last executing test programs: 51.513804669s ago: executing program 4 (id=43): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000d14200027bd7000fddbdf250800030004e6ffff0700030000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x85, 0xffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0xcb47, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0x6, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x8, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x10000, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0x9, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x10, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0xffffffff, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x6, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x5, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x6, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x40036, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x0, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x72, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x4, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 51.166510479s ago: executing program 4 (id=48): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x9, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x2, &(0x7f0000000880)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x7, 0x0, r0, 0x0, 0x0, 0x16}, &(0x7f0000000ac0)={0x0, 0x0, 0x89000000, 0x8, 0x3, r0, 0x0, 0x0, 0x2, 0x0, 0x4}]) 50.940329153s ago: executing program 4 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010027900a8eeeb1e82b47000000000000000c0002"], 0x24}}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x2, 0x6, @local}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x48, 0x301, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0xffffffff}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") setresuid(0x0, 0xee01, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='oZx.mirred\x00']) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0x80000080, 0x4) socket$nl_route(0x10, 0x3, 0x0) 50.704868247s ago: executing program 4 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40fff0001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 50.571346785s ago: executing program 4 (id=67): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r1, 0x5608, 0x3f) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) stat(&(0x7f0000000300)='./file0/bus\x00', &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x400}}, 0x0, 0x3, 0x0, 0x0, 0xc0}, 0x9c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r5, 0x263}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f0b"], 0x7) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, &(0x7f00000000c0)="ad76e6c1227d5b7bc1dce0fd50c5667980ee4354b44102269cddb2627634888da64fde1422a2cc55486530ab64e0b081ae15bf9de2d6381336c6b4bfe4c10eef61b372d3fc39eb5ce679091e4fc1639ece97d7f6a811544b7d97537a5ea9d7e3ffafaff7", &(0x7f0000000140)=""/221}, 0x20) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r6, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6gre0\x00', r7, 0x29, 0x7f, 0x3, 0x6, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x40, 0xf2a, 0x8}}) 50.416641744s ago: executing program 4 (id=71): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x25b4e59c81b60c2e, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x3}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f00004d7000/0x3000)=nil, 0x3000, 0x5) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x2000800) 49.130887348s ago: executing program 3 (id=100): r0 = gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) openat$cgroup_subtree(r1, &(0x7f0000003000), 0x201, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0xfc, 0x0, 0x0, 0x0, "3fd31341e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(r4, 0x0, 0x44800) tkill(r0, 0x13) 46.068904588s ago: executing program 3 (id=137): syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ee0000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 45.232681146s ago: executing program 3 (id=146): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, 0x0, 0x25, 0x2, @void}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 45.120010833s ago: executing program 3 (id=150): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x20440, &(0x7f00000000c0), 0x5, 0x597, &(0x7f0000001a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x208143) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = io_uring_setup(0x2f82, &(0x7f0000000200)={0x0, 0x446c5, 0x0, 0xfffffffc}) close(r6) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRESOCT], 0x10b8}, 0x110) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2, 0x80805, 0x0) accept4$nfc_llcp(r7, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000080)={r10, 0x5, 0xff}, 0x8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000002000002000000010000000000000000000000fe0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000003000000000000200200000000000000fffffffffffffffffeffffff000000000000000300000000eb592f6c5f4b916cca08529646059f8d240ba1f091248258593cbc5c06bfb4a8f2df826e5fe54a28044670da8f765acb2f5cb78b74a2aa42488b1973ee2b9f3b9b4992aa1498bbdaa4e7e1d0e3fb7ab336772d19e61a173e11"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) 44.295677492s ago: executing program 3 (id=154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c7dcf27ffcf354f6826350739656564b696cc7e58d847b6c34cc81bb7e078b60579925c04647b5238e8b515e5ef95713c5129553f0c8d64ff911f04c772f689ad38496ced753b69ff6d7"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000480), &(0x7f0000000380)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r1}, 0x14) syz_emit_ethernet(0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60010100006411fffe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200649078020000000100000001000000628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74882e8a741e7632033c970114f245aed68fb3d9fd3efe8e4ea8b5ec7448ddd6a3215990e1b896120966af96b22cf049f067242e6ba9cf813c41c104d48ee0fbff024433e8165f757748707c"], 0x0) 44.032753187s ago: executing program 3 (id=160): openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_open_dev$loop(0x0, 0xffff, 0x14f600) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2064) (fail_nth: 14) 44.032448737s ago: executing program 32 (id=160): openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_open_dev$loop(0x0, 0xffff, 0x14f600) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2064) (fail_nth: 14) 35.364829353s ago: executing program 33 (id=71): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x25b4e59c81b60c2e, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x3}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f00004d7000/0x3000)=nil, 0x3000, 0x5) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x2000800) 20.161575652s ago: executing program 2 (id=571): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0xcb47, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0x6, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x8, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x10000, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0x9, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x10, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0xffffffff, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x6, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x5, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x6, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x40036, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x0, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x72, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x4, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 20.102765696s ago: executing program 2 (id=574): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)="bf", 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0xc}}, {{0x0, 0x600, &(0x7f0000000640)=[{&(0x7f0000000280)='s', 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x10}}], 0x2, 0x4044044) 20.061505958s ago: executing program 2 (id=575): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chmod(0x0, 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000001c0)=0x83a, 0x4) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) io_uring_enter(r3, 0x4c60, 0xf41, 0x65, &(0x7f0000000080)={[0x6]}, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0xc8d0, &(0x7f0000000200)=ANY=[], 0x1, 0x31d, &(0x7f0000000580)="$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") r4 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x7}}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) close(r2) capset(0x0, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0xfffffff9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000200), 0x100) 19.357425909s ago: executing program 2 (id=595): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3008010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") r1 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000002060102000000000000000000000800140007800800124000060000080013400000140011000300686173683a69702c6d61726b00000000050005000a00000005000400000000000900020073ff7a31000000000500010007"], 0x60}}, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000d40)=ANY=[], 0x68}, 0x1, 0x7}, 0x0) connect$nfc_raw(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000b020000000000000001000005000000000000000001"], 0x0, 0x3e, 0x0, 0xa}, 0x28) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x78e}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x4000000000001}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mq_timedsend(0xffffffffffffffff, &(0x7f00000008c0)="8e2108a72fd0a3680e9bbd2d36d75cce61040f974beab26141de78fdb04c4f555cdd0ec8be26a20b422cff88c7545c4500540d9eb34a6f1e92f187817818c8325391fcd8c0a260f62235d0588768800ae78b248a7d6adffe4970a6292c1ca10016c6dc7b88fcb28a48a8114f144567c404a754544d02ae66027e49a6a00243ea5dcc2dc20b460ab1b1bc25aee2775521811370ba2d9cc05336d40bc270b760fa1a584f90a280fab3d079742207689ba74bc9c40dfde07113cb78bf2c0dee119d6955147e23b87e56e22afbf22a", 0xcd, 0x5, 0x0) unshare(0x22020400) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)) pipe2$9p(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') read$watch_queue(r5, 0x0, 0x0) connect$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0xfffd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x1}, 0xe) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0xfffe, 0x10000, @local, 0x7}, 0x1c) 19.025025828s ago: executing program 2 (id=603): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 18.272855582s ago: executing program 6 (id=620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xffffd000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c"], 0x64}}, 0x0) fcntl$dupfd(r1, 0x0, r0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x20042, 0xfe) write$tcp_mem(r6, &(0x7f0000000000)={0x8000000000000001, 0x20, 0x6463, 0x20, 0x1}, 0x48) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r7, &(0x7f0000000100)={0xa, 0x4}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd3080014060000000000000000000000ffff0a010100fe8000000000000000000000000000aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="503b020000907800"], 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000000)={[{@auto_da_alloc}, {@dax_always}, {@bh}, {@noblock_validity}]}, 0x4, 0x480, &(0x7f0000001040)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") 18.247129094s ago: executing program 2 (id=621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x32}, {@in6=@remote, 0x4d5, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 18.214162745s ago: executing program 34 (id=621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x32}, {@in6=@remote, 0x4d5, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 18.079590973s ago: executing program 6 (id=625): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xd, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x120, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fd\x00') getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) 17.853827526s ago: executing program 6 (id=627): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f030000003300000400140035000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 17.762600552s ago: executing program 6 (id=630): r0 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x2c4b032, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x121042, 0x9a) unlink(&(0x7f0000000100)='./file0/file1\x00') r2 = socket$netlink(0x10, 0x3, 0xc) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001fc0)=ANY=[@ANYBLOB="06000000000000000300000000000000020000000300000000000000000000004356f996c5aac251da133720038535e3561d179e24b2a676067d18fb0a9a5c0ff75d158932dd056a50b803160bb82a337c1b8796566f5f6b6648263745355c31e830997ccec025d39708000000000000007ecefffc0c2de0d74f309f10025ec6252a644aedd2ea756acd76fd2acd5daf0d015691b8afb1057b"]) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ptrace(0x10, 0x0) tkill(0x0, 0xe) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) lstat(&(0x7f0000001f80)='./file0/file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/24, 0x18}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001780)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000001880)=0xe8) lstat(&(0x7f00000018c0)='./file0/file1\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f0000001900)={0x0, 0x0}) statx(r1, &(0x7f0000001a00)='./file1\x00', 0x6000, 0x100, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file1/file0\x00'}) r12 = syz_clone(0x6000, &(0x7f0000001b80)="19df983d78f4f43cd57fd03caad75616a096f6e12d9309d6912b6b8308c64f230e541f4d06f72c70d502c32b4fefe8a2752faf0854e1161e7bff43bc0a211c87b488b80c4fde95e431399f0f7d3da4dca57a468351eb52843f077a3ec3ad7b7477d123268c130d5f6375e22742bf2565e6ef614056d3990950a1e847c6dc68327c65d22e46fdcb86a154017286ededaa705529163dc3f431c69e907158c0dd5e917dace53ae79e755a2ebc584bd6f6eeffb68a3bc51cbcf9300e27bb7554abecfba8e89c7ba363776d3ba59c0973c7d60f9c2d14fece14e730c3", 0xda, &(0x7f0000001c80), &(0x7f0000001cc0), &(0x7f0000001d00)="de09cae2e1a34778aaa51921a23c49a536ab85a0547d1cfa77299cea0fdce27103a06c1cf556da326e60891c0b79daf3e4794dc277f824665777bddfdb02e54e415fa645b59206f5f2c1eb063fc668b872c0a14f236fe2efaef7fc2483b0f390c997f633c71517a6551824b6ac8ae29cca09721dba1947a2b09103498267531f5883f2f5b3191233b3eb49da7334140e02d039642c93096c6167b8f9cb4dd75f044d2b5401ec9e335c2be26424dd9c9f80c3100fb1ec192fe6ba3c41a6af94646efc19f489002278efa1df35872eac2e2c62d08885b212c45fb931fea766e512f5dbc9700145f35bf0280bf7a8736eaf") r13 = getuid() fcntl$getownex(r0, 0x10, &(0x7f0000001e00)={0x0, 0x0}) r15 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r16) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000380)="5507970fba4af2a8600d907d2d247027e76c11844e9fbe5103b5c85fdd1e06fc61a744981b0c914e4845febc32437486e1579718d4969d8fe7bff49662c8fbe2f823d4512d99347b67a299a96e6bb5e3774787c7525909452cbbc3c59ac01ef40c97f629a2360cbb48273815599e28871fc9ae507f8e69b01295c097bbfe2e35375d44e1e72b5d", 0x87}, {&(0x7f0000000440)="ccb94c4be5ad869d994c6d9a7171f14f7bab43dd1999145e04d6e6d116826d6618b7e34a2a5f16b03bde61fce3a249214e8b1755c0e49c0881a5515a128b596ce37e697b4e6f6eb6933ce4b0d35a71c4393a6ea07dcae2837c48ac651baf148c17d72c247d805b565e979e2c034525144a26e80905f2ec6c539e", 0x7a}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, r16}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0xd0, 0x40844}}], 0x1, 0x0) 17.714861555s ago: executing program 6 (id=634): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80820}, 0x80) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 17.384760244s ago: executing program 6 (id=639): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000b82000/0x1000)=nil, 0x1000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x336e, &(0x7f0000000200)={0x0, 0xac50, 0x4, 0x0, 0x36b}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8946, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r2, 0x10000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x2, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x4001}, 0x20040090) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f00000a4000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000874000/0x9000)=nil, &(0x7f0000cb0000/0x3000)=nil, &(0x7f0000205000/0x2000)=nil, &(0x7f00000ce000/0x3000)=nil, &(0x7f0000cee000/0x1000)=nil, &(0x7f0000292000/0x2000)=nil, &(0x7f00005d5000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f0000000140)="7bcd3b90db3d5599e7625f68b83063219bafef2ac84e8ad10cf6c1d9a8462a07884052f9826b3acfb12b83f818b32ae466bd6020f8ce63265e06f3413a76da3f8c314cd6fa6d34214918b292ee6591e967197c2a434d0d81eb6841c72f08f92303eedc54e8290f9c98b4b60922", 0x6d, r6}, 0x68) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x84, 0x849, 0x0, 0x6, 0x0, 0xa0, 0x0, 0x0, 0xd}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) io_setup(0x6, 0x0) 17.384297304s ago: executing program 35 (id=639): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000b82000/0x1000)=nil, 0x1000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x336e, &(0x7f0000000200)={0x0, 0xac50, 0x4, 0x0, 0x36b}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8946, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r2, 0x10000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x2, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x4001}, 0x20040090) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f00000a4000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000874000/0x9000)=nil, &(0x7f0000cb0000/0x3000)=nil, &(0x7f0000205000/0x2000)=nil, &(0x7f00000ce000/0x3000)=nil, &(0x7f0000cee000/0x1000)=nil, &(0x7f0000292000/0x2000)=nil, &(0x7f00005d5000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f0000000140)="7bcd3b90db3d5599e7625f68b83063219bafef2ac84e8ad10cf6c1d9a8462a07884052f9826b3acfb12b83f818b32ae466bd6020f8ce63265e06f3413a76da3f8c314cd6fa6d34214918b292ee6591e967197c2a434d0d81eb6841c72f08f92303eedc54e8290f9c98b4b60922", 0x6d, r6}, 0x68) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x84, 