last executing test programs: 14m14.129915325s ago: executing program 32 (id=161): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x10004, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m5.465876536s ago: executing program 33 (id=284): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 14m3.249931385s ago: executing program 34 (id=317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd86, &(0x7f0000000ec0)={@multicast, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "0dd6bd", 0xd50, 0x6, 0x1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x20}, {[@dstopts={0x1, 0x1a4, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0xac, 0xd1b, "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"}]}], @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x2, 0x200, 0x0, 0x3, 0x0, 0x0, 0x3, 0x2, 0x7, 0x2, 0x4e22, 0x4e22}, 0x3, 0x3}}}}}}}}, 0x0) 13m12.677952394s ago: executing program 35 (id=1030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000740)={@val={0xa, 0x9100}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x7, 0xa5aa, 0x1, 0xbd}}}}}}}, 0x4a) 12m59.345001294s ago: executing program 36 (id=1401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x49a9, &(0x7f00000007c0)={0x0, 0xad2a, 0x10000, 0x0, 0x33a}, 0x0, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 12m46.381948761s ago: executing program 37 (id=1686): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x177) 12m12.321435161s ago: executing program 38 (id=2165): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="44000280400001"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 11m26.140416709s ago: executing program 39 (id=2942): r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') pread64(r2, &(0x7f0000000140)=""/25, 0x19, 0x4) 11m18.418418964s ago: executing program 40 (id=3032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) 10m39.815806918s ago: executing program 4 (id=3675): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 10m39.756872471s ago: executing program 4 (id=3677): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x40}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10m39.64538083s ago: executing program 4 (id=3681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0118020003110000480012800b00010065727370616e0000380002800400120005001708000000000500160002"], 0x68}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000400), 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 10m39.578515696s ago: executing program 4 (id=3684): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 10m39.505229988s ago: executing program 4 (id=3685): unshare(0x42000000) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0xc000, &(0x7f0000000e00)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91e0f727e1e38533740c83f861dd606c4932bda064205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ceff01000000000000a7f55959926a7fd5ac27fd519b5c217ed420e41ddcfd90080003656169e720fdc2da8c998a750683232e5263a0", @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x1, 0x634, &(0x7f00000007c0)="$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") r0 = add_key(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001540)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x7, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) utimensat(r1, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000200)="1f10", 0x2, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r2) 10m39.222236138s ago: executing program 4 (id=3687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) poll(&(0x7f0000000140)=[{r0, 0xa0}], 0x1, 0x8) 10m39.221307946s ago: executing program 41 (id=3687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) poll(&(0x7f0000000140)=[{r0, 0xa0}], 0x1, 0x8) 10m39.062387453s ago: executing program 9 (id=3691): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="ee5ed8e6ae8104e5ca231797d79a4be676b089f6dd4db1fc255940ac869f014139cbd9f0aff1060f430579caca92f4f460bce8e9ac81e5645b872119", 0x1, 0x4400c06d, 0x0, 0xffffffffffffff96) 10m39.061605052s ago: executing program 9 (id=3693): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m39.011136533s ago: executing program 9 (id=3694): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x157c, 0x10ffe, 0x7, 0x61, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200040, &(0x7f0000000080), 0xfa, 0x4cc, &(0x7f00000016c0)="$eJzs3M1vVFUbAPDnTqct5eNtX15eFUSpohEltrSAsnABRhMXxpi40WXTFqwUatpihBCtLnBpTNwTl/wLrnRjjCsTtrg3JMSwATQmY+7MvdNp54PpFyPM7xdm5pw7d+49T885M+fcw0wAXWs4vUsidkbEjYgYrGRX7jBcebh7+/LkvduXJ5Mold77Iynvd+f25cl81/x1O/LM0srttRYuXjo7MTs73X/82jtpfnTx3MejCxcvvTxzbuLM9Jnp8+MnThw7OvbqK+PHmxe+t/040zLd2ffZ3P69b33wTe+q+FfE8Un7B21tuMG2njzx/Gad5V9iV/l+oHyfFPOthc4ViLakDbKYdaUbMRg9Ua28GIw3v+xo4YAt1fojdCgiSsuS7LF2G/AQS9ruzb36PTxSsg/6JGJpMp0D187nu8GtU5UJUBr33exWeaZYnb32Vue3my+dbb2/9OfV9BbL1yH6tuh0AADxw6nKYz72Wx7/FaoXgpN7pdLJbG1oKCL+GxG7I+J/EbEnIv4fEY9FxOMR8UTNsRut+6y2epGkfvxZuLnu4Npw63DEa9na1srxX3XtYqgny+0qx9+bnJ6ZnT4SEf+JiEPR25/mx1qc48c3rn+dJevGdcM147/0lp4/Hwtm5bhZ7F/5mqmJxYmNxp279UXEvmKj+JPqSkBaj3sjYt+B9Z1j5qVr+5s91yD+gYi42vKAxVWPG1D6LuKFSv0vxar4c0nr9cnRbTE7fWQ0bxX1fvn1yrvNzn//+t9aaf1vb9j+q/EPJTXrtfMLaz/Hld++ajqnbLP9r+g3afvvS1Z2pU8nFhfnxyL6krfL+b44mW2P+v3Gl/dP4z90sHH/3x3Lf4knIyJtxE9FxNMRcSAr+zMR8WxEHGwR/8+vP/fR+uPfWmn8U/ev/w9frNZ/00S+tl33VM/Zn74vP5NX2VCL+JNoUP/HyqlD2ZZ23v9alnR+I60ZAAAAHj6FiNgZSWGkmi4URkYq/19+T2wvzM4tLB4+PXfh/FTlOwJD0VvIr3QNVq+HxtJYNq3Pr4+Or8ofza4bf9szUM6PTM7NTnU6eOhyO5r0/9TvPZ0uHbDlNmEdDXhIrbf/l0qlzze5KMADVtf/Dfyhaxj/Q/dq0P8HajP95X/Ao6im/xfyTM3E/u/l7wkDj5pm4//rD7gcwINn/g/dS/+H7qX/Q1fKvglfjLa+Lb9FifT9p+k+PRHRqYI1SZRK2+p/5aCSmLmwlWfv28QD7lz9KwmDaztOFNZ40qS2jW1bw2801CWi0w1gjYm/sh/b3OBxim38xdKuND/QvDe1k0jKL+/0OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDm+CcAAP//p1vRPQ==") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x52) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x200, 0x5388, 0x8, 0x8, 0xcb, 