff00, 0xff, 0xff], 'vlan1\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x11, 0x5, 0x7, 0x20}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv6=@mcast2, 0x10, 0x26, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @local, [0xffffffff, 0xff000000, 0x0, 0xff], [0xffffff00, 0xdde449bad6466b5], 'veth1_to_bond\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x5, 0x0, 0x49}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x40, 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) 1.948405157s ago: executing program 3 (id=4906): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32], 0x44}}, 0x40000c0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000180)) 1.90821744s ago: executing program 7 (id=4907): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b4a, 0x10000000000004) statx(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x6000, 0x4, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) unshare(0x400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x5) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='pids.current\x00', 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0xffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 1.758704668s ago: executing program 8 (id=4908): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x828, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb61, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x81, 0x0, 0x0, 0x3a9}, 0x0, 0xffffff7ffffffffd, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, 0x0, 0x0) poll(0x0, 0x0, 0x9) syz_open_procfs(r2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pread64(r1, &(0x7f0000001240)=""/102400, 0x19020, 0x1000000300) 1.263433093s ago: executing program 7 (id=4909): r0 = syz_open_pts(0xffffffffffffffff, 0x200b03) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x2, 0x4, 0x3, 0x6, 0x19, "2ff674b7b5567ca5869e493f3bf98ea092b835"}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000600)=ANY=[], 0x841, 0x1) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 810.816787ms ago: executing program 3 (id=4910): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000003d40)=0x1, 0x20) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r1 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 733.170631ms ago: executing program 8 (id=4911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8090) 719.105812ms ago: executing program 7 (id=4912): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x10e200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x6}}, {@norecovery}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000300)=ANY=[], 0x835, 0x0) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 714.945942ms ago: executing program 5 (id=4913): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32], 0x44}}, 0x40000c0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000180)) 684.219404ms ago: executing program 2 (id=4914): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)="80", 0x1}], 0x1}}], 0x1, 0x24005805) (async) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)="80", 0x1}], 0x1}}], 0x1, 0x24005805) 578.259109ms ago: executing program 2 (id=4915): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380070a, &(0x7f0000000280)={[{@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0xfb4}}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x2, 0x479, &(0x7f0000005d00)="$eJzs3M1vFOUfAPDvzLbAj7f2h/gColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt+2yC+znk0x5np1nZ57vPvPMPDPPLgH0rKHsTxKxNSJ+j4iBara2wFD1n6uXz07+c/nsZBKLi6//leTlrlw+O1kWLd+3pcgMpxHpx0mxk1pzp88cn5iZmT5V5EfnT7w7Onf6zFPHTkwcnT46fXL84MED+8eefWb86bbEmcV1ZfcHs3t2vfzmhVcmD19456dvs/puLdYvjWNNNtz40lAW+N+Lufp1j8b/1rW7W822Jemkr4sVYVUqEZE1V3/e/weiEtcbbyBe+qirlQNuquzatLH56oVF4A6WRLdrAHRHeaHP7n/LpUNDj1vCpeerN0BZ3FeLpbqmL9KiTH/d/W07DUXE4YV/v8yWaMdzCACAFXw6+cWheLLR+C+Ne5aU217MoQxGxP8jYkdE3BUROyPi7oi87L0Rcd8q918/NXTj+Ce9uKbAWpSN/54r5rZqx3/l6C8GK0VuWx5/f3Lk2Mz0vuIzGY7+jVl+rOHWF/K/37/462fN9r90/Jct2f7LsWBRj4t9dQ/opibmJ/JBaRtc+jBid1+j+JNrMwFJROyKiN2r2/T2MnHs8W/2NCu0cvzLaMM80+LXEY9V238h6uIvJcvPT45uipnpfaPlUXGjn385/1qz/a8r/jbI2n9z7fFfrPnqdJEYfHvpfO1crHrm8vwfnzS9p1nr8b8heSM/H5XTru9PzM+fGovYkBzK8zWvj19/b5kvy2fxD+9t3P93FO/J2v/+iMgO4gci4sGIeKio+8MR8UhE7F0m/h9faL5uXe2/qaVSy8rin2p4/rt2/A8mNe2/+kTl+A/frT3+rP0P5Knh4pX8/LeCViu4ns8OAAAAbhdp/h34JB25lk7TkZHqd/h3xuZ0ZnZu/okjs++dnKp+V34w+tPySdfAkuehY8lCscVqfrx4Vlyu3188N/68Enl+ZHJ2ZqrLsUOv29Kk/2f+rHS7dsBN12gebbzBD9qAO099/09rs+de7WRlgI7ye23oXSv0/7RT9QA6z/Ufelej/n+uLm8uAO5Mrv/Qu/R/6F36P/Suuv5fid+6VROgg9bzu36J2yURC+3fcqTdj6vVROv/H8TNTrx1a1SjhUS3z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//6Sd8Hs=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000140)) 577.681429ms ago: executing program 8 (id=4916): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='pids.current\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x52100317}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x55, &(0x7f0000000080)=""/85, 0x41100, 0x5, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x2, 0x79, 0x46d5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2], &(0x7f0000000340), 0x10, 0x2b18f072}, 0x94) 416.171838ms ago: executing program 8 (id=4917): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380070a, &(0x7f0000000280)={[{@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0xfb4}}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x2, 0x479, &(0x7f0000005d00)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000140)) 211.327109ms ago: executing program 7 (id=4918): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xb, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x5}, 0x9, 0x0, 0x800000, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") syz_open_dev$usbfs(0x0, 0x205, 0x8401) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_pwait2(r0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x6]}, 0x8) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000520099b1"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f9}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0xd, &(0x7f0000004180)=""/4108, 0x0) 15.673639ms ago: executing program 2 (id=4919): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'F'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x200408c4) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff"], 0x80}}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x7, 0x0, &(0x7f0000000040)="581f9239658ea9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) recvmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/158, 0x9e}], 0x1, &(0x7f0000000500)=""/66, 0x42}, 0x10020) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x8}}, @TCA_CT_MARK={0x8, 0x10, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, 0x0, 0x0) 13.242299ms ago: executing program 3 (id=4920): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b4a, 0x10000000000004) statx(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x6000, 0x4, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) socket$key(0xf, 0x3, 0x2) unshare(0x400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x5) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) 0s ago: executing program 8 (id=4921): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32=r5], 0x44}}, 0x40000c0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000180)) kernel console output (not intermixed with test programs): 33464.902:817): avc: denied { setopt } for pid=16631 comm="syz.0.4510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.878399][T16645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=16645 comm=syz.5.4511 [ 454.983109][T16660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16660 comm=syz.1.4519 [ 454.996801][ T28] audit: type=1400 audit(1776433465.112:818): avc: denied { write } for pid=16659 comm="syz.1.4519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 455.079941][T16670] FAULT_INJECTION: forcing a failure. [ 455.079941][T16670] name failslab, interval 1, probability 0, space 0, times 0 [ 455.094117][T16670] CPU: 1 UID: 0 PID: 16670 Comm: syz.0.4523 Tainted: G W syzkaller #0 PREEMPT(full) [ 455.094146][T16670] Tainted: [W]=WARN [ 455.094151][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 455.094231][T16670] Call Trace: [ 455.094237][T16670] [ 455.094248][T16670] __dump_stack+0x1d/0x30 [ 455.094291][T16670] dump_stack_lvl+0x95/0xd0 [ 455.094384][T16670] dump_stack+0x15/0x1b [ 455.094400][T16670] should_fail_ex+0x263/0x280 [ 455.094421][T16670] should_failslab+0x8c/0xb0 [ 455.094445][T16670] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 455.094470][T16670] ? __d_alloc+0x37/0x340 [ 455.094558][T16670] ? vsnprintf+0x7ee/0x860 [ 455.094578][T16670] __d_alloc+0x37/0x340 [ 455.094594][T16670] ? __pfx_proc_self_get_link+0x10/0x10 [ 455.094616][T16670] d_alloc_parallel+0x54/0xce0 [ 455.094682][T16670] ? lockref_get_not_dead+0x120/0x1c0 [ 455.094704][T16670] ? selinux_inode_permission+0x6d1/0x7d0 [ 455.094722][T16670] ? __rcu_read_unlock+0x4e/0x70 [ 455.094744][T16670] ? try_to_unlazy+0x39d/0x580 [ 455.094763][T16670] __lookup_slow+0x96/0x260 [ 455.094783][T16670] lookup_slow+0x3c/0x60 [ 455.094858][T16670] link_path_walk+0x946/0xe30 [ 455.094879][T16670] path_openat+0x1c6/0x2050 [ 455.094899][T16670] ? _parse_integer_limit+0x170/0x190 [ 455.095005][T16670] ? kstrtouint+0x76/0xc0 [ 455.095024][T16670] do_file_open+0x16c/0x290 [ 455.095046][T16670] ? __pfx_kfree_link+0x10/0x10 [ 455.095065][T16670] do_sys_openat2+0x94/0x130 [ 455.095105][T16670] __x64_sys_openat+0xf2/0x120 [ 455.095131][T16670] x64_sys_call+0x1e39/0x3020 [ 455.095163][T16670] do_syscall_64+0x12c/0x3b0 [ 455.095183][T16670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.095233][T16670] RIP: 0033:0x7f9a4de2d04e [ 455.095246][T16670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 455.095261][T16670] RSP: 002b:00007f9a4c8c6f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.095348][T16670] RAX: ffffffffffffffda RBX: 00007f9a4c8c76c0 RCX: 00007f9a4de2d04e [ 455.095360][T16670] RDX: 0000000000000000 RSI: 00007f9a4df02328 RDI: ffffffffffffff9c [ 455.095373][T16670] RBP: 00007f9a4c8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 455.095461][T16670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.095580][T16670] R13: 00007f9a4e0e6038 R14: 00007f9a4e0e5fa0 R15: 00007fff7cab1d88 [ 455.095595][T16670] [ 455.355753][ C1] atkbd serio0: Spurious ACK on isa0060/serio0. Some program might be trying to access hardware directly. [ 455.399212][T16677] FAULT_INJECTION: forcing a failure. [ 455.399212][T16677] name failslab, interval 1, probability 0, space 0, times 0 [ 455.415984][T16677] CPU: 1 UID: 0 PID: 16677 Comm: syz.3.4525 Tainted: G W syzkaller #0 PREEMPT(full) [ 455.416011][T16677] Tainted: [W]=WARN [ 455.416066][T16677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 455.416075][T16677] Call Trace: [ 455.416082][T16677] [ 455.416089][T16677] __dump_stack+0x1d/0x30 [ 455.416111][T16677] dump_stack_lvl+0x95/0xd0 [ 455.416146][T16677] dump_stack+0x15/0x1b [ 455.416166][T16677] should_fail_ex+0x263/0x280 [ 455.416233][T16677] should_failslab+0x8c/0xb0 [ 455.416255][T16677] __kmalloc_noprof+0xb8/0x4d0 [ 455.416269][T16677] ? security_inode_init_security+0xb4/0x320 [ 455.416372][T16677] ? __pfx_shmem_initxattrs+0x10/0x10 [ 455.416395][T16677] security_inode_init_security+0xb4/0x320 [ 455.416443][T16677] ? simple_acl_create+0x328/0x370 [ 455.416461][T16677] shmem_mknod+0xaa/0x170 [ 455.416480][T16677] shmem_mkdir+0x33/0x70 [ 455.416540][T16677] vfs_mkdir+0x294/0x3e0 [ 455.416567][T16677] filename_mkdirat+0x138/0x300 [ 455.416594][T16677] __se_sys_mkdirat+0x32/0xf0 [ 455.416686][T16677] __x64_sys_mkdirat+0x43/0x50 [ 455.416707][T16677] x64_sys_call+0x2c4e/0x3020 [ 455.416730][T16677] do_syscall_64+0x12c/0x3b0 [ 455.416754][T16677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.416773][T16677] RIP: 0033:0x7f6aa3dab687 [ 455.416804][T16677] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.416865][T16677] RSP: 002b:00007f6aa27fee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 455.416885][T16677] RAX: ffffffffffffffda RBX: 00007f6aa27feee0 RCX: 00007f6aa3dab687 [ 455.416898][T16677] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 455.416911][T16677] RBP: 0000200000000040 R08: 00002000000000c0 R09: 0000000000000000 [ 455.417001][T16677] R10: 0000200000000040 R11: 0000000000000246 R12: 0000200000000080 [ 455.417014][T16677] R13: 00007f6aa27feea0 R14: 0000000000000000 R15: 0000000000000000 [ 455.417031][T16677] [ 455.673963][T16683] loop0: detected capacity change from 0 to 512 [ 455.682626][T16686] loop2: detected capacity change from 0 to 1024 [ 455.708270][T16683] EXT4-fs: Ignoring removed mblk_io_submit option [ 455.761984][T16683] EXT4-fs (loop0): orphan cleanup on readonly fs [ 455.792424][T16683] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 455.830883][ T28] audit: type=1400 audit(1776433465.984:819): avc: denied { accept } for pid=16697 comm="syz.5.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 455.839535][T16683] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.4527: attempt to clear invalid blocks 2 len 1 [ 455.886285][T16683] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 455.888168][T16683] EXT4-fs (loop0): Remounting filesystem read-only [ 455.898048][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 455.898066][ C1] EXT4-fs (loop0): initial error at time 1776433466: ext4_clear_blocks:876: inode 13 [ 455.898112][ C1] EXT4-fs (loop0): last error at time 1776433466: ext4_clear_blocks:876: inode 13 [ 455.925726][T16704] loop2: detected capacity change from 0 to 8192 [ 455.935144][T16706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=16706 comm=syz.5.4538 [ 455.959562][T16683] EXT4-fs (loop0): 1 truncate cleaned up [ 455.985407][T16683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 456.070818][T12559] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.007006][T16751] loop5: detected capacity change from 0 to 1024 [ 457.094963][T16751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.118347][T16751] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.158838][T16771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=16771 comm=syz.1.4559 [ 457.193998][ T28] audit: type=1400 audit(1776433467.401:820): avc: denied { bind } for pid=16773 comm="syz.0.4563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 457.238809][T16770] loop2: detected capacity change from 0 to 1024 [ 457.266443][T16778] loop0: detected capacity change from 0 to 1024 [ 457.292522][T16778] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 457.343477][T16778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.361380][T16770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.424097][T13127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.465326][ T28] audit: type=1400 audit(1776433467.705:821): avc: denied { setattr } for pid=16777 comm="syz.0.4564" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 457.500141][ T28] audit: type=1326 audit(1776433467.737:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.0.