0x849, 0x0, 0x6, 0x0, 0xa0, 0x0, 0x0, 0xd}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) io_setup(0x6, 0x0) 2.779665707s ago: executing program 5 (id=1036): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) sendmsg$can_raw(r1, 0x0, 0x8005) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x1) r2 = io_uring_setup(0x1133, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x1, 0x119}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x11, &(0x7f00000002c0), 0x2) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, 0x10}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) listen(r0, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c", 0x6) getsockopt$inet_tcp_buf(r7, 0x6, 0x21, 0x0, &(0x7f0000000580)) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001600)=ANY=[], 0x2c}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x100000000000000) 2.512184283s ago: executing program 5 (id=1037): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 2.3926303s ago: executing program 5 (id=1041): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) syz_clone(0x24100000, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) 1.502947592s ago: executing program 5 (id=1062): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x800, &(0x7f0000001dc0)={0x3, 0x72, 0x20000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x25dfdbff, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x10}, @TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x7f, 0x8, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x894}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x840) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r7, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @local, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x10, 0x1, 0x24, 0x9d}}], 0x10}, 0x48840) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00&\x00', @ANYRES16=r6, @ANYBLOB="318300000000000000001900000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) poll(0x0, 0x0, 0xb5) syz_emit_ethernet(0x0, 0x0, 0x0) close(0x3) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1ca59e85266c02733b5ff25920971555a29cf352287c5a8e2c85177ef22767d3183863c0299f7997fd9f54149c3e13c27425ff52c134be21672f84703d344c60cf4e46d78c38c0de15a1be038fa85dcc31c136ff12e67ebc9d29ea1c9d10aa63b85152d5be087f5f3d67", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 1.37285663s ago: executing program 7 (id=1067): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060c40928505007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x20000010) 1.265304836s ago: executing program 7 (id=1070): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$isdn(0x22, 0x2, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) epoll_create(0x1000) r2 = socket$isdn(0x22, 0x2, 0x2) dup3(r2, r1, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) mprotect(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x2000006) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0xe, 0x6}]}) timer_create(0x7, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r6, 0x0, 0x7c, 0xe) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) write(r4, 0x0, 0x0) 960.372824ms ago: executing program 1 (id=1075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01037ffffffe00000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000000000000000000000140001"], 0xa8}}, 0x0) 912.901197ms ago: executing program 1 (id=1077): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$eJzs3E1rE0EYwPGnadOXlDY5iKAgPuhFL0sbP0GQFsSAUhtRD8LUbjRkTUo2RiJie/Pq5ygevQnWL9CLN+/ipQiClx6kK90Xsy3Bvth20+b/g7CTnXl2Zje74dmFnY0H755Xy65VNk1JjaqkRFZkUyS3XQoNhMuUXx6WuBW5Pv7r66V7Dx/dLhSLM3Oqs4X5G3lVnbz86eXr91c+N8fvf5j8OCLruccbP/Pf1s+vX9jYmo+2Xm+q0YV6vWkWHFsXK27VUr3r2Ma1tVJz7caO+rJTX1pqq6ktTmSWGrbrqqm1tWq3tVnXZqOt5qmp1NSyLJ3ISL8ZPHBEaXVuzhSOZTBIwli3lY1GwQx2rSytnsSgAABAb0kq/39WcbXiam2v/D8lR5P/j57I0Txt/Px/q2vSiLMhvX0DUDCZ8PrdifwfAAAAAAAAAAAAAAAAAAAAAIDTYNPzsp7nZaNl9BkJ35mJvic9ThyPQ/z+AwkOF0cs9uLeqIjztlVqlYJlUF8oS0UcsWUqLfLbPx9CQXn2VnFmSn05WXOWw3j/JcGRKD6S6x4/HcRrLH65VUpLJt5/XrJyrnt8fld8WkRapWG5djUWb0lWvjyRujiy6J/Xnfg306o37xR39T/mtwMAAAAA4Cyw9K/czvvfYDZJy9Jo2pBd9cHKzvMBye7xfEBlbVg68UNycSi5/QYAAAAAoJ+47VdV4zh2g8LBCv146KxwFuV/NvY8b3m70f93mhKRhPb0h4j0wAGPFdJHccF+fxFsZD+Nk/pHAgAAAHBcOkl/0iMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB/7XfysKj9YeYei3U3mMxeAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3hTwAAAP//Q1YX+Q==") timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0x4, 0x2, &(0x7f0000000200)={r2, r3+60000000}, &(0x7f00000002c0)=0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x90) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 704.083909ms ago: executing program 5 (id=1082): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) bind$xdp(r0, &(0x7f0000000280)={0x2c, 0x3, 0x0, 0x7}, 0x10) 505.198351ms ago: executing program 5 (id=1088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000001010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f"], 0xb0}}, 0x80) 503.437141ms ago: executing program 1 (id=1090): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 481.014892ms ago: executing program 8 (id=1091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) 480.796822ms ago: executing program 0 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8603ff73", @ANYRES16=r1, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x2000040) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x5, 0x143, 0x8, 0xffffffffffffffff, 0x80000001}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000000000ffffac1414bbff020000000000000000000000000001910090780000000060256b5400000000ff010000000000000000000000000001fe8000"/102], 0x0) 431.971105ms ago: executing program 8 (id=1093): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x2004a800}, 0x24000000) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5a476f3fcb0229da}, 0xc045) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 423.426175ms ago: executing program 1 (id=1094): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x2004a800}, 0x24000000) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5a476f3fcb0229da}, 0xc045) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (fail_nth: 1) 380.912778ms ago: executing program 0 (id=1095): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e8, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x7a, 0x8, "999f6bca274ef622042d878ee6dcc191a3a318164e917bfd7d356aa198dd8319f20f18143e3ac04844f69f78193b2a8408975cab4eba3a5c470b1a9ee7270dba05af0bda3949f4fd2eccc44cb89de6c427a95fd3308ee59958d0dc5566411ba256e1c099c79e528c1f0eebc8de433090e2e5af86b8a5"}, @NFTA_OBJ_USERDATA={0x92, 0x8, "324b0665a6f01258921005976d083ce6c33c9c3850ebf6651856233032cdca7e51ab2e0d737812e808cd423dc97e5ffd020e6b7072d8c38638bdd1200f8c9c254b11c54d3f5a4dcdb0b55564bbfd93ee68b62ec152ece1b7ce10e694c33e550969f428a36b6e91fd1fdab8df4dc4445328078b5e94c0124da420d9882295428886d15d589ae7e23837f83467e554"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xb7, 0x8, "e72c47f669d49a76c26ec4041b2fbd4cc4db98bea02c00ee0c14d724df54079ece6da1b431f7db0f9091098e7e0e8c291bd6003f1d08255f1f4117ab7d138ba9c3d05a818e2df927f98507808db8c347935a4c6d8101ca2aa5d5ec7516fef8f9f6b9d568b88911324e810b60d10157a6ec48eb25d0aeee6ef20e50b975c365b0cebc6e4ce931857097692718f7658bac281c8938c1795608d2065e085ccf612d6fbaab0459c4fc3aba38fb051386eb406f11a0"}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000055}, 0x48000) 369.912198ms ago: executing program 8 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000300000000000000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000200850000007000000095"], &(0x7f0000000080)='GPL\x00', 0xea2, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x42500, 0x0) r3 = dup(r2) ioctl$GIO_UNISCRNMAP(r3, 0x43403d0e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002a40)=[{0x0}, {0x0}, {&(0x7f0000002580)=""/228, 0xe4}, {&(0x7f0000002680)=""/222, 0xde}, {0x0}, {&(0x7f0000002880)=""/135, 0x87}], 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) 308.715052ms ago: executing program 7 (id=1097): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f0000000300)=@canfd={{0x0, 0x0, 0x1}, 0x25, 0x3, 0x0, 0x0, "60d66442c383b99ff8958c81f27a361bbd10d1bf5b654e6534620a6356df58324595c1a2161da843ee2fdf1707b95fa88dc9627cd4d9e73e95020997942fbf64"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000095) sendmsg$can_raw(r1, 0x0, 0x8005) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x1) r2 = io_uring_setup(0x1133, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x1, 0x119}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x11, &(0x7f00000002c0), 0x2) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, 0x10}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) listen(r0, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c", 0x6) getsockopt$inet_tcp_buf(r7, 0x6, 0x21, 0x0, &(0x7f0000000580)) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001600)=ANY=[], 0x2c}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x100000000000000) 308.109722ms ago: executing program 1 (id=1098): fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x20, 0x700, 0x7d8, 0x4, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x65, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) socket(0x28, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0x50) r4 = socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x6, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @exit, @call={0x85, 0x0, 0x0, 0xca}], &(0x7f0000000380)='GPL\x00', 0x0, 0x5f, &(0x7f00000003c0)=""/95, 0x41000, 0x1b, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x4189, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r3, r6, r4, r3, r7, r3], 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 304.928562ms ago: executing program 1 (id=1099): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003500)={&(0x7f00000033c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf251b000001006e657464659324696d0000000f0002006e657464657600bcff0b00bf6fad000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x5, [0x10001, 0x2], 0xa}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0xe, &(0x7f0000000040), 0x3b) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x2004a800}, 0x24000000) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5a476f3fcb0229da}, 0xc045) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) 283.561444ms ago: executing program 0 (id=1100): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c0000000000000001000000020000a4", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c", @ANYRES32=0x0], 0xa0}, 0x4004891) 271.072594ms ago: executing program 8 (id=1101): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060c40928505007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaee0c7a6ec08123d000300080001070400c46b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x20000010) 270.652864ms ago: executing program 7 (id=1102): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 213.596028ms ago: executing program 7 (id=1103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) 213.208948ms ago: executing program 0 (id=1104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 212.768328ms ago: executing program 0 (id=1105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8603ff73", @ANYRES16=r1, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x2000040) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x3, 0x174, 0x1, @remote, @mcast1, 0x1, 0x8000, 0x7903, 0x2}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000000000ffffac1414bbff020000000000000000000000000001910090780000000060256b5400000000ff010000000000000000000000000001fe8000"/102], 0x0) 144.886591ms ago: executing program 7 (id=1106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000002000000000000000001120088be"], 0xfdef) 144.621442ms ago: executing program 0 (id=1107): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) write$P9_RLERROR(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d0000000721b9500cb2cc7b01"], 0xd) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8f, 0x0, 0x200}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x24, 0x1a, 0x101, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x800}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) (async) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x77359400}}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003011000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140018d414000111f7000000010000000a"], 0x14}}, 0x4014) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0xde3184a99775f348) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r1) pipe(&(0x7f0000000080)) 114.177423ms ago: executing program 8 (id=1108): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000001b80)={[{@dioread_lock}, {@errors_remount}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x453, &(0x7f0000000640)="$eJzs3MtvG8UfAPDvrpP0118fMVV59AEECqLikTRpKZXgAgKJA0hIcCjH4KRVqdugJghaVRAQKkdUiTviiNS/gBNcEHBC4gp3hFShXlp6Mlp7nTiu7SQmjlP8+UjbzuzOdubr2bFnd2oHMLDGsj+SiJ0R8VtEjNayKwuM1f66deNy6e8bl0tJVCpv/pVUy928cblUL1o/b0c9U4xIP0viQIt65y9eOjtdLs9eyPMTC+fem5i/eOmZM+emT8+enj0/deLEsaOTzx2fenZD4sziurn/o7mD+159++rrpZNX3/npWlILrZAXKXX1D6dtj4x1Ou3xSqWr6raqXQ3pZGg5ucppldGetYi1yC7+rLuGq+N/NAqx3Hmj8cqnfW0c0FMjnQ8vVoD/sGw2Dwyi+gd9dh9f3zZh2rFlXH+xdgOUxX0r32pHhpZu7Yeb7m830lhEnFy8/VW2RdPzFACAXvgum/883Wr+l8Z9DeV252soxYi4JyL2RMTxiNgbEfdGVMveHxEPrLP+5kWSO+c/6QfXuopsbbL53wv52tbK+d/Swk6xkOd2VeMfTk6dKc8eyV+TwzG8LctPdqjj+5d//aLdscb5X7Zl9dfngnk7/hzatvKcmemF6X8Tc6Prn0TsH2oVf7K0EpBExL6I2N9lHWee/OZgu2Orx99bla8jnqj1/2I0xV+XdF6fnPhflGePTNSvijv9/MuVN9rV3+/4s/6PWGzZ/7li0rheO7/+Oq78/nnbe5pur/+R5K0V+z6cXli4MBkxkrxWa3Tj/qmmclPL5bP4Dx+64/qvrgnvieVX4kBEZBfxgxHxUEQ8nLf9kYh4NCIOdYj/x5cee7f7+Hsri38mIm7nzwNW7//lxEg072mdKJz94dsVlRbXE3/W/8eqqcP5nrW8/63arufTLq9mAAAAuPukEbEzknR8KZ2m4+O1/8O/N/6flufmF546Nff++ZnadwSKMZzWn3SNNjwPncxv6+v5qab80fy58ZeF7dX8eGmuPNPv4GHA7Wgz/jN/FPrdOqDnhvrdAKBvjH8YXMY/DCzDHwZYizeA7f1oB7D5quO/6aeaPu5TW4DN1fT5b9kPBogHADC4jH8YXMY/DKT57dH5y/t3e2JHbIlm9CCxe40/v9CjRKRb4UWQ6FWi3+9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG+OfAAAA///XoOJQ") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0xa8010000, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 8 (id=1109): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800000000000075a003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001009364703a"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x20c, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf486}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd9}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd2}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf7a}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x65}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000081}, 0x41) r5 = dup(r2) creat(&(0x7f00000011c0)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trins=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',afid=0x0000000000000008,k']) 0s ago: executing program 8 (id=1110): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r0}]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/mdstat\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000001440), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000004100)=@raw={'raw\x00', 0x8, 0x3, 0x12f0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1220, 0xffffffff, 0xffffffff, 0x1220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0x0, 0x62, 0xff], [0x0, 0x0, 0x0, 0x400000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x2c, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x130, 0x1}}}, {{@ipv6={@remote, @remote, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'sit0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1150, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0xfffffffe, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x204}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0xe060, 0x1, 0x9, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1350) kernel console output (not intermixed with test programs): comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bdefaeb9 code=0x7ffc0000 [ 38.506374][ T29] audit: type=1326 audit(1769780619.059:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bdefaeb9 code=0x7ffc0000 [ 38.528990][ T3942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.564251][ T3942] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.592886][ T944] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.600041][ T944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.662522][ T944] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.669619][ T944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.774141][ T3942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.917735][ T3942] veth0_vlan: entered promiscuous mode [ 38.927095][ T3942] veth1_vlan: entered promiscuous mode [ 38.945688][ T3942] veth0_macvtap: entered promiscuous mode [ 38.953731][ T3942] veth1_macvtap: entered promiscuous mode [ 38.965433][ T3942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.977324][ T3942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.989260][ T3448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.011880][ T3448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.020984][ T3448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.029682][ T3448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.917594][ T4186] Cannot find add_set index 0 as target [ 40.199781][ T4194] netlink: 24 bytes leftover after parsing attributes in process `syz.5.217'. [ 40.212660][ T4194] syzkaller0: entered promiscuous mode [ 40.218129][ T4194] syzkaller0: entered allmulticast mode [ 40.296864][ T4196] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 40.327379][ T4196] loop5: detected capacity change from 0 to 128 [ 40.362234][ T4196] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.376488][ T4196] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.405837][ T4196] EXT4-fs (loop5): shut down requested (0) [ 40.583833][ T3942] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.646360][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.653555][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.728231][ T4207] netlink: 64 bytes leftover after parsing attributes in process `syz.5.222'. [ 40.800768][ T4211] netlink: 'syz.5.223': attribute type 2 has an invalid length. [ 40.808502][ T4211] netlink: 100 bytes leftover after parsing attributes in process `syz.5.223'. [ 41.053887][ T4215] SELinux: Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped). [ 41.105722][ T4220] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 41.163107][ T4222] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 41.209148][ T4224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.228'. [ 41.223028][ T4224] syzkaller0: entered promiscuous mode [ 41.228539][ T4224] syzkaller0: entered allmulticast mode [ 41.416545][ T4135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 41.493244][ T4232] FAULT_INJECTION: forcing a failure. [ 41.493244][ T4232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.506370][ T4232] CPU: 0 UID: 0 PID: 4232 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.506398][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.506410][ T4232] Call Trace: [ 41.506418][ T4232] [ 41.506479][ T4232] __dump_stack+0x1d/0x30 [ 41.506504][ T4232] dump_stack_lvl+0x95/0xd0 [ 41.506523][ T4232] dump_stack+0x15/0x1b [ 41.506593][ T4232] should_fail_ex+0x263/0x280 [ 41.506708][ T4232] should_fail+0xb/0x20 [ 41.506733][ T4232] should_fail_usercopy+0x1a/0x20 [ 41.506798][ T4232] _copy_from_user+0x1c/0xb0 [ 41.506823][ T4232] ____sys_sendmsg+0x1e2/0x600 [ 41.506847][ T4232] ___sys_sendmsg+0x195/0x1e0 [ 41.506921][ T4232] __sys_sendmmsg+0x185/0x320 [ 41.506965][ T4232] __x64_sys_sendmmsg+0x57/0x70 [ 41.506992][ T4232] x64_sys_call+0x1e28/0x3000 [ 41.507036][ T4232] do_syscall_64+0xc0/0x2a0 [ 41.507141][ T4232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.507162][ T4232] RIP: 0033:0x7fe9b35faeb9 [ 41.507234][ T4232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.507289][ T4232] RSP: 002b:00007fe9b2057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 41.507309][ T4232] RAX: ffffffffffffffda RBX: 00007fe9b3875fa0 RCX: 00007fe9b35faeb9 [ 41.507322][ T4232] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000004 [ 41.507334][ T4232] RBP: 00007fe9b2057090 R08: 0000000000000000 R09: 0000000000000000 [ 41.507346][ T4232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.507357][ T4232] R13: 00007fe9b3876038 R14: 00007fe9b3875fa0 R15: 00007ffdc4b376d8 [ 41.507376][ T4232] [ 41.729661][ T4236] tipc: Started in network mode [ 41.734865][ T4236] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 41.743781][ T4236] tipc: Enabling of bearer rejected, failed to enable media [ 41.926730][ T4267] loop2: detected capacity change from 0 to 2048 [ 42.002668][ T4267] loop2: p1 < > p4 [ 42.007706][ T4267] loop2: p4 start 268435456 is beyond EOD, truncated [ 42.068015][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.097663][ T4278] FAULT_INJECTION: forcing a failure. [ 42.097663][ T4278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.110934][ T4278] CPU: 0 UID: 0 PID: 4278 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.110963][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.110994][ T4278] Call Trace: [ 42.111002][ T4278] [ 42.111011][ T4278] __dump_stack+0x1d/0x30 [ 42.111037][ T4278] dump_stack_lvl+0x95/0xd0 [ 42.111062][ T4278] dump_stack+0x15/0x1b [ 42.111092][ T4278] should_fail_ex+0x263/0x280 [ 42.111120][ T4278] should_fail+0xb/0x20 [ 42.111145][ T4278] should_fail_usercopy+0x1a/0x20 [ 42.111176][ T4278] _copy_to_iter+0x251/0xea0 [ 42.111259][ T4278] ? ptype_seq_stop+0xe/0x20 [ 42.111283][ T4278] seq_read_iter+0x776/0x940 [ 42.111317][ T4278] seq_read+0x279/0x2c0 [ 42.111420][ T4278] ? __pfx_seq_read+0x10/0x10 [ 42.111452][ T4278] proc_reg_read+0x128/0x1c0 [ 42.111510][ T4278] ? __pfx_proc_reg_read+0x10/0x10 [ 42.111551][ T4278] vfs_readv+0x432/0x6e0 [ 42.111635][ T4278] __x64_sys_preadv+0xfd/0x1c0 [ 42.111662][ T4278] x64_sys_call+0x2805/0x3000 [ 42.111689][ T4278] do_syscall_64+0xc0/0x2a0 [ 42.111718][ T4278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.111797][ T4278] RIP: 0033:0x7f60bdefaeb9 [ 42.111815][ T4278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.111835][ T4278] RSP: 002b:00007f60bc957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 42.111881][ T4278] RAX: ffffffffffffffda RBX: 00007f60be175fa0 RCX: 00007f60bdefaeb9 [ 42.111895][ T4278] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000005 [ 42.111910][ T4278] RBP: 00007f60bc957090 R08: 0000000000000000 R09: 0000000000000000 [ 42.111925][ T4278] R10: 0000000000000070 R11: 0000000000000246 R12: 0000000000000001 [ 42.111939][ T4278] R13: 00007f60be176038 R14: 00007f60be175fa0 R15: 00007ffe390ee518 [ 42.111962][ T4278] [ 42.361144][ T4286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.241'. [ 42.361844][ T4281] netlink: 14 bytes leftover after parsing attributes in process `syz.2.238'. [ 42.424909][ T4287] loop1: detected capacity change from 0 to 8192 [ 42.429785][ T4289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'. [ 42.480041][ T4293] netlink: 'syz.2.243': attribute type 29 has an invalid length. [ 42.492152][ T3303] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 42.492513][ T4293] netlink: 'syz.2.243': attribute type 29 has an invalid length. [ 42.497359][ T3303] loop1: partition table partially beyond EOD, truncated [ 42.497434][ T3303] loop1: p1 start 100663296 is beyond EOD, truncated [ 42.518925][ T3303] loop1: p2 size 134217732 extends beyond EOD, truncated [ 42.551937][ T3303] loop1: p4 size 14876672 extends beyond EOD, truncated [ 42.571182][ T3303] loop1: p5 size 134217732 extends beyond EOD, truncated [ 42.586761][ T3303] loop1: p6 size 14876672 extends beyond EOD, truncated [ 42.604239][ T4287] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 42.609537][ T4287] loop1: partition table partially beyond EOD, truncated [ 42.624174][ T4287] loop1: p1 start 100663296 is beyond EOD, truncated [ 42.631127][ T4287] loop1: p2 size 134217732 extends beyond EOD, truncated [ 42.662771][ T4287] loop1: p4 size 14876672 extends beyond EOD, truncated [ 42.670532][ T4287] loop1: p5 size 134217732 extends beyond EOD, truncated [ 42.678522][ T4287] loop1: p6 size 14876672 extends beyond EOD, truncated [ 42.866516][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 42.885733][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 42.886504][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 42.896771][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 42.906643][ T4309] udevd[4309]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 42.962537][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 42.962617][ T29] audit: type=1400 audit(1769780623.599:1863): avc: denied { create } for pid=4316 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 43.125210][ T29] audit: type=1400 audit(1769780623.759:1864): avc: denied { getopt } for pid=4328 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.362574][ T29] audit: type=1326 audit(1769780633.002:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b35faeb9 code=0x7ffc0000 [ 43.363665][ T4341] FAULT_INJECTION: forcing a failure. [ 43.363665][ T4341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.399353][ T4341] CPU: 0 UID: 0 PID: 4341 Comm: syz.0.259 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.399385][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.399398][ T4341] Call Trace: [ 43.399403][ T4341] [ 43.399410][ T4341] __dump_stack+0x1d/0x30 [ 43.399490][ T4341] dump_stack_lvl+0x95/0xd0 [ 43.399511][ T4341] dump_stack+0x15/0x1b [ 43.399553][ T4341] should_fail_ex+0x263/0x280 [ 43.399587][ T4341] should_fail+0xb/0x20 [ 43.399618][ T4341] should_fail_usercopy+0x1a/0x20 [ 43.399691][ T4341] _copy_from_user+0x1c/0xb0 [ 43.399712][ T4341] memdup_user+0x5e/0xd0 [ 43.399813][ T4341] strndup_user+0x68/0xb0 [ 43.399832][ T4341] __se_sys_request_key+0xf4/0x2a0 [ 43.399918][ T4341] ? __secure_computing+0x81/0x150 [ 43.399939][ T4341] __x64_sys_request_key+0x55/0x70 [ 43.399965][ T4341] x64_sys_call+0x2321/0x3000 [ 43.400065][ T4341] do_syscall_64+0xc0/0x2a0 [ 43.400097][ T4341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.400117][ T4341] RIP: 0033:0x7fe9b35faeb9 [ 43.400131][ T4341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.400147][ T4341] RSP: 002b:00007fe9b2057028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 43.400188][ T4341] RAX: ffffffffffffffda RBX: 00007fe9b3875fa0 RCX: 00007fe9b35faeb9 [ 43.400229][ T4341] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 43.400244][ T4341] RBP: 00007fe9b2057090 R08: 0000000000000000 R09: 0000000000000000 [ 43.400259][ T4341] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 43.400271][ T4341] R13: 00007fe9b3876038 R14: 00007fe9b3875fa0 R15: 00007ffdc4b376d8 [ 43.400367][ T4341] [ 43.410948][ T29] audit: type=1326 audit(1769780633.002:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b35faeb9 code=0x7ffc0000 [ 43.577277][ T4346] FAULT_INJECTION: forcing a failure. [ 43.577277][ T4346] name failslab, interval 1, probability 0, space 0, times 0 [ 43.596681][ T29] audit: type=1326 audit(1769780633.002:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b35faeb9 code=0x7ffc0000 [ 43.596708][ T29] audit: type=1326 audit(1769780633.002:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b35faeb9 code=0x7ffc0000 [ 43.609444][ T4346] CPU: 0 UID: 0 PID: 4346 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.609475][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.609561][ T4346] Call Trace: [ 43.609569][ T4346] [ 43.609650][ T4346] __dump_stack+0x1d/0x30 [ 43.609682][ T4346] dump_stack_lvl+0x95/0xd0 [ 43.609705][ T4346] dump_stack+0x15/0x1b [ 43.609726][ T4346] should_fail_ex+0x263/0x280 [ 43.609795][ T4346] should_failslab+0x8c/0xb0 [ 43.609820][ T4346] kmem_cache_alloc_noprof+0x68/0x490 [ 43.609847][ T4346] ? security_inode_alloc+0x37/0x100 [ 43.609882][ T4346] security_inode_alloc+0x37/0x100 [ 43.609933][ T4346] inode_init_always_gfp+0x4b7/0x500 [ 43.609958][ T4346] ? __pfx_sock_alloc_inode+0x10/0x10 [ 43.609985][ T4346] alloc_inode+0x58/0x170 [ 43.610039][ T4346] do_accept+0xa0/0x390 [ 43.610067][ T4346] ? _raw_spin_lock+0x52/0xa0 [ 43.610120][ T4346] __sys_accept4+0xbe/0x170 [ 43.610151][ T4346] __x64_sys_accept4+0x51/0x60 [ 43.610258][ T4346] x64_sys_call+0x2b3e/0x3000 [ 43.610284][ T4346] do_syscall_64+0xc0/0x2a0 [ 43.610326][ T4346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.610349][ T4346] RIP: 0033:0x7f9d3eacaeb9 [ 43.610366][ T4346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.610385][ T4346] RSP: 002b:00007f9d3d506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 43.610406][ T4346] RAX: ffffffffffffffda RBX: 00007f9d3ed46090 RCX: 00007f9d3eacaeb9 [ 43.610429][ T4346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 43.610442][ T4346] RBP: 00007f9d3d506090 R08: 0000000000000000 R09: 0000000000000000 [ 43.610463][ T4346] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 43.610477][ T4346] R13: 00007f9d3ed46128 R14: 00007f9d3ed46090 R15: 00007ffea06a6d78 [ 43.610536][ T4346] [ 43.846028][ T29] audit: type=1326 audit(1769780633.002:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b35faeb9 code=0x7ffc0000 [ 43.869633][ T29] audit: type=1326 audit(1769780633.002:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe9b35faeb9 code=0x7ffc0000 [ 43.892948][ T29] audit: type=1326 audit(1769780633.002:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b35faeb9 code=0x7ffc0000 [ 43.898050][ T4360] __nla_validate_parse: 2 callbacks suppressed [ 43.898067][ T4360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.265'. [ 43.916362][ T29] audit: type=1326 audit(1769780633.002:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b35faeb9 code=0x7ffc0000 [ 44.094359][ T4362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.267'. [ 44.165127][ T4366] loop5: detected capacity change from 0 to 512 [ 44.185637][ T4366] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.228929][ T4366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.232568][ T4373] netlink: 64 bytes leftover after parsing attributes in process `syz.2.266'. [ 44.250698][ T4373] netlink: 64 bytes leftover after parsing attributes in process `syz.2.266'. [ 44.275421][ T4373] 9pnet_fd: Insufficient options for proto=fd [ 44.284080][ T4375] netlink: 56 bytes leftover after parsing attributes in process `syz.0.271'. [ 44.295654][ T4366] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.269: lblock 23 mapped to illegal pblock 18 (length 1) [ 44.328778][ T4376] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.269: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 44.352739][ T4376] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 12: comm syz.5.269: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 44.426919][ T4376] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.269: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 44.451465][ T4385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.274'. [ 44.503979][ T4389] syzkaller1: entered promiscuous mode [ 44.509472][ T4389] syzkaller1: entered allmulticast mode [ 44.536923][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 44.549406][ T4392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 44.624274][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.743614][ T4403] loop2: detected capacity change from 0 to 512 [ 44.770201][ T4410] loop0: detected capacity change from 0 to 512 [ 44.804992][ T4410] msdos: Unknown parameter '' [ 44.825590][ T4403] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.281: invalid indirect mapped block 256 (level 2) [ 44.860646][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.864469][ T4403] EXT4-fs (loop2): 2 truncates cleaned up [ 44.883349][ T4400] chnl_net:caif_netlink_parms(): no params data found [ 44.899194][ T4403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.968235][ T4403] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.281: bg 0: block 5: invalid block bitmap [ 44.981609][ T4403] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 44.993943][ T4403] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.993943][ T4403] [ 45.003729][ T4403] EXT4-fs (loop2): Total free blocks count 0 [ 45.009711][ T4403] EXT4-fs (loop2): Free/Dirty block details [ 45.015734][ T4403] EXT4-fs (loop2): free_blocks=0 [ 45.020718][ T4403] EXT4-fs (loop2): dirty_blocks=1 [ 45.025831][ T4403] EXT4-fs (loop2): Block reservation details [ 45.031843][ T4403] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 45.039545][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.068733][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.075906][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.084095][ T4400] bridge_slave_0: entered allmulticast mode [ 45.090716][ T4400] bridge_slave_0: entered promiscuous mode [ 45.099203][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.106304][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.114194][ T4400] bridge_slave_1: entered allmulticast mode [ 45.120650][ T4400] bridge_slave_1: entered promiscuous mode [ 45.130325][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.182903][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.202530][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.247273][ T4400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.258453][ T4400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.279736][ T4400] team0: Port device team_slave_0 added [ 45.286709][ T4400] team0: Port device team_slave_1 added [ 45.325523][ T52] bridge_slave_1: left allmulticast mode [ 45.331324][ T52] bridge_slave_1: left promiscuous mode [ 45.336991][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.345445][ T52] bridge_slave_0: left allmulticast mode [ 45.351140][ T52] bridge_slave_0: left promiscuous mode [ 45.356984][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.474562][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.491240][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.500748][ T52] bond0 (unregistering): Released all slaves [ 45.508756][ T3942] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.525944][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.538006][ T4400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.545128][ T4400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.571151][ T4400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.572942][ T4400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.588808][ T4400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.614791][ T4400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.633886][ T52] hsr_slave_0: left promiscuous mode [ 45.639607][ T52] hsr_slave_1: left promiscuous mode [ 45.646712][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.654184][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.675603][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.683021][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.692757][ T4442] FAULT_INJECTION: forcing a failure. [ 45.692757][ T4442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.705883][ T4442] CPU: 0 UID: 0 PID: 4442 Comm: syz.2.288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.705913][ T4442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.706020][ T4442] Call Trace: [ 45.706027][ T4442] [ 45.706035][ T4442] __dump_stack+0x1d/0x30 [ 45.706062][ T4442] dump_stack_lvl+0x95/0xd0 [ 45.706157][ T4442] dump_stack+0x15/0x1b [ 45.706180][ T4442] should_fail_ex+0x263/0x280 [ 45.706215][ T4442] should_fail+0xb/0x20 [ 45.706297][ T4442] should_fail_usercopy+0x1a/0x20 [ 45.706333][ T4442] _copy_from_user+0x1c/0xb0 [ 45.706357][ T4442] ____sys_sendmsg+0x1e2/0x600 [ 45.706383][ T4442] ___sys_sendmsg+0x195/0x1e0 [ 45.706436][ T4442] __x64_sys_sendmsg+0xd4/0x160 [ 