0x7}, {0x7f, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 10m38.602584582s ago: executing program 9 (id=3698): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$eJzs3cFqE0EYB/Bv23UbxEPP4mHBi6egPkFUWiguCMoe9KRQvbQi2MvqqW/hG/gqvo7k1FskTmhoWcEetrvJ/n6XfOx/wnwzgcwpk/cPPp8cfzn79PPXj5hMsshnMYuLLPZjJ3YjOY8rstanAMDGuFgs4vci+Y/hz2+hJQCgYzc8/wGALeD8B4Dxcf4DwPi8efvu5bOqOnhdlpOI+XlTN3V6TfnhUXXwuPxrf/2uedPUu5f5k5SXV/M7cXeVP23Ni3j0MOXL7MWrKuV5GtHUe3Hc1vAs62AXAAAAAAAAAAAAAAAAAAAAAADgdk3LS633+0ynxT/yVB0eFatn1+/3yeN+3jJh0ckyAAAAAAAAAAAAAAAAAAAAYKOdfft+8uH09OPX4RbzYbQxtOJe55/g3mqGvle67cVynwfQxrWixy8lAAAAAAAAAAAAAAAAAAAYqfWPfvvuBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6s/7//+6K5Tw7fS8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR+xMAAP//+cFD/w==") bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lchown(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x4, 0x8004, 0x0, 0x0, 0x19, 0xd, "ef35bf413db93852f7bda4ae6dddfbd1ce5d29c2eeee09e737e60edf110f5bcb7639c2eb4b78c6df701905b9aafab4af000055a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0xa, 0x1]}) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file2\x00') 10m38.459339783s ago: executing program 9 (id=3701): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x1184600, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 10m37.934469342s ago: executing program 9 (id=3703): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x172831) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 10m37.931869466s ago: executing program 42 (id=3703): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x172831) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 8m48.449917693s ago: executing program 2 (id=5287): syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,nfs,dots,check=strict,uid=', @ANYRESHEX, @ANYBLOB='B\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8m48.338118897s ago: executing program 2 (id=5289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 8m48.25010072s ago: executing program 2 (id=5291): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) 8m48.24971736s ago: executing program 2 (id=5292): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x78) open_tree(r0, &(0x7f0000000300)='./file0/../file0\x00', 0x8801) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 8m48.215860014s ago: executing program 2 (id=5295): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x91e8d5c924b6df0f}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xb}, {0xd}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 8m47.672844419s ago: executing program 2 (id=5304): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f00000008c0)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}], [{@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 8m47.658978748s ago: executing program 43 (id=5304): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f00000008c0)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}], [{@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 8m41.82204129s ago: executing program 5 (id=5373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 8m41.694213852s ago: executing program 5 (id=5378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e34", 0x3fff, 0x8040, 0x0, 0x0) 8m41.138429078s ago: executing program 5 (id=5383): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e24, 0x5, @local, 0x3b67}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8848) setresuid(0x0, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x4) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 8m39.834385572s ago: executing program 5 (id=5397): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x1a1046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 8m39.805648959s ago: executing program 5 (id=5398): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca2d410}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m39.270693821s ago: executing program 5 (id=5409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 8m39.270242101s ago: executing program 44 (id=5409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m32.934074647s ago: executing program 0 (id=8608): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0'}, 0xb) fadvise64(r2, 0x2, 0x9, 0x4) sendto$isdn(r2, &(0x7f0000000180)={0xffffffff, 0x7, "254553fd61df9ea24f21ad4d0cff42b3ced87c1f21d2046be47be5aa66f30f50c3652da0979e56d5afbf38a5fb59bede7021f0b74d015642a309b510ab40a3911688b21ac0b95382c9fed440c68af17216647588b9f9d1b220fef0caf116351167f565f547140fe7b249d533bf05fd495ca16a06c78e0f14ddf29f4e43622710a37aa9f6509a3b"}, 0x8f, 0x10, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x20000080) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) 2m32.639793388s ago: executing program 0 (id=8612): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x1}, 0xa397, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a4, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0x1, 0xffffffffffffffff, 0xb) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c42bb4f92, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = creat(0x0, 0x0) writev(r3, 0x0, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000140)=""/104) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 2m32.439063566s ago: executing program 0 (id=8613): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x4) syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x6b7a, 0x80, 0x1, 0x3df}, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 2m32.176219197s ago: executing program 0 (id=8614): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5402, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000008]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e21, @loopback}]}, 0x0) 2m31.507270612s ago: executing program 0 (id=8619): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) alarm(0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) alarm(0x38) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 