last executing test programs: 7m24.588656249s ago: executing program 32 (id=529): r0 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002000ff7fffff"], 0x28}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x2, 0x0}) 5m33.317845296s ago: executing program 5 (id=1589): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) ftruncate(r2, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff7f0000ff0800450f0028006700000406907800000000ac14140e4e234e21"], 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008010) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x810) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendto(r4, 0x0, 0x0, 0x20000090, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x10120, 0x0) 5m32.578281861s ago: executing program 5 (id=1596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="142000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x4000000) 5m32.576203012s ago: executing program 5 (id=1598): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0xd0, 0x0, {0x0, 0x7a010000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x7, 0x0, 0x2, 0x0, 0x8], 0x4, 0x5}, {0x1, [0xb, 0x4, 0x4, 0x4, 0x1, 0x2], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 5m32.550982983s ago: executing program 5 (id=1599): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000016c0)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000001700)={0x3, r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000000000008410000006c0018000002886574680000000000000000000000000400"/93], 0x68}, 0x1, 0x0, 0x0, 0x20040840}, 0x24000050) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe53, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e9ff0000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001000000005f000000200002000a"], 0x60}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x150, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0xf, [0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e22, 0x4e21, 0x4e23, 0x4e24, 0x4e20, 0x4e20, 0x4e22, 0x4e21, 0x4e22, 0x4e24, 0x4e22], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0x8, 0x4d3, 0x401, 'snmp\x00', 'syz1\x00', {0x794}}}}, {{@ip={@private=0xa010102, @broadcast, 0x100fffffe, 0x0, 'netdevsim0\x00', 'syz_tun\x00', {}, {0xff}, 0x40, 0x1, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x0, 0x5, 0x1], 0x5}, {0x1, [0x1, 0x2, 0x7, 0x2, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x3, 0x1000, [0x0, 0x2, 0x8859, 0xa, 0x7], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f00000006c0)=""/4096}, &(0x7f00000000c0)=0x78) sendmsg$NL80211_CMD_GET_WIPHY(r1, 0x0, 0x0) 5m32.495063536s ago: executing program 5 (id=1600): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0xb093, 0x800000, 0x7, 0x0, 0x6, 0x6, 0x2, 0x0, 0xf799a48, 0x0, 0xde61}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x800000, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m32.054216978s ago: executing program 5 (id=1605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x18b4dd456fe35638}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x1000000, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) 5m17.038918179s ago: executing program 33 (id=1605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x18b4dd456fe35638}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x1000000, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) 3m34.665173576s ago: executing program 6 (id=2704): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe1045, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500030000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 3m34.57726007s ago: executing program 6 (id=2707): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x2f) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000001180)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0x5, 0xc, 0x0, 0xbffffffc, 0x3, 0x32, 0x7fff, 0x7, 0x3, 0xe, 0x5f, 0x4, 0xd88, 0x200002, 0x80000000, 0x5, 0x4001ff, 0xfffffff9, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) flock(0xffffffffffffffff, 0x2) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000400)=""/230, &(0x7f0000000040)=0xe6) r7 = openat(0xffffffffffffff9c, 0x0, 0x20240, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x1c1182, 0x9b) sendfile(r8, r7, 0x0, 0x3ffff) 3m33.723007373s ago: executing program 6 (id=2714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a00), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x108, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1b6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe4ec}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x31}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x82}, 0x44800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xb0}, 0x0, 0x8400, 0x1}) r5 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe15, 0x10, 0x3, 0x30e}, &(0x7f0000000040)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f00000005c0)=[{0x1, 0x5, 0x5, 0xdad}, {0x2, 0x81, 0x3, 0x4}, {0x4, 0x4, 0x7f, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xffffffffffffff8f, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_QUANTUM={0x8}]}}, @TCA_STAB={0xfffffffffffffcee, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xff, 0x5, 0x7, 0x1, 0xc, 0xc1ba2cb}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r10, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) sendmsg$can_raw(r10, &(0x7f0000000580)={&(0x7f0000000380)={0x1d, r9}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=@can={{0x1, 0x1, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "8ecdc81959ab44b6"}, 0x10}, 0x1, 0x0, 0x0, 0x4044080}, 0x80) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) socket(0x1, 0x3, 0x0) io_uring_enter(r5, 0x47bc, 0x0, 0x21, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000840)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x800, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x189a720ed5a91794}, 0x4000801) 3m32.237439086s ago: executing program 6 (id=2720): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="34ff0500", @ANYRES16, @ANYBLOB="010425bd7000ffdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x1891a2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000009f3550a995dd89f851bc64dc2b7800"/42], 0x50) r2 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r2, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m32.069098904s ago: executing program 6 (id=2723): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f00000020c0)=""/4130, &(0x7f0000000000)=0x1022) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0xd}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x8200, 0x8, 0x0, r3}, 0x10) 3m31.594189288s ago: executing program 6 (id=2725): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x2000000, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x23, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) 3m31.592884308s ago: executing program 34 (id=2725): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x2000000, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x23, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) 1m45.124312267s ago: executing program 2 (id=3006): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4038, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) unshare(0x62000000) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000008a2b725424d6e11787f000001ac1414aa0bf58f78030100004500ceb933c54a1562ba7128d02802000089000081cd731fcc0edfa9a30fa96a5cd403c1b8d08c24e5de935a186ddc6f417042bc482b82f6410b89ba8bf43883572e3ffaeb821861c5d5b521c2b217ca4ca68e90fe1118ff4f4d25ba9e87f9317c5ad199430738138087e427426994d093edbffec2e7b10abeaa8ebd81959a184c452a03bbd2f3d4424b45f4a6b7e1bca6d91cef811e6733fa887d181d602dc1998b0897ebb1a9bde428e4cd064dc575f40e90e0cc2eaf6fc748cab0d263c604ce81d00199f19fb1b04e54bb3088a97fc5faeaf353e7a7b8a79a8106d2803be170465e515a97fd12a381a2db9b1beb3e4af6ab768a53de0f14668ce64cf78a5ef7040b177ba950f531bab2d41f2ef965f0f1428be71c137aae6ec80a3daf2b5d7c4663602aa7edadecd680543bbe34a7bfcfc3045cbb8ee48fa78d02"], 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) 1m44.098569648s ago: executing program 2 (id=3021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x4, 0xff}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0xf80}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f0004000000080004000200000006000200ff01000004001200060002"], 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x4, 0xff}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0xf80}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f0004000000080004000200000006000200ff01000004001200060002"], 0x70}}, 0x0) (async) 1m43.883215148s ago: executing program 2 (id=3023): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400fe0f1000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m43.882732828s ago: executing program 2 (id=3024): socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, 0x0, 0x0) r4 = socket(0x10, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000010) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x22, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd2c9645e408be402617d9bf0b7651d51116ef86fb", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = pidfd_getfd(r1, r1, 0x0) setns(r7, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) ioctl$TIOCGISO7816(r7, 0x80285442, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000380)={'\x00', 0xa, 0xbcbe, 0x7, 0xff, 0xffffffffffffffff, r0}) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000400), &(0x7f0000000440)) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, r8, &(0x7f0000000480)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f97}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$can_raw(0x1d, 0x3, 0x1) mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x7, 0x9}) socket$inet_udp(0x2, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x1) r9 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, 0x0, 0x1) 1m42.606419281s ago: executing program 2 (id=3033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000010000030900010073797a30000000002c000000030a010100000000000000000100fffc0900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480240001800b00010001400000000c0500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000020900010073797a3000000000140000001100010000000000000000000700000a00"/248], 0xf8}}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) openat$cgroup_ro(r2, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r3], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8805) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) 1m42.051208549s ago: executing program 2 (id=3037): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = socket$kcm(0x29, 0x7, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="99a2d4fba0f064f5c6accec72b611694c92b4d3b42c49207b7d373162b99f0fe52046b9e471addc9b2a9e6746e769b0715ccd322d5ab7e13d99c7938617483fb5b04b27556ee8ae4341b751b8b89964d393070bc753c108f541970b550a3241bdbb2f4b4d35d6f377189f72e8d933178c02aacee7e4b608e01a310383764948fdfd29332a312fde5ab32aab937b0bd8a3d197882765c9d426b", 0x99}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r3, 0x4, 0x6400) r4 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000109000/0x3000)=nil, 0x3000, 0x9) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x315000) write$sndseq(r5, &(0x7f0000000240)=[{0x16, 0x1, 0x10, 0x64, @time={0x6, 0x7}, {0xb, 0x3}, {0x5, 0x4}, @raw8={"21f4a075424e63663388fb3e"}}, {0x3, 0x9, 0x3, 0x9, @tick=0xb3, {0x5, 0x8}, {0x5, 0x3}, @raw8={"c7b60d59eca04a88d4736377"}}, {0x10, 0x9d, 0x3, 0x0, @tick=0x5618, {0x5, 0x6}, {0x4, 0x30}, @note={0xb4, 0x3, 0x6, 0xc0, 0x6}}, {0x0, 0x10, 0xfc, 0x7f, @tick=0xb3d6, {0x8, 0x5}, {0xfa, 0xff}, @quote={{0x5, 0x83}, 0x4, &(0x7f0000000200)={0x0, 0xa, 0x0, 0xc1, @time={0x6, 0x3}, {0x5a, 0x3}, {0x7, 0xe}, @raw32={[0x7, 0xfffffffb, 0x1ff]}}}}, {0x2, 0xd, 0x4, 0x61, @tick, {0xff, 0xd}, {0x5, 0x6}, @raw8={"4cb22ab0e59f237476675e81"}}, {0x8, 0xc, 0x65, 0xc, @tick, {0x4, 0x5}, {0x2, 0x6}, @connect={{0xe, 0xd}, {0x4, 0x8}}}], 0xa8) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)="9b15a242080f24a2ed2e57456f10cbd5ca0851e34b4e2b4551eb14414004fefbf56a7d2d", 0x24}], 0x1, 0x0) shmctl$SHM_STAT(r4, 0xd, &(0x7f00000004c0)=""/206) 1m42.02340956s ago: executing program 35 (id=3037): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = socket$kcm(0x29, 0x7, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="99a2d4fba0f064f5c6accec72b611694c92b4d3b42c49207b7d373162b99f0fe52046b9e471addc9b2a9e6746e769b0715ccd322d5ab7e13d99c7938617483fb5b04b27556ee8ae4341b751b8b89964d393070bc753c108f541970b550a3241bdbb2f4b4d35d6f377189f72e8d933178c02aacee7e4b608e01a310383764948fdfd29332a312fde5ab32aab937b0bd8a3d197882765c9d426b", 0x99}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r3, 0x4, 0x6400) r4 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000109000/0x3000)=nil, 0x3000, 0x9) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x315000) write$sndseq(r5, &(0x7f0000000240)=[{0x16, 0x1, 0x10, 0x64, @time={0x6, 0x7}, {0xb, 0x3}, {0x5, 0x4}, @raw8={"21f4a075424e63663388fb3e"}}, {0x3, 0x9, 0x3, 0x9, @tick=0xb3, {0x5, 0x8}, {0x5, 0x3}, @raw8={"c7b60d59eca04a88d4736377"}}, {0x10, 0x9d, 0x3, 0x0, @tick=0x5618, {0x5, 0x6}, {0x4, 0x30}, @note={0xb4, 0x3, 0x6, 0xc0, 0x6}}, {0x0, 0x10, 0xfc, 0x7f, @tick=0xb3d6, {0x8, 0x5}, {0xfa, 0xff}, @quote={{0x5, 0x83}, 0x4, &(0x7f0000000200)={0x0, 0xa, 0x0, 0xc1, @time={0x6, 0x3}, {0x5a, 0x3}, {0x7, 0xe}, @raw32={[0x7, 0xfffffffb, 0x1ff]}}}}, {0x2, 0xd, 0x4, 0x61, @tick, {0xff, 0xd}, {0x5, 0x6}, @raw8={"4cb22ab0e59f237476675e81"}}, {0x8, 0xc, 0x65, 0xc, @tick, {0x4, 0x5}, {0x2, 0x6}, @connect={{0xe, 0xd}, {0x4, 0x8}}}], 0xa8) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)="9b15a242080f24a2ed2e57456f10cbd5ca0851e34b4e2b4551eb14414004fefbf56a7d2d", 0x24}], 0x1, 0x0) shmctl$SHM_STAT(r4, 0xd, &(0x7f00000004c0)=""/206) 1m40.20118086s ago: executing program 3 (id=3053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000000000fdeeffffd40a00000400000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7379735f14af6d757461626c652c156973636172642c646f74732c71756965742c00"], 0x1, 0x2a6, &(0x7f0000000680)="$eJzs3T1rU10AB/DT9O2hDy2dRF086OQS2s4OLdJCMaBoI6gg3NJbDYlJyc2QFIc6uwiOfgNxdBPEL9Bv4VaE0qmTlXr7lqIIRttif78lf/I/53LOvXDueDduvHpWXc6Ky0krFKb7QmE6hMJ2XxgPhbBvLVx//eLNy3sPHt6aKZVm78Y4N7MwORVjHLvy8dHzd1c/tf6//37sw3BYH3+8sTn1ef3C+qWNrwtPK1msZLHeaMUkLjYarWSxlsalSlYtxninliZZGiv1LG129cu1xspKJyb1pdGRlWaaZTGpd2I17cRWI7aanZg8SSr1WCwW4+hIoBflt9s7O2FzJ/eDAUOnsChO0C+eP/+4I4f6fyFsrbXL7XL+m/dz86XZifjd4OGsrXa73H/QT+Z97O4Hw8heP3W833+1XMv73e7m7dKx+cNh6S/vHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPOrGA+MH/671W6X+/O++LM+T3PzpdmJvQHd/UC4PHBi2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnmSd1WpSq6VN4ffD7o08A8s4I2HobCxD6C2c9skEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6/7I/YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcV1lntZrUamnzT4UvF/MLH6lOe48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KtvAQAA//91oWgv") faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES64=r0, @ANYRESHEX=r1], 0xfe, 0x1231, &(0x7f00000024c0)="$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") syz_io_uring_setup(0x4000e42, 0x0, &(0x7f0000000140), 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x108242, 0x78e22799f4a46f8e) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x3) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9, 0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c092, 0x2, @perf_bp={&(0x7f00000001c0), 0x7}, 0xca865fba37b93b81, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0x2006, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x24, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)=0x1d0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @loopback}}}], 0x20}}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xf1, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000005940)=ANY=[@ANYBLOB="0c120000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf2505000000080005000200000058110380ad00050038abe87f607f7812984885c1bf3ecc8be47ac57e6cc3fd37e74317850999c86e4d7f6e9c2addff53bd0cadd5c53e037f001bc428477b826bd88207875787a1a221e884e215a2d7718ddb0e0aacbcfae476d268fd5741cefa90c8c2b69329143acafb51021205f7a8847d4211c49b211a30bf2b3ed53b15b1e2b06c78019ec9023e7abad7c525b0c7b2fdff533567744e4dfd8d2ff8f6a22bbd56206688ae71958fe2a45dc63c30e55e0000003800038034000180040003000800020047504c0008000100e5ba000008000100830000000500020000000000040003000800010004000000080002000800000004100500e52e1e44c1502fd61ffdb54a987781f0dcd083d45c9b93f8fa676076477727bae0a4b8b23e994ac26db4578964399c8661f826380424ded97b56eae495ccb44415b0c4184e7a18dc76ef01d9d0bf6f55b552fb1bcf769456daf821f61bf5ea5afe26f314fbc3ccc47cf610ffb2b0efabe3db6f165a41763dc1aab868a9a0a895bd20e49fba3186da2ee3fdc5071ffa0c404712a1628fe5174e9690a1e2a222c510ca4112e59092d0f8ca9b8907da7d7a4c7a94bc40d2d80eb8d7783c80b9839344d6986ac689be353f9aa77ecfb283bc621affa0984d8ef1636c80f3f72dc8502c609b8fbf34668b4e6f83ce90cc2c9af21017c6afca3cd831e523433ed4b0bf8a20a667947dad4ebed90e1bde2d8ad2b4953840e1d9739fb456a9d30f8e6f6820f77755f99b8f93417b5ec44712fc3ae1fe43ceddf29cc278e685d9d2f0c7ca211de73bd2377461b8a01eff54e50611e9c88026a2931a11e1cf68a7cbf813394f6387229e2b20cd01c3788276940882a383e8b252c74fb03f42757cc3b0e8d7effb6178af22afc3bc2f47e346a8f366a16bf5a9ddbdb187f6f30c4541898ad28f48cf6a28033106ffd278a544b913afa01fd4eecedf7408a360c8f3cad6d50e420f3128e5540da30a0ada8b417861081086e75d05e7a3eef56bd87cb9e563666cce93003f6150cc6c1d444518a8f47a4e2bb4d1f63482b389dc9e7bc432f8eaf013769f742160cbbbd542e97f6eb90fcda8190de95f18c8a52bdd72170add1d3ff1c960e8b3875edb9451e3f668a45bbadb828d99a7f5a66208ad1b84229f004d23d4cac038a448b745933c858e3825247bfb99c778bc85ee170ece5cfa41eb3f070d4276d169390f9719001e4de8ef0ad238e4be32241a346139c0f99d4ee9275c36274b9c89bc6496cbdab65f364acf1633659d8dfb2b19a713ddaffbed081766834424f69a2876f7cddc05b0de40258a649ee0bd590cff21c8949b2f1412d69333cfb19ba4f0feb3607aa3b981b9eab1258b695b91ce4ec273832bea0d1f28f526a18e8cc2d2d2f230e09cb3f1a4ad7e70f59024789e62fcbf26e73b6d0545903e996189057b7d2565a55641ad446485cfb7724d2f19a33412c3a30301fde56513e096a79558624caaad249bc63f373e9262ae76a4ebcb5b874910beb9d1bb556a42c1ff334416e5d63ee8b1bc921165e98495fc11d52edb88d110354dc246cae28f1774c77a5ffd33edfbe6ccf6807747ee1bea701e8fb86a298f8eb609e7812731804ec56596922681d3f5d830e76a2b131ae85f02a2ea709dca7e2a5867b752059c11efb4cb37a668c3b60cd6d1978d26d73e077cf7df9e99d518ea2ea4adad03ca018a5bcf78a33e28a3b2b895bf468697014be4327430232b8c9171b44b2ad5ad191e4dfd95a6b92c1f51af8a1e9f045f4013b8c6de387269268681ec7de999f9c12b7870dba203e0fbea0e24197e0d79d591a8dc4618307b2b4fef5496adb50b7ff03a237dbf533b040c1284ccc219c739968ac33bc963928801320eca3fd2c4fe42110810a1a0f1053907fc7026617644b3bd20b5619b71e09bada588055ea5f5c8cdaa70c4083fca441a6b60d8cbef2f3c6ca63c6f4af7d9040ce84ad82fa1a3494cb2e19b619134e970e46a0ec0d975f5286d44aeaba372f62553bb35eb4cbe3116473527f52b02a34ed36251197e5997decbd905026204a14cdddfd904f74178161411dfbde6bd07f400dc916b35ee1cbfbd09399cdc768cd914cce7912320bdb07bfe4ee78362d66087e7b0c763a94438f5117355b5192768150e63c3fafa688aaf93ba3d224867ac0b501cca5653cd2b9a396f3d32f50ec1a258e930a81ec6905c3cc0bceafde43aa1792116109c4e3efd9601eb3e48243507aa6d51a58a0b687df41b6617842cafb17ec0cff73d9da50dc73789db5e0a7e973a0a88ea7cbf31e2865bb7dd1e250032753f77acd50e6c01bc33670c41c729807e406e7384879fb950e993e6bd183b4a7aac86a5468e14a73a2aac1f4b05a5c54facd0c00cba0c0d4482965c6004078b3d3fcae85e935ff1d007382b79c5e919b5f2688d45d3f7dbfec601e92ffa22c425cdf5ee686008ce7e3a6f4b9cc7ee76280e12bafa54b252e48a0c92b4a773443