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4de6c819 code=0x7ffc0000 [ 457.538378][ T28] audit: type=1326 audit(1776433467.737:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.0.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4de6c819 code=0x7ffc0000 [ 457.566623][T12559] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.574157][ T28] audit: type=1326 audit(1776433467.747:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.0.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a4de6c819 code=0x7ffc0000 [ 457.608708][ T28] audit: type=1326 audit(1776433467.747:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.0.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a4de6c819 code=0x7ffc0000 [ 457.664701][T16788] x_tables: ip_tables: osf match: only valid for protocol 6 [ 457.767004][T16791] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 457.791872][T16791] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 457.817577][T16791] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 457.851655][T16791] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 457.908675][T16791] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 457.920730][T16794] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 457.930443][T16794] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 457.947177][T16791] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 457.980074][T16794] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 458.603317][T16810] loop1: detected capacity change from 0 to 2048 [ 458.616946][T16806] loop2: detected capacity change from 0 to 1024 [ 458.643783][T16801] loop5: detected capacity change from 0 to 32768 [ 458.700221][T16806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.721800][T16810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.721936][T16810] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.734384][T16810] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 16: comm syz.1.4574: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 458.735385][T16810] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 16: comm syz.1.4574: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 458.853996][T16801] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 458.880298][T16801] loop5: p1 start 460800 is beyond EOD, truncated [ 458.883502][T12073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.894643][T16801] loop5: p2 size 83886080 extends beyond EOD, truncated [ 458.951442][T16801] loop5: p5 start 460800 is beyond EOD, truncated [ 458.958512][T16801] loop5: p6 size 83886080 extends beyond EOD, truncated [ 458.976094][T13127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.025599][T16825] FAULT_INJECTION: forcing a failure. [ 459.025599][T16825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.061466][T16825] CPU: 1 UID: 0 PID: 16825 Comm: syz.2.4577 Tainted: G W syzkaller #0 PREEMPT(full) [ 459.061499][T16825] Tainted: [W]=WARN [ 459.061505][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 459.061517][T16825] Call Trace: [ 459.061543][T16825] [ 459.061549][T16825] __dump_stack+0x1d/0x30 [ 459.061573][T16825] dump_stack_lvl+0x95/0xd0 [ 459.061637][T16825] dump_stack+0x15/0x1b [ 459.061656][T16825] should_fail_ex+0x263/0x280 [ 459.061681][T16825] should_fail+0xb/0x20 [ 459.061701][T16825] should_fail_usercopy+0x1a/0x20 [ 459.061772][T16825] _copy_to_user+0x20/0xa0 [ 459.061803][T16825] simple_read_from_buffer+0xb5/0x130 [ 459.061865][T16825] proc_fail_nth_read+0x10e/0x150 [ 459.061890][T16825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.061911][T16825] vfs_read+0x1ab/0x7f0 [ 459.061991][T16825] ? __rcu_read_unlock+0x4e/0x70 [ 459.062033][T16825] ? __fget_files+0x184/0x1c0 [ 459.062051][T16825] ? mutex_lock+0x57/0x90 [ 459.062076][T16825] ksys_read+0xdc/0x1a0 [ 459.062100][T16825] __x64_sys_read+0x40/0x50 [ 459.062267][T16825] x64_sys_call+0x2886/0x3020 [ 459.062289][T16825] do_syscall_64+0x12c/0x3b0 [ 459.062310][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.062399][T16825] RIP: 0033:0x7ff59f34d04e [ 459.062414][T16825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 459.062428][T16825] RSP: 002b:00007ff59dddefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.062497][T16825] RAX: ffffffffffffffda RBX: 00007ff59dddf6c0 RCX: 00007ff59f34d04e [ 459.062511][T16825] RDX: 000000000000000f RSI: 00007ff59dddf0a0 RDI: 0000000000000004 [ 459.062523][T16825] RBP: 00007ff59dddf090 R08: 0000000000000000 R09: 0000000000000000 [ 459.062561][T16825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.062570][T16825] R13: 00007ff59f606038 R14: 00007ff59f605fa0 R15: 00007ffe5b4db928 [ 459.062585][T16825] [ 459.301001][T16831] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4579'. [ 459.314112][T16831] loop2: detected capacity change from 0 to 164 [ 459.343836][T16831] iso9660: Bad value for 'check' [ 459.399678][T16831] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 459.436919][T16831] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 459.528422][T16838] loop3: detected capacity change from 0 to 512 [ 459.591021][T16838] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 459.718843][T16838] EXT4-fs (loop3): mount failed [ 459.728806][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 459.728821][ T28] audit: type=1400 audit(1776433470.078:829): avc: denied { write } for pid=16854 comm="syz.5.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 460.172948][ T28] audit: type=1400 audit(1776433470.288:830): avc: denied { setopt } for pid=16854 comm="syz.5.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 460.249009][T16861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4586'. [ 460.378641][ T28] audit: type=1400 audit(1776433470.288:831): avc: denied { bind } for pid=16854 comm="syz.5.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 460.771425][ T28] audit: type=1400 audit(1776433471.159:832): avc: denied { lock } for pid=16872 comm="syz.2.4591" path="socket:[54717]" dev="sockfs" ino=54717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.297616][T16877] loop3: detected capacity change from 0 to 2048 [ 461.359640][T16877] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 461.469275][T16881] netlink: 47 bytes leftover after parsing attributes in process `syz.5.4593'. [ 462.150304][T16907] loop5: detected capacity change from 0 to 512 [ 462.199111][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4603'. [ 462.227853][T16909] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4603'. [ 462.238943][T16909] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4603'. [ 462.260463][T16909] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4603'. [ 462.498746][T16909] loop5: detected capacity change from 0 to 128 [ 462.554643][T16909] msdos: Unknown parameter 'Ý' [ 462.829334][T16917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=16917 comm=syz.5.4606 [ 463.488160][T16920] loop1: detected capacity change from 0 to 8192 [ 463.945851][ T8486] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.029067][ T8486] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.071637][T16925] chnl_net:caif_netlink_parms(): no params data found [ 464.133150][ T8486] team0: Port device netdevsim1 removed [ 464.163374][ T8486] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.245627][ T8486] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.300416][T16925] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.330496][T16925] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.355795][T16925] bridge_slave_0: entered allmulticast mode [ 464.378938][T16925] bridge_slave_0: entered promiscuous mode [ 464.408554][T16954] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4615'. [ 464.419518][T16925] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.442836][T16925] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.461746][T16925] bridge_slave_1: entered allmulticast mode [ 464.468979][T16954] loop0: detected capacity change from 0 to 164 [ 464.485365][T16925] bridge_slave_1: entered promiscuous mode [ 464.495631][T16954] iso9660: Bad value for 'check' [ 464.542181][T16954] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 464.561491][T16954] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 464.614127][T16925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.656293][T16925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.710033][T16925] team0: Port device team_slave_0 added [ 464.733981][T16925] team0: Port device team_slave_1 added [ 464.845686][T16970] loop3: detected capacity change from 0 to 512 [ 464.885049][T16970] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 464.927663][T16970] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4621: bg 0: block 393: padding at end of block bitmap is not set [ 464.950710][T16925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.970402][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.000493][T16970] loop3: lost filesystem error report for type 5 error -117 [ 465.001161][T16970] EXT4-fs (loop3): Remounting filesystem read-only [ 465.008878][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 465.008903][ C0] EXT4-fs (loop3): initial error at time 1776433475: ext4_validate_block_bitmap:441 [ 465.008923][ C0] EXT4-fs (loop3): last error at time 1776433475: ext4_validate_block_bitmap:441 [ 465.045034][T16925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.058219][T16970] EXT4-fs (loop3): 2 truncates cleaned up [ 465.069525][T16977] program syz.0.4623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.069912][T16925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.090375][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.093028][T16970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.119311][T16925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.244579][T16983] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=16983 comm=syz.0.4623 [ 465.280972][ T8486] bond1 (unregistering): (slave gre1): Releasing backup interface [ 465.302763][ T8486] gre1 (unregistering): left promiscuous mode [ 465.323789][T16970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4621'. [ 465.622620][ T8486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.645015][ T8486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.658283][T16998] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 465.667370][T16998] SELinux: failed to load policy [ 465.678658][ T8486] bond0 (unregistering): Released all slaves [ 465.699741][ T8486] bond1 (unregistering): Released all slaves [ 465.709414][T12875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.709414][T17000] loop2: detected capacity change from 0 to 8192 [ 465.735677][ T3038] 8021q: adding VLAN 0 to HW filter on device eth5 [ 465.790586][ T8486] hsr_slave_0: left promiscuous mode [ 465.803891][ T8486] hsr_slave_1: left promiscuous mode [ 465.812359][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.821545][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.831246][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.839803][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.851512][ T8486] veth1_vlan: left promiscuous mode [ 465.858716][ T8486] veth0_vlan: left promiscuous mode [ 465.920275][ T8486] team0 (unregistering): Port device team_slave_1 removed [ 465.933515][ T8486] team0 (unregistering): Port device team_slave_0 removed [ 465.970442][T16925] hsr_slave_0: entered promiscuous mode [ 465.977034][T16925] hsr_slave_1: entered promiscuous mode [ 465.984097][T16925] debugfs: 'hsr0' already exists in 'hsr' [ 465.990379][T16925] Cannot create hsr debugfs directory [ 466.140828][T17036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4633'. [ 466.166509][ T3038] 8021q: adding VLAN 0 to HW filter on device eth6 [ 466.232362][T17048] FAULT_INJECTION: forcing a failure. [ 466.232362][T17048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.262445][T17048] CPU: 1 UID: 0 PID: 17048 Comm: syz.1.4637 Tainted: G W syzkaller #0 PREEMPT(full) [ 466.262548][T17048] Tainted: [W]=WARN [ 466.262554][T17048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 466.262565][T17048] Call Trace: [ 466.262572][T17048] [ 466.262581][T17048] __dump_stack+0x1d/0x30 [ 466.262606][T17048] dump_stack_lvl+0x95/0xd0 [ 466.262630][T17048] dump_stack+0x15/0x1b [ 466.262649][T17048] should_fail_ex+0x263/0x280 [ 466.262672][T17048] should_fail+0xb/0x20 [ 466.262689][T17048] should_fail_usercopy+0x1a/0x20 [ 466.262777][T17048] _copy_to_user+0x20/0xa0 [ 466.262803][T17048] simple_read_from_buffer+0xb5/0x130 [ 466.262819][T17048] proc_fail_nth_read+0x10e/0x150 [ 466.262921][T17048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 466.262945][T17048] vfs_read+0x1ab/0x7f0 [ 466.263031][T17048] ? __rcu_read_unlock+0x4e/0x70 [ 466.263051][T17048] ? __fget_files+0x184/0x1c0 [ 466.263069][T17048] ? mutex_lock+0x57/0x90 [ 466.263118][T17048] ksys_read+0xdc/0x1a0 [ 466.263138][T17048] __x64_sys_read+0x40/0x50 [ 466.263157][T17048] x64_sys_call+0x2886/0x3020 [ 466.263253][T17048] do_syscall_64+0x12c/0x3b0 [ 