2m30.937368715s ago: executing program 0 (id=8622): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) close_range(0xffffffffffffffff, r0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000a00)=0x2, 0x4) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="3900000013", 0x5}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@getlink={0x28, 0x12, 0x18efde40b3708357, 0x2000000, 0x0, {}, [@IFLA_PROMISCUITY={0x8}]}, 0x28}}, 0x800) r4 = socket(0xf, 0x5, 0xcaf2) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x6, 0x0, 0x100001}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmsg$unix(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40000000) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xb}, 0x1c) 2m30.895757346s ago: executing program 45 (id=8622): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) close_range(0xffffffffffffffff, r0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000a00)=0x2, 0x4) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="3900000013", 0x5}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@getlink={0x28, 0x12, 0x18efde40b3708357, 0x2000000, 0x0, {}, [@IFLA_PROMISCUITY={0x8}]}, 0x28}}, 0x800) r4 = socket(0xf, 0x5, 0xcaf2) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x6, 0x0, 0x100001}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmsg$unix(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40000000) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xb}, 0x1c) 10.197526141s ago: executing program 8 (id=9272): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x0, 0x0, {{0x12, 0x4, 0x2, 0x2a, 0x48, 0x6a, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @noop, @rr={0x7, 0x7, 0xf2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x56, [@rand_addr=0x64010101, @loopback, @loopback, @multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}]}}}}}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) unshare(0x6a040000) 9.026300437s ago: executing program 3 (id=9273): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) capset(0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000b0000"], 0x28}, 0x0) preadv(r1, &(0x7f0000000700)=[{0x0}], 0x1, 0x180, 0x9) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x220881f, &(0x7f00000000c0), 0x1, 0x511, &(0x7f0000000f00)="$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") sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xffe0}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000440)={&(0x7f0000000380), &(0x7f00000003c0)=""/78, 0x4e}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x92) 6.859376297s ago: executing program 8 (id=9275): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc5, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x1, 0x0, 0x28, 0x20, 0x104, 0xfffa}) setsockopt(0xffffffffffffffff, 0x1000, 0x7, &(0x7f00000001c0)="bbe1d83665e6f6d5ff013a1b55ca7de4d50c74cf629366fc44e8b3292069800e985a384863a30b734c5513c1571f6d3f6846c9e1e98a632359372124b6ec1ef35bd247c352b360f9d36b52659ae54c82bb0132b9e5", 0x55) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x40810) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) 6.525225138s ago: executing program 1 (id=9276): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x5, 0x0, 0x5, 0x8, 0xfffffffffffffffc}], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f00000002c0)=r4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 6.33530491s ago: executing program 1 (id=9278): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) unshare(0x48060080) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.862073431s ago: executing program 3 (id=9280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008050) 5.861534371s ago: executing program 7 (id=9281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xf, 0x8}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x615a}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x10) bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 5.861091482s ago: executing program 1 (id=9283): clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000205f"], 0x0, 0x34}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) 5.860751372s ago: executing program 8 (id=9284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.24146492s ago: executing program 8 (id=9286): gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r2 = syz_open_dev$sg(0x0, 0x0, 0x400000) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.24066754s ago: executing program 1 (id=9287): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4804) r4 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r6, 0x0, 0x0, 0x4040014) 4.056718321s ago: executing program 3 (id=9288): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r4, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfc, 0x565, &(0x7f0000000280)="$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") r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 2.573820838s ago: executing program 7 (id=9289): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 2.414211898s ago: executing program 7 (id=9290): socket$netlink(0x10, 0x3, 0x4) syz_io_uring_setup(0x132a, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 2.390859949s ago: executing program 7 (id=9291): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409", 0x63}], 0x1}, 0x48002) 2.296203439s ago: executing program 6 (id=9292): unshare(0x48060080) 2.0799289s ago: executing program 6 (id=9293): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000180)={[{@nodioread_nolock}, {@debug}, {@journal_checksum}]}, 0x0, 0x5fd, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat(r0, 0x0, 0x602800, 0x61) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x3ffff) msgget$private(0x0, 0x790) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000000c0)=0x1, 0x4) sendfile(r3, r2, 0x0, 0x7ffff000) 1.803553622s ago: executing program 1 (id=9294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsmount(0xffffffffffffffff, 