fe0017a8223609beb9c1965aeba3d18d9ed4cd9525d0f709b79360cc1f0f9ffa3343a0201775f694e2c8f550d760b59b853e6cbe1ae9da43e7897e1e4ada381e8de8031f402f9048c60ec487b6e9985cb4ecf2f2fea4bd4a3502d0a8ff8ae53a7aecd91b942d146b566858c9e05192d9a17b99122b50e80b0cb1884c66c2f981648835e7c249c77fbb6d6e32d0d7996e02a4af79c0f32e9c1106f6c18544cf5429708a7090e4ada83b47b1be8f027068a4c7085e857962548da1bb158520216ecb1231473c9dbc16edff377f80daa8f909ce5c0b12b3ecfb6d946026f943149f181e198cab27a334a49bedaed3be26c9c556f9837b413e96ae0cca4350cac5884e9e788af22c2f6008f2e7e89dafa2f792b2cc0ab986a95c3e1c81c08fd8da069f26ca6713029e9769edc3bad0dcdd8d9a72b7c7b178b70490b134d5d0177e7eb2489d4e7a06ca6dedb540e6dbec170697a01a1efa47ef85374e44e1edcf6803593b2787467df5d48f9054732f80ebdb66aa8c7f943f16501f389cdf34a106a49656e0d5f4e5047efeefd0d92880e878146f0a1250c80d938b7a0d4c867aff3b8f63be745db0dc8ebac4fb8914d5cf663933d92b3718c3ff5e9cc004898a2a5c75a44ad238d655e5cd1b57abcd7ea3d20759c9fd4a4ac611c26bd119cf9401fce0848bacf1d2dfb031ee588ca9914af8960f4661f696cca1dde307cf329865d1923fab6264c5c4d1416ff17a9dbd2fb0555a9f342bc30067897ec8e839165376f44148b530a8a3b9dfb0c41e2f2164392d280b179680b28b077870c35d0d1f3a6ce9694dc83e60aabb957af154b779ff5fddf842899f25030ea6e09b5e10201506af483c44f4069946cd992085cf4cf6e826c04d683d77bd67f05c7372bf8b1f1f16daa3f58ad409291489644ffa4c9be2f304fbbfcf38ec086cfe2ba3609f7660278e4a41e110d3a24ff1b4361ec7a4287266ad291b0b01918b6dfb040a103a53025f6d485b841a57a766a0561c53dbd80eb6763310d162975567be7eb6f0085a3d318c4711ba717f309ea1f1590204a1900e5ca0107ee0c738bfedd168e57479208fe756a43ef7e98fa186c1a3011aa89a9e30ebd72a52830c8586aabf1bead29691dbd1d7d9fe66c0fe59b2d21f6d45404c5b792da4014e4fe7cd5133b08c4746a4b64f49c56716e517548183c6e481567ce48ef6d50ea785d8dbbc1a4fc89dc858fa6ea90f3df5e69f7e4af107c2d7d2b9f1c2fe5034b5c89e28f96fc5dc2da28de35006c4d19b3bab3d50504d1581d6ee8c2cac9f64ba5dfa598bbe68fee470417f028a2d16a14953da17ca6727167a36789221664821e731df739e2220df4009ad2b2eef8aa1f5fe8d7befd576e4ef81e3ac6eab9352f486ab516cb0fa22b8e4ab5b479fc052782e903f672f1467545f825454a535eb8c7d251ce094817850045c1d8caf29b5b2b1c4b390df2eb8424bb6f01aa39d94b9842b00fbff76bee37cc71741bcf77ddaa842f54e9113449c83ec16a7f99c5a37dabdedc4ceffe1c0fd3e3e48dde5ff96cc815eac3c569b9da8ab5d0beb934a2ea459ece75559143cc8d1aa43d8167e99006688ebdaa5133d0c84bd7f1088bccedec894ae77fc041087faaa66a82ff589d6bd4a6d98e2f438ca24740281cc5a0bff083a7f8aaa0eeb14a6ca8d474afa354f4f10f5bdc8dcdcb2db1e378d3bbd81e4a1fa37ef7dd65eb68b6ca8caad15bb17b79ec0950a47af8d61eaa2dc577afe69714cf6fee49dbf83777e7067c4a7dc58c695adf893fd27b4a46a8423983d40a3d200dedd8f4bf5aea17365284785ed40b333d494bcf3df0d3d77188e40b523adb5ced3cb223107bf94027434fb44fb69ea3764c7c7857559bfe7e8a4544cd59916f9f546eb508628cafdd11968ccf8d9cc16efc9709fe02d9d5ead39951eaf849dfa4420a5871b74ff5f9c03d522eba575fcee020df3b26da4b8d4965b12f42fab25a4d6ad3bb508ee5c876d8759ab1891aaa40bbd3c507bf1184e77f66fdd5737e10af9e029a8ff096e3979a8b17150808c01540c007bcfa3ad9f8beec0c3010b6960ce5b8135c721841d7583225d002fa2f1fac74080508989ccdd8075a3d4112764acc2bcd592dd78af847793163bb9c18a1c80bb7c4ba0240de52212a235d4850eaced043ea6b72e97aad4e1912abbac7805e409726e30d2d9ad4a3eb7bcc441660573fcfd8c285c66a33036b3b119a5944ab001b2eb6bf2be1787efcba6cb46e85eea806a10b4f777b8f6dc6b75d88e2919be3fb0087d2fa31704f54a1df6bcab7131d0944c3b2a0dd6ff47c074483ec972d8f7c2c27509f329988eb706b661fc64b0e1707974e675cc1435cb4714f9b6c81b49cfa12f865623b7bf2468f6567993fd8e399eaa49e624779d3c6eb5e41d61858dd2444c1559ccc3c755cb4d77e16a7848c95d79e785b60a87c13999e73405d1889dba8490a4a63241f12594de2afe0ed7d88afaf031fcd30a4c612e7eb047a10b770a06effa7bde73922e66294c341b6bd013063d7b58df6761e156da42c779b9b719b4febbc35856d64314f39be5ec42c00ddad9ad86c305467f5b84e6605d137a6f66db28ce2e3ea024fe109488e87f953a69dc6a82bf6448923c694f8c4c12350e8b492b1ff647704d76b75bb855b3ee618bd247ea9ce235fd41db41586510ddd1c343b84e9c12f586431c09eba3e0b756d4e94efe7e93f8914e1b29c3ea264b30516d9aca08e9dee2311a40921891629aaf009fbee0b098f07fe61fea33ddabd6ed57838b331711da590a04c2e89102c193d8293effaf7cdbc83b79ef5e2aa66e064e8dd0d8fea77c5f3ecde14196817c170c0e2bffdd5a82c038d9e83a5f53c9933978285ca06184422978a07149fa80783069a33d4fd412aa778d5834973b73c0a5c96a29a2687d4ab798ae58bf80d8add2743ee5b56705f616fe53367ca35987a7b72dfc66e95796c021a92d22b657d8165f9051446a69e6882d254454bb356e67b18ca5619a2d274b162c808ab8fc2d12e3f00187723be9eebd4fc1d8221f34658f922944aefa4ea7d0b545629d062e29f6e8755fc41f2be766b9fd66dc13599300c6ee4a4ab3e8367a14545446f027d9269196745fa7606a340ed1d8a9efba4217a4b43ace8fad2b5751bad829d6f0eb3e72d3039b5a19227cedcabb6377db8701c1bda6b6233dc4902ac0de942b547c1a92069435cc661606d93b0137b0f26d2fb5eb244650d939dcc76663ee0e13896defb5991f17786f9afe2e438e46a5c20d2d6a831b218a8bd20590fdf4a56b465bc3e1fadc02648ecd7a26e66a05794278a680e6db0bd41104fd3b0ef79e49b9948a3848d807d65707c2a4943cbd47d2922e13e362d09332cc38811477c172d9b090f41742e0f77a028fe647a47dfad8e64c56d7da972f85c4999281e5fcf8d1fc42a76fb40a7f25182dd8cfc203d156e815172574c22fc0604f2982a135ffb415b02b26dc871d27b2c6368952c23942f91cd916c1d66ecc1299b2b03a25b2023ca486ea38105afe83cc6288a9ed2aa939ca85c899de76131e10ce720238611a757065a648043e67888a511c0ef598ef46138be58676e6a6b82f7a9d9bd6b1922c10667414c646f91405d000500704a106d77368117d32739f2115121ecef10cccd75ed35cf47b2020476c0af3f92724b299673b4122700f00b8627111777e7873eb699b34ae094f4c8ed88ad7b1d1f13a99dd1a315ef7890caf24a4fda175cf6df8060d481080000000c00038008000200040000004800018008000100", @ANYRES32=0x0, @ANYBLOB="dcf3c436c0dc82f67d6bdbd55e5e27eef9148a5565a729badff570763dea47b561ea39f61b4098", @ANYRES32=0x0, @ANYBLOB="08000300030000000800030003000000140002006261746164765f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800090002000000080009000b00000005000600b70000002000018008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468305f766972745f77696669000c00018008000100", @ANYRES32=r8, @ANYBLOB], 0x120c}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000004c0)=ANY=[], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000003700)="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", 0x1000}], 0x1, 0xa) 1m39.905155665s ago: executing program 3 (id=3056): r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x1, 0xda, 0x6, 0x0, 0x5, 0x2822c, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xd, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2310, 0x1, 0x6, 0x9, 0x2, 0x6, 0x1, 0x0, 0xb9f, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x5) close_range(0xffffffffffffffff, r0, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xff, 0x160862) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000001, 0x200000005c832, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x60, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, 0x0, 0x28002, 0x0) ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f0000000380)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) sendfile(r1, r8, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0xffffffff, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m39.18875211s ago: executing program 3 (id=3059): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1m38.269907156s ago: executing program 3 (id=3065): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x1a4, &(0x7f00000005c0)="$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") r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='GPL\x00', 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x1a4, &(0x7f00000005c0)="$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") (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='GPL\x00', 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) 1m37.952243421s ago: executing program 3 (id=3067): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0xfffffffffffffffc, 0x4000000) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = getpid() sendmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38}, 0x8841) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000100)="b9aea252ff030703008cb89e08007b2601b1afb1", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m37.810987778s ago: executing program 3 (id=3068): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18002000000000000000000000000002e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$qrtr(0x2a, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x700, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x1}}}, 0x118) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000500), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000001a000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000680)={r7, &(0x7f00000000c0), &(0x7f0000000580)=""/5, 0x2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200, 0x20, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x25, 0x4}, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2714, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, 0x0, 0x4000) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000000800)=ANY=[@ANYRES16, @ANYRES64, @ANYRES8=r10, @ANYRES32=r0, @ANYRES64=r6, @ANYRES16, @ANYRES16, @ANYRESHEX=r2, @ANYRES32=r8, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) 1m21.588422119s ago: executing program 36 (id=3068): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18002000000000000000000000000002e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$qrtr(0x2a, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x700, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x1}}}, 0x118) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000500), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000001a000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000680)={r7, &(0x7f00000000c0), &(0x7f0000000580)=""/5, 0x2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200, 0x20, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x25, 0x4}, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2714, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, 0x0, 0x4000) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000000800)=ANY=[@ANYRES16, @ANYRES64, @ANYRES8=r10, @ANYRES32=r0, @ANYRES64=r6, @ANYRES16, @ANYRES16, @ANYRESHEX=r2, @ANYRES32=r8, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) 21.619853392s ago: executing program 8 (id=3410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x109100) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000400)={0x0, 0x83, 0xf00}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008010200b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, r1}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000041c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="34040000004800001400030076657468315f746f5f626f6e64000000340019802d0002002480ee511f1623e6255406f47a6efc42f71715927f2c6efd0c9e0a469012e10521293d36d800efff17"], 0x70}, 0x1, 0x0, 0x0, 0x40804}, 0x60040010) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000540), 0x4) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f6, 0x100, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x8045) 20.102940427s ago: executing program 8 (id=3418): syz_emit_ethernet(0x3ae, &(0x7f0000000940)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x378, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffe, 0x300, [{0x3, 0x9, "a78ce54006598080a80300faffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27de3e347ccea6795ada70e97adac15084dbaf736b41e5af0302"}, {0x5, 0x1, "0000e10b0000000026086700"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x8, 0x0, "4c289fb6b842332d11a3c0b4241c9569904142ccc5b716755fa9a6c08930f2169e05467c2686159aaa983cb6201c6a52c35b69d1062e90c9bfdda56d10bcdf7cdb75e9d756fe38efb41beec08fe25990"}, 0xd8) sendfile(r1, r2, 0x0, 0x20000023892) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x2404c0d5}, 0x9080) syz_emit_ethernet(0x3ae, &(0x7f0000000940)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x378, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffe, 0x300, [{0x3, 0x9, "a78ce54006598080a80300faffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27de3e347ccea6795ada70e97adac15084dbaf736b41e5af0302"}, {0x5, 0x1, "0000e10b0000000026086700"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x8, 0x0, "4c289fb6b842332d11a3c0b4241c9569904142ccc5b716755fa9a6c08930f2169e05467c2686159aaa983cb6201c6a52c35b69d1062e90c9bfdda56d10bcdf7cdb75e9d756fe38efb41beec08fe25990"}, 0xd8) (async) sendfile(r1, r2, 0x0, 0x20000023892) (async) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x2404c0d5}, 0x9080) (async) 18.715442625s ago: executing program 8 (id=3420): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x64df, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000480)=""/154, 0x9a, 0xe4) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000300)={&(0x7f0000001000)={[{&(0x7f0000000380)="141f30df1894fdb87ed06963c855675cf5e0a4df6516c4a9b7a1248921db5c36b655cafb04a069a75575604751a644f667d95e2ff0f4f913edf31965b508f95a0543dd344c5c45eb04201f18a216fad59d88c77a05a3d62a1b653e859c91556897808135b02b4fc64d3c1eb04359ef60ba5dc166abc5e3875d0b621cb327ecf6df1d14715ec6fcc2543c4787c18ba8d8576575998dc8b93122583fc61a39b157", 0xa0, 0x2}, {&(0x7f0000000700)="5ef1588499a4c95879bd7690421e44ed18398aa397dd6163504985b8bc62dd38f71abd3f637e5d7791766a63c9d8cb6b7ffd32544a95f0209a2b044290b88f1ca7beb67bb69a406f3cac08024b59ec267e03", 0x52}, {&(0x7f0000000780)="36ba333c26d4bc8313edeceb19e1ee659574e3ee9e00386caab8a7cccf718e359d5a00274d8ea5a9c7a9c5bf094724301a742bc2fa782845ced3a3169eb6be926c3c2d1fa0364b4aa2ea9dbae22c8acc70a5c117d960d6ac42fef301c5937ecf446aef09d547a27f3df487b49edee42b545aa147f5df7a84a0054dd25bb951b6b5d9fcb9b532bd", 0x87, 0x2}, {&(0x7f0000000840)="985f3992bb0a715c90af6155e05a151c7c59624ba719d72a4ac5a259985035ca4e2bcc21cb22ebfc9d0aaaa4e7531caf86f547ac3f98138d45f01b693d2535241e6e3f9fe17570c0103fe8e50972786f97583d6540c573c0d83e4b8a7a23758ed37f28c201628d9c12f3cf5419339e32432e8f33c8cbadad73afce026801f30fbed2974276a7a87e728fbed53c7ee7332704fa6274d770ff9fdcad8c4cb39657012379d32f725985a683be7459d680992b81f330f5048a2f939cbe2c7d3dfb4b30c7ae38421db4ede95d8ab2da130ca2606e5e3fe743c39f02a95be9e26973e4", 0xe0, 0x3}]}, 0x4}, 0x1) r3 = socket(0xa, 0x5, 0x458) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000440)={0x0, 0xd}, &(0x7f0000000040)=0x8) 16.856096177s ago: executing program 8 (id=3421): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) epoll_create1(0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001fc0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d61736369692c00125c6f3ad370264551e3ffff7e80e44939e902bdf759e02dbdff45399cd965a877fb80b6f99d249537cb3ccf29a605586bcc81c95f7bdb69711ae6935ce36b"], 0x1, 0x566, &(0x7f0000000540)="$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") r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2cf}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008881}, 0x20000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r6, &(0x7f0000000040)=""/225, 0xe1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sigaltstack(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) fcntl$setpipe(r4, 0x407, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x50, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3f, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x10}, {0x8, 0x15, 0x80}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080) r8 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14.793981299s ago: executing program 8 (id=3428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001400)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x100c7}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r9], 0x54}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r9], 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) (async) sendmsg$nl_route_sched(r10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r13 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r13, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, 0x0) write$selinux_load(r12, &(0x7f0000000000)=ANY=[], 0x190ec) (async) write$selinux_load(r12, &(0x7f0000000000)=ANY=[], 0x190ec) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x400c084}, 0x8002) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x400c084}, 0x8002) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_MASTER={0x8}, @IFLA_MTU={0x8, 0x4, 0x2}]}, 0x30}}, 0x0) 14.389846259s ago: executing program 8 (id=3438): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3b8, 0x0, 0x1e8, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @private=0xa010101, 0xffffffff, 0xff, 0x9, 0xd, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x1, 0x6b2, 0x56, 0x1000, 0x3f, 'ip6tnl0\x00', 'ipvlan0\x00', {}, {0x5f226bb799376253}}, 0xc0, 0x121}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "37964df93dc1b07f31d6b8d7bfbf12f97ce500"}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x444) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x2000, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:7-N:']) 14.339300791s ago: executing program 37 (id=3438): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3b8, 0x0, 0x1e8, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @private=0xa010101, 0xffffffff, 0xff, 0x9, 0xd, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x1, 0x6b2, 0x56, 0x1000, 0x3f, 'ip6tnl0\x00', 'ipvlan0\x00', {}, {0x5f226bb799376253}}, 0xc0, 0x121}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "37964df93dc1b07f31d6b8d7bfbf12f97ce500"}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x444) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x2000, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:7-N:']) 6.465992611s ago: executing program 4 (id=3500): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x2, 0xca0c, 0xda, 0x5, 0xa, 0x20007, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001300), 0x400, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r0, r3, 0x2f, 0x2010, 0x4, @value=r4}, 0x20) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003c00070101000000fbdbdf25027c000014008c80080086000300000008005b00ac141430040001"], 0x2c}}, 0x0) sendmsg$key(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000010c0)={0x2, 0x13, 0xfe, 0x0, 0x33, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_sec_ctx={0x20, 0x18, 0x9, 0x80, 0xf6, "79d295cce58092d29ef3b9113091ed4727e314e70e8aa461e7a46db0a4d1159f8c14e311e8748ade3d6c7c957f28b1780349f03dfeaadc373e5ddc4c426d3311b6bd656ac83eef853895b6246e088b9d53667f27706708f075471a818fdb2391725da1a364554a408931ef52f5b614a92fec6ea1adf9002de1a241a317ee075a24c202e412f857888ae0e64c2f6eccc5fa49da4fb8ddcd2803f57ba9e4d2e143e2a97113771b83bef3eb568982d553dba0803daf8d4b6c8e04a912254eb65a3be3faaaa3e65d53faa73e41b69b7e19cf2c7b3326742279bf43511432f11e01c1aa17f4a931c27012d0f32a8586b2f2e7c2dd15f633bc"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x3, @local, 0x200}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x0, 0x8, {0x6, 0x6c, 0x4, 0x37, 0x0, 0xfffffff8, 0x0, @in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x198}}, 0x4000840) 4.562095354s ago: executing program 0 (id=3514): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x40, 0x2000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800008, 0x0) r2 = syz_clone(0x108500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='stack\x00') pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket(0xa, 0x3, 0x3a) 3.492055247s ago: executing program 7 (id=3519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) 3.416836801s ago: executing program 4 (id=3520): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r5, r4, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14030000370009002cbd70000000000004"], 