466.263273][T17048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.263291][T17048] RIP: 0033:0x7f90be5cd04e [ 466.263306][T17048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 466.263328][T17048] RSP: 002b:00007f90bd066fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 466.263349][T17048] RAX: ffffffffffffffda RBX: 00007f90bd0676c0 RCX: 00007f90be5cd04e [ 466.263361][T17048] RDX: 000000000000000f RSI: 00007f90bd0670a0 RDI: 0000000000000003 [ 466.263373][T17048] RBP: 00007f90bd067090 R08: 0000000000000000 R09: 0000000000000000 [ 466.263421][T17048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.263433][T17048] R13: 00007f90be886038 R14: 00007f90be885fa0 R15: 00007ffdc76b8d98 [ 466.263451][T17048] [ 466.502678][T17065] net_ratelimit: 2039 callbacks suppressed [ 466.502692][T17065] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 466.503057][T17065] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 466.503351][T17065] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 466.503660][T17065] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 466.503913][T17065] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 466.504158][T17065] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 466.504368][T17065] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 466.594534][T17065] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 466.615789][T17065] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 466.626470][T17065] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 466.831661][T17084] loop3: detected capacity change from 0 to 512 [ 466.936032][T17084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.960861][T17084] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.004482][T17084] tmpfs: Unknown parameter 'inode31' [ 467.021161][T16925] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 467.032235][T16925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.040992][T16925] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 467.050791][T16925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.060523][T16925] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 467.071457][T16925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.085468][T16925] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 467.121748][T16925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.160246][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4645'. [ 467.210821][T16925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.244527][T16925] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.278584][ T209] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.285924][ T209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.328021][ T209] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.336201][ T209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.426203][T17120] Invalid argument reading file caps for ./file0 [ 467.542601][T16925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.609203][T17134] loop0: detected capacity change from 0 to 1024 [ 467.661350][T17134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.336702][T12875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.646266][T17153] Invalid argument reading file caps for ./file0 [ 469.221697][ T28] audit: type=1326 audit(1776433480.042:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 469.256256][ T28] audit: type=1326 audit(1776433480.042:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 469.282640][ T28] audit: type=1326 audit(1776433480.042:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 469.315345][T16925] veth0_vlan: entered promiscuous mode [ 469.322398][ T28] audit: type=1326 audit(1776433480.147:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 469.349117][ T28] audit: type=1326 audit(1776433480.158:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 469.381146][ T28] audit: type=1326 audit(1776433480.158:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 469.409823][T16925] veth1_vlan: entered promiscuous mode [ 469.419279][ T28] audit: type=1326 audit(1776433480.158:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 469.455324][ T28] audit: type=1326 audit(1776433480.158:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 469.484106][T12559] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.485100][T16925] veth0_macvtap: entered promiscuous mode [ 469.496013][ T28] audit: type=1326 audit(1776433480.158:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 469.502429][T16925] veth1_macvtap: entered promiscuous mode [ 469.532644][ T28] audit: type=1326 audit(1776433480.158:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 469.616397][T16925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.618196][T16925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.654693][ T8480] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.654768][ T8480] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.654810][ T8480] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.654914][ T8480] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.873325][T17192] loop5: detected capacity change from 0 to 512 [ 469.916355][T17192] EXT4-fs (loop5): orphan cleanup on readonly fs [ 469.923903][T17192] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.4665: Failed to acquire dquot type 1 [ 469.936051][T17192] loop5: lost filesystem error report for type 5 error -117 [ 469.936226][T17192] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.4665: Failed to acquire dquot type 1 [ 469.943828][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 469.943844][ C0] EXT4-fs (loop5): last error at time 1776433480: ext4_acquire_dquot:7028 [ 469.979662][T17192] loop5: lost filesystem error report for type 5 error -117 [ 469.980025][T17192] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4665: bg 0: block 248: padding at end of block bitmap is not set [ 470.004229][T17192] loop5: lost filesystem error report for type 5 error -117 [ 470.004366][T17192] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 470.022616][T17192] loop5: lost filesystem error report for type 5 error -117 [ 470.022973][T17192] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.4665: Failed to acquire dquot type 1 [ 470.043317][T17192] loop5: lost filesystem error report for type 5 error -117 [ 470.043624][T17192] EXT4-fs (loop5): 1 orphan inode deleted [ 470.060090][T17192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 470.145676][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4665'. [ 470.156024][T17201] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4665'. [ 470.166075][T17201] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4665'. [ 470.481260][T17214] FAULT_INJECTION: forcing a failure. [ 470.481260][T17214] name failslab, interval 1, probability 0, space 0, times 0 [ 470.495556][T17214] CPU: 0 UID: 0 PID: 17214 Comm: syz.0.4671 Tainted: G W syzkaller #0 PREEMPT(full) [ 470.495584][T17214] Tainted: [W]=WARN [ 470.495589][T17214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 470.495599][T17214] Call Trace: [ 470.495606][T17214] [ 470.495614][T17214] __dump_stack+0x1d/0x30 [ 470.495637][T17214] dump_stack_lvl+0x95/0xd0 [ 470.495665][T17214] dump_stack+0x15/0x1b [ 470.495684][T17214] should_fail_ex+0x263/0x280 [ 470.495709][T17214] should_failslab+0x8c/0xb0 [ 470.495732][T17214] kmem_cache_alloc_noprof+0x66/0x3f0 [ 470.495772][T17214] ? delayed_getname+0x30/0x150 [ 470.495790][T17214] delayed_getname+0x30/0x150 [ 470.495810][T17214] io_openat_prep+0x12e/0x2a0 [ 470.495903][T17214] io_submit_sqes+0x736/0x1170 [ 470.495916][T17214] __se_sys_io_uring_enter+0x255/0xfb0 [ 470.496003][T17214] ? xfd_validate_state+0x45/0xf0 [ 470.496021][T17214] __x64_sys_io_uring_enter+0x78/0x90 [ 470.496031][T17214] x64_sys_call+0x1e16/0x3020 [ 470.496101][T17214] do_syscall_64+0x12c/0x3b0 [ 470.496114][T17214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.496126][T17214] RIP: 0033:0x7f9a4de6c819 [ 470.496189][T17214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.496250][T17214] RSP: 002b:00007f9a4c8c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 470.496390][T17214] RAX: ffffffffffffffda RBX: 00007f9a4e0e5fa0 RCX: 00007f9a4de6c819 [ 470.496398][T17214] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 470.496458][T17214] RBP: 00007f9a4c8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 470.496465][T17214] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 470.496471][T17214] R13: 00007f9a4e0e6038 R14: 00007f9a4e0e5fa0 R15: 00007fff7cab1d88 [ 470.496492][T17214] [ 470.718812][T16925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.766352][T17220] loop5: detected capacity change from 0 to 8192 [ 470.788568][T17220] loop5: p1 < > p2 < > p3 p4 < > [ 470.794237][T17220] loop5: partition table partially beyond EOD, truncated [ 470.802179][T17220] loop5: p1 start 67108864 is beyond EOD, truncated [ 470.809804][T17220] loop5: p3 start 100859904 is beyond EOD, truncated [ 470.953211][T17247] program syz.1.4682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.973975][T17250] loop3: detected capacity change from 0 to 128 [ 470.995477][T17252] ip6tnl1: entered promiscuous mode [ 471.000341][T17250] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 471.001394][T17252] ip6tnl1: entered allmulticast mode [ 471.017390][T17250] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.032440][T17252] Driver unsupported XDP return value 0 on prog (id 1393) dev N/A, expect packet loss! [ 471.035308][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 471.114675][T12875] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.716531][T17291] FAULT_INJECTION: forcing a failure. [ 471.716531][T17291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 471.748199][T17291] CPU: 1 UID: 0 PID: 17291 Comm: syz.0.4696 Tainted: G W syzkaller #0 PREEMPT(full) [ 471.748227][T17291] Tainted: [W]=WARN [ 471.748234][T17291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 471.748246][T17291] Call Trace: [ 471.748252][T17291] [ 471.748260][T17291] __dump_stack+0x1d/0x30 [ 471.748346][T17291] dump_stack_lvl+0x95/0xd0 [ 471.748364][T17291] dump_stack+0x15/0x1b [ 471.748381][T17291] should_fail_ex+0x263/0x280 [ 471.748405][T17291] should_fail_alloc_page+0xf2/0x100 [ 471.748513][T17291] __alloc_frozen_pages_noprof+0x108/0x350 [ 471.748559][T17291] alloc_pages_mpol+0xb3/0x260 [ 471.748580][T17291] alloc_pages_noprof+0x8f/0x140 [ 471.748631][T17291] pte_alloc_one+0x1c/0xc0 [ 471.748647][T17291] __pte_alloc+0x32/0x2a0 [ 471.748664][T17291] get_locked_pte+0x280/0x330 [ 471.748681][T17291] map_ldt_struct+0x227/0x420 [ 471.748701][T17291] write_ldt+0x441/0x4b0 [ 471.748843][T17291] __se_sys_modify_ldt+0x6c/0x260 [ 471.748943][T17291] x64_sys_call+0x2f50/0x3020 [ 471.749024][T17291] do_syscall_64+0x12c/0x3b0 [ 471.749044][T17291] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 471.749073][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.749109][T17291] RIP: 0033:0x7f9a4de6c819 [ 471.749177][T17291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.749192][T17291] RSP: 002b:00007f9a4c8c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 471.749212][T17291] RAX: ffffffffffffffda RBX: 00007f9a4e0e5fa0 RCX: 00007f9a4de6c819 [ 471.749254][T17291] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000001 [ 471.749266][T17291] RBP: 00007f9a4c8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 471.749277][T17291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.749287][T17291] R13: 00007f9a4e0e6038 R14: 00007f9a4e0e5fa0 R15: 00007fff7cab1d88 [ 471.749305][T17291] [ 471.749466][T17292] FAULT_INJECTION: forcing a failure. [ 471.749466][T17292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.893911][T17295] loop2: detected capacity change from 0 to 8192 [ 471.940601][T17292] CPU: 1 UID: 0 PID: 17292 Comm: syz.1.4694 Tainted: G W syzkaller #0 PREEMPT(full) [ 471.940636][T17292] Tainted: [W]=WARN [ 471.940643][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 471.940704][T17292] Call Trace: [ 471.940710][T17292] [ 471.940718][T17292] __dump_stack+0x1d/0x30 [ 471.940742][T17292] dump_stack_lvl+0x95/0xd0 [ 471.940824][T17292] dump_stack+0x15/0x1b [ 471.940886][T17292] should_fail_ex+0x263/0x280 [ 471.940910][T17292] should_fail+0xb/0x20 [ 471.940929][T17292] should_fail_usercopy+0x1a/0x20 [ 471.941036][T17292] _copy_to_user+0x20/0xa0 [ 471.941061][T17292] __se_sys_move_pages+0x1070/0x1420 [ 471.941088][T17292] ? ksys_write+0x194/0x1a0 [ 471.941149][T17292] __x64_sys_move_pages+0x78/0x90 [ 471.941167][T17292] x64_sys_call+0x1d35/0x3020 [ 471.941189][T17292] do_syscall_64+0x12c/0x3b0 [ 471.941231][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.941250][T17292] RIP: 0033:0x7f90be60c819 [ 471.941274][T17292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.941290][T17292] RSP: 002b:00007f90bd046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 471.941308][T17292] RAX: ffffffffffffffda RBX: 00007f90be886090 RCX: 00007f90be60c819 [ 471.941355][T17292] RDX: 00002000000001c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 471.941366][T17292] RBP: 00007f90bd046090 R08: 0000200000000280 R09: 0000000000000002 [ 471.941378][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.941390][T17292] R13: 00007f90be886128 R14: 00007f90be886090 R15: 00007ffdc76b8d98 [ 471.941406][T17292] [ 472.048728][T17298] loop0: detected capacity change from 0 to 512 [ 472.218148][T17298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 472.247444][T17298] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.4698: bad orphan inode 131083 [ 472.270757][T17298] loop0: lost filesystem error report for type 5 error -117 [ 472.271498][T17298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.387178][T12559] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.294371][T17346] Invalid argument reading file caps for ./file0 [ 473.421689][T17355] loop5: detected capacity change from 0 to 128 [ 473.438153][T17355] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 473.456829][T17355] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.596098][T17355] batadv_slave_0: entered promiscuous mode [ 473.610727][T17360] loop3: detected capacity change from 0 to 256 [ 473.639615][T17360] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 473.674163][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4714'. [ 473.683949][T17358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.724659][T17358] batadv_slave_0 (unregistering): left promiscuous mode [ 473.733743][T17365] loop2: detected capacity change from 0 to 8192 [ 473.742394][T17358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.350816][T16925] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 474.806164][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 476.181741][T17387] net_ratelimit: 1014 callbacks suppressed [ 476.181756][T17387] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 476.235731][T17387] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 476.245756][T17387] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 476.255938][T17387] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 476.266475][T17387] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 476.279776][T17387] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 476.289669][T17387] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 476.299393][T17387] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 476.308945][T17387] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 476.310985][T17402] FAULT_INJECTION: forcing a failure. [ 476.310985][T17402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.318608][T17387] ip_tunnel_core: Dead loop on virtual device gre1 (net 275), fix it urgently! [ 476.353401][T17402] CPU: 1 UID: 0 PID: 17402 Comm: syz.3.4728 Tainted: G W syzkaller #0 PREEMPT(full) [ 476.353429][T17402] Tainted: [W]=WARN [ 476.353436][T17402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 476.353570][T17402] Call Trace: [ 476.353577][T17402] [ 476.353584][T17402] __dump_stack+0x1d/0x30 [ 476.353607][T17402] dump_stack_lvl+0x95/0xd0 [ 476.353629][T17402] dump_stack+0x15/0x1b [ 476.353795][T17402] should_fail_ex+0x263/0x280 [ 476.353819][T17402] should_fail+0xb/0x20 [ 476.353838][T17402] should_fail_usercopy+0x1a/0x20 [ 476.353865][T17402] _copy_to_user+0x20/0xa0 [ 476.353926][T17402] simple_read_from_buffer+0xb5/0x130 [ 476.353946][T17402] proc_fail_nth_read+0x10e/0x150 [ 476.353971][T17402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.353994][T17402] vfs_read+0x1ab/0x7f0 [ 476.354079][T17402] ? __rcu_read_unlock+0x4e/0x70 [ 476.354099][T17402] ? __fget_files+0x184/0x1c0 [ 476.354115][T17402] ? mutex_lock+0x57/0x90 [ 476.354166][T17402] ksys_read+0xdc/0x1a0 [ 476.354271][T17402] __x64_sys_read+0x40/0x50 [ 476.354293][T17402] x64_sys_call+0x2886/0x3020 [ 476.354314][T17402] do_syscall_64+0x12c/0x3b0 [ 476.354407][T17402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.354429][T17402] RIP: 0033:0x7f6aa3d6d04e [ 476.354444][T17402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 476.354458][T17402] RSP: 002b:00007f6aa27fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.354474][T17402] RAX: ffffffffffffffda RBX: 00007f6aa27ff6c0 RCX: 00007f6aa3d6d04e [ 476.354505][T17402] RDX: 000000000000000f RSI: 00007f6aa27ff0a0 RDI: 0000000000000004 [ 476.354516][T17402] RBP: 00007f6aa27ff090 R08: 0000000000000000 R09: 0000000000000000 [ 476.354527][T17402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.354557][T17402] R13: 00007f6aa4026038 R14: 00007f6aa4025fa0 R15: 00007fff66d73c58 [ 476.354575][T17402] [ 476.675288][T17410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=17410 comm=syz.1.4731 [ 476.794103][T17412] loop5: detected capacity change from 0 to 8192 [ 477.523941][T17440] loop0: detected capacity change from 0 to 512 [ 477.607021][T17440] EXT4-fs (loop0): 1 truncate cleaned up [ 477.623468][T17440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.647950][T17440] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.4740: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 477.830030][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 477.830053][ T28] audit: type=1400 audit(1776433489.085:867): avc: denied { execute } for pid=17439 comm="syz.0.4740" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=56291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 477.980560][T12559] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 478.003965][ T28] audit: type=1400 audit(1776433489.264:868): avc: denied { unlink } for pid=12559 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 478.033662][T12559] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 478.057255][T12559] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 478.178601][ T28] audit: type=1326 audit(1776433489.453:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 478.229549][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4743'. [ 478.246046][ T28] audit: type=1326 audit(1776433489.453:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 478.273469][ T28] audit: type=1326 audit(1776433489.453:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 478.305707][ T28] audit: type=1326 audit(1776433489.453:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 478.338538][ T28] audit: type=1326 audit(1776433489.453:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 478.363451][ T28] audit: type=1326 audit(1776433489.453:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 478.388950][ T28] audit: type=1326 audit(1776433489.453:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 478.415722][ T28] audit: type=1326 audit(1776433489.453:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 478.525559][ T8467] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.552001][T17448] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.554289][T17457] FAULT_INJECTION: forcing a failure. [ 478.554289][T17457] name failslab, interval 1, probability 0, space 0, times 0 [ 478.576766][T17457] CPU: 1 UID: 0 PID: 17457 Comm: syz.5.4745 Tainted: G W syzkaller #0 PREEMPT(full) [ 478.576829][T17457] Tainted: [W]=WARN [ 478.576834][T17457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 478.576843][T17457] Call Trace: [ 478.576849][T17457] [ 478.576856][T17457] __dump_stack+0x1d/0x30 [ 478.576877][T17457] dump_stack_lvl+0x95/0xd0 [ 478.576893][T17457] dump_stack+0x15/0x1b [ 478.576943][T17457] should_fail_ex+0x263/0x280 [ 478.576963][T17457] ? __pfx_proc_alloc_inode+0x10/0x10 [ 478.576983][T17457] should_failslab+0x8c/0xb0 [ 478.577014][T17457] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 478.577116][T17457] ? proc_alloc_inode+0x34/0x90 [ 478.577135][T17457] ? __d_alloc+0x2c7/0x340 [ 478.577151][T17457] ? __pfx_proc_alloc_inode+0x10/0x10 [ 478.577170][T17457] proc_alloc_inode+0x34/0x90 [ 478.577210][T17457] alloc_inode+0x40/0x170 [ 478.577223][T17457] new_inode+0x1d/0xe0 [ 478.577242][T17457] proc_sys_make_inode+0x31/0x2a0 [ 478.577264][T17457] proc_sys_lookup+0x1db/0x310 [ 478.577312][T17457] __lookup_slow+0x19d/0x260 [ 478.577379][T17457] lookup_slow+0x3c/0x60 [ 478.577418][T17457] link_path_walk+0x946/0xe30 [ 478.577437][T17457] path_openat+0x1c6/0x2050 [ 478.577456][T17457] ? _parse_integer_limit+0x170/0x190 [ 478.577544][T17457] ? kstrtouint+0x76/0xc0 [ 478.577560][T17457] do_file_open+0x16c/0x290 [ 478.577583][T17457] do_sys_openat2+0x94/0x130 [ 478.577600][T17457] __x64_sys_openat+0xf2/0x120 [ 478.577635][T17457] x64_sys_call+0x1e39/0x3020 [ 478.577653][T17457] do_syscall_64+0x12c/0x3b0 [ 478.577671][T17457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.577759][T17457] RIP: 0033:0x7f484f7fc819 [ 478.577773][T17457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.577786][T17457] RSP: 002b:00007f484e24f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 478.577801][T17457] RAX: ffffffffffffffda RBX: 00007f484fa75fa0 RCX: 00007f484f7fc819 [ 478.577858][T17457] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 478.577868][T17457] RBP: 00007f484e24f090 R08: 0000000000000000 R09: 0000000000000000 [ 478.577877][T17457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.577886][T17457] R13: 00007f484fa76038 R14: 00007f484fa75fa0 R15: 00007ffc15e50468 [ 478.577899][T17457] [ 478.963342][ T8467] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.991495][T17457] loop5: detected capacity change from 0 to 1024 [ 479.029566][T17457] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 479.051100][ T8467] team0: Port device netdevsim1 removed [ 479.076640][ T8467] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.177130][ T8467] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.402751][ T8467] bond1 (unregistering): (slave gre1): Releasing backup interface [ 479.420997][ T8467] gre1 (unregistering): left promiscuous mode [ 479.593802][ T8467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.606714][ T8467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.620460][ T8467] bond0 (unregistering): Released all slaves [ 479.629521][ T8467] bond1 (unregistering): Released all slaves [ 479.720607][ T8467] hsr_slave_0: left promiscuous mode [ 479.747468][ T8467] hsr_slave_1: left promiscuous mode [ 479.773334][ T8467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.799665][ T8467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.832367][ T8467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.848570][ T8467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.889721][ T8467] veth1_vlan: left promiscuous mode [ 479.901324][ T8467] veth0_vlan: left promiscuous mode [ 479.956874][T17507] loop1: detected capacity change from 0 to 1024 [ 480.001440][T17507] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 480.037080][ T8467] team0 (unregistering): Port device team_slave_1 removed [ 480.055102][ T8467] team0 (unregistering): Port device team_slave_0 removed [ 480.155867][ T3038] 8021q: adding VLAN 0 to HW filter on device eth5 [ 480.277276][T17474] chnl_net:caif_netlink_parms(): no params data found [ 480.355168][T17474] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.379071][T17474] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.406598][T17474] bridge_slave_0: entered allmulticast mode [ 480.431341][T17474] bridge_slave_0: entered promiscuous mode [ 480.458562][T17474] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.467552][T17474] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.475719][T17474] bridge_slave_1: entered allmulticast mode [ 480.490858][T17474] bridge_slave_1: entered promiscuous mode [ 480.527054][T17474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.566339][ T3038] 8021q: adding VLAN 0 to HW filter on device eth6 [ 480.579690][T17541] loop5: detected capacity change from 0 to 2048 [ 480.588162][T17474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.616862][T17541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.641744][T17474] team0: Port device team_slave_0 added [ 480.679873][T17474] team0: Port device team_slave_1 added [ 480.704687][T17474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.712629][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.741741][T17474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.764907][T17474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.773236][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.775305][T16925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.800673][T17474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.826530][T17548] loop3: detected capacity change from 0 to 8192 [ 480.915633][T17474] hsr_slave_0: entered promiscuous mode [ 480.926520][T17474] hsr_slave_1: entered promiscuous mode [ 480.958000][T17570] FAULT_INJECTION: forcing a failure. [ 480.958000][T17570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.001847][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.2.4764 Tainted: G W syzkaller #0 PREEMPT(full) [ 481.001888][T17570] Tainted: [W]=WARN [ 481.001894][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.001904][T17570] Call Trace: [ 481.001911][T17570] [ 481.001919][T17570] __dump_stack+0x1d/0x30 [ 481.001944][T17570] dump_stack_lvl+0x95/0xd0 [ 481.001983][T17570] dump_stack+0x15/0x1b [ 481.001999][T17570] should_fail_ex+0x263/0x280 [ 481.002084][T17570] should_fail+0xb/0x20 [ 481.002102][T17570] should_fail_usercopy+0x1a/0x20 [ 481.002127][T17570] _copy_from_user+0x1c/0xb0 [ 481.002153][T17570] ___sys_sendmsg+0xc1/0x1e0 [ 481.002282][T17570] __x64_sys_sendmsg+0xd4/0x160 [ 481.002304][T17570] x64_sys_call+0x194c/0x3020 [ 481.002330][T17570] do_syscall_64+0x12c/0x3b0 [ 481.002351][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.002372][T17570] RIP: 0033:0x7ff59f38c819 [ 481.002411][T17570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.002429][T17570] RSP: 002b:00007ff59dddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.002449][T17570] RAX: ffffffffffffffda RBX: 00007ff59f605fa0 RCX: 00007ff59f38c819 [ 481.002538][T17570] RDX: 00000000200080c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 481.002571][T17570] RBP: 00007ff59dddf090 R08: 0000000000000000 R09: 0000000000000000 [ 481.002583][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.002605][T17570] R13: 00007ff59f606038 R14: 00007ff59f605fa0 R15: 00007ffe5b4db928 [ 481.002654][T17570] [ 481.230818][ T3038] 8021q: adding VLAN 0 to HW filter on device eth7 [ 481.275622][T17474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 481.303365][T17474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.311443][T17474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 481.328625][T17474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.357688][T17474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 481.382687][T17474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.410624][T17474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 481.424524][T17474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.493811][T17474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.509724][T17474] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.520221][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.528384][ T8467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.549958][T17474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.560605][T17474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.591481][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.599075][ T8467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.719948][ T3038] 8021q: adding VLAN 0 to HW filter on device eth8 [ 481.772021][T17474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.002389][T17474] veth0_vlan: entered promiscuous mode [ 482.014898][T17474] veth1_vlan: entered promiscuous mode [ 482.030228][T17474] veth0_macvtap: entered promiscuous mode [ 482.039324][T17474] veth1_macvtap: entered promiscuous mode [ 482.051035][T17474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.069460][T17474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.092209][ T8486] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.105596][ T8486] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.217414][ T8486] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.239104][ T8486] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.356709][T17637] veth3: entered allmulticast mode [ 482.409962][T17639] loop1: detected capacity change from 0 to 512 [ 482.421264][T17639] EXT4-fs: Ignoring removed i_version option [ 482.430503][T17639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 482.453778][T17639] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4772: invalid indirect mapped block 4294967295 (level 1) [ 482.479342][T17639] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 482.480181][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 482.500051][ C0] EXT4-fs (loop1): initial error at time 1776433493: ext4_free_branches:1023: inode 11 [ 482.511856][ C0] EXT4-fs (loop1): last error at time 1776433493: ext4_free_branches:1023: inode 11 [ 482.523586][T17639] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4772: invalid indirect mapped block 4294967295 (level 1) [ 482.528563][T17646] loop6: detected capacity change from 0 to 512 [ 482.538714][T17639] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 482.548301][T17639] EXT4-fs (loop1): 2 truncates cleaned up [ 482.566078][T17646] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 482.574265][T17639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.610301][T17639] FAULT_INJECTION: forcing a failure. [ 482.610301][T17639] name failslab, interval 1, probability 0, space 0, times 0 [ 482.625109][T17639] CPU: 0 UID: 0 PID: 17639 Comm: syz.1.4772 Tainted: G W syzkaller #0 PREEMPT(full) [ 482.625142][T17639] Tainted: [W]=WARN [ 482.625148][T17639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 482.625182][T17639] Call Trace: [ 482.625189][T17639] [ 482.625197][T17639] __dump_stack+0x1d/0x30 [ 482.625220][T17639] dump_stack_lvl+0x95/0xd0 [ 482.625276][T17639] dump_stack+0x15/0x1b [ 482.625294][T17639] should_fail_ex+0x263/0x280 [ 482.625318][T17639] should_failslab+0x8c/0xb0 [ 482.625349][T17639] __kmalloc_noprof+0xb8/0x4d0 [ 482.625367][T17639] ? ext4_htree_store_dirent+0x52/0x2e0 [ 482.625519][T17639] ext4_htree_store_dirent+0x52/0x2e0 [ 482.625537][T17639] htree_dirblock_to_tree+0x49f/0x620 [ 482.625606][T17639] ext4_htree_fill_tree+0x458/0xa60 [ 482.625633][T17639] ? inode_query_iversion+0xb9/0x110 [ 482.625678][T17639] ext4_readdir+0x1915/0x1f80 [ 482.625698][T17639] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 482.625732][T17639] ? iterate_dir+0x62/0x330 [ 482.625796][T17639] iterate_dir+0x114/0x330 [ 482.625822][T17639] __se_sys_getdents64+0xd2/0x230 [ 482.625913][T17639] ? __pfx_filldir64+0x10/0x10 [ 482.625942][T17639] __x64_sys_getdents64+0x43/0x50 [ 482.626045][T17639] x64_sys_call+0x2408/0x3020 [ 482.626067][T17650] loop5: detected capacity change from 0 to 4096 [ 482.626067][T17639] do_syscall_64+0x12c/0x3b0 [ 482.626090][T17639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.626216][T17639] RIP: 0033:0x7f90be60c819 [ 482.626231][T17639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.626246][T17639] RSP: 002b:00007f90bd067028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 482.626305][T17639] RAX: ffffffffffffffda RBX: 00007f90be885fa0 RCX: 00007f90be60c819 [ 482.626319][T17639] RDX: 00000000000000e0 RSI: 0000200000000fc0 RDI: 0000000000000009 [ 482.626331][T17639] RBP: 00007f90bd067090 R08: 0000000000000000 R09: 0000000000000000 [ 482.626342][T17639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.626353][T17639] R13: 00007f90be886038 R14: 00007f90be885fa0 R15: 00007ffdc76b8d98 [ 482.626410][T17639] [ 482.642553][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 482.803829][T17646] EXT4-fs (loop6): orphan file too big: 4294967295 [ 482.829389][T17650] EXT4-fs: Ignoring removed bh option [ 482.899885][T17650] ext4: Unknown parameter 'fsuuid' [ 482.903921][T12073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.929212][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 482.929226][ T28] audit: type=1326 audit(1776433494.442:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.2.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 482.929263][ T28] audit: type=1326 audit(1776433494.442:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.2.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 482.929280][ T28] audit: type=1326 audit(1776433494.442:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.2.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 482.929302][ T28] audit: type=1326 audit(1776433494.442:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.2.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 482.930069][ T28] audit: type=1326 audit(1776433494.442:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.2.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 482.930413][ T28] audit: type=1326 audit(1776433494.442:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.2.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 482.930501][ T28] audit: type=1326 audit(1776433494.442:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.2.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 482.930590][ T28] audit: type=1326 audit(1776433494.442:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.2.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 482.931065][ T28] audit: type=1326 audit(1776433494.442:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.2.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 482.931325][ T28] audit: type=1326 audit(1776433494.442:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.2.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 482.953177][T17646] EXT4-fs (loop6): mount failed [ 482.969115][T17650] loop5: detected capacity change from 0 to 512 [ 482.969521][T17650] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 483.006520][T17665] net_ratelimit: 3062 callbacks suppressed [ 483.006535][T17665] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 483.017392][T17665] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 483.017641][T17665] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 483.017864][T17665] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 483.018133][T17665] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 483.018439][T17665] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 483.021395][T17665] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 483.271146][T17670] loop5: detected capacity change from 0 to 1024 [ 483.423819][T17665] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 483.433798][T17665] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 483.443318][T17665] ip_tunnel_core: Dead loop on virtual device gre1 (net 262), fix it urgently! [ 483.470370][T17670] EXT4-fs: test_dummy_encryption option not supported [ 483.677004][T17675] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4782'. [ 483.758805][T17679] FAULT_INJECTION: forcing a failure. [ 483.758805][T17679] name failslab, interval 1, probability 0, space 0, times 0 [ 483.849378][T17679] CPU: 0 UID: 0 PID: 17679 Comm: syz.6.4784 Tainted: G W syzkaller #0 PREEMPT(full) [ 483.849446][T17679] Tainted: [W]=WARN [ 483.849453][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 483.849499][T17679] Call Trace: [ 483.849505][T17679] [ 483.849512][T17679] __dump_stack+0x1d/0x30 [ 483.849537][T17679] dump_stack_lvl+0x95/0xd0 [ 483.849612][T17679] dump_stack+0x15/0x1b [ 483.849632][T17679] should_fail_ex+0x263/0x280 [ 483.849804][T17679] should_failslab+0x8c/0xb0 [ 483.849832][T17679] kmem_cache_alloc_noprof+0x66/0x3f0 [ 483.849855][T17679] ? xfrm_state_alloc+0x2c/0x190 [ 483.849955][T17679] xfrm_state_alloc+0x2c/0x190 [ 483.849974][T17679] xfrm_add_sa+0xf4e/0x25d0 [ 483.850053][T17679] xfrm_user_rcv_msg+0x576/0x670 [ 483.850082][T17679] ? __kfree_skb+0x109/0x150 [ 483.850185][T17679] ? nlmon_xmit+0x4f/0x60 [ 483.850282][T17679] ? consume_skb+0x4b/0x130 [ 483.850370][T17679] netlink_rcv_skb+0x123/0x220 [ 483.850394][T17679] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 483.850462][T17679] xfrm_netlink_rcv+0x48/0x60 [ 483.850528][T17679] netlink_unicast+0x5a8/0x680 [ 483.850559][T17679] netlink_sendmsg+0x5c8/0x6f0 [ 483.850604][T17679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.850626][T17679] ____sys_sendmsg+0x563/0x5b0 [ 483.850669][T17679] ___sys_sendmsg+0x195/0x1e0 [ 483.850699][T17679] __x64_sys_sendmsg+0xd4/0x160 [ 483.850721][T17679] x64_sys_call+0x194c/0x3020 [ 483.850778][T17679] do_syscall_64+0x12c/0x3b0 [ 483.850824][T17679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.850844][T17679] RIP: 0033:0x7f1fee15c819 [ 483.850859][T17679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.850922][T17679] RSP: 002b:00007f1fecbb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.850938][T17679] RAX: ffffffffffffffda RBX: 00007f1fee3d5fa0 RCX: 00007f1fee15c819 [ 483.850949][T17679] RDX: 0000000020040084 RSI: 0000200000000100 RDI: 0000000000000003 [ 483.850962][T17679] RBP: 00007f1fecbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 483.850974][T17679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.850984][T17679] R13: 00007f1fee3d6038 R14: 00007f1fee3d5fa0 R15: 00007fff850099f8 [ 483.850998][T17679] [ 484.382140][T17690] loop1: detected capacity change from 0 to 512 [ 484.420587][T17690] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 484.451692][T17690] EXT4-fs (loop1): orphan cleanup on readonly fs [ 484.473451][T17690] EXT4-fs warning (device loop1): ext4_enable_quotas:7263: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 484.498402][T17692] loop6: detected capacity change from 0 to 8192 [ 484.517983][T17690] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 484.555435][T17690] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.4788: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 484.626710][T17690] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 484.626838][T17690] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4788: couldn't read orphan inode 13 (err -117) [ 484.636745][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 484.636764][ C0] EXT4-fs (loop1): last error at time 1776433496: ext4_ext_check_inode:521: inode 13 [ 484.737817][T17686] loop3: detected capacity change from 0 to 32768 [ 484.752672][T17690] loop1: lost filesystem error report for type 5 error -117 [ 484.753129][T17690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 484.804957][T17686] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 484.810890][T17686] loop3: p1 start 460800 is beyond EOD, truncated [ 484.830160][T17686] loop3: p2 size 83886080 extends beyond EOD, truncated [ 484.839818][T17686] loop3: p5 start 460800 is beyond EOD, truncated [ 484.849008][T17690] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 484.864960][T17686] loop3: p6 size 83886080 extends beyond EOD, truncated [ 484.881289][T17690] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 484.958938][T17690] EXT4-fs warning (device loop1): ext4_enable_quotas:7263: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 485.224586][T12073] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 485.238367][T12073] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 486.894686][T17723] loop2: detected capacity change from 0 to 512 [ 486.949447][T17723] EXT4-fs (loop2): 1 truncate cleaned up [ 486.972037][T17723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.003096][T17702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.032261][T17721] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.4796: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 487.082686][ T8486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.153000][ T8486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.226965][ T8486] team0: Port device netdevsim1 removed [ 487.243766][ T8486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.354783][T17734] chnl_net:caif_netlink_parms(): no params data found [ 487.362965][T17737] loop5: detected capacity change from 0 to 32768 [ 487.391404][T13127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.407719][T17737] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 487.414096][T17737] loop5: p1 start 460800 is beyond EOD, truncated [ 487.421138][T17737] loop5: p2 size 83886080 extends beyond EOD, truncated [ 487.443345][T17737] loop5: p5 start 460800 is beyond EOD, truncated [ 487.452100][T17737] loop5: p6 size 83886080 extends beyond EOD, truncated [ 487.453596][ T8486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.512170][T17734] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.526962][T17762] netlink: 'syz.2.4806': attribute type 8 has an invalid length. [ 487.548462][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.556875][T17734] bridge_slave_0: entered allmulticast mode [ 487.567641][T17734] bridge_slave_0: entered promiscuous mode [ 487.578952][T17760] Invalid argument reading file caps for ./file0 [ 487.587399][T17762] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.600252][T17734] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.607848][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.616182][T17734] bridge_slave_1: entered allmulticast mode [ 487.623406][T17734] bridge_slave_1: entered promiscuous mode [ 487.638528][T17769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=17769 comm=syz.2.4806 [ 487.673647][T17734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.687148][T17769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.698442][T17769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.716508][T17769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.725734][T17769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.743631][T17734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.778106][T17762] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.835109][T17734] team0: Port device team_slave_0 added [ 487.854524][T17734] team0: Port device team_slave_1 added [ 487.935940][T17779] loop6: detected capacity change from 0 to 512 [ 487.943267][T17779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.953340][T17779] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.4811: iget: bad i_size value: 38620345925642 [ 487.966748][T17779] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 487.967032][T17779] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4811: couldn't read orphan inode 15 (err -117) [ 487.988776][T17779] loop6: lost filesystem error report for type 5 error -117 [ 488.002905][T17779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.061336][T17474] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.092751][ T8486] bond1 (unregistering): (slave gre1): Releasing backup interface [ 488.134471][ T8486] gre1 (unregistering): left promiscuous mode [ 488.170991][ T8486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.197230][ T8486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.210221][ T8486] bond0 (unregistering): Released all slaves [ 488.218838][ T8486] bond1 (unregistering): Released all slaves [ 488.232173][T17762] team0: Port device netdevsim1 removed [ 488.239108][T17762] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.262508][ T3038] 8021q: adding VLAN 0 to HW filter on device eth9 [ 488.272396][T17734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.280545][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.321318][T17734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.321694][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 488.321709][ T28] audit: type=1326 audit(1776433500.103:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee15c819 code=0x7ffc0000 [ 488.334634][T17734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.374387][ T28] audit: type=1326 audit(1776433500.135:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fee15c819 code=0x7ffc0000 [ 488.399497][ T28] audit: type=1326 audit(1776433500.135:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee15c819 code=0x7ffc0000 [ 488.426898][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.433129][ T28] audit: type=1326 audit(1776433500.135:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1fee15c819 code=0x7ffc0000 [ 488.457520][T17734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.481662][ T28] audit: type=1326 audit(1776433500.135:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee15c819 code=0x7ffc0000 [ 488.520009][ T28] audit: type=1326 audit(1776433500.135:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1fee15c819 code=0x7ffc0000 [ 488.547128][ T8486] hsr_slave_0: left promiscuous mode [ 488.553087][ T8486] hsr_slave_1: left promiscuous mode [ 488.560057][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.568513][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.577000][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.585698][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.596543][ T8486] veth1_vlan: left promiscuous mode [ 488.602325][ T8486] veth0_vlan: left promiscuous mode [ 488.665468][ T8486] team0 (unregistering): Port device team_slave_1 removed [ 488.676257][ T8486] team0 (unregistering): Port device team_slave_0 removed [ 488.716202][ T28] audit: type=1326 audit(1776433500.513:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee15c819 code=0x7ffc0000 [ 488.743520][ T28] audit: type=1326 audit(1776433500.513:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17804 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee15c819 code=0x7ffc0000 [ 488.773757][T17762] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.840579][T17734] hsr_slave_0: entered promiscuous mode [ 488.857132][T17734] hsr_slave_1: entered promiscuous mode [ 488.867971][T17734] debugfs: 'hsr0' already exists in 'hsr' [ 488.882961][T17734] Cannot create hsr debugfs directory [ 488.911012][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.943800][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.971508][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.008360][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.029985][T17814] Invalid argument reading file caps for ./file0 [ 489.142328][T17831] loop5: detected capacity change from 0 to 512 [ 489.166654][T17734] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 489.196396][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.214455][T17734] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 489.231697][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.272246][T17734] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 489.300387][T17831] EXT4-fs error (device loop5): ext4_iget_extra_inode:5042: inode #15: comm syz.5.4821: corrupted in-inode xattr: invalid ea_ino [ 489.321480][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.338543][T17831] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 489.338826][T17831] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.4821: couldn't read orphan inode 15 (err -117) [ 489.350684][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 489.350702][ C1] EXT4-fs (loop5): initial error at time 1776433757: ext4_iget_extra_inode:5042: inode 15 [ 489.350744][ C1] EXT4-fs (loop5): last error at time 1776433757: ext4_iget_extra_inode:5042: inode 15 [ 489.406349][T17734] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 489.458792][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.560786][T17831] loop5: lost filesystem error report for type 5 error -117 [ 489.564624][T17831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.598037][ T3038] 8021q: adding VLAN 0 to HW filter on device eth10 [ 489.629027][T16925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.636183][T17734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.663200][T17734] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.675466][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.684382][ T8467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.710178][T17848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.727480][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.732459][T17848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.735224][ T8467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.773206][T17846] FAULT_INJECTION: forcing a failure. [ 489.773206][T17846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.792653][T17734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.813436][T17734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.826524][T17846] CPU: 1 UID: 0 PID: 17846 Comm: syz.5.4822 Tainted: G W syzkaller #0 PREEMPT(full) [ 489.826556][T17846] Tainted: [W]=WARN [ 489.826563][T17846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 489.826648][T17846] Call Trace: [ 489.826655][T17846] [ 489.826663][T17846] __dump_stack+0x1d/0x30 [ 489.826690][T17846] dump_stack_lvl+0x95/0xd0 [ 489.826707][T17846] dump_stack+0x15/0x1b [ 489.826723][T17846] should_fail_ex+0x263/0x280 [ 489.826771][T17846] should_fail+0xb/0x20 [ 489.826798][T17846] should_fail_usercopy+0x1a/0x20 [ 489.826823][T17846] _copy_to_user+0x20/0xa0 [ 489.826848][T17846] simple_read_from_buffer+0xb5/0x130 [ 489.826866][T17846] proc_fail_nth_read+0x10e/0x150 [ 489.826895][T17846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.826917][T17846] vfs_read+0x1ab/0x7f0 [ 489.826938][T17846] ? __rcu_read_unlock+0x4e/0x70 [ 489.827009][T17846] ? __fget_files+0x184/0x1c0 [ 489.827025][T17846] ? mutex_lock+0x57/0x90 [ 489.827130][T17846] ksys_read+0xdc/0x1a0 [ 489.827214][T17846] __x64_sys_read+0x40/0x50 [ 489.827234][T17846] x64_sys_call+0x2886/0x3020 [ 489.827300][T17846] do_syscall_64+0x12c/0x3b0 [ 489.827322][T17846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.827415][T17846] RIP: 0033:0x7f484f7bd04e [ 489.827429][T17846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.827452][T17846] RSP: 002b:00007f484e24efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.827476][T17846] RAX: ffffffffffffffda RBX: 00007f484e24f6c0 RCX: 00007f484f7bd04e [ 489.827488][T17846] RDX: 000000000000000f RSI: 00007f484e24f0a0 RDI: 0000000000000004 [ 489.827500][T17846] RBP: 00007f484e24f090 R08: 0000000000000000 R09: 0000000000000000 [ 489.827511][T17846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.827522][T17846] R13: 00007f484fa76038 R14: 00007f484fa75fa0 R15: 00007ffc15e50468 [ 489.827540][T17846] [ 490.096052][T17863] program syz.5.4824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.109115][ T28] audit: type=1326 audit(1776433757.989:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee15c819 code=0x7ffc0000 [ 490.159471][ T28] audit: type=1326 audit(1776433757.989:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee15c819 code=0x7ffc0000 [ 490.198345][T17734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.219440][ T23] hid_parser_main: 91 callbacks suppressed [ 490.219456][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 490.247011][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 490.251716][ T3038] 8021q: adding VLAN 0 to HW filter on device eth11 [ 490.259716][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4827'. [ 490.277494][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 490.329786][T17885] fido_id[17885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 490.381725][T17897] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4828'. [ 490.439394][T17903] Invalid argument reading file caps for ./file0 [ 490.457461][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4828'. [ 490.472358][T17897] netlink: 280 bytes leftover after parsing attributes in process `syz.5.4828'. [ 490.498862][T17734] veth0_vlan: entered promiscuous mode [ 490.525317][T17734] veth1_vlan: entered promiscuous mode [ 490.553615][T17734] veth0_macvtap: entered promiscuous mode [ 490.572961][T17734] veth1_macvtap: entered promiscuous mode [ 490.596511][T17734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.613193][T17734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.644214][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.660141][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.684158][ T3038] 8021q: adding VLAN 0 to HW filter on device eth12 [ 490.706060][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.722330][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.937328][T17924] loop6: detected capacity change from 0 to 2048 [ 491.050282][T17930] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 491.083846][T17924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.120684][T17930] netlink: 'syz.2.4834': attribute type 1 has an invalid length. [ 491.576360][T17930] loop2: detected capacity change from 0 to 8192 [ 491.755370][T17474] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.163796][T17948] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4839'. [ 492.354703][T17963] loop2: detected capacity change from 0 to 512 [ 492.381511][T17963] EXT4-fs: Ignoring removed oldalloc option [ 492.394903][T17968] tipc: Started in network mode [ 492.403784][T17968] tipc: Node identity ae89f9e77b7, cluster identity 4711 [ 492.422820][T17963] EXT4-fs (loop2): 1 truncate cleaned up [ 492.430758][T17968] tipc: Enabled bearer , priority 0 [ 492.438472][T17963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.455680][T17968] syzkaller0: entered promiscuous mode [ 492.479863][T17968] syzkaller0: entered allmulticast mode [ 492.529756][T13127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.550457][T17968] syzkaller0: MTU too low for tipc bearer [ 492.556573][T17968] tipc: Disabling bearer [ 492.597271][T17968] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.4841' sets config #1 [ 492.608453][T17996] FAULT_INJECTION: forcing a failure. [ 492.608453][T17996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.648086][T17983] loop5: detected capacity change from 0 to 512 [ 492.650604][T17996] CPU: 1 UID: 0 PID: 17996 Comm: syz.7.4848 Tainted: G W syzkaller #0 PREEMPT(full) [ 492.650711][T17996] Tainted: [W]=WARN [ 492.650759][T17996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 492.650769][T17996] Call Trace: [ 492.650775][T17996] [ 492.650781][T17996] __dump_stack+0x1d/0x30 [ 492.650805][T17996] dump_stack_lvl+0x95/0xd0 [ 492.650825][T17996] dump_stack+0x15/0x1b [ 492.650899][T17996] should_fail_ex+0x263/0x280 [ 492.650924][T17996] should_fail+0xb/0x20 [ 492.650960][T17996] should_fail_usercopy+0x1a/0x20 [ 492.651042][T17996] _copy_from_iter+0xcf/0xea0 [ 492.651066][T17996] ? __alloc_skb+0x4f6/0x690 [ 492.651095][T17996] ? __alloc_skb+0x200/0x690 [ 492.651131][T17996] netlink_sendmsg+0x4ae/0x6f0 [ 492.651159][T17996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.651184][T17996] ____sys_sendmsg+0x563/0x5b0 [ 492.651224][T17996] ___sys_sendmsg+0x195/0x1e0 [ 492.651256][T17996] __x64_sys_sendmsg+0xd4/0x160 [ 492.651281][T17996] x64_sys_call+0x194c/0x3020 [ 492.651405][T17996] do_syscall_64+0x12c/0x3b0 [ 492.651435][T17996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.651477][T17996] RIP: 0033:0x7f7d24bcc819 [ 492.651511][T17996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.651527][T17996] RSP: 002b:00007f7d23627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.651563][T17996] RAX: ffffffffffffffda RBX: 00007f7d24e45fa0 RCX: 00007f7d24bcc819 [ 492.651576][T17996] RDX: 0000000000040080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 492.651588][T17996] RBP: 00007f7d23627090 R08: 0000000000000000 R09: 0000000000000000 [ 492.651600][T17996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.651612][T17996] R13: 00007f7d24e46038 R14: 00007f7d24e45fa0 R15: 00007ffe5e9f6c98 [ 492.651630][T17996] [ 492.886165][T18007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=18007 comm=syz.3.4849 [ 492.906748][T18009] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4851'. [ 492.923637][T18008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=18008 comm=syz.7.4850 [ 492.940944][T17983] EXT4-fs (loop5): orphan cleanup on readonly fs [ 492.976355][T17983] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.4845: EA inode hash validation failed [ 492.990683][T17983] EXT4-fs error (device loop5): ext4_do_update_inode:5604: inode #15: comm syz.5.4845: corrupted inode contents [ 493.004082][T17983] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.006301][T17983] EXT4-fs error (device loop5): ext4_dirty_inode:6497: inode #15: comm syz.5.4845: mark_inode_dirty error [ 493.030770][T17983] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.031306][T17983] EXT4-fs error (device loop5): ext4_do_update_inode:5604: inode #15: comm syz.5.4845: corrupted inode contents [ 493.054051][T17983] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.064022][T17983] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.4845: mark_inode_dirty error [ 493.095367][ C1] EXT4-fs (loop5): error count since last fsck: 3 [ 493.095457][ C1] EXT4-fs (loop5): initial error at time 1776433761: ext4_do_update_inode:5604: inode 15 [ 493.095658][ C1] EXT4-fs (loop5): last error at time 1776433761: ext4_do_update_inode:5604: inode 15 [ 493.134853][T17983] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.206484][T17983] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.4845: mark inode dirty (error -117) [ 493.281801][T18038] loop6: detected capacity change from 0 to 512 [ 493.300158][T17983] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.300389][T17983] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 493.319590][T17983] EXT4-fs (loop5): 1 orphan inode deleted [ 493.326427][T17983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 493.364437][T18038] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 493.392976][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 493.393012][ T28] audit: type=1326 audit(1776433761.422:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.2.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 493.438479][T18038] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 493.455786][T18038] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 493.464167][T18038] System zones: 0-2, 18-18, 34-34 [ 493.486459][ T28] audit: type=1326 audit(1776433761.464:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.2.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 493.512809][T16925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.527345][T18038] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.4856: bad orphan inode 15 [ 493.550964][T18038] loop6: lost filesystem error report for type 5 error -117 [ 493.551132][T18038] ext4_test_bit(bit=14, block=18) = 1 [ 493.558794][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 493.558816][ C1] EXT4-fs (loop6): initial error at time 1776433761: ext4_orphan_get:1423 [ 493.558839][ C1] EXT4-fs (loop6): last error at time 1776433761: ext4_orphan_get:1423 [ 493.602772][ T28] audit: type=1326 audit(1776433761.464:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.2.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 493.612403][T18038] is_bad_inode(inode)=0 [ 493.635226][T18038] NEXT_ORPHAN(inode)=2264924160 [ 493.640913][T18038] max_ino=32 [ 493.644454][T18038] i_nlink=0 [ 493.650174][ T28] audit: type=1326 audit(1776433761.464:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.2.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 493.702247][T18038] EXT4-fs error (device loop6): ext4_do_update_inode:5604: inode #15: comm syz.6.4856: corrupted inode contents [ 493.721314][ T28] audit: type=1326 audit(1776433761.464:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.2.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 493.756789][T18054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=18054 comm=syz.3.4860 [ 493.771386][T18038] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.771644][T18038] EXT4-fs error (device loop6): ext4_dirty_inode:6497: inode #15: comm syz.6.4856: mark_inode_dirty error [ 493.797921][ T28] audit: type=1326 audit(1776433761.464:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.2.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 493.825789][T18038] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.826059][T18038] EXT4-fs error (device loop6): ext4_do_update_inode:5604: inode #15: comm syz.6.4856: corrupted inode contents [ 493.851598][ T28] audit: type=1326 audit(1776433761.464:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.2.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 493.885259][T18038] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.889335][T18038] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.4856: mark_inode_dirty error [ 493.896280][ T28] audit: type=1326 audit(1776433761.464:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.2.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 493.913469][T18038] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.916979][ T28] audit: type=1326 audit(1776433761.464:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.2.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 493.963305][T18038] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.4856: mark inode dirty (error -117) [ 493.987730][ T28] audit: type=1326 audit(1776433761.464:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.2.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38c819 code=0x7ffc0000 [ 494.015025][T18038] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 494.026163][T18058] net_ratelimit: 1014 callbacks suppressed [ 494.026180][T18058] ip_tunnel_core: Dead loop on virtual device gre1 (net 282), fix it urgently! [ 494.053228][T18038] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 494.068521][T18038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.089334][T18058] ip_tunnel_core: Dead loop on virtual device gre1 (net 282), fix it urgently! [ 494.141925][T18058] ip_tunnel_core: Dead loop on virtual device gre1 (net 282), fix it urgently! [ 494.151891][T18058] ip_tunnel_core: Dead loop on virtual device gre1 (net 282), fix it urgently! [ 494.163615][T18058] ip_tunnel_core: Dead loop on virtual device gre1 (net 282), fix it urgently! [ 494.174598][T18058] ip_tunnel_core: Dead loop on virtual device gre1 (net 282), fix it urgently! [ 494.184588][T18058] ip_tunnel_core: Dead loop on virtual device gre1 (net 282), fix it urgently! [ 494.194185][T18058] ip_tunnel_core: Dead loop on virtual device gre1 (net 282), fix it urgently! [ 494.204347][T18058] ip_tunnel_core: Dead loop on virtual device gre1 (net 282), fix it urgently! [ 494.221423][T18073] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4862'. [ 494.240595][T18038] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4856: bg 0: block 80: padding at end of block bitmap is not set [ 494.259735][T18058] ip_tunnel_core: Dead loop on virtual device gre1 (net 282), fix it urgently! [ 494.346386][T18080] syzkaller0: entered promiscuous mode [ 494.352051][T18080] syzkaller0: entered allmulticast mode [ 494.359443][T18080] FAULT_INJECTION: forcing a failure. [ 494.359443][T18080] name failslab, interval 1, probability 0, space 0, times 0 [ 494.374760][T18080] CPU: 1 UID: 0 PID: 18080 Comm: syz.7.4864 Tainted: G W syzkaller #0 PREEMPT(full) [ 494.374849][T18080] Tainted: [W]=WARN [ 494.374856][T18080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 494.374865][T18080] Call Trace: [ 494.374872][T18080] [ 494.374879][T18080] __dump_stack+0x1d/0x30 [ 494.374911][T18080] dump_stack_lvl+0x95/0xd0 [ 494.374960][T18080] dump_stack+0x15/0x1b [ 494.375040][T18080] should_fail_ex+0x263/0x280 [ 494.375061][T18080] should_failslab+0x8c/0xb0 [ 494.375113][T18080] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 494.375131][T18080] ? __alloc_skb+0x2d6/0x690 [ 494.375149][T18080] __alloc_skb+0x2d6/0x690 [ 494.375169][T18080] ? __alloc_skb+0x200/0x690 [ 494.375194][T18080] alloc_skb_with_frags+0x7e/0x3d0 [ 494.375215][T18080] sock_alloc_send_pskb+0x44d/0x500 [ 494.375243][T18080] ? __rcu_read_unlock+0x4e/0x70 [ 494.375300][T18080] ? __rcu_read_unlock+0x4e/0x70 [ 494.375318][T18080] packet_sendmsg+0x225a/0x3200 [ 494.375348][T18080] ? avc_has_perm+0x101/0x190 [ 494.375379][T18080] ? selinux_socket_sendmsg+0x192/0x1c0 [ 494.375443][T18080] ? __pfx_packet_sendmsg+0x10/0x10 [ 494.375464][T18080] ____sys_sendmsg+0x563/0x5b0 [ 494.375584][T18080] ___sys_sendmsg+0x195/0x1e0 [ 494.375612][T18080] __x64_sys_sendmsg+0xd4/0x160 [ 494.375697][T18080] x64_sys_call+0x194c/0x3020 [ 494.375794][T18080] do_syscall_64+0x12c/0x3b0 [ 494.375817][T18080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.375834][T18080] RIP: 0033:0x7f7d24bcc819 [ 494.375890][T18080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.375923][T18080] RSP: 002b:00007f7d23627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.376008][T18080] RAX: ffffffffffffffda RBX: 00007f7d24e45fa0 RCX: 00007f7d24bcc819 [ 494.376020][T18080] RDX: 008bb3a301eb085f RSI: 0000200000000280 RDI: 0000000000000005 [ 494.376031][T18080] RBP: 00007f7d23627090 R08: 0000000000000000 R09: 0000000000000000 [ 494.376042][T18080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.376053][T18080] R13: 00007f7d24e46038 R14: 00007f7d24e45fa0 R15: 00007ffe5e9f6c98 [ 494.376071][T18080] [ 494.725769][T17474] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /28/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 495.168194][T18069] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.207868][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.389790][T18094] netlink: 'syz.5.4871': attribute type 1 has an invalid length. [ 495.854917][T18094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.989498][T18095] bond1: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 496.009068][T18100] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component [ 496.065844][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.151368][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.232204][T18117] loop3: detected capacity change from 0 to 512 [ 496.318970][T18121] loop3: detected capacity change from 0 to 512 [ 496.329009][T18121] EXT4-fs: Ignoring removed nobh option [ 496.341079][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.376228][T18098] chnl_net:caif_netlink_parms(): no params data found [ 496.394684][T18121] EXT4-fs (loop3): orphan cleanup on readonly fs [ 496.407829][T18121] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.4875: EA inode hash validation failed [ 496.425098][T18121] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #15: comm syz.3.4875: corrupted inode contents [ 496.441317][T18121] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #15: comm syz.3.4875: mark_inode_dirty error [ 496.452418][T18098] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.454415][T18121] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #15: comm syz.3.4875: corrupted inode contents [ 496.461990][T18098] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.475517][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 496.483462][T18098] bridge_slave_0: entered allmulticast mode [ 496.489970][ C1] EXT4-fs (loop3): initial error at time 1776433764: ext4_do_update_inode:5604: inode 15 [ 496.490001][ C1] EXT4-fs (loop3): last error at time 1776433764: ext4_dirty_inode:6497: inode 15 [ 496.520697][T18121] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.4875: mark_inode_dirty error [ 496.536628][T18121] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.4875: mark inode dirty (error -117) [ 496.553589][T18098] bridge_slave_0: entered promiscuous mode [ 496.573529][T18121] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 496.578016][T18098] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.598570][T18121] EXT4-fs (loop3): 1 orphan inode deleted [ 496.613302][T18098] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.614702][T18121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 496.628115][T18098] bridge_slave_1: entered allmulticast mode [ 496.644430][T18098] bridge_slave_1: entered promiscuous mode [ 496.660137][ T36] bridge_slave_1: left allmulticast mode [ 496.668615][ T36] bridge_slave_1: left promiscuous mode [ 496.683230][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.693089][ T36] bridge_slave_0: left allmulticast mode [ 496.693975][T18121] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4875'. [ 496.699589][ T36] bridge_slave_0: left promiscuous mode [ 496.699751][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.769564][T18131] loop5: detected capacity change from 0 to 1024 [ 496.833352][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.849260][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.871247][ T36] bond0 (unregistering): Released all slaves [ 496.886044][T18135] loop2: detected capacity change from 0 to 8192 [ 496.968876][T18098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.005652][ T36] tipc: Left network mode [ 497.022819][T12875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.038990][T18098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.065670][T18131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.101577][ T36] hsr_slave_0: left promiscuous mode [ 497.107582][ T36] hsr_slave_1: left promiscuous mode [ 