0x1, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7fe}, 0x11, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x1) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={r6, 0x7, 0x6000, 0x7, 0x7ff, 0xff}, &(0x7f00000000c0)=0x14) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) r7 = getpid() sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x408d0}, 0x30) 1.803127531s ago: executing program 8 (id=9295): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIBMAP(r4, 0x1, 0x0) 1.331584854s ago: executing program 3 (id=9296): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x2004809c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet(0x2, 0x2, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006000001ffffffffffffbbbbbbbbbbbb00000002000000"], 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000ec0), 0x6e, 0x0}}], 0x1, 0x400000a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108b000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0) 1.201682014s ago: executing program 3 (id=9297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 970.380606ms ago: executing program 7 (id=9298): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000001280)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./file7\x00', 0x2000094, &(0x7f0000000a80)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB="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"/355, @ANYBLOB="c520c3cae75aedb980fb123b9d9cfd43ca454cac86e83f94c5858e1003d0981adcee1f25822ccc44a6f0b8d2a5e4ff805dc870388360eebf0f15c3459dd97d044f75d1893303e5906040bcfd3b5711b98fc1600fec61bbe0a3b3d4e7d2324693b13fa8b57c02a6480b2372423578865e3cb6444f7923954b6ae12b8465bbd7950d7d86f0a25e7c7e90098cd534a1c3af6171095ab577c5f146ba8a63229f99d58c52396b", @ANYRES64=0x0, @ANYRES8=r1, @ANYRESHEX], 0x1, 0x2c3, &(0x7f0000000180)="$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") r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x8000, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3906a7e7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000000}, 0x8080) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x31, 0x455965fb809f3fbf}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1000}, @IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r7, 0x0, 0x0, 0x0) 968.795105ms ago: executing program 3 (id=9308): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) unshare(0x48060080) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 877.927136ms ago: executing program 8 (id=9299): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 748.941037ms ago: executing program 6 (id=9300): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000fc0)=[{0x0}], 0x1, 0x2, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf32(r3, 0x0, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x12, r3, 0x94628000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 281.283779ms ago: executing program 6 (id=9301): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 190.075639ms ago: executing program 6 (id=9302): socket$netlink(0x10, 0x3, 0x4) syz_io_uring_setup(0x132a, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 189.337819ms ago: executing program 6 (id=9303): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.15536ms ago: executing program 7 (id=9304): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) io_submit(0x0, 0x0, &(0x7f0000001300)) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xe24283a1, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) r1 = io_uring_setup(0x5ab2, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x52000775) get_mempolicy(0x0, &(0x7f0000000140), 0xffffffffffffff7f, &(0x7f0000ff9000/0x1000)=nil, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x221d, 0xcf75, 0x37, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x8001) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 0s ago: executing program 1 (id=9305): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) kernel console output (not intermixed with test programs): at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.314617][T20792] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 633.361574][T29427] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #18: comm syz.1.8074: corrupted inode contents [ 633.374920][T29427] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 633.377689][T29427] EXT4-fs (loop1): Remounting filesystem read-only [ 633.398488][T29437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.398581][T29437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.492686][T29427] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -30) [ 633.529975][T29444] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29444 comm=syz.7.8080 [ 633.559085][T29444] netlink: 'syz.7.8080': attribute type 1 has an invalid length. [ 633.653540][T29453] netlink: 'syz.8.8082': attribute type 1 has an invalid length. [ 633.676687][T29455] netlink: 'syz.6.8091': attribute type 2 has an invalid length. [ 633.693611][T29453] bond12: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 633.715237][T29453] bond12 (unregistering): (slave ip6gretap1): Releasing backup interface [ 633.814952][T29453] bond12 (unregistering): Released all slaves [ 634.168862][T21160] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.221938][ T6780] bridge_slave_1: left allmulticast mode [ 634.285542][ T6780] bridge_slave_1: left promiscuous mode [ 634.291464][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.387634][T29494] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 635.410481][ T28] audit: type=1400 audit(1776390987.529:6355): avc: denied { relabelto } for pid=29488 comm="syz.6.8088" name="bus" dev="tmpfs" ino=4290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 635.549232][T29498] netlink: 'syz.7.8089': attribute type 1 has an invalid length. [ 635.630433][ T28] audit: type=1400 