0x314}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f1ffffff000000000000000000000000000020"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, &(0x7f0000000880), &(0x7f00000008c0)=r9}, 0x20) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x6, 0x0, 0x0, 0x0) r12 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[@ANYBLOB="2ba04175202d7069647320"], 0xb) r13 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r14, r14, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100001040000000000faff0000000000", @ANYRES32=0x0, @ANYBLOB="03ef000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r15], 0x54}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r2, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000130001002cbd7000fcdbdf250000fff0", @ANYRES32=r4, @ANYBLOB="141004001f4c050008000a02", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x20040000) 3.338138695s ago: executing program 7 (id=3521): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x18}}], 0x1, 0x4049880) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2, 0x0, 0xfffe}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, &(0x7f0000002a00)=""/4096, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f00000000c0)={r3}, 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x64010102, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.305465837s ago: executing program 0 (id=3522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0xffa7}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) 2.943791944s ago: executing program 0 (id=3523): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x10000, &(0x7f0000000040)={[{@init_itable_val}]}, 0x1, 0x84d, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.729748425s ago: executing program 0 (id=3526): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x9, 0x6}, 0xc) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x3, 0x4) 2.442096899s ago: executing program 1 (id=3528): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000700000002000000ff00040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x1, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x0, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB], 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@fallback=r3, r3, 0x2f}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) lseek(r2, 0x1, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='/'], 0x20) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01d61b6a37d3f3ff23845235872215ee9b0001000000fcdbdf2503000000180001800f000100"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0xb4, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4f225b412a4b5648a54340dee5b4fb48ef8b73cfc4b5e08fcc22123a63ee572b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3b032c4ea684ffd8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9ddaaca01161bf85"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0f7a3ce2551e55630b8197b9383caf2856fa0eccb848bf8a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b1fd734392944c297155e6e453f2efca1595496c3482d5e5313e3ce21deb2621"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5b27e2d3f61153484cb5017e9752d4d9"}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x82}, 0x800) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="40f97000", @ANYRES16=r5, @ANYBLOB="000827bd7000fbdbdf25030000002c000380080003007f00000008000300e5000000080001008100000008000100050000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0xc000) 2.349617064s ago: executing program 4 (id=3530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) unshare(0x6c040000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r7, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) r9 = getpgid(r8) ptrace$setregset(0x4205, r9, 0x200, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000408020200000000000000000a000007060002dccf93367ffffa0b4000080000"], 0x1c}}, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 2.252633758s ago: executing program 7 (id=3531): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000037f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 1.910246055s ago: executing program 7 (id=3532): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x100000000000000, 0x7}) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000280)=ANY=[@ANYBLOB="0100000030080000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001b60000000000003a000000f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca942d9fc2178681e6866aa6ef10d0674d9b68cf7e11556b9fbf77c9c43d6c2a0c5cf7d88eecc"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x478) connect$inet6(r8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x400c044) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x58, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd, 0x9}}}, 0x24}, 0x1, 0x2000}, 0x0) 1.590680421s ago: executing program 0 (id=3533): socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaa00200001fc020000000000000000000000000001fe8000000000000000000000000000aa3b02000000000000040105040101c2040000000007080000000200f19019ab19cf10090e853ae984778c"], 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="30000000000000008400000001000000070044045b000000010400000200000055c300007c010000ffffff7f", @ANYRES32=0x0], 0x30, 0x4040850}, 0x4040040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x81, r2, 'id1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x4000054) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2c1300}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400006c", @ANYRES16=r5, @ANYBLOB="000125bd7010fddbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003d00000"], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40404, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0xf91fcd82589f6638, 0x10000, 0xfffffffe, 0x5, 0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0xf) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) timer_create(0x7, 0x0, &(0x7f0000000200)=0x0) timer_settime(r9, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x8) 1.384000671s ago: executing program 9 (id=3534): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1c}, 0x48) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'geneve1\x00', {0x4}, 0xcc3}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xfff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80004000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='()u\t>0&&\t') 1.158163823s ago: executing program 1 (id=3535): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x2000010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x400, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x24000800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x106200, 0x10004, 0x20da, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f40)=""/4087, 0x26, 0xff7, 0x4}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbd725020000000900010073797a3200000000140002"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd70fefbdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 1.109193405s ago: executing program 9 (id=3536): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000740)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200004, 0x0, 0x800, 0xffffffff, 0x7}) unshare(0x8040600) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x5, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x7, 0x20, 0x101, 0x2ff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x0, 0x0, {{0x7, 0x4, 0x2, 0x6, 0x1c, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @empty, {[@end, @lsrr={0x83, 0x7, 0x92, [@dev={0xac, 0x14, 0x14, 0x15}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x98}}, 0x4000000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff80000001, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xdffbffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa2025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r8}, &(0x7f00000002c0), &(0x7f0000000580)='%-5lx \x00'}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) gettid() 1.00175309s ago: executing program 4 (id=3537): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x8000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 926.338354ms ago: executing program 1 (id=3538): recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0x148, 0x30, 0xc96f2b0dc02613b7, 0x71bd23, 0x25dfdbff, {}, [{0x134, 0x1, [@m_ife={0x9c, 0xb, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x8}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10800, 0xffffffff, 0x4, 0x800004, 0xe4}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x2f, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x64, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x35, 0x6, "1ed0822c77a64017dbc62f5d14d932ebc6c446abdf4e3b55ee394ff3584b3ff2343a4bc881d5a39c75329c72fdd0502d07"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0xffffffa6, &(0x7f0000003700)={0x77359400}) 398.53152ms ago: executing program 7 (id=3539): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x228, 0x2e0, 0x2e0, 0x228, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xff0, 0x5, 0x4, 0x777b, 'syz0\x00', 'syz1\x00', {0x7}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @mcast1, [0xff, 0x0, 0xffffff00, 0x1807fff01], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'veth0_to_hsr\x00', 'pimreg1\x00', {}, {0xff}, 0x18, 0x9, 0x2, 0x54}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 377.666581ms ago: executing program 1 (id=3540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0x40000, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'macsec0\x00', 'dvmrp1\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_bond\x00', {0x1, 0x3, 0x3, 0x3, 0x1, 0x80000001, 0x7fff, 0x18, 0x40}, {0x1}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x3ff, 0x372, 0xfff, 'pptp\x00', 'syz1\x00', {0x4}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [], [0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x238, 0x2a0, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xd, {0x100000000}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xf04, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0xfffe, 0x3, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 318.683524ms ago: executing program 1 (id=3541): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 318.392804ms ago: executing program 9 (id=3542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x28, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24048014}, 0x24000040) 317.111644ms ago: executing program 0 (id=3543): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xdc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x7f) socket$netlink(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000600)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2567bfde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f", 0x407}], 0x2}, 0x4000014) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) syz_pidfd_open(0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r5, 0x5, 0x2, 0x933}, &(0x7f00000000c0)=0x10) 312.147794ms ago: executing program 1 (id=3544): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x1800) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000300)={0x8, 0x520}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r3 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r4 = socket(0x2b, 0x80801, 0x1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x2) listen(r4, 0x9) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x402, @private0, 0x200101}, 0x1c) listen(r4, 0x7) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b00010065787468647200002400028008000740000000050800064000000021050002000000000008000340000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x34, r5, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xbe05f0c56415d815}, 0x80) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="00042cbd7000fbdbdf251800000005000500010000000500060001000000050005000100000008000280040003806000018014000200697036746e6c300000000000000000001400024b9d91c04d1e9bc32cd3740070696d36726567300000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d61637674617000000008000300000000000800030000000000080007000a0000000500050001000000080007000c0000000800070002000000"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4010810) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) pause() epoll_wait(r2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0x4) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r7, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) 290.938595ms ago: executing program 9 (id=3545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x808}, 0x880) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000306010100000000000000000a0000030900020073797a32000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) 246.622358ms ago: executing program 7 (id=3546): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$RNDADDENTROPY(r2, 0x5207, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x7, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004800}, 0x4840) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) (async) sendfile(r4, r3, 0x0, 0x7fffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000040)=[0xffffffc0, 0x6]) 244.970838ms ago: executing program 9 (id=3547): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@delalloc}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x22000000, 0x0) 173.549411ms ago: executing program 4 (id=3548): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x5, 0x98e, 0xb, 0x2, 0xf}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1c8}}, 0x20}}, 0x0) 168.072521ms ago: executing program 4 (id=3549): socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xdf6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) pipe(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, 0x0, 0x84) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) open_by_handle_at(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="c800000071000000efc180b2ba2adf6ac513d05195efea76ff4b110000abc596293fa13b1331dca24d8f82e05f2b808724987be11cb4b71c00a90b7f8bb556e7218a5f2e61e868d19ec1d4457e2554962fc48f8613f76cf8ac22b341a0cc6776ff94032a6f218c8c272a811672c73d02a50b7abc08cfa85e443fe8e5ca7edb30b4ab2b7e5371b810099f232d73770a77f353cfcd8c7882948877a4069f988edd7d0942817fa1a28e24fc739c3f94e0219915990a648642eff54e175bf2a02371851fda"], 0x5a9600) fcntl$setpipe(r5, 0x407, 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) 0s ago: executing program 9 (id=3550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000aa00000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) poll(0x0, 0x0, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='totmaps\x00') preadv(r5, 0x0, 0x0, 0x20033, 0x51b) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x18, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) kernel console output (not intermixed with test programs): vice team0 [ 451.906861][T13500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.927932][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.930662][T13500] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 451.935448][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.957328][ T28] audit: type=1400 audit(1774597686.686:3747): avc: denied { read } for pid=13498 comm="syz.7.2958" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 452.013698][T13507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.015471][T13408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 452.032743][T13507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.033940][T13408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 452.056788][T12445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.061366][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.073091][ T7232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.211912][T13522] 9p: Bad value for 'wfdno' [ 452.217774][T13522] netlink: 'syz.7.2963': attribute type 4 has an invalid length. [ 452.230479][T13522] netlink: 'syz.7.2963': attribute type 4 has an invalid length. [ 452.238277][T13524] loop3: detected capacity change from 0 to 164 [ 452.257057][T13524] iso9660: Bad value for 'block' [ 452.274999][T13408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.451963][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2969'. [ 452.477262][T13408] veth0_vlan: entered promiscuous mode [ 452.492478][T13538] veth3: entered allmulticast mode [ 452.508639][T13408] veth1_vlan: entered promiscuous mode [ 452.550791][T13408] veth0_macvtap: entered promiscuous mode [ 452.558338][T13408] veth1_macvtap: entered promiscuous mode [ 452.569333][T13408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.578459][T13408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.712830][T13552] 9p: Bad value for 'wfdno' [ 452.733767][ T3544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.753027][T13552] netlink: 'syz.2.2975': attribute type 4 has an invalid length. [ 452.755845][ T3544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.781081][ T3544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.815758][T13557] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2977'. [ 452.825917][T13557] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2977'. [ 452.848176][ T28] audit: type=1400 audit(1774597687.576:3748): avc: denied { create } for pid=13560 comm="syz.0.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 452.852999][T13551] lo speed is unknown, defaulting to 1000 [ 452.888172][ T28] audit: type=1326 audit(1774597687.576:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13560 comm="syz.0.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f83ec799 code=0x7ffc0000 [ 452.904628][T13551] lo speed is unknown, defaulting to 1000 [ 452.918462][T13551] dummy0 speed is unknown, defaulting to 1000 [ 452.937636][ T3544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.962276][ T28] audit: type=1326 audit(1774597687.576:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13560 comm="syz.0.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f83ec799 code=0x7ffc0000 [ 452.996380][ T28] audit: type=1326 audit(1774597687.576:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13560 comm="syz.0.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f83ec799 code=0x7ffc0000 [ 453.007872][T13570] netlink: 'syz.2.2981': attribute type 1 has an invalid length. [ 453.028490][ T28] audit: type=1326 audit(1774597687.576:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13560 comm="syz.0.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fe4f83ec799 code=0x7ffc0000 [ 453.060351][T13570] netlink: 'syz.2.2981': attribute type 1 has an invalid length. [ 453.072689][ T28] audit: type=1326 audit(1774597687.576:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13560 comm="syz.0.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f83ec799 code=0x7ffc0000 [ 453.103969][T13566] iso9660: Bad value for 'block' [ 453.121848][T13570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.140195][T13573] bond1: (slave geneve2): making interface the new active one [ 453.158686][T13573] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 453.286780][T13589] 9p: Bad value for 'rfdno' [ 453.372877][T13602] set_capacity_and_notify: 1 callbacks suppressed [ 453.383686][T13602] loop7: detected capacity change from 0 to 256 [ 453.400545][T13602] SELinux: failed to load policy [ 454.329736][T13654] lo speed is unknown, defaulting to 1000 [ 454.371465][T13654] lo speed is unknown, defaulting to 1000 [ 454.377770][T13654] dummy0 speed is unknown, defaulting to 1000 [ 454.579599][T13661] lo speed is unknown, defaulting to 1000 [ 454.627805][T13670] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 454.647577][T13670] 0ªî{X¹¦: entered allmulticast mode [ 454.653690][T13670] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 454.693320][T13661] lo speed is unknown, defaulting to 1000 [ 454.711354][T13661] dummy0 speed is unknown, defaulting to 1000 [ 455.015737][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 455.015755][ T28] audit: type=1326 audit(1774597689.607:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.3.