45.706459][ T4442] x64_sys_call+0x17ba/0x3000 [ 45.706550][ T4442] do_syscall_64+0xc0/0x2a0 [ 45.706583][ T4442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.706687][ T4442] RIP: 0033:0x7f60bdefaeb9 [ 45.706706][ T4442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.706725][ T4442] RSP: 002b:00007f60bc957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.706746][ T4442] RAX: ffffffffffffffda RBX: 00007f60be175fa0 RCX: 00007f60bdefaeb9 [ 45.706762][ T4442] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000003 [ 45.706789][ T4442] RBP: 00007f60bc957090 R08: 0000000000000000 R09: 0000000000000000 [ 45.706804][ T4442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.706818][ T4442] R13: 00007f60be176038 R14: 00007f60be175fa0 R15: 00007ffe390ee518 [ 45.706841][ T4442] [ 45.875894][ T52] veth1_macvtap: left promiscuous mode [ 45.881485][ T52] veth0_macvtap: left promiscuous mode [ 45.887300][ T52] veth1_vlan: left promiscuous mode [ 45.893526][ T52] veth0_vlan: left promiscuous mode [ 45.953084][ T52] team0 (unregistering): Port device team_slave_1 removed [ 45.962786][ T52] team0 (unregistering): Port device team_slave_0 removed [ 46.003393][ T4441] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 46.015214][ T4441] team0 (unregistering): Port device team_slave_0 removed [ 46.024501][ T4441] team0 (unregistering): Failed to send options change via netlink (err -105) [ 46.038136][ T4441] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 46.049358][ T4441] team0 (unregistering): Port device team_slave_1 removed [ 46.080312][ T4444] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 46.122223][ T4400] hsr_slave_0: entered promiscuous mode [ 46.128360][ T4400] hsr_slave_1: entered promiscuous mode [ 46.142804][ T4460] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.290'. [ 46.156487][ T4400] debugfs: 'hsr0' already exists in 'hsr' [ 46.162273][ T4400] Cannot create hsr debugfs directory [ 46.329670][ T4400] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.351865][ T4400] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.364362][ T4463] loop0: detected capacity change from 0 to 512 [ 46.379389][ T4473] loop5: detected capacity change from 0 to 512 [ 46.390908][ T4473] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 46.411202][ T4400] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 46.427573][ T4400] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 46.438739][ T4473] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.477667][ T4473] EXT4-fs (loop5): 1 truncate cleaned up [ 46.484408][ T4473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.488683][ T4463] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.544715][ T4400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.561682][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.563778][ T4400] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.583912][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.590988][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.637643][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.644793][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.686175][ T4512] FAULT_INJECTION: forcing a failure. [ 46.686175][ T4512] name failslab, interval 1, probability 0, space 0, times 0 [ 46.690837][ T3776] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.698957][ T4512] CPU: 0 UID: 0 PID: 4512 Comm: syz.5.296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.698986][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.699037][ T4512] Call Trace: [ 46.699044][ T4512] [ 46.699053][ T4512] __dump_stack+0x1d/0x30 [ 46.699079][ T4512] dump_stack_lvl+0x95/0xd0 [ 46.699102][ T4512] dump_stack+0x15/0x1b [ 46.699173][ T4512] should_fail_ex+0x263/0x280 [ 46.699205][ T4512] should_failslab+0x8c/0xb0 [ 46.699230][ T4512] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 46.699338][ T4512] ? __alloc_skb+0x2f0/0x4b0 [ 46.699369][ T4512] __alloc_skb+0x2f0/0x4b0 [ 46.699398][ T4512] ? __alloc_skb+0x219/0x4b0 [ 46.699503][ T4512] netlink_alloc_large_skb+0xbf/0xf0 [ 46.699535][ T4512] netlink_sendmsg+0x40c/0x6f0 [ 46.699558][ T4512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.699653][ T4512] ____sys_sendmsg+0x5af/0x600 [ 46.699677][ T4512] ___sys_sendmsg+0x195/0x1e0 [ 46.699709][ T4512] __x64_sys_sendmsg+0xd4/0x160 [ 46.699733][ T4512] x64_sys_call+0x17ba/0x3000 [ 46.699767][ T4512] do_syscall_64+0xc0/0x2a0 [ 46.699837][ T4512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.699865][ T4512] RIP: 0033:0x7fe8f17aaeb9 [ 46.699882][ T4512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.699967][ T4512] RSP: 002b:00007fe8f0207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.699988][ T4512] RAX: ffffffffffffffda RBX: 00007fe8f1a25fa0 RCX: 00007fe8f17aaeb9 [ 46.700003][ T4512] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 46.700017][ T4512] RBP: 00007fe8f0207090 R08: 0000000000000000 R09: 0000000000000000 [ 46.700053][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.700066][ T4512] R13: 00007fe8f1a26038 R14: 00007fe8f1a25fa0 R15: 00007ffe73941578 [ 46.700087][ T4512] [ 46.705253][ T4463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.716546][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 46.838451][ T4463] Cannot find set identified by id 0 to match [ 46.919264][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.297'. [ 46.971867][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.013258][ T4400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.262694][ T4556] netlink: 'syz.0.305': attribute type 2 has an invalid length. [ 47.363610][ T4400] veth0_vlan: entered promiscuous mode [ 47.378269][ T4400] veth1_vlan: entered promiscuous mode [ 47.438083][ T4400] veth0_macvtap: entered promiscuous mode [ 47.462963][ T4400] veth1_macvtap: entered promiscuous mode [ 47.479971][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.485192][ T4400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.514667][ T4400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.525957][ T3327] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.545181][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.572792][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.591059][ T3327] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.708519][ T4594] loop5: detected capacity change from 0 to 512 [ 47.715895][ T4594] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.743602][ T4599] netlink: 'syz.5.315': attribute type 1 has an invalid length. [ 47.793748][ T4599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.838886][ T4599] bond1: (slave dummy0): making interface the new active one [ 47.850557][ T4599] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 47.876407][ T4605] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 47.904029][ T4599] bond1 (unregistering): (slave dummy0): Releasing active interface [ 47.921582][ T4599] bond1 (unregistering): Released all slaves [ 47.994558][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 47.994573][ T29] audit: type=1400 audit(1769780637.632:2085): avc: denied { create } for pid=4612 comm="syz.6.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 48.038137][ T29] audit: type=1400 audit(1769780637.662:2086): avc: denied { write } for pid=4612 comm="syz.6.321" path="socket:[9021]" dev="sockfs" ino=9021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 48.233680][ T4629] loop5: detected capacity change from 0 to 128 [ 48.242533][ T4570] syz.2.306 (4570) used greatest stack depth: 9728 bytes left [ 48.287693][ T4633] loop2: detected capacity change from 0 to 256 [ 48.311553][ T4633] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.350177][ T4633] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.360433][ T4633] FAT-fs (loop2): Filesystem has been set read-only [ 48.380912][ T4633] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.391150][ T29] audit: type=1400 audit(1769780638.012:2087): avc: denied { mount } for pid=4634 comm="syz.6.329" name="/" dev="hugetlbfs" ino=9076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 48.447666][ T4633] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.468333][ T29] audit: type=1400 audit(1769780638.062:2088): avc: denied { write } for pid=4638 comm="syz.5.331" name="event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.491702][ T29] audit: type=1400 audit(1769780638.062:2089): avc: denied { open } for pid=4638 comm="syz.5.331" path="/dev/input/event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.586187][ T29] audit: type=1400 audit(1769780638.202:2090): avc: denied { unmount } for pid=4400 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 48.739536][ T29] audit: type=1400 audit(1769780638.362:2091): avc: denied { read append } for pid=4667 comm="syz.6.338" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.843136][ T4668] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.065131][ T4704] pim6reg: entered allmulticast mode [ 49.175229][ T4706] pim6reg: left allmulticast mode [ 49.490881][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 49.490943][ T3776] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.863062][ T4715] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 49.935598][ T4720] FAULT_INJECTION: forcing a failure. [ 49.935598][ T4720] name failslab, interval 1, probability 0, space 0, times 0 [ 49.948349][ T4720] CPU: 1 UID: 0 PID: 4720 Comm: syz.1.352 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.948374][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.948385][ T4720] Call Trace: [ 49.948392][ T4720] [ 49.948399][ T4720] __dump_stack+0x1d/0x30 [ 49.948498][ T4720] dump_stack_lvl+0x95/0xd0 [ 49.948523][ T4720] dump_stack+0x15/0x1b [ 49.948631][ T4720] should_fail_ex+0x263/0x280 [ 49.948661][ T4720] should_failslab+0x8c/0xb0 [ 49.948687][ T4720] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 49.948741][ T4720] ? __alloc_skb+0x2f0/0x4b0 [ 49.948772][ T4720] ? xas_load+0x413/0x430 [ 49.948800][ T4720] __alloc_skb+0x2f0/0x4b0 [ 49.948847][ T4720] ? __alloc_skb+0x219/0x4b0 [ 49.948878][ T4720] _sctp_make_chunk+0x59/0x210 [ 49.948913][ T4720] sctp_make_abort_user+0x4c/0x3a0 [ 49.949003][ T4720] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 49.949028][ T4720] sctp_sendmsg+0x7a7/0x1d60 [ 49.949051][ T4720] ? selinux_socket_sendmsg+0x192/0x1c0 [ 49.949077][ T4720] ? __pfx_sctp_sendmsg+0x10/0x10 [ 49.949127][ T4720] inet_sendmsg+0xc5/0xd0 [ 49.949182][ T4720] ____sys_sendmsg+0x53a/0x600 [ 49.949223][ T4720] ___sys_sendmsg+0x195/0x1e0 [ 49.949350][ T4720] __sys_sendmmsg+0x185/0x320 [ 49.949448][ T4720] __x64_sys_sendmmsg+0x57/0x70 [ 49.949468][ T4720] x64_sys_call+0x1e28/0x3000 [ 49.949494][ T4720] do_syscall_64+0xc0/0x2a0 [ 49.949538][ T4720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.949562][ T4720] RIP: 0033:0x7f9d3eacaeb9 [ 49.949577][ T4720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.949594][ T4720] RSP: 002b:00007f9d3d527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 49.949613][ T4720] RAX: ffffffffffffffda RBX: 00007f9d3ed45fa0 RCX: 00007f9d3eacaeb9 [ 49.949629][ T4720] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000004 [ 49.949642][ T4720] RBP: 00007f9d3d527090 R08: 0000000000000000 R09: 0000000000000000 [ 49.949661][ T4720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.949672][ T4720] R13: 00007f9d3ed46038 R14: 00007f9d3ed45fa0 R15: 00007ffea06a6d78 [ 49.949692][ T4720] [ 50.183087][ T4724] loop5: detected capacity change from 0 to 512 [ 50.200657][ T4724] EXT4-fs (loop5): orphan cleanup on readonly fs [ 50.210637][ T4724] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.354: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 50.249853][ T4724] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.354: Bad quota inode: 4, type: 1 [ 50.267458][ T4724] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.283505][ T4724] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 50.290575][ T4724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.326564][ T4724] syz_tun: entered promiscuous mode [ 50.331930][ T4724] vlan2: entered promiscuous mode [ 50.364035][ T4731] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 50.393568][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.423263][ T29] audit: type=1400 audit(1769780640.062:2092): avc: denied { getopt } for pid=4735 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.457169][ T4740] netlink: 14 bytes leftover after parsing attributes in process `syz.5.360'. [ 50.484316][ T29] audit: type=1400 audit(1769780640.122:2093): avc: denied { write } for pid=4733 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.526607][ T4668] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.601095][ T4751] FAULT_INJECTION: forcing a failure. [ 50.601095][ T4751] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.616483][ T4751] CPU: 0 UID: 0 PID: 4751 Comm: syz.0.364 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.616564][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.616577][ T4751] Call Trace: [ 50.616584][ T4751] [ 50.616592][ T4751] __dump_stack+0x1d/0x30 [ 50.616619][ T4751] dump_stack_lvl+0x95/0xd0 [ 50.616640][ T4751] dump_stack+0x15/0x1b [ 50.616718][ T4751] should_fail_ex+0x263/0x280 [ 50.616768][ T4751] should_fail_alloc_page+0xf2/0x100 [ 50.616794][ T4751] __alloc_frozen_pages_noprof+0x108/0x350 [ 50.616866][ T4751] alloc_pages_mpol+0xb3/0x260 [ 50.616909][ T4751] vma_alloc_folio_noprof+0x1a9/0x300 [ 50.616943][ T4751] handle_mm_fault+0x111f/0x3030 [ 50.616981][ T4751] ? mt_find+0x291/0x3b0 [ 50.617036][ T4751] do_user_addr_fault+0x3fd/0x1050 [ 50.617064][ T4751] exc_page_fault+0x62/0xa0 [ 50.617089][ T4751] asm_exc_page_fault+0x26/0x30 [ 50.617112][ T4751] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 50.617191][ T4751] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 50.617207][ T4751] RSP: 0018:ffffc90000ec3d38 EFLAGS: 00050206 [ 50.617226][ T4751] RAX: ffff888102060a90 RBX: 0000000000001000 RCX: 0000000000000f40 [ 50.617242][ T4751] RDX: 0000000000000000 RSI: ffff8881041820c0 RDI: 0000200000015000 [ 50.617258][ T4751] RBP: ffff888104182000 R08: 00000000000008c7 R09: 0000000000000000 [ 50.617349][ T4751] R10: 0001888104182000 R11: 0001888104182fff R12: 0000200000015f40 [ 50.617364][ T4751] R13: 00007ffffffff000 R14: 0000200000014f40 R15: ffff888104182000 [ 50.617392][ T4751] _copy_to_user+0x7c/0xa0 [ 50.617482][ T4751] pagemap_read+0x3ac/0x610 [ 50.617508][ T4751] ? __pfx_pagemap_read+0x10/0x10 [ 50.617591][ T4751] vfs_read+0x1ab/0x7f0 [ 50.617608][ T4751] ? __rcu_read_unlock+0x4e/0x70 [ 50.617715][ T4751] ? __fget_files+0x184/0x1c0 [ 50.617745][ T4751] __x64_sys_pread64+0xfd/0x150 [ 50.617768][ T4751] x64_sys_call+0x281b/0x3000 [ 50.617793][ T4751] do_syscall_64+0xc0/0x2a0 [ 50.617858][ T4751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.617923][ T4751] RIP: 0033:0x7fe9b35faeb9 [ 50.617940][ T4751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.617957][ T4751] RSP: 002b:00007fe9b2057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 50.617979][ T4751] RAX: ffffffffffffffda RBX: 00007fe9b3875fa0 RCX: 00007fe9b35faeb9 [ 50.618027][ T4751] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000005 [ 50.618041][ T4751] RBP: 00007fe9b2057090 R08: 0000000000000000 R09: 0000000000000000 [ 50.618077][ T4751] R10: 0000001000000300 R11: 0000000000000246 R12: 0000000000000002 [ 50.618089][ T4751] R13: 00007fe9b3876038 R14: 00007fe9b3875fa0 R15: 00007ffdc4b376d8 [ 50.618107][ T4751] [ 50.974895][ T4774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 50.992840][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 51.001766][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 51.018441][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 51.058297][ T29] audit: type=1400 audit(1769780640.692:2094): avc: denied { write } for pid=4783 comm="syz.5.