audit(1776390987.529:6356): avc: denied { associate } for pid=29488 comm="syz.6.8088" name="bus" dev="tmpfs" ino=4290 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 635.813243][T29511] __nla_validate_parse: 28 callbacks suppressed [ 635.813263][T29511] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8092'. [ 635.935276][T29518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29518 comm=syz.8.8092 [ 635.982078][T29518] netlink: 'syz.8.8092': attribute type 1 has an invalid length. [ 635.992525][T29518] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8092'. [ 636.014516][T29521] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8094'. [ 636.171154][ T6780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.182718][ T6780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.192540][ T6780] bond0 (unregistering): Released all slaves [ 636.210958][ T6780] bond1 (unregistering): Released all slaves [ 636.230705][ T6780] bond2 (unregistering): Released all slaves [ 636.243160][ T6780] bond3 (unregistering): (slave veth7): Releasing active interface [ 636.253039][ T6780] bond3 (unregistering): Released all slaves [ 636.285439][T29498] bond13: entered promiscuous mode [ 636.297166][T29498] 8021q: adding VLAN 0 to HW filter on device bond13 [ 636.310801][T29500] ipvlan0: entered allmulticast mode [ 636.321585][T29500] bond13: entered allmulticast mode [ 636.372960][T29501] bond13: (slave bridge7): making interface the new active one [ 636.391004][T29501] bridge7: entered promiscuous mode [ 636.397279][T29501] bridge7: entered allmulticast mode [ 636.406977][T29501] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 636.431322][ T3041] 8021q: adding VLAN 0 to HW filter on device eth17 [ 636.652383][ T6780] hsr_slave_0: left promiscuous mode [ 636.706812][ T6780] hsr_slave_1: left promiscuous mode [ 636.716223][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.731523][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.733923][T29546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8102'. [ 637.262498][T29527] Set syz1 is full, maxelem 65536 reached [ 637.287946][ T6786] smc: removing ib device lyz2 [ 637.334285][T29546] bond12: entered promiscuous mode [ 637.342424][T29546] 8021q: adding VLAN 0 to HW filter on device bond12 [ 637.481998][T29548] ipvlan2: entered allmulticast mode [ 637.508229][T29548] bond12: entered allmulticast mode [ 637.578863][T29549] ipvlan3: entered allmulticast mode [ 638.037036][ T6780] IPVS: stop unused estimator thread 0... [ 638.546874][ T3041] 8021q: adding VLAN 0 to HW filter on device eth18 [ 638.639162][T29599] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8113'. [ 638.669994][T29603] netlink: 'syz.8.8114': attribute type 4 has an invalid length. [ 638.768539][ T28] audit: type=1326 audit(1776390990.889:6357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.6.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 639.628929][ T28] audit: type=1326 audit(1776390990.919:6358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.6.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 639.652618][ T28] audit: type=1326 audit(1776390990.919:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.6.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 639.676855][ T28] audit: type=1326 audit(1776390990.919:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.6.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 639.700435][ T28] audit: type=1326 audit(1776390990.919:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.6.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 639.724821][ T28] audit: type=1326 audit(1776390990.919:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.6.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 639.901416][ T28] audit: type=1326 audit(1776390990.919:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.6.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 639.987085][T29623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.349139][ T28] audit: type=1326 audit(1776390990.919:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.6.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 640.439558][ T28] audit: type=1326 audit(1776390990.929:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.6.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 640.482558][ T28] audit: type=1326 audit(1776390990.929:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29609 comm="syz.6.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 640.676101][ T3041] 8021q: adding VLAN 0 to HW filter on device eth19 [ 642.433730][T29653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8123'. [ 642.515093][T29653] bond9: option lacp_active: invalid value (5) [ 642.590188][T29653] bond9 (unregistering): Released all slaves [ 642.615293][ T3041] 8021q: adding VLAN 0 to HW filter on device eth20 [ 642.667130][T29672] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8125'. [ 644.316595][T29720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8135'. [ 644.429530][T29733] loop0: detected capacity change from 0 to 512 [ 644.472460][T29733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.498788][T29733] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.560389][T29733] tmpfs: Unknown parameter 'inode31' [ 645.690353][T29764] netlink: 'syz.8.8148': attribute type 1 has an invalid length. [ 645.790792][T29764] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8148'. [ 645.838454][T29764] bond12: entered promiscuous mode [ 645.869570][T29764] bond12: entered allmulticast mode [ 645.906475][T29764] 8021q: adding VLAN 0 to HW filter on device bond12 [ 645.962904][T29770] 8021q: adding VLAN 0 to HW filter on device bond12 [ 646.011889][T29770] bond12: (slave geneve5): making interface the new active one [ 646.030918][T29770] geneve5: entered promiscuous mode [ 646.041105][T29770] geneve5: entered allmulticast mode [ 