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f692c799 code=0x7ffc0000 [ 455.085668][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.104896][ T28] audit: type=1326 audit(1774597689.654:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.3.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f692c799 code=0x7ffc0000 [ 455.131779][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.147263][ T28] audit: type=1326 audit(1774597689.654:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.3.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fb0f692c799 code=0x7ffc0000 [ 455.157824][T13699] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.171545][ T28] audit: type=1326 audit(1774597689.654:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.3.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f692c799 code=0x7ffc0000 [ 455.206358][ T28] audit: type=1326 audit(1774597689.654:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.3.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f692c799 code=0x7ffc0000 [ 455.233665][ T28] audit: type=1326 audit(1774597689.654:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.3.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb0f692c799 code=0x7ffc0000 [ 455.265403][ T28] audit: type=1326 audit(1774597689.654:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.3.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f692c799 code=0x7ffc0000 [ 455.297067][ T28] audit: type=1326 audit(1774597689.654:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.3.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f692c799 code=0x7ffc0000 [ 455.322645][ T28] audit: type=1326 audit(1774597689.654:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.3.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0f68ecfce code=0x7ffc0000 [ 455.362599][ T28] audit: type=1326 audit(1774597689.654:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13691 comm="syz.3.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0f692c42b code=0x7ffc0000 [ 455.387948][T13708] loop2: detected capacity change from 0 to 512 [ 455.406650][T13708] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3024: inode has both inline data and extents flags [ 455.430229][T13708] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.430478][T13708] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3024: couldn't read orphan inode 15 (err -117) [ 455.439694][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 455.439713][ C0] EXT4-fs (loop2): initial error at time 1774597690: ext4_orphan_get:1391: inode 15 [ 455.439740][ C0] EXT4-fs (loop2): last error at time 1774597690: ext4_orphan_get:1391: inode 15 [ 455.478232][T13708] loop2: lost filesystem error report for type 5 error -117 [ 455.478831][T13708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.493456][T13694] syz_tun: entered allmulticast mode [ 455.506847][T13694] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 455.515595][T13694] mroute: pending queue full, dropping entries [ 455.578220][T13708] lo speed is unknown, defaulting to 1000 [ 455.622974][T13708] lo speed is unknown, defaulting to 1000 [ 455.633895][T13708] dummy0 speed is unknown, defaulting to 1000 [ 455.757954][T13719] loop3: detected capacity change from 0 to 1024 [ 455.821530][T13722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=13722 comm=syz.3.3027 [ 455.845373][T13722] __nla_validate_parse: 16 callbacks suppressed [ 455.845390][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3027'. [ 455.920165][T13726] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3029'. [ 455.939357][T13726] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3029'. [ 455.951624][T13723] loop7: detected capacity change from 0 to 164 [ 455.985475][T13726] netlink: 'syz.0.3029': attribute type 5 has an invalid length. [ 456.057341][T13726] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3029'. [ 456.365630][T13740] lo speed is unknown, defaulting to 1000 [ 456.404360][T13740] lo speed is unknown, defaulting to 1000 [ 456.410860][T13740] dummy0 speed is unknown, defaulting to 1000 [ 456.448631][ T50] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.458463][ T50] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.523827][ T50] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.555588][ T50] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.624896][ T50] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.646072][ T50] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.694727][T13743] lo speed is unknown, defaulting to 1000 [ 456.721210][ T50] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.740515][ T50] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.777609][T13756] loop7: detected capacity change from 0 to 164 [ 456.798246][T13756] ISOFS: unable to read i-node block [ 456.808177][T13743] lo speed is unknown, defaulting to 1000 [ 456.808286][T13756] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 456.814572][T13743] dummy0 speed is unknown, defaulting to 1000 [ 456.980697][T13760] loop7: detected capacity change from 0 to 512 [ 457.004897][T13762] loop3: detected capacity change from 0 to 2048 [ 457.024166][T13760] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 457.055972][T13760] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 457.057464][T13762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.076511][T13760] System zones: 1-12 [ 457.091328][T13760] EXT4-fs (loop7): orphan cleanup on readonly fs [ 457.100450][T13760] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3035: bg 0: block 361: padding at end of block bitmap is not set [ 457.100640][ T50] bond1 (unregistering): (slave gretap2): Releasing active interface [ 457.118063][T13760] loop7: lost filesystem error report for type 5 error -117 [ 457.123918][T13760] EXT4-fs (loop7): Remounting filesystem read-only [ 457.125796][T13713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.131347][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 457.153573][ C1] EXT4-fs (loop7): initial error at time 1774597691: ext4_validate_block_bitmap:441 [ 457.163122][ C1] EXT4-fs (loop7): last error at time 1774597691: ext4_validate_block_bitmap:441 [ 457.173141][T13760] EXT4-fs (loop7): 1 truncate cleaned up [ 457.179501][T13760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 457.239824][T13152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.250471][ T50] bond2 (unregistering): (slave bridge1): Removing an active aggregator [ 457.270760][ T50] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 457.290770][T12445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 457.300193][T13770] netlink: 'syz.3.3038': attribute type 10 has an invalid length. [ 457.316050][ T50] bridge1 (unregistering): left promiscuous mode [ 457.344447][ T50] bridge1 (unregistering): left allmulticast mode [ 457.355232][T13778] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 457.371870][T13778] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3038'. [ 457.459813][ T50] bond0 (unregistering): Released all slaves [ 457.484638][ T50] bond1 (unregistering): Released all slaves [ 457.503161][ T50] bond2 (unregistering): Released all slaves [ 457.512622][ T50] bond3 (unregistering): Released all slaves [ 457.523771][ T50] bond4 (unregistering): Released all slaves [ 457.533316][ T50] bond5 (unregistering): Released all slaves [ 457.578637][T13770] team0: Device xfrm0 is of different type [ 457.613542][ T50] tipc: Left network mode [ 458.394688][T13821] lo speed is unknown, defaulting to 1000 [ 458.461054][T13821] lo speed is unknown, defaulting to 1000 [ 458.467465][T13821] dummy0 speed is unknown, defaulting to 1000 [ 458.640964][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3049'. [ 458.651193][T13743] chnl_net:caif_netlink_parms(): no params data found [ 458.692998][ T50] hsr_slave_0: left promiscuous mode [ 458.700580][ T50] hsr_slave_1: left promiscuous mode [ 458.711211][ T50] veth1_macvtap: left promiscuous mode [ 458.717284][ T50] veth0_macvtap: left promiscuous mode [ 458.786101][ T36] smc: removing ib device !yz2 [ 458.966951][T13777] lo speed is unknown, defaulting to 1000 [ 458.976161][T13838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.063018][T13842] loop3: detected capacity change from 0 to 512 [ 459.080568][T13842] msdos: Unknown parameter 'sys_¯mutable' [ 459.179541][T13743] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.210114][T13743] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.223382][T13842] loop3: detected capacity change from 0 to 8192 [ 459.230257][T13743] bridge_slave_0: entered allmulticast mode [ 459.240097][T13743] bridge_slave_0: entered promiscuous mode [ 459.264624][T13743] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.309281][T13743] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.316660][T13743] bridge_slave_1: entered allmulticast mode [ 459.349949][T13743] bridge_slave_1: entered promiscuous mode [ 459.415404][T13743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.447323][T13743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.495017][T13850] loop7: detected capacity change from 0 to 1024 [ 459.513562][T13743] team0: Port device team_slave_0 added [ 459.542250][T13743] team0: Port device team_slave_1 added [ 459.579949][ T10] lo speed is unknown, defaulting to 1000 [ 459.585926][ T9] !yz2: Port: 1 Link DOWN [ 459.587453][T13777] dummy0 speed is unknown, defaulting to 1000 [ 459.595082][ T10] infiniband syz0: ib_query_port failed (-19) [ 459.603645][T13743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.610766][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.637317][T13743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.713216][T13857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.738928][T13850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 459.770353][T13743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.779597][T13857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3057'. [ 459.791400][T13850] System zones: 0-1, 3-36 [ 459.801982][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.842161][T13850] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3055: bad orphan inode 134217728 [ 459.873847][T13743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.885719][T13850] loop7: lost filesystem error report for type 5 error -117 [ 459.999579][T13850] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.063609][T13849] lo speed is unknown, defaulting to 1000 [ 460.074657][T13743] hsr_slave_0: entered promiscuous mode [ 460.094735][T13876] netlink: 'syz.3.3059': attribute type 1 has an invalid length. [ 460.103136][T13743] hsr_slave_1: entered promiscuous mode [ 460.118757][T13743] debugfs: 'hsr0' already exists in 'hsr' [ 460.124783][T13743] Cannot create hsr debugfs directory [ 460.203188][T13881] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 460.215886][ T50] IPVS: stop unused estimator thread 0... [ 460.218444][T13849] dummy0 speed is unknown, defaulting to 1000 [ 460.222064][T13877] lo speed is unknown, defaulting to 1000 [ 460.229108][T13881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3059'. [ 460.243135][T13881] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 460.269928][T13877] dummy0 speed is unknown, defaulting to 1000 [ 460.344539][T13777] chnl_net:caif_netlink_parms(): no params data found [ 460.433468][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.512534][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.530673][T13777] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.541372][T12445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.550942][T13777] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.558424][T13777] bridge_slave_0: entered allmulticast mode [ 460.566127][T13777] bridge_slave_0: entered promiscuous mode [ 460.587630][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.613163][T13777] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.622236][T13903] 9p: Bad value for 'wfdno' [ 460.627007][T13777] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.636042][T13777] bridge_slave_1: entered allmulticast mode [ 460.642880][T13777] bridge_slave_1: entered promiscuous mode [ 460.650296][T13903] netlink: 'syz.7.3060': attribute type 4 has an invalid length. [ 460.675592][T13903] netlink: 'syz.7.3060': attribute type 4 has an invalid length. [ 460.688159][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.707046][T13777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.720146][T13777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.766908][T13777] team0: Port device team_slave_0 added [ 460.782449][T13777] team0: Port device team_slave_1 added [ 460.811035][T13777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.820812][T13777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.858373][T13777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.969416][T13777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.984967][T13931] loop3: detected capacity change from 0 to 128 [ 460.997172][T13777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.007909][T13932] loop7: detected capacity change from 0 to 164 [ 461.036894][T13777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.069027][T13931] FAT-fs (loop3): Directory bread(block 32) failed [ 461.076262][T13931] FAT-fs (loop3): Directory bread(block 33) failed [ 461.085118][T13931] FAT-fs (loop3): Directory bread(block 34) failed [ 461.099518][T13931] FAT-fs (loop3): Directory bread(block 35) failed [ 461.119194][T13931] FAT-fs (loop3): Directory bread(block 36) failed [ 461.128188][T13931] FAT-fs (loop3): Directory bread(block 37) failed [ 461.135195][T13931] FAT-fs (loop3): Directory bread(block 38) failed [ 461.144123][T13931] FAT-fs (loop3): Directory bread(block 39) failed [ 461.151263][T13931] FAT-fs (loop3): Directory bread(block 40) failed [ 461.158112][T13931] FAT-fs (loop3): Directory bread(block 41) failed [ 461.181693][T13931] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 461.182749][ T50] bridge_slave_1: left allmulticast mode [ 461.201603][T13931] FAT-fs (loop3): Filesystem has been set read-only [ 461.218133][ T50] bridge_slave_1: left promiscuous mode [ 461.224348][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.232289][T13932] ISOFS: unable to read i-node block [ 461.237705][T13932] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 461.252722][ T50] bridge_slave_0: left allmulticast mode [ 461.262901][ T50] bridge_slave_0: left promiscuous mode [ 461.268639][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.349710][T13951] vhci_hcd vhci_hcd.2: invalid port number 96 [ 461.366839][T13951] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 461.429609][ T50] bond1 (unregistering): (slave geneve2): Releasing active interface [ 461.475759][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.488878][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.499025][ T50] bond0 (unregistering): Released all slaves [ 461.507414][ T50] bond1 (unregistering): Released all slaves [ 461.539257][T13777] hsr_slave_0: entered promiscuous mode [ 461.553211][T13777] hsr_slave_1: entered promiscuous mode [ 461.595615][T13777] debugfs: 'hsr0' already exists in 'hsr' [ 461.601394][T13777] Cannot create hsr debugfs directory [ 461.725952][T13743] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 461.937776][T13743] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 462.005632][ T50] hsr_slave_0: left promiscuous mode [ 462.055130][ T50] hsr_slave_1: left promiscuous mode [ 462.061059][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.090096][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.123203][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.144387][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.186331][ T50] veth1_macvtap: left promiscuous mode [ 462.203569][ T50] veth0_macvtap: left promiscuous mode [ 462.211273][ T50] veth1_vlan: left promiscuous mode [ 462.223488][ T50] veth0_vlan: left promiscuous mode [ 462.377828][ T50] team0 (unregistering): Port device team_slave_1 removed [ 462.389397][ T50] team0 (unregistering): Port device team_slave_0 removed [ 462.441296][T13743] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 462.457963][T13971] IPv6: sit1: Disabled Multicast RS [ 462.474139][T13972] lo speed is unknown, defaulting to 1000 [ 462.482539][ T10] dummy0 speed is unknown, defaulting to 1000 [ 462.494402][ T10] infiniband syz1: ib_query_port failed (-19) [ 462.500836][T13743] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 462.669975][T13777] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 462.699287][T13777] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 462.716764][T13777] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 462.748870][T13777] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 462.775129][T13743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.822536][T13743] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.843356][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.850556][ T7234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.889340][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.896525][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.024940][T13743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 463.036220][T13743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.073952][T14033] __nla_validate_parse: 1 callbacks suppressed [ 463.073971][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3077'. [ 463.089890][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3077'. [ 463.178791][T13777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.202337][T14033] vlan2: entered promiscuous mode [ 463.213746][T14033] team0: entered promiscuous mode [ 463.227231][T14033] team_slave_0: entered promiscuous mode [ 463.240589][T14033] team_slave_1: entered promiscuous mode [ 463.293605][T13777] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.326876][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.334011][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.391474][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.398722][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.489854][T13743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.500258][T14052] SET target dimension over the limit! [ 463.655264][T13777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.845491][T13743] veth0_vlan: entered promiscuous mode [ 463.854561][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3081'. [ 463.880021][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3081'. [ 463.911694][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3081'. [ 463.935351][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3081'. [ 463.955650][T14095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=14095 comm=syz.0.3081 [ 464.052280][T13743] veth1_vlan: entered promiscuous mode [ 464.084454][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.112045][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.152620][T13777] veth0_vlan: entered promiscuous mode [ 464.172598][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.209266][T13777] veth1_vlan: entered promiscuous mode [ 464.231142][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.265220][T13743] veth0_macvtap: entered promiscuous mode [ 464.298436][T13777] veth0_macvtap: entered promiscuous mode [ 464.319218][T13743] veth1_macvtap: entered promiscuous mode [ 464.335826][T13777] veth1_macvtap: entered promiscuous mode [ 464.370999][T13777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.406127][T13743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.431621][T13777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.450089][T13743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.478864][ T7234] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.547627][ T7234] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.575415][ T7234] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.714924][ T7234] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.737079][ T7234] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.772049][ T7234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.799916][ T7234] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.843577][ T7234] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.907796][T14124] lo speed is unknown, defaulting to 1000 [ 465.545056][T14136] lo speed is unknown, defaulting to 1000 [ 467.691632][T14180] mmap: syz.7.3095 (14180): VmData 167485440 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 467.830485][T14179] 9p: Bad value for 'wfdno' [ 467.973470][T14183] netlink: 'syz.8.3094': attribute type 4 has an invalid length. [ 468.087528][T14188] netlink: 'syz.7.3097': attribute type 1 has an invalid length. [ 468.205116][T14188] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3097'. [ 468.224967][T14185] lo speed is unknown, defaulting to 1000 [ 468.232913][T14188] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3097'. [ 468.242433][T14188] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3097'. [ 468.254442][T14188] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3097'. [ 468.268616][T14193] 9p: Bad value for 'wfdno' [ 468.278070][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 468.278087][ T28] audit: type=1400 audit(1774597702.020:3875): avc: denied { getopt } for pid=14192 comm="syz.8.