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.125741][ T4795] FAULT_INJECTION: forcing a failure. [ 51.125741][ T4795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.138829][ T4795] CPU: 0 UID: 0 PID: 4795 Comm: syz.1.381 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.138919][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.138933][ T4795] Call Trace: [ 51.138939][ T4795] [ 51.138947][ T4795] __dump_stack+0x1d/0x30 [ 51.138972][ T4795] dump_stack_lvl+0x95/0xd0 [ 51.138996][ T4795] dump_stack+0x15/0x1b [ 51.139021][ T4795] should_fail_ex+0x263/0x280 [ 51.139055][ T4795] should_fail+0xb/0x20 [ 51.139143][ T4795] should_fail_usercopy+0x1a/0x20 [ 51.139178][ T4795] _copy_from_user+0x1c/0xb0 [ 51.139203][ T4795] memdup_user+0x5e/0xd0 [ 51.139223][ T4795] strndup_user+0x68/0xb0 [ 51.139325][ T4795] __se_sys_request_key+0xf4/0x2a0 [ 51.139361][ T4795] ? __secure_computing+0x81/0x150 [ 51.139385][ T4795] __x64_sys_request_key+0x55/0x70 [ 51.139491][ T4795] x64_sys_call+0x2321/0x3000 [ 51.139519][ T4795] do_syscall_64+0xc0/0x2a0 [ 51.139553][ T4795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.139577][ T4795] RIP: 0033:0x7f9d3eacaeb9 [ 51.139611][ T4795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.139631][ T4795] RSP: 002b:00007f9d3d527028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 51.139653][ T4795] RAX: ffffffffffffffda RBX: 00007f9d3ed45fa0 RCX: 00007f9d3eacaeb9 [ 51.139669][ T4795] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 51.139685][ T4795] RBP: 00007f9d3d527090 R08: 0000000000000000 R09: 0000000000000000 [ 51.139771][ T4795] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 51.139864][ T4795] R13: 00007f9d3ed46038 R14: 00007f9d3ed45fa0 R15: 00007ffea06a6d78 [ 51.139887][ T4795] [ 51.344376][ T4798] loop1: detected capacity change from 0 to 512 [ 51.371743][ T4798] ------------[ cut here ]------------ [ 51.377334][ T4798] EA inode 11 i_nlink=2 [ 51.377376][ T4798] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.382/4798 [ 51.392270][ T4798] Modules linked in: [ 51.396179][ T4798] CPU: 0 UID: 0 PID: 4798 Comm: syz.1.382 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.405920][ T4798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.416019][ T4798] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 51.422939][ T4798] Code: 74 e6 9a ff 4c 8d 2d cd 21 3e 05 49 8d 7e 40 e8 84 d0 b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef e1 d0 03 66 66 66 66 66 66 2e [ 51.442588][ T4798] RSP: 0018:ffffc90000ebb778 EFLAGS: 00010246 [ 51.448749][ T4798] RAX: ffff88811a59bc10 RBX: ffff888119c5c610 RCX: ffffffff81be1958 [ 51.456752][ T4798] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 51.464890][ T4798] RBP: 000000000000000b R08: 0001888119c5c5c3 R09: 0000000000000000 [ 51.472892][ T4798] R10: ffffc90000ebb6a8 R11: 0001c90000ebb6a8 R12: ffff888119c5c5c0 [ 51.480888][ T4798] R13: ffffffff86fc3b10 R14: ffff888119c5c578 R15: 0000000000000001 [ 51.488910][ T4798] FS: 00007f9d3d5276c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 51.498205][ T4798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.505055][ T4798] CR2: 00005555656d04e8 CR3: 0000000135bb0000 CR4: 00000000003506f0 [ 51.513068][ T4798] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.521141][ T4798] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 51.529327][ T4798] Call Trace: [ 51.532679][ T4798] [ 51.535619][ T4798] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 51.541577][ T4798] ? errseq_check+0x2c/0x50 [ 51.546232][ T4798] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 51.551901][ T4798] ? ext4_truncate+0x92b/0xad0 [ 51.556708][ T4798] ext4_evict_inode+0xa1f/0xd40 [ 51.561677][ T4798] ? __pfx_ext4_evict_inode+0x10/0x10 [ 51.567141][ T4798] evict+0x2af/0x510 [ 51.571171][ T4798] ? __dquot_initialize+0x146/0x7c0 [ 51.576467][ T4798] iput+0x4b9/0x650 [ 51.580412][ T4798] ext4_process_orphan+0x1a9/0x1c0 [ 51.585575][ T4798] ext4_orphan_cleanup+0x6a8/0xa00 [ 51.590716][ T4798] ext4_fill_super+0x3476/0x3800 [ 51.595733][ T4798] ? set_blocksize+0x1a3/0x310 [ 51.600574][ T4798] ? setup_bdev_super+0x30e/0x370 [ 51.605727][ T4798] ? __pfx_ext4_fill_super+0x10/0x10 [ 51.611116][ T4798] get_tree_bdev_flags+0x291/0x300 [ 51.616246][ T4798] ? __pfx_ext4_fill_super+0x10/0x10 [ 51.621578][ T4798] get_tree_bdev+0x1f/0x30 [ 51.626112][ T4798] ext4_get_tree+0x1c/0x30 [ 51.630815][ T4798] vfs_get_tree+0x57/0x1d0 [ 51.635325][ T4798] do_new_mount+0x288/0x700 [ 51.637453][ T4804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.384'. [ 51.639836][ T4798] path_mount+0x4d0/0xbc0 [ 51.653090][ T4798] ? user_path_at+0xbf/0x130 [ 51.657751][ T4798] __se_sys_mount+0x28c/0x2e0 [ 51.662203][ T4805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.384'. [ 51.662475][ T4798] __x64_sys_mount+0x67/0x80 [ 51.675909][ T4798] x64_sys_call+0x2cca/0x3000 [ 51.680599][ T4798] do_syscall_64+0xc0/0x2a0 [ 51.685225][ T4798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.691203][ T4798] RIP: 0033:0x7f9d3eacc14a [ 51.695645][ T4798] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.715373][ T4798] RSP: 002b:00007f9d3d526e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.724025][ T4798] RAX: ffffffffffffffda RBX: 00007f9d3d526ee0 RCX: 00007f9d3eacc14a [ 51.732084][ T4798] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 00007f9d3d526ea0 [ 51.740203][ T4798] RBP: 0000200000000180 R08: 00007f9d3d526ee0 R09: 0000000000800700 [ 51.748330][ T4798] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000240 [ 51.756428][ T4798] R13: 00007f9d3d526ea0 R14: 000000000000046f R15: 000000000000002c [ 51.764581][ T4798] [ 51.767663][ T4798] ---[ end trace 0000000000000000 ]--- [ 51.773637][ T4798] EXT4-fs (loop1): 1 orphan inode deleted [ 51.779783][ T4798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.895853][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.949414][ T4668] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.993041][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 52.001941][ T4822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 52.043022][ T4826] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 52.069223][ T4668] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.134151][ T4830] loop2: detected capacity change from 0 to 1024 [ 52.141319][ T4830] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 52.160962][ T3448] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.188538][ T3448] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.206007][ T4830] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.216606][ T3448] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.216739][ T3448] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.255016][ T4834] netlink: zone id is out of range [ 52.260302][ T4834] netlink: get zone limit has 4 unknown bytes [ 52.283856][ T4830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.336736][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.350388][ T4841] loop1: detected capacity change from 0 to 512 [ 52.398336][ T4841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.427887][ T4841] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.531813][ T4857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.403'. [ 52.583343][ T4861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4861 comm=syz.6.405 [ 52.596632][ T4861] syzkaller0: entered promiscuous mode [ 52.602147][ T4861] syzkaller0: entered allmulticast mode [ 52.630381][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.730539][ T4881] loop2: detected capacity change from 0 to 128 [ 53.059012][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 53.059027][ T29] audit: type=1400 audit(1769780642.692:2132): avc: denied { name_bind } for pid=4919 comm="syz.1.423" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 53.104607][ T29] audit: type=1400 audit(1769780642.742:2133): avc: denied { getopt } for pid=4922 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.166071][ T29] audit: type=1400 audit(1769780642.802:2134): avc: denied { ioctl } for pid=4924 comm="syz.1.425" path="socket:[10170]" dev="sockfs" ino=10170 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.191383][ T29] audit: type=1400 audit(1769780642.832:2135): avc: denied { write } for pid=4924 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.225433][ T4931] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 53.236297][ T4931] bond2 (unregistering): Released all slaves [ 53.618874][ T29] audit: type=1400 audit(1769780643.252:2136): avc: denied { block_suspend } for pid=4963 comm="syz.2.435" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.980841][ T4774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.993593][ T4997] xt_hashlimit: size too large, truncated to 1048576 [ 54.046797][ T4998] bond2: option ad_user_port_key: invalid value (1136) [ 54.054245][ T4998] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 54.079624][ T4998] bond2 (unregistering): Released all slaves [ 54.113750][ T29] audit: type=1400 audit(1769780643.742:2137): avc: denied { execute_no_trans } for pid=4963 comm="syz.2.435" path="/98/file0" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.279455][ T5010] netlink: 'syz.1.439': attribute type 13 has an invalid length. [ 54.291541][ T29] audit: type=1400 audit(1769780643.932:2138): avc: denied { getopt } for pid=5011 comm="syz.5.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.315710][ T5010] gretap0: refused to change device tx_queue_len [ 54.322095][ T5010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 54.472235][ T5019] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 54.482397][ T5019] batadv0: entered promiscuous mode [ 54.487696][ T5019] batadv0: entered allmulticast mode [ 54.501946][ T5019] bridge0: port 3(batadv0) entered blocking state [ 54.508507][ T5019] bridge0: port 3(batadv0) entered disabled state [ 54.681494][ T5029] 9p: Unknown Cache mode or invalid value readah±£ðûN [ 54.719179][ T29] audit: type=1400 audit(1769780644.352:2139): avc: denied { append } for pid=5030 comm="syz.0.448" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.744434][ T5031] program syz.0.448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.780868][ T52] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 54.790448][ T52] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 54.854421][ T29] audit: type=1400 audit(1769780644.492:2140): avc: denied { read write } for pid=5037 comm="syz.0.451" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 54.878641][ T29] audit: type=1400 audit(1769780644.492:2141): avc: denied { open } for pid=5037 comm="syz.0.451" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.171739][ T5060] team0: Device vlan2 is already an upper device of the team interface [ 55.223740][ T5072] ªªªªªª: renamed from vlan0 (while UP) [ 55.267230][ T5076] loop0: detected capacity change from 0 to 1024 [ 55.311317][ T5076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.345740][ T5076] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.390728][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.487450][ T5094] __nla_validate_parse: 8 callbacks suppressed [ 55.487467][ T5094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.471'. [ 55.667332][ T5102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=5102 comm=syz.1.475 [ 55.685042][ T5103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 55.841595][ T5109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 55.873323][ T5109] ip6erspan0: entered allmulticast mode [ 56.358107][ T5139] loop5: detected capacity change from 0 to 1024 [ 56.378757][ T5139] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.486: Failed to acquire dquot type 0 [ 56.408110][ T5139] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 56.423298][ T5139] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.486: corrupted inode contents [ 56.435351][ T5139] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.486: mark_inode_dirty error [ 56.447109][ T5139] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.486: corrupted inode contents [ 56.461517][ T5139] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.486: mark_inode_dirty error [ 56.472940][ T5139] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.486: corrupted inode contents [ 56.485355][ T5139] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 56.494274][ T5139] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.486: corrupted inode contents [ 56.506701][ T5139] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.486: mark_inode_dirty error [ 56.518118][ T5139] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 56.527574][ T5139] EXT4-fs (loop5): 1 truncate cleaned up [ 56.534928][ T5139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.568854][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.756980][ T5161] loop5: detected capacity change from 0 to 1024 [ 56.947522][ T5168] netlink: 132 bytes leftover after parsing attributes in process `syz.5.497'. [ 56.996069][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'. [ 57.027164][ T5174] delete_channel: no stack [ 57.065379][ T5181] loop0: detected capacity change from 0 to 1024 [ 57.080645][ T5181] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 57.108549][ T5181] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.119852][ T5181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.136970][ T5186] loop2: detected capacity change from 0 to 4096 [ 57.171517][ T5181] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.501: corrupted in-inode xattr: bad e_name length [ 57.185654][ T5181] EXT4-fs (loop0): Remounting filesystem read-only [ 57.189176][ T5186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.192995][ T5181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.501'. [ 57.214243][ T5181] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 57.255202][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.392100][ T5213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.509'. [ 57.405955][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.438306][ T5222] loop2: detected capacity change from 0 to 128 [ 57.456478][ T5222] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 57.484082][ T5222] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.499095][ T5222] ext2 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.547393][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.902214][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 57.911189][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 57.920597][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 58.236089][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 58.236105][ T29] audit: type=1400 audit(1769780647.872:2273): avc: denied { setopt } for pid=5267 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.245789][ T5273] bridge_slave_1: left allmulticast mode [ 58.267479][ T5273] bridge_slave_1: left promiscuous mode [ 58.273371][ T5273] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.285215][ T5273] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 58.322096][ T5275] tipc: Enabled bearer , priority 0 [ 58.329266][ T5275] syzkaller0: entered promiscuous mode [ 58.334873][ T5275] syzkaller0: entered allmulticast mode [ 58.364053][ T5275] tipc: Resetting bearer [ 58.386815][ T5274] tipc: Resetting bearer [ 58.411427][ T5274] tipc: Disabling bearer [ 58.702927][ T5313] xt_time: unknown flags 0xc [ 58.766350][ T5318] loop5: detected capacity change from 0 to 1024 [ 58.781773][ T5318] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 58.791706][ T5318] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 58.803932][ T5318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.837937][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.043059][ T5348] 9p: Bad value for 'rfdno' [ 59.044187][ T29] audit: type=1400 audit(1769780648.682:2274): avc: denied { mounton } for pid=5347 comm="syz.0.551" path="/152/file0" dev="tmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.081752][ T29] audit: type=1400 audit(1769780648.712:2275): avc: denied { create } for pid=5343 comm="syz.5.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.102108][ T29] audit: type=1400 audit(1769780648.712:2276): avc: denied { write } for pid=5343 comm="syz.5.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.162448][ T29] audit: type=1400 audit(1769780648.802:2277): avc: denied { read } for pid=5355 comm="syz.6.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.305290][ T29] audit: type=1326 audit(1769780648.942:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f17aaeb9 code=0x7ffc0000 [ 59.328917][ T29] audit: type=1326 audit(1769780648.942:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f17aaeb9 code=0x7ffc0000 [ 59.352314][ T29] audit: type=1326 audit(1769780648.942:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f17aaeb9 code=0x7ffc0000 [ 59.375913][ T29] audit: type=1326 audit(1769780648.942:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f17aaeb9 code=0x7ffc0000 [ 59.399579][ T29] audit: type=1326 audit(1769780648.942:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.5.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe8f17aaeb9 code=0x7ffc0000 [ 59.464742][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.493566][ T5393] pim6reg: entered allmulticast mode [ 59.500168][ T5393] pim6reg: left allmulticast mode [ 59.658762][ T5403] hugetlbfs: syz.6.567 (5403): Using mlock ulimits for SHM_HUGETLB is obsolete [ 59.966050][ T5426] openvswitch: netlink: Flow key attr not present in new flow. [ 60.025850][ T5440] syz.6.578 (5440): attempted to duplicate a private mapping with mremap. This is not supported. [ 60.083432][ T5451] loop6: detected capacity change from 0 to 1024 [ 60.126955][ T5451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.150878][ T4400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.226360][ T5461] loop5: detected capacity change from 0 to 1024 [ 60.242264][ T5461] EXT4-fs: dax option not supported [ 60.317684][ T5430] loop2: detected capacity change from 0 to 128 [ 60.339828][ T5430] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 60.347709][ T5430] FAT-fs (loop2): Filesystem has been set read-only [ 60.506145][ T5493] loop5: detected capacity change from 0 to 1764 [ 60.553582][ T5493] usb usb8: usbfs: process 5493 (syz.5.592) did not claim interface 3 before use [ 60.579811][ T5497] ipt_REJECT: ECHOREPLY no longer supported. [ 60.640457][ T5497] __nla_validate_parse: 13 callbacks suppressed [ 60.640473][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.594'. [ 60.682730][ T5503] netlink: 'syz.6.596': attribute type 5 has an invalid length. [ 60.690420][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.596'. [ 60.711209][ T5501] loop2: detected capacity change from 0 to 512 [ 60.728084][ T5481] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 60.738088][ T5501] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.748205][ T5501] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.755914][ T5501] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.595: corrupted inode contents [ 60.768038][ T5501] EXT4-fs (loop2): Remounting filesystem read-only [ 60.775423][ T5501] EXT4-fs (loop2): 1 truncate cleaned up [ 60.781717][ T41] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.792524][ T41] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.805247][ T41] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 60.816212][ T5501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.819549][ T5512] syzkaller0: entered promiscuous mode [ 60.834285][ T5512] syzkaller0: entered allmulticast mode [ 61.031769][ T5542] loop6: detected capacity change from 0 to 256 [ 61.047033][ T5542] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.071832][ T5545] FAULT_INJECTION: forcing a failure. [ 61.071832][ T5545] name failslab, interval 1, probability 0, space 0, times 0 [ 61.084646][ T5545] CPU: 1 UID: 0 PID: 5545 Comm: syz.5.606 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.084676][ T5545] Tainted: [W]=WARN [ 61.084682][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.084694][ T5545] Call Trace: [ 61.084700][ T5545] [ 61.084709][ T5545] __dump_stack+0x1d/0x30 [ 61.084735][ T5545] dump_stack_lvl+0x95/0xd0 [ 61.084756][ T5545] dump_stack+0x15/0x1b [ 61.084774][ T5545] should_fail_ex+0x263/0x280 [ 61.084802][ T5545] should_failslab+0x8c/0xb0 [ 61.084824][ T5545] kmem_cache_alloc_noprof+0x68/0x490 [ 61.084845][ T5545] ? mas_alloc_nodes+0x1a2/0x210 [ 61.084870][ T5545] mas_alloc_nodes+0x1a2/0x210 [ 61.084894][ T5545] mas_preallocate+0x2ca/0x510 [ 61.084925][ T5545] __split_vma+0x240/0x660 [ 61.084950][ T5545] ? mas_find+0x5d5/0x700 [ 61.084979][ T5545] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 61.085018][ T5545] do_vmi_align_munmap+0x1e1/0x400 [ 61.085062][ T5545] do_vmi_munmap+0x1da/0x220 [ 61.085084][ T5545] move_vma+0xa1a/0xd40 [ 61.085116][ T5545] mremap_to+0x3ea/0x440 [ 61.085136][ T5545] ? check_prep_vma+0x5d5/0x660 [ 61.085161][ T5545] __se_sys_mremap+0x667/0xb50 [ 61.085185][ T5545] ? mutex_lock+0x57/0x90 [ 61.085206][ T5545] ? mutex_unlock+0x4e/0x90 [ 61.085229][ T5545] ? fput+0x8f/0xc0 [ 61.085256][ T5545] ? ksys_write+0x194/0x1a0 [ 61.085277][ T5545] __x64_sys_mremap+0x67/0x80 [ 61.085297][ T5545] x64_sys_call+0x2944/0x3000 [ 61.085318][ T5545] do_syscall_64+0xc0/0x2a0 [ 61.085346][ T5545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.085369][ T5545] RIP: 0033:0x7fe8f17aaeb9 [ 61.085393][ T5545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.085410][ T5545] RSP: 002b:00007fe8f01e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 61.085429][ T5545] RAX: ffffffffffffffda RBX: 00007fe8f1a26090 RCX: 00007fe8f17aaeb9 [ 61.085441][ T5545] RDX: 0000000005000000 RSI: 0000000000002000 RDI: 0000200000ff5000 [ 61.085452][ T5545] RBP: 00007fe8f01e6090 R08: 0000200000ffd000 R09: 0000000000000000 [ 61.085465][ T5545] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 61.085479][ T5545] R13: 00007fe8f1a26128 R14: 00007fe8f1a26090 R15: 00007ffe73941578 [ 61.085500][ T5545] [ 61.425532][ T5556] Invalid ELF header magic: != ELF [ 61.432096][ T5556] netlink: 'syz.6.613': attribute type 39 has an invalid length. [ 61.490854][ T3776] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.493810][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 61.521757][ T5559] netlink: 132 bytes leftover after parsing attributes in process `syz.0.614'. [ 61.680550][ T5571] loop0: detected capacity change from 0 to 512 [ 61.695678][ T5573] PM: Enabling pm_trace changes system date and time during resume. [ 61.695678][ T5573] PM: Correct system time has to be restored manually after resume. [ 61.713011][ T5521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.742695][ T5571] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.785205][ T5571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.798173][ T5573] loop6: detected capacity change from 0 to 512 [ 61.812148][ T5573] EXT4-fs: dax option not supported [ 61.840171][ T5571] Cannot find set identified by id 0 to match [ 61.872988][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.932359][ T5594] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.943318][ T5594] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.959048][ T5594] JBD2: no valid journal superblock found [ 61.964867][ T5594] EXT4-fs (loop5): Could not load journal inode [ 62.043383][ T5578] chnl_net:caif_netlink_parms(): no params data found [ 62.078734][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.086040][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.093606][ T5578] bridge_slave_0: entered allmulticast mode [ 62.100110][ T5578] bridge_slave_0: entered promiscuous mode [ 62.108158][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.115341][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.122911][ T5578] bridge_slave_1: entered allmulticast mode [ 62.131702][ T5606] netlink: 'syz.6.627': attribute type 10 has an invalid length. [ 62.141284][ T5578] bridge_slave_1: entered promiscuous mode [ 62.153060][ T5606] batadv0: entered promiscuous mode [ 62.158308][ T5606] batadv0: entered allmulticast mode [ 62.164617][ T5606] bridge0: port 3(batadv0) entered blocking state [ 62.171171][ T5606] bridge0: port 3(batadv0) entered disabled state [ 62.178340][ T5606] bridge0: port 3(batadv0) entered blocking state [ 62.184796][ T5606] bridge0: port 3(batadv0) entered forwarding state [ 62.199188][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.224321][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.287325][ T5578] team0: Port device team_slave_0 added [ 62.303699][ T5578] team0: Port device team_slave_1 added [ 62.326631][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.333735][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.360019][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.371862][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.378944][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.404919][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.439757][ T5578] hsr_slave_0: entered promiscuous mode [ 62.451426][ T5578] hsr_slave_1: entered promiscuous mode [ 62.457429][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 62.463208][ T5578] Cannot create hsr debugfs directory [ 62.467530][ T41] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 62.477992][ T41] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 62.536823][ T5578] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 62.546384][ T5578] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 62.562828][ T5578] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 62.570103][ T5636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 62.604959][ T5578] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 62.615842][ T52] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.667712][ T52] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.699991][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.742679][ T52] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.768874][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.782924][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.790105][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.809193][ T52] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.827129][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.834252][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.852205][ T5578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.862649][ T5578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.934914][ T5668] netlink: 132 bytes leftover after parsing attributes in process `syz.5.647'. [ 62.974293][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.985415][ T5672] ipt_REJECT: ECHOREPLY no longer supported. [ 63.016343][ T52] bridge0: port 3(batadv0) entered disabled state [ 63.023551][ T52] bridge_slave_1: left allmulticast mode [ 63.029230][ T52] bridge_slave_1: left promiscuous mode [ 63.035103][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.045240][ T52] bridge_slave_0: left allmulticast mode [ 63.050999][ T52] bridge_slave_0: left promiscuous mode [ 63.056763][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.192760][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.204708][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.218436][ T52] bond0 (unregistering): Released all slaves [ 63.269398][ T5686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.653'. [ 63.292660][ T5695] set_capacity_and_notify: 2 callbacks suppressed [ 63.292694][ T5695] loop5: detected capacity change from 0 to 1024 [ 63.316825][ T52] hsr_slave_0: left promiscuous mode [ 63.328988][ T52] hsr_slave_1: left promiscuous mode [ 63.336514][ T5695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.359026][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.364890][ T5695] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 63.366475][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.390235][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.397774][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.408671][ T52] veth1_macvtap: left promiscuous mode [ 63.414349][ T52] veth0_macvtap: left promiscuous mode [ 63.419995][ T52] veth1_vlan: left promiscuous mode [ 63.425695][ T52] veth0_vlan: left promiscuous mode [ 63.438993][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.526345][ T52] team0 (unregistering): Port device team_slave_1 removed [ 63.537170][ T52] team0 (unregistering): Port device team_slave_0 removed [ 63.617227][ T5725] FAULT_INJECTION: forcing a failure. [ 63.617227][ T5725] name failslab, interval 1, probability 0, space 0, times 0 [ 63.630090][ T5725] CPU: 0 UID: 0 PID: 5725 Comm: syz.0.660 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 63.630125][ T5725] Tainted: [W]=WARN [ 63.630132][ T5725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.630229][ T5725] Call Trace: [ 63.630235][ T5725] [ 63.630242][ T5725] __dump_stack+0x1d/0x30 [ 63.630265][ T5725] dump_stack_lvl+0x95/0xd0 [ 63.630340][ T5725] dump_stack+0x15/0x1b [ 63.630362][ T5725] should_fail_ex+0x263/0x280 [ 63.630395][ T5725] should_failslab+0x8c/0xb0 [ 63.630421][ T5725] kmem_cache_alloc_noprof+0x68/0x490 [ 63.630491][ T5725] ? security_inode_alloc+0x37/0x100 [ 63.630526][ T5725] security_inode_alloc+0x37/0x100 [ 63.630560][ T5725] inode_init_always_gfp+0x4b7/0x500 [ 63.630588][ T5725] ? __pfx_proc_alloc_inode+0x10/0x10 [ 63.630677][ T5725] alloc_inode+0x58/0x170 [ 63.630713][ T5725] new_inode+0x1d/0xe0 [ 63.630742][ T5725] proc_pid_make_inode+0x1f/0xd0 [ 63.630768][ T5725] proc_fd_instantiate+0x36/0x190 [ 63.630792][ T5725] proc_fill_cache+0x1e5/0x260 [ 63.630851][ T5725] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 63.630880][ T5725] proc_readfd_common+0x29a/0x3d0 [ 63.630963][ T5725] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 63.631040][ T5725] proc_fd_iterate+0x24/0x30 [ 63.631062][ T5725] iterate_dir+0x114/0x330 [ 63.631096][ T5725] __se_sys_getdents+0xd2/0x220 [ 63.631130][ T5725] ? __pfx_filldir+0x10/0x10 [ 63.631178][ T5725] __x64_sys_getdents+0x43/0x50 [ 63.631210][ T5725] x64_sys_call+0xe03/0x3000 [ 63.631233][ T5725] do_syscall_64+0xc0/0x2a0 [ 63.631283][ T5725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.631308][ T5725] RIP: 0033:0x7fe9b35faeb9 [ 63.631365][ T5725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.631383][ T5725] RSP: 002b:00007fe9b2057028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 63.631419][ T5725] RAX: ffffffffffffffda RBX: 00007fe9b3875fa0 RCX: 00007fe9b35faeb9 [ 63.631435][ T5725] RDX: 0000000000001000 RSI: 0000200000000240 RDI: 0000000000000007 [ 63.631454][ T5725] RBP: 00007fe9b2057090 R08: 0000000000000000 R09: 0000000000000000 [ 63.631469][ T5725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.631483][ T5725] R13: 00007fe9b3876038 R14: 00007fe9b3875fa0 R15: 00007ffdc4b376d8 [ 63.631505][ T5725] [ 63.663897][ T5578] veth0_vlan: entered promiscuous mode [ 63.878418][ T5644] chnl_net:caif_netlink_parms(): no params data found [ 63.893426][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 63.904800][ T5578] veth1_vlan: entered promiscuous mode [ 63.936093][ T5578] veth0_macvtap: entered promiscuous mode [ 63.950128][ T5578] veth1_macvtap: entered promiscuous mode [ 63.968479][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.975698][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.985412][ T5644] bridge_slave_0: entered allmulticast mode [ 63.992368][ T5644] bridge_slave_0: entered promiscuous mode [ 64.001323][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.008499][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.015828][ T5644] bridge_slave_1: entered allmulticast mode [ 64.023015][ T5644] bridge_slave_1: entered promiscuous mode [ 64.050548][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.061032][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.069575][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.081621][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.116282][ T41] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.133867][ T5644] team0: Port device team_slave_0 added [ 64.139668][ T41] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.161084][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 64.161109][ T29] audit: type=1400 audit(1769780653.792:2404): avc: denied { mounton } for pid=5578 comm="syz-executor" path="/root/syzkaller.7gncpk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.219485][ T5644] team0: Port device team_slave_1 added [ 64.225184][ T53] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.242484][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.272818][ T53] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.287450][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.294695][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.320884][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.354290][ T5782] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 64.394776][ T29] audit: type=1326 audit(1769780654.032:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.7.672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f516b09aeb9 code=0x0 [ 64.423053][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.448555][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.7.672'. [ 64.465228][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.465861][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.672'. [ 64.472238][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.507343][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.528658][ T29] audit: type=1326 audit(1769780654.122:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516b09aeb9 code=0x7ffc0000 [ 64.550102][ T5644] hsr_slave_0: entered promiscuous mode [ 64.552103][ T29] audit: type=1326 audit(1769780654.122:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f516b09aeb9 code=0x7ffc0000 [ 64.559078][ T5644] hsr_slave_1: entered promiscuous mode [ 64.580894][ T29] audit: type=1326 audit(1769780654.122:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516b09aeb9 code=0x7ffc0000 [ 64.580921][ T29] audit: type=1326 audit(1769780654.122:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f516b09aeb9 code=0x7ffc0000 [ 64.589498][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 64.609951][ T29] audit: type=1326 audit(1769780654.122:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516b09aeb9 code=0x7ffc0000 [ 64.633271][ T5644] Cannot create hsr debugfs directory [ 64.638894][ T29] audit: type=1326 audit(1769780654.122:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f516b09aeb9 code=0x7ffc0000 [ 64.667536][ T5782] team0: Device vxcan1 is of different type [ 64.667589][ T29] audit: type=1326 audit(1769780654.152:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516b09aeb9 code=0x7ffc0000 [ 64.667614][ T29] audit: type=1326 audit(1769780654.162:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.7.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f516b09aeb9 code=0x7ffc0000 [ 64.763792][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.813743][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.894820][ T5840] netlink: 24 bytes leftover after parsing attributes in process `syz.5.680'. [ 65.006078][ T52] bridge_slave_0: left allmulticast mode [ 65.011862][ T52] bridge_slave_0: left promiscuous mode [ 65.017555][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.165270][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.175933][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.185595][ T52] bond0 (unregistering): Released all slaves [ 65.193507][ T52] bond1 (unregistering): Released all slaves [ 65.203708][ T5644] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 65.223621][ T5644] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 65.243624][ T5644] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 65.314142][ T52] hsr_slave_0: left promiscuous mode [ 65.322766][ T52] hsr_slave_1: left promiscuous mode [ 65.345231][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.352684][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.360435][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.367889][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.384365][ T52] veth1_macvtap: left promiscuous mode [ 65.399821][ T52] veth0_macvtap: left promiscuous mode [ 65.422642][ T52] veth1_vlan: left promiscuous mode [ 65.427900][ T52] veth0_vlan: left promiscuous mode [ 65.533579][ T5901] loop0: detected capacity change from 0 to 512 [ 65.543682][ T5901] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.557074][ T5901] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz.0.694: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 65.588043][ T5901] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.694: Bad quota inode: 4, type: 1 [ 65.600974][ T5901] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.616340][ T5901] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 65.623821][ T5901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.683756][ T52] team0 (unregistering): Port device team_slave_1 removed [ 65.694918][ T52] team0 (unregistering): Port device team_slave_0 removed [ 65.732323][ T5644] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 65.746466][ T5901] syz_tun: entered promiscuous mode [ 65.752373][ T5901] vlan0: entered promiscuous mode [ 65.839584][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.848825][ T5909] loop5: detected capacity change from 0 to 2048 [ 65.859520][ T5916] loop7: detected capacity change from 0 to 128 [ 65.963077][ T5916] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.978851][ T5916] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.009725][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.067923][ T5578] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.130184][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.130603][ T5946] delete_channel: no stack [ 66.199296][ T5949] __nla_validate_parse: 1 callbacks suppressed [ 66.199356][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.5.705'. [ 66.216759][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.223849][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.236230][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.243304][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.273328][ T5644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.283862][ T5644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.358244][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.480440][ T5983] loop7: detected capacity change from 0 to 4096 [ 66.517095][ T5992] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 66.535474][ T5983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.650690][ T5644] veth0_vlan: entered promiscuous mode [ 66.672670][ T5644] veth1_vlan: entered promiscuous mode [ 66.697420][ T5644] veth0_macvtap: entered promiscuous mode [ 66.731170][ T5644] veth1_macvtap: entered promiscuous mode [ 66.739107][ T5578] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.804918][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.838105][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.871279][ T6039] loop7: detected capacity change from 0 to 512 [ 66.878204][ T6039] EXT4-fs: Ignoring removed nobh option [ 66.912290][ T53] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.940400][ T6039] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 66.973079][ T6053] syzkaller0: entered promiscuous mode [ 66.978745][ T6053] syzkaller0: entered allmulticast mode [ 66.998711][ T53] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.019134][ T6056] loop0: detected capacity change from 0 to 1024 [ 67.035561][ T6039] EXT4-fs (loop7): 1 truncate cleaned up [ 67.047888][ T53] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.079025][ T6039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.093929][ T53] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.136538][ T6039] EXT4-fs error (device loop7): ext4_xattr_block_find:1879: inode #15: comm syz.7.718: corrupted xattr block 33: invalid header [ 67.195752][ T6039] EXT4-fs (loop7): Remounting filesystem read-only [ 67.260473][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 67.273700][ T6088] xt_time: unknown flags 0xc [ 67.349374][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 67.358252][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 67.426210][ T6102] loop5: detected capacity change from 0 to 512 [ 67.449017][ T6102] EXT4-fs (loop5): 1 orphan inode deleted [ 67.449041][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 67.468095][ T6105] syzkaller0: entered promiscuous mode [ 67.473938][ T6105] syzkaller0: entered allmulticast mode [ 67.480092][ T6102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.654887][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.680704][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.750'. [ 67.734446][ T6135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.751'. [ 67.766697][ T5578] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.778591][ T6137] loop5: detected capacity change from 0 to 512 [ 67.792369][ T6137] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.873998][ T3942] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 67.967206][ T6155] veth0_virt_wifi: entered promiscuous mode [ 68.004171][ T6158] syzkaller1: entered promiscuous mode [ 68.009774][ T6158] syzkaller1: entered allmulticast mode [ 68.074140][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.5.765'. [ 68.267222][ T6177] loop0: detected capacity change from 0 to 128 [ 68.310600][ T6181] loop5: detected capacity change from 0 to 1024 [ 68.394430][ T6185] netlink: 176 bytes leftover after parsing attributes in process `syz.0.773'. [ 68.436755][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.7.775'. [ 68.512889][ T6189] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.657887][ T6200] tmpfs: Bad value for 'mpol' [ 68.911630][ T6213] loop8: detected capacity change from 0 to 1024 [ 69.197472][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 69.197489][ T29] audit: type=1400 audit(1769780658.832:2722): avc: denied { create } for pid=6232 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.284104][ T29] audit: type=1400 audit(1769780658.832:2723): avc: denied { getopt } for pid=6232 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.304311][ T29] audit: type=1400 audit(1769780658.882:2724): avc: denied { write } for pid=6234 comm="syz.0.797" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.327822][ T29] audit: type=1400 audit(1769780658.892:2725): avc: denied { setcurrent } for pid=6239 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 69.526205][ T6273] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 69.554201][ T6272] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 69.566001][ T6272] bond2 (unregistering): Released all slaves [ 69.823854][ T6303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6303 comm=syz.1.825 [ 69.848894][ T6305] syzkaller0: entered promiscuous mode [ 69.854699][ T6305] syzkaller0: entered allmulticast mode [ 69.988889][ T6320] loop7: detected capacity change from 0 to 1024 [ 70.001245][ T6320] ext4: Unknown parameter 'smackfsfloor' [ 70.041775][ T29] audit: type=1326 audit(1769780659.682:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6319 comm="syz.7.831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f516b09aeb9 code=0x0 [ 70.163473][ T6326] loop5: detected capacity change from 0 to 2048 [ 70.198791][ T6326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.220475][ T6335] openvswitch: netlink: Flow key attr not present in new flow. [ 70.227395][ T6326] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.254067][ T6326] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.834: bg 0: block 345: padding at end of block bitmap is not set [ 70.268834][ T29] audit: type=1400 audit(1769780659.892:2727): avc: denied { setattr } for pid=6325 comm="syz.5.834" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.309484][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.373062][ T6348] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 70.477665][ T6360] loop5: detected capacity change from 0 to 128 [ 70.705164][ T6376] vlan2: entered allmulticast mode [ 70.710376][ T6376] gretap0: entered allmulticast mode [ 71.144999][ T6409] delete_channel: no stack [ 71.218345][ T6414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=6414 comm=syz.7.869 [ 71.261236][ T6411] netlink: 'syz.7.869': attribute type 2 has an invalid length. [ 71.268947][ T6411] __nla_validate_parse: 20 callbacks suppressed [ 71.268960][ T6411] netlink: 10 bytes leftover after parsing attributes in process `syz.7.869'. [ 71.288958][ T6420] netlink: 7688 bytes leftover after parsing attributes in process `syz.1.872'. [ 71.310040][ T6422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.352037][ T29] audit: type=1326 audit(1769780660.972:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.8.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e2b0aeb9 code=0x7ff00000 [ 71.375656][ T29] audit: type=1326 audit(1769780660.972:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.8.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e2b0aeb9 code=0x7ff00000 [ 71.399028][ T29] audit: type=1326 audit(1769780660.972:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.8.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e2b0aeb9 code=0x7ff00000 [ 71.422688][ T29] audit: type=1326 audit(1769780660.972:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.8.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e2b0aeb9 code=0x7ff00000 [ 71.470317][ T6434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.877'. [ 71.538590][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.7.879'. [ 72.066967][ T6486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=6486 comm=syz.5.899 [ 72.143044][ T6498] delete_channel: no stack [ 72.256517][ T6508] syzkaller0: entered promiscuous mode [ 72.262124][ T6508] syzkaller0: entered allmulticast mode [ 72.665030][ T6541] netlink: 132 bytes leftover after parsing attributes in process `syz.7.920'. [ 72.718444][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.921'. [ 72.766112][ T6544] loop7: detected capacity change from 0 to 512 [ 72.773157][ T6544] ext4: Bad value for 'debug_want_extra_isize' [ 72.784999][ T6544] netlink: 'syz.7.921': attribute type 3 has an invalid length. [ 72.795826][ T6544] loop7: detected capacity change from 0 to 512 [ 72.813648][ T6544] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 72.835525][ T6544] EXT4-fs (loop7): orphan cleanup on readonly fs [ 72.846093][ T6544] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 72.862925][ T6544] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 72.871524][ T6544] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #16: comm syz.7.921: invalid fast symlink length 9000 [ 72.892189][ T6544] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.921: couldn't read orphan inode 16 (err -117) [ 72.905074][ T6544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.951076][ T6549] delete_channel: no stack [ 72.997601][ T5578] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.012706][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'. [ 73.050695][ T6557] loop5: detected capacity change from 0 to 2048 [ 73.067584][ T6557] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.110824][ T6557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.124491][ T6557] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.161639][ T6573] loop7: detected capacity change from 0 to 128 [ 73.461475][ T6584] delete_channel: no stack [ 73.511180][ T6571] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 73.680165][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.937'. [ 73.689445][ T6597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.757326][ T6601] syzkaller0: entered promiscuous mode [ 73.763114][ T6601] syzkaller0: entered allmulticast mode [ 73.837618][ T36] IPVS: starting estimator thread 0... [ 73.889640][ T6603] veth1: entered promiscuous mode [ 73.898507][ T6603] vlan1: entered promiscuous mode [ 73.950814][ T6604] IPVS: using max 2640 ests per chain, 132000 per kthread [ 74.078675][ T6609] loop7: detected capacity change from 0 to 1024 [ 74.228666][ T6616] loop8: detected capacity change from 0 to 128 [ 74.273405][ T29] kauditd_printk_skb: 4293 callbacks suppressed [ 74.273421][ T29] audit: type=1326 audit(1769780663.912:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.8.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e2b0aeb9 code=0x7ffc0000 [ 74.303298][ T29] audit: type=1326 audit(1769780663.912:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.8.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e2b0aeb9 code=0x7ffc0000 [ 74.320888][ T6615] loop7: detected capacity change from 0 to 512 [ 74.365063][ T6615] EXT4-fs (loop7): orphan cleanup on readonly fs [ 74.383215][ T6615] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.947: corrupted in-inode xattr: invalid size in ea xattr [ 74.418031][ T6615] EXT4-fs (loop7): Remounting filesystem read-only [ 74.446443][ T6615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.459425][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.471829][ T29] audit: type=1326 audit(1769780663.912:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.8.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f62e2b0aeb9 code=0x7ffc0000 [ 74.495343][ T29] audit: type=1326 audit(1769780663.912:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.8.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e2b0aeb9 code=0x7ffc0000 [ 74.519097][ T29] audit: type=1326 audit(1769780663.912:7026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.8.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62e2b0aeb9 code=0x7ffc0000 [ 74.542508][ T29] audit: type=1326 audit(1769780663.912:7027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.8.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e2b0aeb9 code=0x7ffc0000 [ 74.566040][ T29] audit: type=1326 audit(1769780663.912:7028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.8.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62e2b0aeb9 code=0x7ffc0000 [ 74.589813][ T29] audit: type=1326 audit(1769780663.912:7029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.8.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e2b0aeb9 code=0x7ffc0000 [ 74.613247][ T29] audit: type=1326 audit(1769780663.912:7030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.8.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f62e2b0aeb9 code=0x7ffc0000 [ 74.636578][ T29] audit: type=1326 audit(1769780663.912:7031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.8.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e2b0aeb9 code=0x7ffc0000 [ 74.650203][ T6625] syzkaller0: entered promiscuous mode [ 74.665463][ T6625] syzkaller0: entered allmulticast mode [ 74.672116][ T5578] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.718819][ T6630] loop7: detected capacity change from 0 to 128 [ 74.747400][ T6636] netlink: 9 bytes leftover after parsing attributes in process `syz.5.957'. [ 74.757509][ T6636] netlink: 9 bytes leftover after parsing attributes in process `syz.5.957'. [ 74.812581][ T6632] vlan2: entered promiscuous mode [ 74.818010][ T6632] veth0: entered promiscuous mode [ 75.070806][ T6665] syzkaller0: entered promiscuous mode [ 75.076313][ T6665] syzkaller0: entered allmulticast mode [ 75.427017][ T6692] 9p: Bad value for 'rfdno' [ 75.473838][ T6696] FAULT_INJECTION: forcing a failure. [ 75.473838][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 75.486604][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.0.983 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.486740][ T6696] Tainted: [W]=WARN [ 75.486747][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.486771][ T6696] Call Trace: [ 75.486837][ T6696] [ 75.486845][ T6696] __dump_stack+0x1d/0x30 [ 75.486874][ T6696] dump_stack_lvl+0x95/0xd0 [ 75.486965][ T6696] dump_stack+0x15/0x1b [ 75.486986][ T6696] should_fail_ex+0x263/0x280 [ 75.487091][ T6696] should_failslab+0x8c/0xb0 [ 75.487117][ T6696] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 75.487145][ T6696] ? __d_alloc+0x37/0x340 [ 75.487175][ T6696] __d_alloc+0x37/0x340 [ 75.487283][ T6696] d_alloc_parallel+0x54/0xce0 [ 75.487317][ T6696] ? security_inode_permission+0x4a/0xa0 [ 75.487341][ T6696] ? __rcu_read_unlock+0x4e/0x70 [ 75.487391][ T6696] ? __d_lookup+0x316/0x340 [ 75.487478][ T6696] ? make_vfsuid+0x49/0xa0 [ 75.487508][ T6696] __lookup_slow+0x96/0x260 [ 75.487603][ T6696] lookup_slow+0x3c/0x60 [ 75.487633][ T6696] path_lookupat+0x2f7/0x500 [ 75.487666][ T6696] filename_lookup+0x190/0x390 [ 75.487706][ T6696] user_path_at+0x3e/0x130 [ 75.487791][ T6696] __se_sys_mount+0x25b/0x2e0 [ 75.487814][ T6696] ? fput+0x8f/0xc0 [ 75.487907][ T6696] __x64_sys_mount+0x67/0x80 [ 75.487954][ T6696] x64_sys_call+0x2cca/0x3000 [ 75.487982][ T6696] do_syscall_64+0xc0/0x2a0 [ 75.488077][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.488154][ T6696] RIP: 0033:0x7fe9b35faeb9 [ 75.488229][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.488249][ T6696] RSP: 002b:00007fe9b2057028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.488272][ T6696] RAX: ffffffffffffffda RBX: 00007fe9b3875fa0 RCX: 00007fe9b35faeb9 [ 75.488288][ T6696] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 75.488335][ T6696] RBP: 00007fe9b2057090 R08: 00002000000003c0 R09: 0000000000000000 [ 75.488350][ T6696] R10: 0000000002000040 R11: 0000000000000246 R12: 0000000000000001 [ 75.488386][ T6696] R13: 00007fe9b3876038 R14: 00007fe9b3875fa0 R15: 00007ffdc4b376d8 [ 75.488408][ T6696] [ 75.509528][ T6700] tipc: Enabling of bearer rejected, failed to enable media [ 75.700252][ T6714] delete_channel: no stack [ 75.714448][ T6705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6705 comm=syz.0.988 [ 75.917435][ T6731] loop5: detected capacity change from 0 to 1024 [ 76.008105][ T6737] FAULT_INJECTION: forcing a failure. [ 76.008105][ T6737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.021374][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.8.1000 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.021412][ T6737] Tainted: [W]=WARN [ 76.021419][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.021487][ T6737] Call Trace: [ 76.021494][ T6737] [ 76.021503][ T6737] __dump_stack+0x1d/0x30 [ 76.021598][ T6737] dump_stack_lvl+0x95/0xd0 [ 76.021686][ T6737] dump_stack+0x15/0x1b [ 76.021735][ T6737] should_fail_ex+0x263/0x280 [ 76.021913][ T6737] should_fail+0xb/0x20 [ 76.021943][ T6737] should_fail_usercopy+0x1a/0x20 [ 76.022007][ T6737] _copy_to_iter+0x251/0xea0 [ 76.022120][ T6737] copy_page_to_iter+0x18f/0x2d0 [ 76.022141][ T6737] process_vm_rw+0x6c6/0x9c0 [ 76.022260][ T6737] __x64_sys_process_vm_readv+0x78/0x90 [ 76.022296][ T6737] x64_sys_call+0x148a/0x3000 [ 76.022433][ T6737] do_syscall_64+0xc0/0x2a0 [ 76.022531][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.022555][ T6737] RIP: 0033:0x7f62e2b0aeb9 [ 76.022578][ T6737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.022724][ T6737] RSP: 002b:00007f62e1567028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 76.022747][ T6737] RAX: ffffffffffffffda RBX: 00007f62e2d85fa0 RCX: 00007f62e2b0aeb9 [ 76.022764][ T6737] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000059 [ 76.022779][ T6737] RBP: 00007f62e1567090 R08: 0000000000000286 R09: 0000000000000000 [ 76.022837][ T6737] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000002 [ 76.022852][ T6737] R13: 00007f62e2d86038 R14: 00007f62e2d85fa0 R15: 00007ffd29d6f0f8 [ 76.022876][ T6737] [ 76.224657][ T6753] delete_channel: no stack [ 76.230546][ T6755] openvswitch: netlink: Missing key (keys=40, expected=80) [ 