497.114151][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.128966][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.160655][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.175548][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.207059][ T36] veth1_macvtap: left promiscuous mode [ 497.212900][ T36] veth0_macvtap: left promiscuous mode [ 497.219101][ T36] veth1_vlan: left promiscuous mode [ 497.225203][ T36] veth0_vlan: left promiscuous mode [ 497.337661][ T36] team0 (unregistering): Port device team_slave_1 removed [ 497.350399][ T36] team0 (unregistering): Port device team_slave_0 removed [ 497.383645][T18147] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 497.397514][ T3038] 8021q: adding VLAN 0 to HW filter on device eth13 [ 497.429873][T18098] team0: Port device team_slave_0 added [ 497.461200][T18098] team0: Port device team_slave_1 added [ 497.480005][T18098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.487739][T18098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.528626][T18098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.543997][T18098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.551395][T18098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.584988][T18098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.490121][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 498.559746][T16925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.507347][T18180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=18180 comm=syz.5.4883 [ 499.563587][T18098] hsr_slave_0: entered promiscuous mode [ 499.887558][T18098] hsr_slave_1: entered promiscuous mode [ 499.941203][ T3038] 8021q: adding VLAN 0 to HW filter on device eth15 [ 500.117254][T18208] Invalid argument reading file caps for ./file0 [ 500.157361][T18098] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 500.179469][T18213] loop3: detected capacity change from 0 to 256 [ 500.203055][T18098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.240299][T18098] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 500.253034][T18213] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 500.285669][T18098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.313143][T18098] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 500.357931][T18098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.388235][T18098] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 500.416498][T18098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.482515][ T3038] 8021q: adding VLAN 0 to HW filter on device eth14 [ 500.541234][T18098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.549073][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 500.549088][ T28] audit: type=1400 audit(1776433768.928:1225): avc: denied { read } for pid=18235 comm="syz.7.4891" dev="sockfs" ino=60584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 500.552545][T18098] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.600748][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.608602][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.630657][T18246] futex_wake_op: syz.2.4893 tries to shift op by -1; fix this program [ 500.655489][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.663038][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.730095][ T28] audit: type=1400 audit(1776433769.138:1226): avc: denied { connect } for pid=18255 comm="syz.2.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 500.759722][ T3038] 8021q: adding VLAN 0 to HW filter on device eth16 [ 500.781661][ T28] audit: type=1400 audit(1776433769.180:1227): avc: denied { ioctl } for pid=18255 comm="syz.2.4894" path="socket:[60668]" dev="sockfs" ino=60668 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 500.856113][T18098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.867282][ T28] audit: type=1326 audit(1776433769.274:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18263 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 500.926772][T18236] loop7: detected capacity change from 0 to 512 [ 500.931313][ T28] audit: type=1326 audit(1776433769.274:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18263 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 500.969472][T18236] EXT4-fs: Ignoring removed bh option [ 500.997538][T18236] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 501.016461][ T28] audit: type=1326 audit(1776433769.274:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18263 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 501.050264][T18236] EXT4-fs (loop7): 1 truncate cleaned up [ 501.054744][ T28] audit: type=1326 audit(1776433769.274:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18263 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 501.082976][T18236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.090576][ T28] audit: type=1326 audit(1776433769.274:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18263 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 501.129402][ T28] audit: type=1326 audit(1776433769.274:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18263 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 501.246191][ T28] audit: type=1326 audit(1776433769.285:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18263 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa3dac819 code=0x7ffc0000 [ 501.316520][T18294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=18294 comm=syz.2.4897 [ 501.345291][T18098] veth0_vlan: entered promiscuous mode [ 501.490211][T18098] veth1_vlan: entered promiscuous mode [ 502.243396][T18098] veth0_macvtap: entered promiscuous mode [ 502.257755][T18098] veth1_macvtap: entered promiscuous mode [ 502.341989][T18098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.364780][T18098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.525971][ T8467] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.541966][ T8467] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.558574][ T8467] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.593389][ T8467] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.747206][T18316] Invalid argument reading file caps for ./file0 [ 503.566502][T18328] loop3: detected capacity change from 0 to 512 [ 503.609652][T18328] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 503.621498][T17734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.669247][T18328] EXT4-fs (loop3): 1 truncate cleaned up [ 503.692035][T18335] loop5: detected capacity change from 0 to 512 [ 503.702876][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4902'. [ 503.716953][T18328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.748141][T18335] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 503.772472][T18345] vlan2: entered allmulticast mode [ 503.795506][T18345] syz_tun: entered allmulticast mode [ 503.802404][T18335] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4900: Invalid block bitmap block 0 in block_group 0 [ 503.856557][T18335] loop5: lost filesystem error report for type 5 error -117 [ 503.862915][T18335] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 503.880946][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 503.880975][ C1] EXT4-fs (loop5): initial error at time 1776433772: ext4_read_block_bitmap_nowait:483 [ 503.880994][ C1] EXT4-fs (loop5): last error at time 1776433772: ext4_read_block_bitmap_nowait:483 [ 503.917231][T18335] loop5: lost filesystem error report for type 5 error -117 [ 503.918970][T18350] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.934115][T18350] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.946353][T18335] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.4900: attempt to clear invalid blocks 983261 len 1 [ 503.975197][T18335] fserror_report: 5 callbacks suppressed [ 503.975217][T18335] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 504.000864][T18350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.019086][T18335] EXT4-fs error (device loop5): __ext4_get_inode_loc:4799: comm syz.5.4900: Invalid inode table block 0 in block_group 0 [ 504.033242][T18335] loop5: lost filesystem error report for type 5 error -117 [ 504.033417][T18335] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 504.057339][T18350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.072611][T18335] loop5: lost filesystem error report for type 5 error -117 [ 504.072742][T18335] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 504.102067][T18335] loop5: lost filesystem error report for type 5 error -117 [ 504.106574][T18335] EXT4-fs error (device loop5): __ext4_get_inode_loc:4799: comm syz.5.4900: Invalid inode table block 0 in block_group 0 [ 504.108169][ T8467] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.140341][T18335] loop5: lost filesystem error report for type 5 error -117 [ 504.140477][T18335] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 504.176444][ T8467] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.196059][T18335] loop5: lost filesystem error report for type 5 error -117 [ 504.196225][T18335] EXT4-fs error (device loop5): ext4_truncate:4604: inode #11: comm syz.5.4900: mark_inode_dirty error [ 504.216798][ T8467] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.236327][ T8467] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.261744][T18335] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 504.261876][T18335] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 504.286352][T18335] loop5: lost filesystem error report for type 5 error -117 [ 504.286603][T18335] EXT4-fs error (device loop5): __ext4_get_inode_loc:4799: comm syz.5.4900: Invalid inode table block 0 in block_group 0 [ 504.308744][T18335] loop5: lost filesystem error report for type 5 error -117 [ 504.308899][T18335] EXT4-fs (loop5): 1 truncate cleaned up [ 504.324475][T18335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.338940][T18356] netlink: 'syz.7.4903': attribute type 10 has an invalid length. [ 504.373157][T12875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.391337][T18356] bond0: (slave bond_slave_0): Releasing backup interface [ 504.468605][T18365] loop2: detected capacity change from 0 to 128 [ 504.512428][T18325] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 504.703670][T18325] EXT4-fs error (device loop5): __ext4_get_inode_loc:4799: comm syz.5.4900: Invalid inode table block 0 in block_group 0 [ 504.910616][T18325] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 505.525975][T18387] loop7: detected capacity change from 0 to 512 [ 505.547671][T18379] syz.2.4905: attempt to access beyond end of device [ 505.547671][T18379] loop2: rw=2049, sector=249, nr_sectors = 792 limit=128 [ 505.572699][T18387] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 505.616177][T18387] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4909: bad orphan inode 131083 [ 505.629519][T18387] loop7: lost filesystem error report for type 5 error -117 [ 505.630215][T18387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.666664][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4911'. [ 505.698477][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4911'. [ 505.725889][T16925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.740622][T17734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.769100][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4911'. [ 505.812258][T18407] loop7: detected capacity change from 0 to 128 [ 505.845794][T18407] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 505.989193][T18414] loop2: detected capacity change from 0 to 512 [ 506.043313][T18414] EXT4-fs: Ignoring removed oldalloc option [ 506.245807][T18414] EXT4-fs (loop2): 1 truncate cleaned up [ 506.255030][T18423] loop8: detected capacity change from 0 to 512 [ 506.296271][T18414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.353491][T18423] EXT4-fs: Ignoring removed oldalloc option [ 506.376136][T18423] EXT4-fs (loop8): 1 truncate cleaned up [ 506.394254][T13127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.413065][T18423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.451087][T18098] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.461134][T18431] loop7: detected capacity change from 0 to 8192 [ 506.472442][ T3304] ================================================================== [ 506.480995][ T3304] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 506.488659][ T3304] [ 506.491364][ T3304] write to 0xffff88810415864c of 4 bytes by task 3302 on cpu 1: [ 506.499248][ T3304] simple_unlink+0x54/0x80 [ 506.504712][ T3304] shmem_unlink+0x12d/0x140 [ 506.509312][ T3304] shmem_rename2+0x18e/0x310 [ 506.514064][ T3304] vfs_rename+0x97f/0xad0 [ 506.518652][ T3304] filename_renameat2+0x3b6/0x6e0 [ 506.524011][ T3304] __se_sys_rename+0x4a/0x1c0 [ 506.529353][ T3304] __x64_sys_rename+0x31/0x40 [ 506.534453][ T3304] x64_sys_call+0x2b3/0x3020 [ 506.539217][ T3304] do_syscall_64+0x12c/0x3b0 [ 506.543911][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.549889][ T3304] [ 506.552382][ T3304] read to 0xffff88810415864c of 4 bytes by task 3304 on cpu 0: [ 506.560176][ T3304] fill_mg_cmtime+0x5b/0x240 [ 506.565221][ T3304] generic_fillattr+0x24a/0x340 [ 506.570516][ T3304] shmem_getattr+0x181/0x200 [ 506.576049][ T3304] vfs_getattr_nosec+0x146/0x1e0 [ 506.582908][ T3304] vfs_getattr+0x48/0x60 [ 506.587402][ T3304] vfs_statx_path+0x28/0x140 [ 506.592248][ T3304] vfs_statx+0xc4/0x170 [ 506.596570][ T3304] vfs_fstatat+0x118/0x170 [ 506.601313][ T3304] __se_sys_newfstatat+0x55/0x3e0 [ 506.606323][ T3304] __x64_sys_newfstatat+0x55/0x70 [ 506.611598][ T3304] x64_sys_call+0x2c64/0x3020 [ 506.616267][ T3304] do_syscall_64+0x12c/0x3b0 [ 506.621152][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.627417][ T3304] [ 506.629913][ T3304] value changed: 0x0a15105e -> 0x0a1d2d46 [ 506.636130][ T3304] [ 506.638618][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 506.645104][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 506.656226][ T3304] Tainted: [W]=WARN [ 506.660185][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 506.670720][ T3304] ==================================================================