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 468.293820][T14193] loop8: detected capacity change from 0 to 1024 [ 468.355867][T14193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.491650][T13777] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.633511][T14200] lo speed is unknown, defaulting to 1000 [ 470.726907][T14215] 9p: Bad value for 'wfdno' [ 471.035896][T14217] netlink: 'syz.7.3104': attribute type 4 has an invalid length. [ 471.846768][T14220] netlink: 'syz.7.3104': attribute type 4 has an invalid length. [ 473.614322][T14225] loop4: detected capacity change from 0 to 164 [ 473.732877][T14223] loop0: detected capacity change from 0 to 8192 [ 473.740605][T14229] netlink: 'syz.7.3108': attribute type 1 has an invalid length. [ 473.807353][T14234] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3108'. [ 473.816575][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3108'. [ 473.827337][T14234] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3108'. [ 473.843351][T14234] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3108'. [ 474.143554][T14237] lo speed is unknown, defaulting to 1000 [ 474.643856][ T28] audit: type=1326 audit(1774597707.969:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14245 comm="syz.8.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9bc15c799 code=0x7ffc0000 [ 474.699171][T14244] lo speed is unknown, defaulting to 1000 [ 474.701589][ T28] audit: type=1326 audit(1774597707.969:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14245 comm="syz.8.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9bc15c799 code=0x7ffc0000 [ 474.764841][ T28] audit: type=1326 audit(1774597707.969:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14245 comm="syz.8.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9bc15c799 code=0x7ffc0000 [ 474.850434][ T28] audit: type=1326 audit(1774597707.969:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14245 comm="syz.8.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff9bc15c799 code=0x7ffc0000 [ 474.901074][T14253] loop0: detected capacity change from 0 to 256 [ 474.914524][ T28] audit: type=1326 audit(1774597708.025:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14245 comm="syz.8.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9bc15c799 code=0x7ffc0000 [ 474.952832][T14253] vfat: Unknown parameter '0177777777777777777777718446744073709551615' [ 474.962853][ T28] audit: type=1326 audit(1774597708.025:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14245 comm="syz.8.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9bc15c502 code=0x7ffc0000 [ 475.000193][T14250] loop4: detected capacity change from 0 to 128 [ 475.048519][ T28] audit: type=1326 audit(1774597708.025:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14245 comm="syz.8.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff9bc15c597 code=0x7ffc0000 [ 475.048972][T14250] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 475.085463][T14250] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 475.205067][ T28] audit: type=1326 audit(1774597708.025:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14245 comm="syz.8.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff9bc119491 code=0x7ffc0000 [ 475.228780][ T28] audit: type=1326 audit(1774597708.025:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14245 comm="syz.8.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff9bc15d589 code=0x7ffc0000 [ 475.253165][ T28] audit: type=1326 audit(1774597708.025:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14245 comm="syz.8.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff9bc1194fb code=0x7ffc0000 [ 475.317804][T14261] lo speed is unknown, defaulting to 1000 [ 475.780099][T14272] FAULT_INJECTION: forcing a failure. [ 475.780099][T14272] name failslab, interval 1, probability 0, space 0, times 0 [ 475.836516][T13743] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 475.867678][T14272] CPU: 0 UID: 0 PID: 14272 Comm: syz.8.3119 Tainted: G W syzkaller #0 PREEMPT(full) [ 475.867720][T14272] Tainted: [W]=WARN [ 475.867727][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.867739][T14272] Call Trace: [ 475.867751][T14272] [ 475.867760][T14272] __dump_stack+0x1d/0x30 [ 475.867852][T14272] dump_stack_lvl+0x95/0xd0 [ 475.867882][T14272] dump_stack+0x15/0x1b [ 475.867927][T14272] should_fail_ex+0x263/0x280 [ 475.867954][T14272] should_failslab+0x8c/0xb0 [ 475.867976][T14272] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 475.868027][T14272] ? __alloc_skb+0x2d6/0x690 [ 475.868073][T14272] __alloc_skb+0x2d6/0x690 [ 475.868183][T14272] ? __alloc_skb+0x200/0x690 [ 475.868216][T14272] netlink_alloc_large_skb+0xbf/0xf0 [ 475.868253][T14272] netlink_sendmsg+0x40c/0x6f0 [ 475.868327][T14272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.868358][T14272] ____sys_sendmsg+0x563/0x5b0 [ 475.868401][T14272] ___sys_sendmsg+0x195/0x1e0 [ 475.868500][T14272] __x64_sys_sendmsg+0xd4/0x160 [ 475.868539][T14272] x64_sys_call+0x194c/0x3020 [ 475.868570][T14272] do_syscall_64+0x12c/0x370 [ 475.868673][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.868699][T14272] RIP: 0033:0x7ff9bc15c799 [ 475.868729][T14272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.868746][T14272] RSP: 002b:00007ff9babaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.868773][T14272] RAX: ffffffffffffffda RBX: 00007ff9bc3d5fa0 RCX: 00007ff9bc15c799 [ 475.868791][T14272] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 475.868807][T14272] RBP: 00007ff9babaf090 R08: 0000000000000000 R09: 0000000000000000 [ 475.868824][T14272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.868873][T14272] R13: 00007ff9bc3d6038 R14: 00007ff9bc3d5fa0 R15: 00007ffd5ba249e8 [ 475.868891][T14272] [ 477.463587][T14324] lo speed is unknown, defaulting to 1000 [ 478.050151][ T3544] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.603364][T14368] loop7: detected capacity change from 0 to 2048 [ 479.092391][T14369] lo speed is unknown, defaulting to 1000 [ 479.239902][ T3544] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.288333][T14346] lo speed is unknown, defaulting to 1000 [ 479.342802][ T3544] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.464143][ T3544] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.591411][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3140'. [ 479.603493][T14393] lo speed is unknown, defaulting to 1000 [ 479.680396][ T3544] bridge_slave_1: left allmulticast mode [ 479.689753][ T3544] bridge_slave_1: left promiscuous mode [ 479.701323][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.717604][ T3544] bridge_slave_0: left allmulticast mode [ 479.729841][ T3544] bridge_slave_0: left promiscuous mode [ 479.741358][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.900303][ T3544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.926351][ T3544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.947162][ T3544] bond0 (unregistering): Released all slaves [ 480.005457][ T3544] tipc: Disabling bearer [ 480.019506][ T3544] tipc: Left network mode [ 480.030474][T14346] chnl_net:caif_netlink_parms(): no params data found [ 480.207973][ T3544] hsr_slave_0: left promiscuous mode [ 480.213756][ T3544] hsr_slave_1: left promiscuous mode [ 480.228122][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.235534][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.285341][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.319272][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.429690][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 480.429715][ T28] audit: type=1400 audit(1774597713.366:3949): avc: denied { mount } for pid=14419 comm="syz.7.3144" name="/" dev="rpc_pipefs" ino=45474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 480.746123][ T3544] veth1_macvtap: left promiscuous mode [ 480.751870][ T3544] veth0_macvtap: left promiscuous mode [ 480.757490][ T3544] veth1_vlan: left promiscuous mode [ 480.780827][ T3544] veth0_vlan: left promiscuous mode [ 480.892547][ T3544] team0 (unregistering): Port device team_slave_1 removed [ 480.903196][ T3544] team0 (unregistering): Port device team_slave_0 removed [ 480.999519][T14433] lo speed is unknown, defaulting to 1000 [ 481.046899][T14346] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.054368][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.062221][T14346] bridge_slave_0: entered allmulticast mode [ 481.075624][T14346] bridge_slave_0: entered promiscuous mode [ 481.119235][T14346] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.133376][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.166459][T14346] bridge_slave_1: entered allmulticast mode [ 481.173530][T14346] bridge_slave_1: entered promiscuous mode [ 481.185274][T14418] lo speed is unknown, defaulting to 1000 [ 481.275636][T14346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.331181][T14346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.390988][T14459] program syz.7.3150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.429917][T14346] team0: Port device team_slave_0 added [ 481.449661][T14346] team0: Port device team_slave_1 added [ 481.513000][T14346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.519992][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.593786][T14346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.617576][T14346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.624860][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.652615][T14346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.706102][T14346] hsr_slave_0: entered promiscuous mode [ 481.712591][T14346] hsr_slave_1: entered promiscuous mode [ 481.719641][T14346] debugfs: 'hsr0' already exists in 'hsr' [ 481.725983][T14346] Cannot create hsr debugfs directory [ 482.044317][T14346] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 482.088408][T14485] tipc: Started in network mode [ 482.093396][T14485] tipc: Node identity 3a000000000000000000000000000001, cluster identity 4711 [ 482.173476][T14485] tipc: Enabling of bearer rejected, failed to enable media [ 482.214267][T14346] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 482.277459][T14438] syz.0.3148 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 482.328075][T14346] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 482.361692][T14346] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 482.370214][T14438] CPU: 1 UID: 0 PID: 14438 Comm: syz.0.3148 Tainted: G W syzkaller #0 PREEMPT(full) [ 482.370335][T14438] Tainted: [W]=WARN [ 482.370344][T14438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.370358][T14438] Call Trace: [ 482.370367][T14438] [ 482.370377][T14438] __dump_stack+0x1d/0x30 [ 482.370412][T14438] dump_stack_lvl+0x95/0xd0 [ 482.370514][T14438] dump_stack+0x15/0x1b [ 482.370586][T14438] dump_header+0x80/0x240 [ 482.370616][T14438] oom_kill_process+0x295/0x350 [ 482.370643][T14438] out_of_memory+0x97d/0xb80 [ 482.370677][T14438] try_charge_memcg+0x62e/0xa10 [ 482.370733][T14438] obj_cgroup_charge_pages+0x23/0xc0 [ 482.370835][T14438] __memcg_kmem_charge_page+0x9e/0x170 [ 482.370866][T14438] __alloc_frozen_pages_noprof+0x18a/0x360 [ 482.370908][T14438] alloc_pages_mpol+0xb3/0x260 [ 482.370947][T14438] alloc_pages_noprof+0x8f/0x130 [ 482.371048][T14438] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 482.371094][T14438] __kvmalloc_node_noprof+0x3d4/0x650 [ 482.371128][T14438] ? futex_hash_allocate+0x190/0x9d0 [ 482.371180][T14438] ? futex_hash_allocate+0x190/0x9d0 [ 482.371210][T14438] futex_hash_allocate+0x190/0x9d0 [ 482.371247][T14438] ? cap_task_prctl+0x13f/0x6e0 [ 482.371400][T14438] futex_hash_prctl+0xd8/0xf0 [ 482.371435][T14438] __se_sys_prctl+0xa3d/0x13f0 [ 482.371470][T14438] __x64_sys_prctl+0x67/0x80 [ 482.371501][T14438] x64_sys_call+0x2533/0x3020 [ 482.371535][T14438] do_syscall_64+0x12c/0x370 [ 482.371561][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.371590][T14438] RIP: 0033:0x7fe4f83ec799 [ 482.371612][T14438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.371673][T14438] RSP: 002b:00007fe4f6e26028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 482.371699][T14438] RAX: ffffffffffffffda RBX: 00007fe4f8666090 RCX: 00007fe4f83ec799 [ 482.371718][T14438] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 482.371734][T14438] RBP: 00007fe4f8482c99 R08: 0000000000000000 R09: 0000000000000000 [ 482.371769][T14438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.371782][T14438] R13: 00007fe4f8666128 R14: 00007fe4f8666090 R15: 00007ffc319680f8 [ 482.371801][T14438] [ 482.374446][T14438] memory: usage 307200kB, limit 307200kB, failcnt 1577 [ 482.613497][T14438] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 482.621874][T14438] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 482.634934][T14438] Memory cgroup stats for /syz0: [ 482.635255][T14438] cache 4096 [ 482.643564][T14438] rss 0 [ 482.647665][T14438] shmem 0 [ 482.650639][T14438] mapped_file 0 [ 482.654656][T14438] dirty 0 [ 482.657893][T14438] writeback 0 [ 482.676322][T14438] workingset_refault_anon 1773 [ 482.681221][T14438] workingset_refault_file 6293 [ 482.708461][T14438] swap 212992 [ 482.711817][T14438] swapcached 966656 [ 482.723758][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3157'. [ 482.737741][T14438] pgpgin 404508 [ 482.750366][T14438] pgpgout 404507 [ 482.766497][T14512] lo speed is unknown, defaulting to 1000 [ 482.787264][T14346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.794610][T14438] pgfault 445868 [ 482.800375][T14438] pgmajfault 374 [ 482.804039][T14513] hub 8-0:1.0: USB hub found [ 482.808973][T14513] hub 8-0:1.0: 8 ports detected [ 482.819010][T14438] inactive_anon 0 [ 482.822758][T14438] active_anon 0 [ 482.834878][T14438] inactive_file 0 [ 482.841882][T14346] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.849155][T14438] active_file 4096 [ 482.856993][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.864216][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.872169][T14438] unevictable 0 [ 482.875698][T14438] hierarchical_memory_limit 314572800 [ 482.881795][T14438] hierarchical_memsw_limit 9223372036854771712 [ 482.921601][T14438] total_cache 4096 [ 482.928530][T14346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 482.959273][T14438] total_rss 0 [ 482.972777][T14438] total_shmem 0 [ 482.980877][T14438] total_mapped_file 0 [ 482.989453][T14346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.004972][T14438] total_dirty 0 [ 483.013067][T14438] total_writeback 0 [ 483.021383][T14438] total_workingset_refault_anon 1773 [ 483.033037][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.040163][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.051979][T14438] total_workingset_refault_file 6293 [ 483.064757][T14438] total_swap 212992 [ 483.075676][T14438] total_swapcached 966656 [ 483.084498][T14438] total_pgpgin 404508 [ 483.093121][T14438] total_pgpgout 404507 [ 483.109082][T14522] lo speed is unknown, defaulting to 1000 [ 483.124954][T14438] total_pgfault 445868 [ 483.129212][T14438] total_pgmajfault 374 [ 483.133634][T14438] total_inactive_anon 0 [ 483.141187][T14438] total_active_anon 0 [ 483.150446][T14438] total_inactive_file 0 [ 483.154793][T14438] total_active_file 4096 [ 483.190604][T14438] total_unevictable 0 [ 483.194853][T14438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3148,pid=14436,uid=0 [ 483.256109][T14438] Memory cgroup out of memory: Killed process 14436 (syz.0.3148) total-vm:96080kB, anon-rss:1232kB, file-rss:22360kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 483.282273][T14346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.483994][T14548] loop8: detected capacity change from 0 to 128 [ 483.547817][T14548] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 483.560763][T14548] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.681209][T14565] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 483.730839][T14346] veth0_vlan: entered promiscuous mode [ 483.802944][ T28] audit: type=1400 audit(1774597716.537:3950): avc: denied { lock } for pid=14545 comm="syz.8.3163" path="/24/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 484.356239][T14575] loop7: detected capacity change from 0 to 1024 [ 484.363919][T14575] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 484.489651][T14346] veth1_vlan: entered promiscuous mode [ 484.532228][T14346] veth0_macvtap: entered promiscuous mode [ 484.556572][T14346] veth1_macvtap: entered promiscuous mode [ 484.583261][T14346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.602771][T14346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.737972][ T3544] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.768534][ T3544] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.809849][ T3544] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.834798][ T3544] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.034665][ T28] audit: type=1400 audit(1774597717.678:3951): avc: denied { read } for pid=14593 comm="syz.7.3171" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 485.043839][ T28] audit: type=1400 audit(1774597717.688:3952): avc: denied { open } for pid=14593 comm="syz.7.3171" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 485.054592][ T28] audit: type=1400 audit(1774597717.706:3953): avc: denied { ioctl } for pid=14593 comm="syz.7.3171" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 485.143069][T14601] lo speed is unknown, defaulting to 1000 [ 485.373732][T14605] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 485.403269][T14605] bond1 (unregistering): Released all slaves [ 485.421030][ T28] audit: type=1400 audit(1774597718.052:3954): avc: denied { ioctl } for pid=14604 comm="syz.9.3173" path="socket:[46886]" dev="sockfs" ino=46886 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 485.469494][ T28] audit: type=1400 audit(1774597718.080:3955): avc: denied { setopt } for pid=14604 comm="syz.9.