76.257914][ T6760] delete_channel: no stack [ 76.274156][ T6764] loop7: detected capacity change from 0 to 128 [ 76.439093][ T6785] __nla_validate_parse: 6 callbacks suppressed [ 76.439111][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 76.455590][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 76.465896][ T6787] delete_channel: no stack [ 76.471802][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 76.534326][ T6791] syzkaller0: entered promiscuous mode [ 76.539870][ T6791] syzkaller0: entered allmulticast mode [ 76.569768][ T6799] delete_channel: no stack [ 76.658061][ T6809] bridge_slave_0 (unregistering): left allmulticast mode [ 76.665285][ T6809] bridge_slave_0 (unregistering): left promiscuous mode [ 76.672376][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.749150][ T6820] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1022'. [ 76.779046][ T6822] loop8: detected capacity change from 0 to 512 [ 76.837082][ T6829] lo speed is unknown, defaulting to 1000 [ 76.843845][ T6822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.863241][ T6829] lo speed is unknown, defaulting to 1000 [ 76.891203][ T6829] lo speed is unknown, defaulting to 1000 [ 76.921319][ T6829] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.941085][ T6829] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.983210][ T6829] lo speed is unknown, defaulting to 1000 [ 76.993369][ T6829] lo speed is unknown, defaulting to 1000 [ 77.033105][ T6854] FAULT_INJECTION: forcing a failure. [ 77.033105][ T6854] name failslab, interval 1, probability 0, space 0, times 0 [ 77.033116][ T5644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.055009][ T6854] CPU: 1 UID: 0 PID: 6854 Comm: syz.5.1035 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.055056][ T6854] Tainted: [W]=WARN [ 77.055064][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.055078][ T6854] Call Trace: [ 77.055086][ T6854] [ 77.055094][ T6854] __dump_stack+0x1d/0x30 [ 77.055121][ T6854] dump_stack_lvl+0x95/0xd0 [ 77.055226][ T6854] dump_stack+0x15/0x1b [ 77.055246][ T6854] should_fail_ex+0x263/0x280 [ 77.055275][ T6854] should_failslab+0x8c/0xb0 [ 77.055301][ T6854] kmem_cache_alloc_noprof+0x68/0x490 [ 77.055353][ T6854] ? mempool_alloc_slab+0x1a/0x30 [ 77.055393][ T6854] mempool_alloc_slab+0x1a/0x30 [ 77.055433][ T6854] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 77.055576][ T6854] mempool_init_node+0x147/0x250 [ 77.055610][ T6854] ? __pfx_mempool_free_slab+0x10/0x10 [ 77.055674][ T6854] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 77.055762][ T6854] mempool_init_noprof+0x3a/0x50 [ 77.055820][ T6854] bioset_init+0x37b/0x480 [ 77.055848][ T6854] ? __pfx_no_op+0x10/0x10 [ 77.055885][ T6854] ? percpu_ref_init+0x1dd/0x250 [ 77.055953][ T6854] mddev_init+0xfc/0x420 [ 77.056030][ T6854] ? __pfx_md_probe+0x10/0x10 [ 77.056058][ T6854] md_alloc+0x99/0xa10 [ 77.056111][ T6854] ? vsscanf+0x11c7/0x1270 [ 77.056201][ T6854] ? __pfx_md_probe+0x10/0x10 [ 77.056229][ T6854] md_alloc_and_put+0x18/0x170 [ 77.056260][ T6854] md_probe+0x68/0x80 [ 77.056366][ T6854] blk_request_module+0x1bd/0x1e0 [ 77.056418][ T6854] blkdev_get_no_open+0x4b/0x100 [ 77.056456][ T6854] bdev_file_open_by_dev+0xa5/0x250 [ 77.056528][ T6854] swsusp_check+0x3f/0x290 [ 77.056632][ T6854] software_resume+0x41/0x2f0 [ 77.056682][ T6854] resume_store+0x2d9/0x3d0 [ 77.056725][ T6854] ? __pfx_resume_store+0x10/0x10 [ 77.056761][ T6854] kobj_attr_store+0x4a/0x70 [ 77.056784][ T6854] ? __pfx_kobj_attr_store+0x10/0x10 [ 77.056812][ T6854] sysfs_kf_write+0xfe/0x120 [ 77.056837][ T6854] ? __pfx_sysfs_kf_write+0x10/0x10 [ 77.056859][ T6854] kernfs_fop_write_iter+0x1eb/0x300 [ 77.056973][ T6854] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 77.057059][ T6854] vfs_write+0x5a6/0x9f0 [ 77.057092][ T6854] ksys_write+0xdc/0x1a0 [ 77.057116][ T6854] __x64_sys_write+0x40/0x50 [ 77.057138][ T6854] x64_sys_call+0x2847/0x3000 [ 77.057167][ T6854] do_syscall_64+0xc0/0x2a0 [ 77.057260][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.057280][ T6854] RIP: 0033:0x7fe8f17aaeb9 [ 77.057298][ T6854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.057326][ T6854] RSP: 002b:00007fe8f0207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.057396][ T6854] RAX: ffffffffffffffda RBX: 00007fe8f1a25fa0 RCX: 00007fe8f17aaeb9 [ 77.057451][ T6854] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 77.057543][ T6854] RBP: 00007fe8f0207090 R08: 0000000000000000 R09: 0000000000000000 [ 77.057561][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.057573][ T6854] R13: 00007fe8f1a26038 R14: 00007fe8f1a25fa0 R15: 00007ffe73941578 [ 77.057595][ T6854] [ 77.068137][ T6851] syzkaller0: entered promiscuous mode [ 77.072338][ T6854] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.075932][ T6851] syzkaller0: entered allmulticast mode [ 77.397436][ T6829] lo speed is unknown, defaulting to 1000 [ 77.407921][ T6829] lo speed is unknown, defaulting to 1000 [ 77.442406][ T6829] lo speed is unknown, defaulting to 1000 [ 77.464432][ T6829] lo speed is unknown, defaulting to 1000 [ 77.560707][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1039'. [ 77.570707][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1039'. [ 77.611831][ T6884] loop8: detected capacity change from 0 to 128 [ 77.857507][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 77.897816][ T6917] loop7: detected capacity change from 0 to 1024 [ 77.925495][ T6917] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 77.956552][ T6917] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 77.981425][ T6917] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.043552][ T6935] loop8: detected capacity change from 0 to 2048 [ 78.133772][ T5578] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.166067][ T6935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.185754][ T6949] FAULT_INJECTION: forcing a failure. [ 78.185754][ T6949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.198937][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: syz.7.1059 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.199022][ T6949] Tainted: [W]=WARN [ 78.199030][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.199045][ T6949] Call Trace: [ 78.199052][ T6949] [ 78.199060][ T6949] __dump_stack+0x1d/0x30 [ 78.199083][ T6949] dump_stack_lvl+0x95/0xd0 [ 78.199103][ T6949] dump_stack+0x15/0x1b [ 78.199133][ T6949] should_fail_ex+0x263/0x280 [ 78.199175][ T6949] should_fail+0xb/0x20 [ 78.199204][ T6949] should_fail_usercopy+0x1a/0x20 [ 78.199234][ T6949] _copy_from_user+0x1c/0xb0 [ 78.199254][ T6949] get_user_ifreq+0x52/0x110 [ 78.199276][ T6949] inet_ioctl+0x24f/0x3a0 [ 78.199340][ T6949] sock_do_ioctl+0x73/0x230 [ 78.199364][ T6949] sock_ioctl+0x41b/0x610 [ 78.199388][ T6949] ? mutex_lock+0x57/0x90 [ 78.199429][ T6949] ? __pfx_sock_ioctl+0x10/0x10 [ 78.199475][ T6949] __se_sys_ioctl+0xce/0x140 [ 78.199511][ T6949] __x64_sys_ioctl+0x43/0x50 [ 78.199541][ T6949] x64_sys_call+0x14b0/0x3000 [ 78.199622][ T6949] do_syscall_64+0xc0/0x2a0 [ 78.199653][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.199758][ T6949] RIP: 0033:0x7f516b09aeb9 [ 78.199776][ T6949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.199795][ T6949] RSP: 002b:00007f5169af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.199835][ T6949] RAX: ffffffffffffffda RBX: 00007f516b315fa0 RCX: 00007f516b09aeb9 [ 78.199849][ T6949] RDX: 0000200000000840 RSI: 0000000000008919 RDI: 0000000000000003 [ 78.199873][ T6949] RBP: 00007f5169af7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.199903][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.199914][ T6949] R13: 00007f516b316038 R14: 00007f516b315fa0 R15: 00007ffe2f4db108 [ 78.199957][ T6949] [ 78.402662][ T6935] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 78.499640][ T6956] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1061'. [ 78.592708][ T5644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.758778][ T6986] delete_channel: no stack [ 78.827647][ T6991] veth1: entered promiscuous mode [ 78.833622][ T6991] vlan0: entered promiscuous mode [ 78.972158][ T7002] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1073'. [ 79.096118][ T7025] syzkaller0: entered promiscuous mode [ 79.101838][ T7025] syzkaller0: entered allmulticast mode [ 79.223784][ T7036] xt_time: unknown flags 0xc [ 79.470698][ T3327] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.505183][ T7069] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 79.527571][ T3327] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.601568][ T3327] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.685665][ T3327] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.729244][ T7099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1099'. [ 79.743748][ T7074] lo speed is unknown, defaulting to 1000 [ 79.848202][ T3327] bridge_slave_1: left allmulticast mode [ 79.854039][ T3327] bridge_slave_1: left promiscuous mode [ 79.859724][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.869656][ T3327] bridge_slave_0: left allmulticast mode [ 79.875374][ T3327] bridge_slave_0: left promiscuous mode [ 79.881203][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.894722][ T7127] loop8: detected capacity change from 0 to 512 [ 79.914118][ T7127] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 79.930431][ T7127] EXT4-fs (loop8): orphan file too big: 8388608 [ 79.937068][ T7127] EXT4-fs (loop8): mount failed [ 80.013374][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.023051][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.032596][ T3327] bond0 (unregistering): Released all slaves [ 80.040082][ T3327] bond1 (unregistering): Released all slaves [ 80.049986][ T7114] syzkaller1: entered promiscuous mode [ 80.055571][ T7114] syzkaller1: entered allmulticast mode [ 80.068833][ T7112] syzkaller1: entered promiscuous mode [ 80.074457][ T7112] syzkaller1: entered allmulticast mode [ 80.103263][ T7143] ================================================================== [ 80.111388][ T7143] BUG: KCSAN: data-race in bdev_statx / queue_limits_commit_update [ 80.119402][ T7143] [ 80.121710][ T7143] read to 0xffff8881019edef0 of 4 bytes by task 3303 on cpu 1: [ 80.129235][ T7143] bdev_statx+0x295/0x2d0 [ 80.133567][ T7143] vfs_getattr_nosec+0x1b6/0x1e0 [ 80.138494][ T7143] __se_sys_newfstat+0x96/0x460 [ 80.143340][ T7143] __x64_sys_newfstat+0x31/0x40 [ 80.148186][ T7143] x64_sys_call+0x2c51/0x3000 [ 80.152848][ T7143] do_syscall_64+0xc0/0x2a0 [ 80.157427][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.163313][ T7143] [ 80.165634][ T7143] write to 0xffff8881019edeb0 of 192 bytes by task 7143 on cpu 0: [ 80.173591][ T7143] queue_limits_commit_update+0x4b/0x160 [ 80.179230][ T7143] loop_configure+0x78c/0x9c0 [ 80.183907][ T7143] lo_ioctl+0x1e1/0x13a0 [ 80.188231][ T7143] blkdev_ioctl+0x387/0x460 [ 80.192731][ T7143] __se_sys_ioctl+0xce/0x140 [ 80.197401][ T7143] __x64_sys_ioctl+0x43/0x50 [ 80.202047][ T7143] x64_sys_call+0x14b0/0x3000 [ 80.206733][ T7143] do_syscall_64+0xc0/0x2a0 [ 80.211305][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.217402][ T7143] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 80.219722][ T7143] Reported by Kernel Concurrency Sanitizer on: [ 80.225870][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.8.1110 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.237153][ T7143] Tainted: [W]=WARN [ 80.241087][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.251220][ T7143] ================================================================== [ 80.264705][ T3327] hsr_slave_0: left promiscuous mode [ 80.283041][ T7143] loop8: detected capacity change from 0 to 128 [ 80.313186][ T3327] hsr_slave_1: left promiscuous mode [ 80.327700][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.335172][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.343198][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.350581][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.372578][ T3327] veth0_virt_wifi: left promiscuous mode [ 80.378331][ T3327] veth1_macvtap: left promiscuous mode [ 80.388464][ T3327] veth0_macvtap: left promiscuous mode [ 80.395011][ T3327] veth1_vlan: left promiscuous mode [ 80.400275][ T3327] veth0_vlan: left promiscuous mode [ 80.833546][ T3327] IPVS: stop unused estimator thread 0... [ 80.915493][ T3327] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.973399][ T3327] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.033447][ T3327] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.073920][ T3327] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.140936][ T3327] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.174157][ T3327] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.238562][ T3327] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.279249][ T3327] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.355629][ T3327] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.405247][ T3327] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.444617][ T3327] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.503721][ T3327] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.752073][ T3327] bridge_slave_1: left allmulticast mode [ 81.757792][ T3327] bridge_slave_1: left promiscuous mode [ 81.763638][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.771458][ T3327] bridge_slave_0: left allmulticast mode [ 81.777077][ T3327] bridge_slave_0: left promiscuous mode [ 81.782830][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.791743][ T3327] bridge_slave_1: left allmulticast mode [ 81.797360][ T3327] bridge_slave_1: left promiscuous mode [ 81.803213][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.811755][ T3327] bridge_slave_0: left allmulticast mode [ 81.817403][ T3327] bridge_slave_0: left promiscuous mode [ 81.823207][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.831514][ T3327] bridge_slave_1: left allmulticast mode [ 81.837141][ T3327] bridge_slave_1: left promiscuous mode [ 81.842786][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.850573][ T3327] bridge_slave_0: left allmulticast mode [ 81.856249][ T3327] bridge_slave_0: left promiscuous mode [ 81.862078][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.873566][ T3327] bridge0: port 3(batadv0) entered disabled state [ 81.880493][ T3327] bridge_slave_1: left allmulticast mode [ 81.886297][ T3327] bridge_slave_1: left promiscuous mode [ 81.892065][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.053599][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.063360][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.072599][ T3327] bond0 (unregistering): Released all slaves [ 82.162835][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.172592][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.181972][ T3327] bond0 (unregistering): Released all slaves [ 82.189125][ T3327] bond1 (unregistering): Released all slaves [ 82.253732][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.263811][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.273291][ T3327] bond0 (unregistering): Released all slaves [ 82.332697][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.341842][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.350800][ T3327] bond0 (unregistering): Released all slaves [ 82.380944][ T3327] tipc: Left network mode [ 82.389156][ T3327] tipc: Left network mode [ 82.400093][ T3327] hsr_slave_0: left promiscuous mode [ 82.405924][ T3327] hsr_slave_1: left promiscuous mode [ 82.412351][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.419777][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.427789][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.435326][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.444756][ T3327] hsr_slave_0: left promiscuous mode [ 82.450413][ T3327] hsr_slave_1: left promiscuous mode [ 82.456412][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.463886][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.472259][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.479654][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.488638][ T3327] hsr_slave_0: left promiscuous mode [ 82.494301][ T3327] hsr_slave_1: left promiscuous mode [ 82.500158][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.507667][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.515210][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.522630][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.531365][ T3327] hsr_slave_0: left promiscuous mode [ 82.537529][ T3327] hsr_slave_1: left promiscuous mode [ 82.543290][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.551184][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.563927][ T3327] veth1_macvtap: left promiscuous mode [ 82.569531][ T3327] veth0_macvtap: left promiscuous mode [ 82.575131][ T3327] veth1_vlan: left promiscuous mode [ 82.580372][ T3327] veth0_vlan: left promiscuous mode [ 82.586493][ T3327] veth1_macvtap: left promiscuous mode [ 82.592097][ T3327] veth0_macvtap: left promiscuous mode [ 82.597582][ T3327] veth1_vlan: left promiscuous mode [ 82.602882][ T3327] veth0_vlan: left promiscuous mode [ 82.608780][ T3327] veth1_macvtap: left promiscuous mode [ 82.614646][ T3327] veth0_macvtap: left promiscuous mode [ 82.620161][ T3327] veth1_vlan: left promiscuous mode [ 82.625540][ T3327] veth0_vlan: left promiscuous mode [ 82.742406][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 82.751862][ T3327] team0 (unregistering): Port device team_slave_0 removed [ 82.802343][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 82.812095][ T3327] team0 (unregistering): Port device team_slave_0 removed [ 82.862620][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 82.873041][ T3327] team0 (unregistering): Port device team_slave_0 removed [ 82.927097][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 82.936470][ T3327] team0 (unregistering): Port device team_slave_0 removed