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 485.498096][T13777] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.636836][ T28] audit: type=1326 audit(1774597718.249:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.4.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237b08c799 code=0x7ffc0000 [ 485.667109][ T28] audit: type=1326 audit(1774597718.249:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.4.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237b08c799 code=0x7ffc0000 [ 485.693438][ T28] audit: type=1326 audit(1774597718.249:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.4.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f237b08c799 code=0x7ffc0000 [ 485.699470][T14623] loop0: detected capacity change from 0 to 128 [ 485.729013][T14621] loop7: detected capacity change from 0 to 1024 [ 485.744009][T14621] EXT4-fs: Ignoring removed bh option [ 485.793350][T14621] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 485.827641][T14621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 485.856058][T14621] System zones: 0-1, 3-12 [ 485.870824][T14621] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #3: block 1: comm syz.7.3178: lblock 1 mapped to illegal pblock 1 (length 1) [ 485.915189][T14621] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 485.924009][T14621] EXT4-fs (loop7): Remounting filesystem read-only [ 485.933228][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 485.933264][ C0] EXT4-fs (loop7): initial error at time 1774597718: ext4_map_blocks:818: inode 3: block 1 [ 485.933305][ C0] EXT4-fs (loop7): last error at time 1774597718: ext4_map_blocks:818: inode 3: block 1 [ 485.978071][T14621] __quota_error: 28 callbacks suppressed [ 485.978088][T14621] Quota error (device loop7): write_blk: dquota write failed [ 486.021965][T14621] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 486.033041][T14621] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 486.042084][T14621] EXT4-fs (loop7): 1 orphan inode deleted [ 486.064113][T14621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.087984][T14637] syzkaller0: entered promiscuous mode [ 486.093948][T14621] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.096913][T14637] syzkaller0: entered allmulticast mode [ 486.249116][T14646] veth0: entered promiscuous mode [ 486.255370][T14647] veth0: entered promiscuous mode [ 486.260697][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3186'. [ 486.290744][T14646] veth0 (unregistering): left promiscuous mode [ 486.319793][T14644] veth0: left promiscuous mode [ 486.329059][T14643] lo speed is unknown, defaulting to 1000 [ 486.399266][T14652] veth0: entered promiscuous mode [ 486.408401][T14652] FAULT_INJECTION: forcing a failure. [ 486.408401][T14652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.425096][T14652] CPU: 0 UID: 0 PID: 14652 Comm: syz.8.3189 Tainted: G W syzkaller #0 PREEMPT(full) [ 486.425203][T14652] Tainted: [W]=WARN [ 486.425212][T14652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.425228][T14652] Call Trace: [ 486.425236][T14652] [ 486.425246][T14652] __dump_stack+0x1d/0x30 [ 486.425364][T14652] dump_stack_lvl+0x95/0xd0 [ 486.425393][T14652] dump_stack+0x15/0x1b [ 486.425421][T14652] should_fail_ex+0x263/0x280 [ 486.425462][T14652] should_fail+0xb/0x20 [ 486.425571][T14652] should_fail_usercopy+0x1a/0x20 [ 486.425684][T14652] _copy_from_user+0x1c/0xb0 [ 486.425721][T14652] ___sys_sendmsg+0xc1/0x1e0 [ 486.425787][T14652] __x64_sys_sendmsg+0xd4/0x160 [ 486.425829][T14652] x64_sys_call+0x194c/0x3020 [ 486.425859][T14652] do_syscall_64+0x12c/0x370 [ 486.425960][T14652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.425987][T14652] RIP: 0033:0x7ff9bc15c799 [ 486.426008][T14652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.426031][T14652] RSP: 002b:00007ff9babaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.426056][T14652] RAX: ffffffffffffffda RBX: 00007ff9bc3d5fa0 RCX: 00007ff9bc15c799 [ 486.426074][T14652] RDX: 0000000020048054 RSI: 0000200000000200 RDI: 0000000000000004 [ 486.426159][T14652] RBP: 00007ff9babaf090 R08: 0000000000000000 R09: 0000000000000000 [ 486.426175][T14652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.426191][T14652] R13: 00007ff9bc3d6038 R14: 00007ff9bc3d5fa0 R15: 00007ffd5ba249e8 [ 486.426292][T14652] [ 486.444082][T14656] 9p: Bad value for 'wfdno' [ 486.467531][T14651] veth0: left promiscuous mode [ 486.471418][T14658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3192'. [ 486.671332][ T28] audit: type=1400 audit(1774597719.222:3987): avc: denied { read } for pid=14657 comm="syz.4.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 486.840483][ T28] audit: type=1326 audit(1774597719.381:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.7.3200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f406666c799 code=0x0 [ 486.883163][T14689] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3197'. [ 486.930683][T14700] 9p: Bad value for 'wfdno' [ 486.941286][ T28] audit: type=1400 audit(1774597719.465:3989): avc: denied { read } for pid=14697 comm="syz.4.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 487.224102][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3206'. [ 487.233892][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3206'. [ 487.243380][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3206'. [ 487.252821][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3206'. [ 487.523389][T14719] loop0: detected capacity change from 0 to 512 [ 487.530737][T14719] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 487.544994][T14719] EXT4-fs (loop0): 1 truncate cleaned up [ 487.551867][T14719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.565264][T14721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.574020][T14721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.584548][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3212'. [ 487.602033][ T28] audit: type=1400 audit(1774597720.092:3990): avc: denied { setattr } for pid=14718 comm="syz.0.3212" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 487.750153][T14729] 9p: Bad value for 'wfdno' [ 487.901256][T14739] lo speed is unknown, defaulting to 1000 [ 488.857792][T13408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.924745][T14750] loop0: detected capacity change from 0 to 128 [ 495.057204][ T28] audit: type=1400 audit(1774597727.032:3991): avc: denied { mounton } for pid=14807 comm="syz.9.3227" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 495.143319][T14816] 9p: Bad value for 'wfdno' [ 495.180412][T14814] syzkaller0: entered promiscuous mode [ 495.234223][T14814] syzkaller0: entered allmulticast mode [ 495.262584][T14825] loop9: detected capacity change from 0 to 512 [ 495.534147][T14836] loop4: detected capacity change from 0 to 1024 [ 495.541063][ T28] audit: type=1400 audit(1774597727.509:3992): avc: denied { accept } for pid=14835 comm="syz.4.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 495.596304][T14825] EXT4-fs (loop9): 1 orphan inode deleted [ 495.604876][T14836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.617646][ T7244] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 495.628345][T14825] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.632943][ T7244] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:18: Failed to release dquot type 1 [ 495.753146][T14849] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3234'. [ 495.762754][ T28] audit: type=1400 audit(1774597727.696:3993): avc: denied { map } for pid=14832 comm="syz.7.3233" path="pipe:[47277]" dev="pipefs" ino=47277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 495.872168][ T7244] loop9: lost filesystem error report for type 5 error -117 [ 495.880073][T14825] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.942533][T13743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.975460][ T28] audit: type=1400 audit(1774597727.781:3994): avc: denied { rename } for pid=14835 comm="syz.4.3234" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 497.194924][ T28] audit: type=1400 audit(1774597727.781:3995): avc: denied { rmdir } for pid=14835 comm="syz.4.3234" name="file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.785232][T14867] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 499.307140][ T28] audit: type=1400 audit(1774597730.054:3996): avc: denied { remount } for pid=14815 comm="syz.9.3230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 500.438471][T14895] 9p: Bad value for 'wfdno' [ 500.451944][T14346] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.076316][T14908] lo speed is unknown, defaulting to 1000 [ 501.647293][T14927] loop4: detected capacity change from 0 to 256 [ 501.654694][T14919] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 501.708926][T14919] bond1 (unregistering): Released all slaves [ 502.602331][T14966] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3252'. [ 502.703763][T14979] 9p: Bad value for 'wfdno' [ 502.704345][T14980] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3254'. [ 502.991704][ T28] audit: type=1400 audit(1774597734.487:3997): avc: denied { write } for pid=14996 comm="syz.4.3257" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 503.040179][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 503.176688][T14998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=14998 comm=syz.4.3257 [ 503.211663][ T28] audit: type=1400 audit(1774597734.525:3998): avc: denied { ioctl } for pid=14996 comm="syz.4.3257" path="socket:[47413]" dev="sockfs" ino=47413 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 503.365160][ T28] audit: type=1400 audit(1774597734.656:3999): avc: denied { ioctl } for pid=14996 comm="syz.4.3257" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 503.809107][T14996] delete_channel: no stack [ 504.057251][ T28] audit: type=1400 audit(1774597735.395:4000): avc: denied { read write } for pid=13408 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.180177][T15016] loop0: detected capacity change from 0 to 164 [ 504.222752][T15016] iso9660: Bad value for 'block' [ 504.236438][ T28] audit: type=1400 audit(1774597735.395:4001): avc: denied { open } for pid=13408 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.310743][T15016] loop0: detected capacity change from 0 to 128 [ 504.435543][ T28] audit: type=1400 audit(1774597735.395:4002): avc: denied { ioctl } for pid=13408 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.590014][ T28] audit: type=1400 audit(1774597735.451:4003): avc: denied { recv } for pid=15008 comm="dhcpcd-run-hook" saddr=10.128.0.163 src=30036 daddr=10.128.1.115 dest=48756 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 504.748393][ T28] audit: type=1400 audit(1774597735.479:4004): avc: denied { search } for pid=15008 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.864133][ T28] audit: type=1400 audit(1774597735.479:4005): avc: denied { search } for pid=15008 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.888020][ T28] audit: type=1400 audit(1774597735.479:4006): avc: denied { search } for pid=15008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.023559][T15032] loop7: detected capacity change from 0 to 256 [ 505.071280][T15032] FAT-fs (loop7): Directory bread(block 64) failed [ 505.158857][T15032] FAT-fs (loop7): Directory bread(block 65) failed [ 505.165515][T15032] FAT-fs (loop7): Directory bread(block 66) failed [ 505.172651][T15032] FAT-fs (loop7): Directory bread(block 67) failed [ 505.179674][T15032] FAT-fs (loop7): Directory bread(block 68) failed [ 505.186323][T15032] FAT-fs (loop7): Directory bread(block 69) failed [ 505.193188][T15032] FAT-fs (loop7): Directory bread(block 70) failed [ 505.206756][T15032] FAT-fs (loop7): Directory bread(block 71) failed [ 505.214227][T15032] FAT-fs (loop7): Directory bread(block 72) failed [ 505.220878][T15032] FAT-fs (loop7): Directory bread(block 73) failed [ 505.336427][T15045] loop0: detected capacity change from 0 to 512 [ 505.357062][T15045] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 505.382439][T15050] 9p: Bad value for 'wfdno' [ 505.499738][T15045] EXT4-fs (loop0): failed to initialize system zone (-117) [ 505.536381][T15045] EXT4-fs (loop0): mount failed [ 508.374225][T15087] loop9: detected capacity change from 0 to 164 [ 508.412906][T15087] iso9660: Bad value for 'block' [ 508.594854][T15087] loop9: detected capacity change from 0 to 128 [ 509.089602][T15098] loop4: detected capacity change from 0 to 4096 [ 509.122555][T15098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.130850][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 509.130877][ T28] audit: type=1400 audit(1774597740.221:4075): avc: denied { mount } for pid=15097 comm="syz.4.3280" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 509.137113][ T28] audit: type=1400 audit(1774597740.240:4076): avc: denied { remove_name } for pid=15097 comm="syz.4.3280" name="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.137692][ T28] audit: type=1400 audit(1774597740.240:4077): avc: denied { rename } for pid=15097 comm="syz.4.3280" name="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 509.137852][ T28] audit: type=1400 audit(1774597740.240:4078): avc: denied { add_name } for pid=15097 comm="syz.4.3280" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.137966][ T28] audit: type=1400 audit(1774597740.240:4079): avc: denied { unlink } for pid=15097 comm="syz.4.3280" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 509.142113][T15098] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3280: corrupted inode contents [ 509.142168][T15098] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.142598][T15098] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.3280: mark_inode_dirty error [ 509.142713][T15098] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.143032][T15098] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3280: corrupted inode contents [ 509.143129][T15098] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.143576][T15098] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3280: mark_inode_dirty error [ 509.143677][T15098] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.144091][T15098] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3280: corrupted inode contents [ 509.144165][T15098] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.144348][T15098] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3280: mark_inode_dirty error [ 509.144383][T15098] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.144758][T15098] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3280: corrupted inode contents [ 509.144917][T15098] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.145313][T15098] EXT4-fs error (device loop4): ext4_truncate:4587: inode #15: comm syz.4.3280: mark_inode_dirty error [ 509.145434][T15098] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.145660][T15098] EXT4-fs error (device loop4): ext4_evict_inode:266: comm syz.4.3280: couldn't truncate inode 15 (err -117) [ 509.151493][ T28] audit: type=1400 audit(1774597740.249:4080): avc: denied { create } for pid=15097 comm="syz.4.3280" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 509.156962][ T28] audit: type=1400 audit(1774597740.259:4081): avc: denied { read open } for pid=15097 comm="syz.4.3280" path="/45/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 509.206614][ T28] audit: type=1400 audit(1774597740.296:4082): avc: denied { bind } for pid=15093 comm="syz.8.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.208571][ T28] audit: type=1400 audit(1774597740.296:4083): avc: denied { listen } for pid=15093 comm="syz.8.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.213144][ T28] audit: type=1400 audit(1774597740.306:4084): avc: denied { connect } for pid=15093 comm="syz.8.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.243716][T13743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.070600][T15149] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 512.131273][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 512.156552][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3293'. [ 512.171724][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 512.180811][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3293'. [ 512.307286][T15154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=15154 comm=syz.0.3293 [ 512.350683][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.622305][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.816920][T15177] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3294'. [ 513.573245][T15189] 9p: Bad value for 'wfdno' [ 513.752137][T15197] lo speed is unknown, defaulting to 1000 [ 514.540796][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 514.540816][ T28] audit: type=1400 audit(1774597745.291:4107): avc: denied { create } for pid=15206 comm="syz.8.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 514.608772][ T28] audit: type=1400 audit(1774597745.291:4108): avc: denied { write } for pid=15206 comm="syz.8.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 514.790543][ T28] audit: type=1400 audit(1774597745.516:4109): avc: denied { read } for pid=15221 comm="syz.8.3311" dev="nsfs" ino=4026534509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 514.791248][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3311'. [ 514.869191][ T28] audit: type=1400 audit(1774597745.516:4110): avc: denied { open } for pid=15221 comm="syz.8.3311" path="net:[4026534509]" dev="nsfs" ino=4026534509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 514.913978][ T28] audit: type=1400 audit(1774597745.516:4111): avc: denied { create } for pid=15221 comm="syz.8.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 514.940816][ T28] audit: type=1400 audit(1774597745.516:4112): avc: denied { mount } for pid=15221 comm="syz.8.3311" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 514.964437][ T28] audit: type=1400 audit(1774597745.516:4113): avc: denied { create } for pid=15221 comm="syz.8.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 514.985615][ T28] audit: type=1400 audit(1774597745.516:4114): avc: denied { setopt } for pid=15221 comm="syz.8.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 515.006926][ T28] audit: type=1400 audit(1774597745.637:4115): avc: denied { execute } for pid=15227 comm="syz.9.3312" name="file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 515.032049][ T28] audit: type=1400 audit(1774597745.637:4116): avc: denied { execute_no_trans } for pid=15227 comm="syz.9.3312" path="/28/file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 515.071873][T15233] FAULT_INJECTION: forcing a failure. [ 515.071873][T15233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.086911][T15233] CPU: 1 UID: 0 PID: 15233 Comm: syz.0.3314 Tainted: G W syzkaller #0 PREEMPT(full) [ 515.087000][T15233] Tainted: [W]=WARN [ 515.087009][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.087023][T15233] Call Trace: [ 515.087030][T15233] [ 515.087038][T15233] __dump_stack+0x1d/0x30 [ 515.087065][T15233] dump_stack_lvl+0x95/0xd0 [ 515.087092][T15233] dump_stack+0x15/0x1b [ 515.087140][T15233] should_fail_ex+0x263/0x280 [ 515.087174][T15233] should_fail+0xb/0x20 [ 515.087243][T15233] should_fail_usercopy+0x1a/0x20 [ 515.087269][T15233] _copy_from_user+0x1c/0xb0 [ 515.087303][T15233] sctp_getsockopt_paddr_thresholds+0x78/0x4a0 [ 515.087373][T15233] sctp_getsockopt+0x8d8/0xaa0 [ 515.087399][T15233] sock_common_getsockopt+0x60/0x70 [ 515.087424][T15233] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 515.087447][T15233] do_sock_getsockopt+0x1c4/0x210 [ 515.087505][T15233] __x64_sys_getsockopt+0x11d/0x1a0 [ 515.087557][T15233] x64_sys_call+0x2dcf/0x3020 [ 515.087592][T15233] do_syscall_64+0x12c/0x370 [ 515.087670][T15233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.087755][T15233] RIP: 0033:0x7fe4f83ec799 [ 515.087808][T15233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.087867][T15233] RSP: 002b:00007fe4f6e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 515.087893][T15233] RAX: ffffffffffffffda RBX: 00007fe4f8665fa0 RCX: 00007fe4f83ec799 [ 515.087908][T15233] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000003 [ 515.087920][T15233] RBP: 00007fe4f6e47090 R08: 00002000000006c0 R09: 0000000000000000 [ 515.087935][T15233] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 515.087951][T15233] R13: 00007fe4f8666038 R14: 00007fe4f8665fa0 R15: 00007ffc319680f8 [ 515.088016][T15233] [ 515.436985][T15243] loop9: detected capacity change from 0 to 512 [ 515.444048][T15243] EXT4-fs: Ignoring removed bh option [ 515.452179][T15243] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 515.483933][T15243] EXT4-fs (loop9): 1 truncate cleaned up [ 515.490205][T15243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.189457][T15226] loop7: detected capacity change from 0 to 1024 [ 517.767743][T15257] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3319'. [ 519.104835][T15260] loop8: detected capacity change from 0 to 512 [ 519.120652][T15260] EXT4-fs: Ignoring removed nobh option [ 519.144936][T15260] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 519.179733][T15260] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 519.195070][T15260] EXT4-fs (loop8): group descriptors corrupted! [ 519.346091][T14346] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.510759][T15270] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3324'. [ 519.759375][T15278] loop8: detected capacity change from 0 to 128 [ 520.194433][T15281] loop8: detected capacity change from 0 to 4096 [ 520.256037][T15281] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.271610][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 520.271633][ T28] audit: type=1400 audit(1774597750.651:4137): avc: denied { read write } for pid=15279 comm="syz.8.3327" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 520.358875][T15283] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=279 sclass=netlink_tcpdiag_socket pid=15283 comm=syz.8.3327 [ 520.596188][ T28] audit: type=1400 audit(1774597750.651:4138): avc: denied { open } for pid=15279 comm="syz.8.3327" path="/59/file0/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 520.728990][ T28] audit: type=1400 audit(1774597751.081:4139): avc: denied { read write } for pid=15286 comm="syz.9.3329" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 520.809323][ T28] audit: type=1400 audit(1774597751.081:4140): avc: denied { open } for pid=15286 comm="syz.9.3329" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 520.888764][ T28] audit: type=1400 audit(1774597751.109:4141): avc: denied { ioctl } for pid=15286 comm="syz.9.3329" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 520.993154][T13777] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.075758][T15293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.094972][T15293] wireguard0: entered promiscuous mode [ 521.105726][T15293] wireguard0: entered allmulticast mode [ 521.143934][ T28] audit: type=1326 audit(1774597751.465:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15289 comm="syz.9.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 521.194935][ T28] audit: type=1326 audit(1774597751.493:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15289 comm="syz.9.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 521.230782][T15296] loop9: detected capacity change from 0 to 164 [ 521.248130][T15296] iso9660: Unknown parameter 'nocomprockpm' [ 521.278216][ T28] audit: type=1326 audit(1774597751.493:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15289 comm="syz.9.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 521.357603][ T28] audit: type=1326 audit(1774597751.493:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15289 comm="syz.9.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 521.414982][T15293] loop9: detected capacity change from 0 to 8192 [ 521.444312][ T28] audit: type=1326 audit(1774597751.493:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15289 comm="syz.9.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 521.483888][T15293] loop9: p1 p3 p4[EZD] [ 521.488250][T15293] loop9: p1 start 262144 is beyond EOD, truncated [ 521.496752][T15293] loop9: p3 start 331781 is beyond EOD, truncated [ 521.513631][T15293] loop9: p4 size 197376 extends beyond EOD, truncated [ 521.606916][ T3000] loop9: p1 p3 p4[EZD] [ 521.616960][ T3000] loop9: p1 start 262144 is beyond EOD, truncated [ 521.654071][ T3000] loop9: p3 start 331781 is beyond EOD, truncated [ 521.660612][ T3000] loop9: p4 size 197376 extends beyond EOD, truncated [ 527.401226][T15333] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3340'. [ 527.423911][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3340'. [ 527.482691][T15335] SELinux: Context system_u:object_r:var_run_t:s0 is not valid (left unmapped). [ 527.493829][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 527.493847][ T28] audit: type=1400 audit(1774597757.395:4154): avc: denied { create } for pid=15334 comm="syz.0.3342" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 527.551591][ T28] audit: type=1400 audit(1774597757.395:4155): avc: denied { mac_admin } for pid=15334 comm="syz.0.3342" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 527.590555][T15342] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3342'. [ 527.609516][ T28] audit: type=1400 audit(1774597757.414:4156): avc: denied { relabelto } for pid=15334 comm="syz.0.3342" name="file0" dev="tmpfs" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:var_run_t:s0" [ 527.642835][T15342] hub 8-0:1.0: USB hub found [ 527.647893][T15342] hub 8-0:1.0: 8 ports detected [ 527.657515][T15342] netlink: 'syz.0.3342': attribute type 36 has an invalid length. [ 527.668494][T15342] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 527.678546][T15342] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 527.724071][ T28] audit: type=1400 audit(1774597757.414:4157): avc: denied { associate } for pid=15334 comm="syz.0.3342" name="file0" dev="tmpfs" ino=420 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_run_t:s0" [ 527.751790][ T28] audit: type=1400 audit(1774597757.508:4158): avc: denied { write } for pid=15334 comm="syz.0.3342" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 527.775314][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3345'. [ 528.462495][T15350] bridge_slave_1: left allmulticast mode [ 528.469567][T15350] bridge_slave_1: left promiscuous mode [ 528.678164][T15350] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.811821][T15350] bridge_slave_0: left allmulticast mode [ 528.849189][T15350] bridge_slave_0: left promiscuous mode [ 528.871428][T15350] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.891059][T15384] loop7: detected capacity change from 0 to 164 [ 528.914289][T15384] Unable to read rock-ridge attributes [ 529.033644][ T28] audit: type=1400 audit(1774597758.331:4159): avc: denied { unlink } for pid=13408 comm="syz-executor" name="file0" dev="tmpfs" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:var_run_t:s0" [ 529.082491][ T28] audit: type=1400 audit(1774597758.377:4160): avc: denied { bind } for pid=15371 comm="syz.0.3352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 529.146603][ T28] audit: type=1400 audit(1774597758.630:4161): avc: denied { create } for pid=15377 comm="syz.7.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 529.206263][ T28] audit: type=1400 audit(1774597758.639:4162): avc: denied { read } for pid=15377 comm="syz.7.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 529.280107][ T28] audit: type=1400 audit(1774597758.639:4163): avc: denied { connect } for pid=15377 comm="syz.7.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 529.444087][T15394] loop0: detected capacity change from 0 to 1024 [ 529.499807][T15394] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 529.747640][T15409] ªªªªªª: renamed from vlan0 (while UP) [ 529.940696][T15426] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 529.955226][T15424] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3370'. [ 529.993081][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3370'. [ 530.098646][T15437] loop7: detected capacity change from 0 to 512 [ 530.183309][T15437] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #12: comm syz.7.3375: corrupted in-inode xattr: bad e_name length [ 530.213050][T15437] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 530.213285][T15437] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3375: couldn't read orphan inode 12 (err -117) [ 530.222679][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 530.222702][ C1] EXT4-fs (loop7): initial error at time 1774597759: ext4_iget_extra_inode:5025: inode 12 [ 530.222749][ C1] EXT4-fs (loop7): last error at time 1774597759: ext4_iget_extra_inode:5025: inode 12 [ 530.292362][T15437] loop7: lost filesystem error report for type 5 error -117 [ 530.406548][T15437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.474332][T15437] EXT4-fs error (device loop7): ext4_add_entry:2415: inode #2: comm syz.7.3375: Directory hole found for htree leaf block 0 [ 530.631371][T12445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.674127][T15452] loop0: detected capacity change from 0 to 128 [ 530.797303][T15456] loop4: detected capacity change from 0 to 512 [ 530.807240][T15456] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 530.807402][T15456] EXT4-fs (loop4): bad block size 32768 [ 530.839341][T15452] FAT-fs (loop0): bogus number of reserved sectors [ 530.839385][T15452] FAT-fs (loop0): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 530.839417][T15452] FAT-fs (loop0): Can't find a valid FAT filesystem [ 531.453445][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3379'. [ 531.473885][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3379'. [ 531.493649][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3379'. [ 531.518250][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3379'. [ 533.317321][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 533.317338][ T28] audit: type=1326 audit(1774597762.830:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.9.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 534.119667][T15491] loop9: detected capacity change from 0 to 512 [ 534.139471][T15491] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 534.170354][ T28] audit: type=1326 audit(1774597762.830:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.9.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 535.221894][ T28] audit: type=1400 audit(1774597763.578:4219): avc: denied { shutdown } for pid=15486 comm="syz.7.3390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 535.255403][T15500] loop7: detected capacity change from 0 to 512 [ 535.362996][T15514] __nla_validate_parse: 2 callbacks suppressed [ 535.363022][T15514] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3396'. [ 535.551171][T15510] syzkaller0: entered promiscuous mode [ 535.558863][T15510] syzkaller0: entered allmulticast mode [ 535.569703][ T28] audit: type=1400 audit(1774597763.578:4220): avc: denied { name_connect } for pid=15486 comm="syz.7.3390" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 535.638275][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3400'. [ 535.718861][ T28] audit: type=1400 audit(1774597763.597:4221): avc: denied { setopt } for pid=15485 comm="syz.4.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 535.739972][T15530] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3402'. [ 535.805909][T15525] unsupported nlmsg_type 40 [ 535.815394][ T28] audit: type=1400 audit(1774597764.691:4222): avc: denied { write } for pid=15506 comm="syz.9.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 535.911807][ T28] audit: type=1400 audit(1774597764.804:4223): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 535.997221][ T28] audit: type=1400 audit(1774597765.056:4224): avc: denied { connect } for pid=15523 comm="syz.8.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 536.079735][ T28] audit: type=1400 audit(1774597765.056:4225): avc: denied { write } for pid=15523 comm="syz.8.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 536.161898][ T28] audit: type=1400 audit(1774597765.075:4226): avc: denied { read write } for pid=15520 comm="syz.7.3400" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 537.674614][T15554] loop7: detected capacity change from 0 to 512 [ 537.712361][T15554] EXT4-fs: Ignoring removed nobh option [ 537.756515][T15558] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3410'. [ 537.757119][T15554] ext4: Bad value for 'debug_want_extra_isize' [ 537.865997][T15550] loop4: detected capacity change from 0 to 256 [ 538.255795][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3415'. [ 539.347350][T15580] IPv6: addrconf: prefix option has invalid lifetime [ 540.180625][T15584] ip6erspan0: entered allmulticast mode [ 540.187119][T15580] IPv6: addrconf: prefix option has invalid lifetime [ 540.474237][ T7232] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.484772][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 540.484794][ T28] audit: type=1400 audit(1774597769.565:4244): avc: denied { write } for pid=15589 comm="syz.8.3420" name="unix" dev="proc" ino=4026534540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 543.947168][T15595] loop8: detected capacity change from 0 to 736 [ 544.034240][T15604] loop4: detected capacity change from 0 to 512 [ 544.277744][T15604] EXT4-fs: user quota file already specified [ 544.339343][ T28] audit: type=1400 audit(1774597773.157:4245): avc: denied { write } for pid=15606 comm="syz.0.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 544.418394][T15621] netlink: 'syz.7.3426': attribute type 11 has an invalid length. [ 544.456961][ T28] audit: type=1400 audit(1774597773.157:4246): avc: denied { setopt } for pid=15606 comm="syz.0.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 544.490512][T15622] rdma_rxe: rxe_newlink: failed to add lo [ 544.498681][ T28] audit: type=1400 audit(1774597773.297:4247): avc: denied { create } for pid=15618 comm="syz.9.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 544.557620][ T28] audit: type=1400 audit(1774597773.306:4248): avc: denied { write } for pid=15618 comm="syz.9.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 544.603575][ T28] audit: type=1400 audit(1774597773.353:4249): avc: denied { ioctl } for pid=15627 comm="syz.4.3430" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 544.688594][T15607] lo speed is unknown, defaulting to 1000 [ 544.751806][ T28] audit: type=1400 audit(1774597773.550:4250): avc: denied { name_connect } for pid=15657 comm="syz.7.3436" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 544.796423][T15666] loop9: detected capacity change from 0 to 128 [ 544.815102][ T28] audit: type=1400 audit(1774597773.578:4251): avc: denied { accept } for pid=15657 comm="syz.7.3436" lport=36577 faddr=::ffff:172.20.255.187 fport=32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 544.850454][ T28] audit: type=1400 audit(1774597773.578:4252): avc: denied { listen } for pid=15657 comm="syz.7.3436" lport=36577 faddr=::ffff:172.20.255.187 fport=32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 544.899730][ T28] audit: type=1400 audit(1774597773.606:4253): avc: denied { setopt } for pid=15665 comm="syz.9.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 544.938810][ T7226] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.994669][ T7226] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.047288][ T7226] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.112720][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3441'. [ 545.142390][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3441'. [ 545.165101][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3441'. [ 545.193970][T15693] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3443'. [ 545.236568][ T7226] bridge_slave_1: left allmulticast mode [ 545.252591][ T7226] bridge_slave_1: left promiscuous mode [ 545.262561][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.277149][ T7226] bridge_slave_0: left allmulticast mode [ 545.283078][ T7226] bridge_slave_0: left promiscuous mode [ 545.289122][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.488505][ T7226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.519480][ T7226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.531521][ T7226] bond0 (unregistering): Released all slaves [ 545.542090][T15677] lo speed is unknown, defaulting to 1000 [ 545.548038][T15698] ªªªªªª: renamed from vlan0 (while UP) [ 545.731306][T15734] xt_CT: No such helper "snmp" [ 545.786546][ T7226] hsr_slave_0: left promiscuous mode [ 545.804252][ T7226] hsr_slave_1: left promiscuous mode [ 545.813472][ T7226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.830810][ T7226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.845727][ T7226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.857640][T15742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15742 comm=syz.7.3452 [ 545.861719][ T7226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.882874][ T7226] veth1_macvtap: left promiscuous mode [ 545.888768][ T7226] veth0_macvtap: left promiscuous mode [ 545.897785][ T7226] veth1_vlan: left promiscuous mode [ 545.903358][ T7226] veth0_vlan: left promiscuous mode [ 545.973208][ T7226] team0 (unregistering): Port device team_slave_1 removed [ 545.983096][ T7226] team0 (unregistering): Port device team_slave_0 removed [ 546.078746][T15677] chnl_net:caif_netlink_parms(): no params data found [ 546.122526][T15677] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.129847][T15677] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.137526][T15677] bridge_slave_0: entered allmulticast mode [ 546.144615][T15677] bridge_slave_0: entered promiscuous mode [ 546.152153][T15677] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.159610][T15677] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.166952][T15677] bridge_slave_1: entered allmulticast mode [ 546.173842][T15677] bridge_slave_1: entered promiscuous mode [ 546.193378][T15677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.204277][T15677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.244717][T15677] team0: Port device team_slave_0 added [ 546.261929][T15677] team0: Port device team_slave_1 added [ 546.296625][T15677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.304048][T15677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.336181][T15791] loop7: detected capacity change from 0 to 1024 [ 546.342806][T15677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.354526][T15677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.361963][T15677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.368289][T15791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.388819][T15677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.417289][T15793] tc_dump_action: action bad kind [ 546.454705][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 546.454723][ T28] audit: type=1400 audit(1774597775.140:4260): avc: denied { write } for pid=15790 comm="syz.7.3458" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 546.510757][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'. [ 546.513635][T15677] hsr_slave_0: entered promiscuous mode [ 546.528445][T15677] hsr_slave_1: entered promiscuous mode [ 546.537321][T15803] loop9: detected capacity change from 0 to 128 [ 546.547530][T15801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 546.554472][T15677] debugfs: 'hsr0' already exists in 'hsr' [ 546.562593][T15677] Cannot create hsr debugfs directory [ 546.571353][ T28] audit: type=1400 audit(1774597775.140:4261): avc: denied { ioctl } for pid=15790 comm="syz.7.3458" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 546.586909][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'. [ 546.616659][T15811] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 546.624608][T15801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 546.675316][T15817] loop4: detected capacity change from 0 to 164 [ 546.682118][T15819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=15819 comm=syz.0.3461 [ 546.713084][T15817] ISOFS: unable to read i-node block [ 546.718414][T15817] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 546.973876][ T28] audit: type=1400 audit(1774597775.626:4262): avc: denied { ioctl } for pid=15790 comm="syz.7.3458" path="/161/file0/file1" dev="loop7" ino=15 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 547.083926][ T28] audit: type=1400 audit(1774597775.729:4263): avc: denied { create } for pid=15790 comm="syz.7.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 547.352261][T12445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.424004][T15852] loop4: detected capacity change from 0 to 256 [ 547.545834][T15852] FAT-fs (loop4): Directory bread(block 64) failed [ 547.552689][T15852] FAT-fs (loop4): Directory bread(block 65) failed [ 547.559484][T15852] FAT-fs (loop4): Directory bread(block 66) failed [ 547.566226][T15852] FAT-fs (loop4): Directory bread(block 67) failed [ 547.572908][T15852] FAT-fs (loop4): Directory bread(block 68) failed [ 547.579667][T15852] FAT-fs (loop4): Directory bread(block 69) failed [ 547.587054][T15852] FAT-fs (loop4): Directory bread(block 70) failed [ 547.593918][T15852] FAT-fs (loop4): Directory bread(block 71) failed [ 547.600619][T15852] FAT-fs (loop4): Directory bread(block 72) failed [ 547.607151][T15852] FAT-fs (loop4): Directory bread(block 73) failed [ 548.426988][ T28] audit: type=1400 audit(1774597776.262:4264): avc: denied { override_creds } for pid=15846 comm="syz.4.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 548.497304][T15677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 548.630353][T15677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 548.662123][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3468'. [ 548.678970][T15677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 548.755163][T15677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 548.994398][T15677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.025055][T15677] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.062048][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.069342][ T7228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.129162][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.136628][ T7228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.286308][T15677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 549.300032][T15677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 549.353165][T15905] lo speed is unknown, defaulting to 1000 [ 549.511488][T15677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.578282][ T28] audit: type=1326 audit(1774597778.049:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.9.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 549.646935][ T28] audit: type=1326 audit(1774597778.049:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.9.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 549.717636][ T28] audit: type=1326 audit(1774597778.058:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.9.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 549.765071][T15944] loop9: detected capacity change from 0 to 8192 [ 549.780882][ T28] audit: type=1326 audit(1774597778.058:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.9.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 549.796190][T15677] veth0_vlan: entered promiscuous mode [ 549.823750][ T28] audit: type=1326 audit(1774597778.058:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.9.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd37a5c799 code=0x7ffc0000 [ 549.842273][T15677] veth1_vlan: entered promiscuous mode [ 549.860376][T15962] bpf: Bad value for 'uid' [ 549.869836][T13200] loop9: p1 < > p2 p4 < p5 > [ 549.874546][T13200] loop9: partition table partially beyond EOD, truncated [ 549.878958][T15953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4169 sclass=netlink_route_socket pid=15953 comm=syz.7.3479 [ 549.882347][T13200] loop9: p1 start 134217728 is beyond EOD, truncated [ 549.882370][T13200] loop9: p2 size 591360 extends beyond EOD, truncated [ 549.883966][T13200] loop9: p5 size 591360 extends beyond EOD, truncated [ 549.941591][T15944] loop9: p1 < > p2 p4 < p5 > [ 549.946385][T15944] loop9: partition table partially beyond EOD, truncated [ 549.956167][T15677] veth0_macvtap: entered promiscuous mode [ 549.973007][T15944] loop9: p1 start 134217728 is beyond EOD, truncated [ 549.983555][T15944] loop9: p2 size 591360 extends beyond EOD, truncated [ 550.002900][T15677] veth1_macvtap: entered promiscuous mode [ 550.008949][T15944] loop9: p5 size 591360 extends beyond EOD, truncated [ 550.040527][T15677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.052007][T15677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.087968][ T10] IPVS: starting estimator thread 0... [ 550.099442][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3481'. [ 550.164704][T15970] netlink: 'syz.0.3481': attribute type 1 has an invalid length. [ 550.181208][T15970] netlink: 'syz.0.3481': attribute type 2 has an invalid length. [ 550.219383][T15971] IPVS: using max 2448 ests per chain, 122400 per kthread [ 550.226632][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.264696][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.276091][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.290883][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.331478][T15986] netlink: 'syz.4.3482': attribute type 1 has an invalid length. [ 551.721006][T16053] __nla_validate_parse: 1 callbacks suppressed [ 551.721034][T16053] netlink: 236 bytes leftover after parsing attributes in process `syz.7.3484'. [ 551.771930][T16053] netlink: 236 bytes leftover after parsing attributes in process `syz.7.3484'. [ 551.802885][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 551.802904][ T28] audit: type=1400 audit(1774597780.154:4285): avc: denied { setopt } for pid=16044 comm="syz.7.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 551.947663][T16059] syz_tun: entered allmulticast mode [ 551.973381][T16059] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 551.981962][T16059] mroute: pending queue full, dropping entries [ 552.158072][T16069] lo speed is unknown, defaulting to 1000 [ 552.296207][T16080] bridge0: port 3(syz_tun) entered blocking state [ 552.363974][T16080] bridge0: port 3(syz_tun) entered disabled state [ 552.406067][T16080] syz_tun: entered promiscuous mode [ 552.494285][T16081] lo speed is unknown, defaulting to 1000 [ 552.515488][T16057] syz_tun: left allmulticast mode [ 552.533562][ T28] audit: type=1400 audit(1774597780.818:4286): avc: denied { read } for pid=16089 comm="syz.7.3494" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 552.581305][ T28] audit: type=1400 audit(1774597780.818:4287): avc: denied { open } for pid=16089 comm="syz.7.3494" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 552.667622][ T28] audit: type=1400 audit(1774597780.818:4288): avc: denied { ioctl } for pid=16089 comm="syz.7.3494" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 552.771563][T16075] loop0: detected capacity change from 0 to 1024 [ 552.807449][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3498'. [ 552.820746][T16113] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3498'. [ 552.832689][T16111] Bluetooth: hci0: Frame reassembly failed (-90) [ 552.910450][T16075] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 552.921870][T16075] System zones: 0-1, 3-36 [ 553.122106][T16075] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3489: bad orphan inode 134217728 [ 553.179648][T16075] loop0: lost filesystem error report for type 5 error -117 [ 553.180466][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 553.195376][ C1] EXT4-fs (loop0): initial error at time 1774597781: ext4_orphan_get:1417 [ 553.204364][ C1] EXT4-fs (loop0): last error at time 1774597781: ext4_orphan_get:1417 [ 553.382939][T16075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.758403][T13408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.008703][ T28] audit: type=1400 audit(1774597782.211:4289): avc: denied { mount } for pid=16157 comm="syz.1.3502" name="/" dev="hugetlbfs" ino=51058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 554.066377][T16161] syz_tun: entered allmulticast mode [ 554.072941][T16158] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 554.081586][T16158] mroute: pending queue full, dropping entries [ 554.126274][ T28] audit: type=1400 audit(1774597782.305:4290): avc: denied { listen } for pid=16159 comm="syz.0.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 554.181183][T16160] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 554.260636][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3504'. [ 554.315205][ T28] audit: type=1400 audit(1774597782.501:4291): avc: denied { read } for pid=16170 comm="syz.0.3505" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 554.403560][ T28] audit: type=1400 audit(1774597782.520:4292): avc: denied { open } for pid=16170 comm="syz.0.3505" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 554.447481][T16157] syz_tun: left allmulticast mode [ 554.463515][ T28] audit: type=1400 audit(1774597782.520:4293): avc: denied { setopt } for pid=16170 comm="syz.0.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 554.484863][ T28] audit: type=1400 audit(1774597782.520:4294): avc: denied { ioctl } for pid=16170 comm="syz.0.3505" path="socket:[51089]" dev="sockfs" ino=51089 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 554.641972][T16190] loop1: detected capacity change from 0 to 512 [ 554.683217][T16190] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.3513: corrupted in-inode xattr: invalid ea_ino [ 554.709438][T16190] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 554.709658][T16190] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3513: couldn't read orphan inode 15 (err -117) [ 554.730786][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 554.730809][ C0] EXT4-fs (loop1): initial error at time 1774597782: ext4_iget_extra_inode:5025: inode 15 [ 554.730841][ C0] EXT4-fs (loop1): last error at time 1774597782: ext4_iget_extra_inode:5025: inode 15 [ 554.763348][T16190] loop1: lost filesystem error report for type 5 error -117 [ 554.764021][T16190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.766231][T16195] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3514'. [ 554.775594][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3513'. [ 555.304547][ T4155] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 555.368556][T15677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.575672][T16204] bond1: option miimon: invalid value (18446744073709551615) [ 555.599298][T16204] bond1: option miimon: allowed values 0 - 2147483647 [ 555.615300][T16204] bond1 (unregistering): Released all slaves [ 555.800179][T16207] lo speed is unknown, defaulting to 1000 [ 555.828661][T16215] netlink: 764 bytes leftover after parsing attributes in process `syz.4.3520'. [ 556.005992][T16220] lo speed is unknown, defaulting to 1000 [ 556.217048][T16224] netlink: 'syz.7.3521': attribute type 4 has an invalid length. [ 556.247291][T16215] loop4: detected capacity change from 0 to 128 [ 556.277615][T16225] netlink: 'syz.7.3521': attribute type 4 has an invalid length. [ 556.356126][T16228] loop0: detected capacity change from 0 to 2048 [ 556.434463][T16228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.449879][T16228] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.609512][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'. [ 556.640555][T13408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.651787][T16237] team0: No ports can be present during mode change [ 556.815077][T16215] macvlan2: entered promiscuous mode [ 556.822733][T16215] macvlan2: entered allmulticast mode [ 556.830008][T16215] veth0_virt_wifi: entered allmulticast mode [ 556.881547][T16249] loop9: detected capacity change from 0 to 128 [ 557.008268][T16249] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.040221][T16249] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 557.188452][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 557.188479][ T28] audit: type=1400 audit(1774597785.167:4301): avc: denied { create } for pid=16250 comm="syz.4.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 557.243886][T16258] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 557.319805][ T28] audit: type=1400 audit(1774597785.242:4302): avc: denied { getopt } for pid=16250 comm="syz.4.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 557.578512][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3532'. [ 557.634330][ T28] audit: type=1400 audit(1774597785.242:4303): avc: denied { create } for pid=16250 comm="syz.4.3530" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 557.635258][ T28] audit: type=1400 audit(1774597785.242:4304): avc: denied { associate } for pid=16250 comm="syz.4.3530" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 557.735155][ T28] audit: type=1400 audit(1774597785.242:4305): avc: denied { write open } for pid=16250 comm="syz.4.3530" path="/97/file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 557.848314][T14346] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 557.951713][T16256] lo speed is unknown, defaulting to 1000 [ 557.951742][T16256] lo speed is unknown, defaulting to 1000 [ 557.951912][T16256] lo speed is unknown, defaulting to 1000 [ 557.969997][T16256] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 557.981557][T16257] lo speed is unknown, defaulting to 1000 [ 558.066200][T16257] lo speed is unknown, defaulting to 1000 [ 558.087967][T16256] lo speed is unknown, defaulting to 1000 [ 558.088376][T16256] lo speed is unknown, defaulting to 1000 [ 558.088674][T16256] lo speed is unknown, defaulting to 1000 [ 558.088971][T16256] lo speed is unknown, defaulting to 1000 [ 558.089344][T16256] lo speed is unknown, defaulting to 1000 [ 558.089767][T16256] lo speed is unknown, defaulting to 1000 [ 558.090090][T16256] lo speed is unknown, defaulting to 1000 [ 558.090481][T16256] lo speed is unknown, defaulting to 1000 [ 558.090915][T16256] lo speed is unknown, defaulting to 1000 [ 558.091153][T16256] lo speed is unknown, defaulting to 1000 [ 558.146354][ T28] audit: type=1400 audit(1774597786.075:4306): avc: denied { create } for pid=16275 comm="syz.9.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 558.217840][ T28] audit: type=1400 audit(1774597786.140:4307): avc: denied { unlink } for pid=13743 comm="syz-executor" name="file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 558.312440][ T28] audit: type=1400 audit(1774597786.187:4308): avc: denied { mount } for pid=16277 comm="syz.4.3537" name="/" dev="ramfs" ino=51397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 558.414810][T16267] loop0: detected capacity change from 0 to 32768 [ 559.000895][T16299] loop9: detected capacity change from 0 to 512 [ 559.067884][T16299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.081075][T16299] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.121883][T16311] netlink: 'syz.0.3543': attribute type 1 has an invalid length. [ 559.154226][T16311] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3543'. [ 559.208647][ T28] audit: type=1400 audit(1774597787.066:4309): avc: denied { bind } for pid=16309 comm="syz.4.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 559.278207][ T28] audit: type=1400 audit(1774597787.141:4310): avc: denied { setattr } for pid=16294 comm="syz.1.3544" name="NETLINK" dev="sockfs" ino=52439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 559.319066][T14346] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.605838][T16298] ================================================================== [ 559.614223][T16298] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 559.622950][T16298] [ 559.625294][T16298] write to 0xffff88811a679468 of 8 bytes by task 16300 on cpu 1: [ 559.633015][T16298] shmem_file_splice_read+0x470/0x600 [ 559.638493][T16298] splice_direct_to_actor+0x26e/0x670 [ 559.643964][T16298] do_splice_direct+0x119/0x1a0 [ 559.648819][T16298] do_sendfile+0x382/0x650 [ 559.653334][T16298] __x64_sys_sendfile64+0x105/0x150 [ 559.658544][T16298] x64_sys_call+0x2dc4/0x3020 [ 559.663411][T16298] do_syscall_64+0x12c/0x370 [ 559.668564][T16298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.674553][T16298] [ 559.676881][T16298] write to 0xffff88811a679468 of 8 bytes by task 16298 on cpu 0: [ 559.684603][T16298] shmem_file_splice_read+0x470/0x600 [ 559.690078][T16298] splice_direct_to_actor+0x26e/0x670 [ 559.695478][T16298] do_splice_direct+0x119/0x1a0 [ 559.700463][T16298] do_sendfile+0x382/0x650 [ 559.704894][T16298] __x64_sys_sendfile64+0x105/0x150 [ 559.710193][T16298] x64_sys_call+0x2dc4/0x3020 [ 559.714896][T16298] do_syscall_64+0x12c/0x370 [ 559.719517][T16298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.725616][T16298] [ 559.727945][T16298] value changed: 0x0000000000002c9d -> 0x0000000000002ca4 [ 559.735059][T16298] [ 559.737481][T16298] Reported by Kernel Concurrency Sanitizer on: [ 559.743675][T16298] CPU: 0 UID: 0 PID: 16298 Comm: syz.7.3546 Tainted: G W syzkaller #0 PREEMPT(full) [ 559.754629][T16298] Tainted: [W]=WARN [ 559.758446][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 559.768682][T16298] ==================================================================