646.057294][T29770] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 646.088807][ T6786] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 646.293906][T20792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.582838][ T6786] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 646.603536][ T6786] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 646.613822][ T6786] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 647.150561][T29806] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8159'. [ 647.417677][T29812] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.8162'. [ 647.627062][T29822] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8164'. [ 648.695641][T29836] loop0: detected capacity change from 0 to 512 [ 648.717799][T29836] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 649.000424][T29830] 8021q: adding VLAN 0 to HW filter on device bond13 [ 649.054475][T29836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 649.062679][T29836] System zones: 1-12 [ 649.096322][T29836] EXT4-fs (loop0): 1 truncate cleaned up [ 649.102668][T29836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.209695][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 649.209712][ T28] audit: type=1400 audit(1776391001.329:6497): avc: denied { mount } for pid=29845 comm="syz.6.8168" name="/" dev="rpc_pipefs" ino=101824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 649.424701][T20792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.672716][T29859] loop0: detected capacity change from 0 to 256 [ 649.899887][T29875] loop1: detected capacity change from 0 to 128 [ 650.088531][T29859] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 650.495985][T29892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8181'. [ 650.989156][T29871] syz.8.8174 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 651.084558][T29871] CPU: 1 UID: 0 PID: 29871 Comm: syz.8.8174 Tainted: G W syzkaller #0 PREEMPT(full) [ 651.084610][T29871] Tainted: [W]=WARN [ 651.084618][T29871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 651.084630][T29871] Call Trace: [ 651.084639][T29871] [ 651.084648][T29871] __dump_stack+0x1d/0x30 [ 651.084677][T29871] dump_stack_lvl+0x95/0xd0 [ 651.084748][T29871] dump_stack+0x15/0x1b [ 651.084815][T29871] dump_header+0x80/0x240 [ 651.084840][T29871] oom_kill_process+0x295/0x350 [ 651.084873][T29871] out_of_memory+0x97d/0xb80 [ 651.084984][T29871] try_charge_memcg+0x62f/0xa10 [ 651.085022][T29871] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 651.085052][T29871] __swap_cache_prepare_and_add+0x69/0x4a0 [ 651.085154][T29871] ? alloc_pages_mpol+0x217/0x260 [ 651.085183][T29871] swap_cache_alloc_folio+0xa2/0x120 [ 651.085220][T29871] swap_cluster_readahead+0x25f/0x3c0 [ 651.085331][T29871] swapin_readahead+0xde/0x840 [ 651.085356][T29871] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 651.085387][T29871] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 651.085466][T29871] ? __rcu_read_unlock+0x4e/0x70 [ 651.085491][T29871] ? swap_cache_get_folio+0x1e0/0x1f0 [ 651.085548][T29871] do_swap_page+0x31e/0x2180 [ 651.085577][T29871] ? __rcu_read_lock+0x36/0x50 [ 651.085601][T29871] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 651.085657][T29871] handle_mm_fault+0xb2e/0x2e70 [ 651.085686][T29871] ? vma_start_read+0x1c7/0x2c0 [ 651.085712][T29871] do_user_addr_fault+0x62f/0x1050 [ 651.085770][T29871] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 651.085799][T29871] ? trace_page_fault_user+0x1f/0xa0 [ 651.085905][T29871] exc_page_fault+0x62/0xa0 [ 651.085966][T29871] asm_exc_page_fault+0x26/0x30 [ 651.085986][T29871] RIP: 0033:0x7fcd6cc94f5e [ 651.086005][T29871] Code: e9 27 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 9b d0 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 651.086025][T29871] RSP: 002b:00007ffd5efb9f40 EFLAGS: 00010202 [ 651.086045][T29871] RAX: 00007fcd6d045fa0 RBX: 00007fcd6d045fa0 RCX: 0000000000000026 [ 651.086113][T29871] RDX: 0000000000000001 RSI: 00007fcd6d046038 RDI: 0000000000000003 [ 651.086128][T29871] RBP: 00007fcd6d047da0 R08: 0000000000000000 R09: 0000000000000001 [ 651.086142][T29871] R10: 0000000000000026 R11: 0000000000000246 R12: 000000000009ed2c [ 651.086157][T29871] R13: 00007fcd6d04609c R14: 000000000009ea54 R15: 00007fcd6d046090 [ 651.086178][T29871] [ 651.385270][T29909] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8187'. [ 651.405630][T29909] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8187'. [ 651.417236][T29871] memory: usage 307096kB, limit 307200kB, failcnt 6961 [ 651.422675][T29907] loop0: detected capacity change from 0 to 8192 [ 651.424191][T29871] memory+swap: usage 375356kB, limit 9007199254740988kB, failcnt 0 [ 651.443056][T29871] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 651.451615][T29871] Memory cgroup stats for /syz8: [ 651.452303][T29871] cache 0 [ 651.467613][T29871] rss 4096 [ 651.470822][T29871] shmem 0 [ 651.474158][T29871] mapped_file 0 [ 651.479608][T29871] dirty 0 [ 651.480366][T29907] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 651.482961][T29871] writeback 16384 [ 651.495622][T29871] workingset_refault_anon 7638 [ 651.500000][T29907] FAT-fs (loop0): Filesystem has been set read-only [ 651.500686][T29871] workingset_refault_file 3333 [ 651.517511][T29871] swap 69898240 [ 651.521048][T29871] swapcached 129802240 [ 651.525665][T29871] pgpgin 568215 [ 651.529541][T29871] pgpgout 568210 [ 651.534950][T29871] pgfault 422442 [ 651.540494][T29871] pgmajfault 3020 [ 651.544390][T29871] inactive_anon 20480 [ 651.554778][T29915] tipc: Enabling of bearer rejected, failed to enable media [ 651.555749][T29871] active_anon 0 [ 651.567974][T29871] inactive_file 0 [ 651.571755][T29871] active_file 0 [ 651.575253][T29871] unevictable 0 [ 651.579180][T29871] hierarchical_memory_limit 314572800 [ 651.584609][T29871] hierarchical_memsw_limit 9223372036854771712 [ 651.591071][T29871] total_cache 0 [ 651.594882][T29871] total_rss 4096 [ 651.607857][T29871] total_shmem 0 [ 651.611436][T29871] total_mapped_file 0 [ 651.615760][T29871] total_dirty 0 [ 651.619549][T29871] total_writeback 16384 [ 651.623916][T29871] total_workingset_refault_anon 7638 [ 651.630831][T29871] total_workingset_refault_file 3333 [ 651.636520][T29871] total_swap 69898240 [ 651.640573][T29871] total_swapcached 129802240 [ 651.645434][T29871] total_pgpgin 568215 [ 651.650006][T29871] total_pgpgout 568210 [ 651.719631][T29920] netlink: 'syz.0.8191': attribute type 39 has an invalid length. [ 651.720432][T29871] total_pgfault 422442 [ 651.767525][T29871] total_pgmajfault 3020 [ 651.771768][T29871] total_inactive_anon 20480 [ 651.776541][T29871] total_active_anon 0 [ 651.780640][T29871] total_inactive_file 0 [ 651.784834][T29871] total_active_file 0 [ 651.792971][T29871] total_unevictable 0 [ 651.801570][T29871] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.8174,pid=29871,uid=0 [ 651.843701][T29919] loop1: detected capacity change from 0 to 256 [ 651.870127][T29871] Memory cgroup out of memory: Killed process 29871 (syz.8.8174) total-vm:94164kB, anon-rss:1228kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 652.037407][ T28] audit: type=1400 audit(1776391004.159:6498): avc: denied { watch watch_reads } for pid=29921 comm="syz.6.8192" path="/" dev="configfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 652.256668][T29919] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 654.480395][ T28] audit: type=1326 audit(1776391006.229:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29946 comm="syz.1.8199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c3097c819 code=0x0 [ 655.866680][T29960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8201'. [ 655.934427][T29960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8201'. [ 656.048579][T29960] team0: entered promiscuous mode [ 656.065124][T29960] team0: entered allmulticast mode [ 656.071005][T29960] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.422258][T29987] bridge0: port 4(gretap0) entered disabled state [ 656.435677][T29987] bridge0: entered allmulticast mode [ 656.472985][T29984] gretap0: left allmulticast mode [ 656.496212][T29984] gretap0: left promiscuous mode [ 656.515232][T29984] bridge0: port 4(gretap0) entered disabled state [ 656.654831][T29984] bridge_slave_1: left allmulticast mode [ 656.701156][T29984] bridge_slave_1: left promiscuous mode [ 656.728025][T29984] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.754300][T29984] bridge_slave_0: left allmulticast mode [ 656.766864][T29984] bridge_slave_0: left promiscuous mode [ 656.774342][T29984] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.013981][T30018] syzkaller0: entered promiscuous mode [ 657.020331][T30018] syzkaller0: entered allmulticast mode [ 657.100505][T30022] loop1: detected capacity change from 0 to 512 [ 657.309930][T30036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8214'. [ 657.346451][T30038] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 657.470581][T30043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8214'. [ 658.422867][T30034] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 658.519456][ T1986] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.533334][ T1986] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.631010][T30075] loop1: detected capacity change from 0 to 128 [ 658.678334][ T1986] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.689972][ T1986] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.711843][T30079] bio_check_eod: 101 callbacks suppressed [ 658.711861][T30079] syz.1.8223: attempt to access beyond end of device [ 658.711861][T30079] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 658.744205][ T28] audit: type=1326 audit(1776391010.859:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 658.812966][T30079] syz.1.8223: attempt to access beyond end of device [ 658.812966][T30079] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 658.853672][ T28] audit: type=1326 audit(1776391010.859:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 658.882386][T30079] syz.1.8223: attempt to access beyond end of device [ 658.882386][T30079] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 658.928890][ T28] audit: type=1326 audit(1776391010.859:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 658.954755][T30079] syz.1.8223: attempt to access beyond end of device [ 658.954755][T30079] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 658.970748][ T28] audit: type=1326 audit(1776391010.859:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 658.996095][T30079] syz.1.8223: attempt to access beyond end of device [ 658.996095][T30079] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 658.996139][T30079] syz.1.8223: attempt to access beyond end of device [ 658.996139][T30079] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 658.996196][T30079] syz.1.8223: attempt to access beyond end of device [ 658.996196][T30079] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 658.996228][T30079] syz.1.8223: attempt to access beyond end of device [ 658.996228][T30079] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 658.996322][T30079] syz.1.8223: attempt to access beyond end of device [ 658.996322][T30079] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 658.996404][T30079] syz.1.8223: attempt to access beyond end of device [ 658.996404][T30079] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 659.128477][ T28] audit: type=1326 audit(1776391010.859:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 659.187645][ T28] audit: type=1326 audit(1776391010.859:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 659.239409][ T28] audit: type=1326 audit(1776391010.859:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 659.290293][ T28] audit: type=1326 audit(1776391010.859:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 659.337374][ T28] audit: type=1326 audit(1776391010.859:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 659.694891][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 659.694923][ T28] audit: type=1326 audit(1776391011.809:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 659.732359][ T28] audit: type=1326 audit(1776391011.849:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 659.761697][ T28] audit: type=1326 audit(1776391011.849:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 659.852948][ T28] audit: type=1326 audit(1776391011.919:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 659.910764][ T28] audit: type=1326 audit(1776391011.919:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13dbccc582 code=0x7ffc0000 [ 659.987158][ T28] audit: type=1326 audit(1776391011.999:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 660.271619][ T28] audit: type=1326 audit(1776391011.999:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 660.323142][ T28] audit: type=1326 audit(1776391012.049:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f13dbccc617 code=0x7ffc0000 [ 660.373923][ T28] audit: type=1326 audit(1776391012.049:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f13dbc89511 code=0x7ffc0000 [ 660.426099][ T28] audit: type=1326 audit(1776391012.049:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.6.8224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f13dbccd609 code=0x7ffc0000 [ 660.950664][T30128] Falling back ldisc for ttyS3. [ 662.172751][T30113] Set syz1 is full, maxelem 65536 reached [ 662.214955][T30178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8245'. [ 664.981647][T30254] loop0: detected capacity change from 0 to 512 [ 665.156625][T30254] xt_TPROXY: Can be used only with -p tcp or -p udp [ 666.531098][T30282] pimreg: entered allmulticast mode [ 667.641396][T30303] 9p: Bad value for 'wfdno' [ 669.534439][T30342] loop0: detected capacity change from 0 to 1024 [ 669.564060][T30355] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8296'. [ 669.930189][T30342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 669.990955][T30342] System zones: 0-1, 3-36 [ 670.173462][T30342] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.8291: bad orphan inode 134217728 [ 670.339211][T30342] loop0: lost filesystem error report for type 5 error -117 [ 670.459708][T30342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.144111][T20792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.202053][T30394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8306'. [ 671.243979][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 671.243998][ T28] audit: type=1400 audit(1776391279.366:6599): avc: denied { lock } for pid=30392 comm="syz.0.8306" path="socket:[103013]" dev="sockfs" ino=103013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 671.297922][T30400] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8308'. [ 671.316556][ T28] audit: type=1400 audit(1776391279.436:6600): avc: denied { listen } for pid=30392 comm="syz.0.8306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 671.367557][T30394] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30394 comm=syz.0.8306 [ 672.557597][T30416] loop0: detected capacity change from 0 to 256 [ 672.567986][T30416] vfat: Unknown parameter '0xffffffffffffffff’’’’’’’’’’18446744073709551615’’’’’’’’' [ 673.942311][T30441] loop0: detected capacity change from 0 to 1024 [ 673.976935][T30441] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 674.049609][T30447] loop1: detected capacity change from 0 to 128 [ 674.181623][T30448] bio_check_eod: 20 callbacks suppressed [ 674.181676][T30448] syz.1.8318: attempt to access beyond end of device [ 674.181676][T30448] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 674.249803][T30448] syz.1.8318: attempt to access beyond end of device [ 674.249803][T30448] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 674.264963][T30448] syz.1.8318: attempt to access beyond end of device [ 674.264963][T30448] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 674.334354][T30448] syz.1.8318: attempt to access beyond end of device [ 674.334354][T30448] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 674.334400][T30448] syz.1.8318: attempt to access beyond end of device [ 674.334400][T30448] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 674.334480][T30448] syz.1.8318: attempt to access beyond end of device [ 674.334480][T30448] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 674.334515][T30448] syz.1.8318: attempt to access beyond end of device [ 674.334515][T30448] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 674.334632][T30448] syz.1.8318: attempt to access beyond end of device [ 674.334632][T30448] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 674.334664][T30448] syz.1.8318: attempt to access beyond end of device [ 674.334664][T30448] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 674.334700][T30448] syz.1.8318: attempt to access beyond end of device [ 674.334700][T30448] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 676.240834][T30475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8324'. [ 676.345514][T30475] loop0: detected capacity change from 0 to 1024 [ 676.774164][T30475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 677.134559][T30489] loop1: detected capacity change from 0 to 512 [ 677.190034][T30475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.300466][T30504] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8330'. [ 677.312654][T20792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.340518][T30498] xt_CT: No such helper "snmp_trap" [ 677.624517][T30516] loop0: detected capacity change from 0 to 1024 [ 677.706090][T30516] EXT4-fs: inline encryption not supported [ 677.731160][T30516] EXT4-fs: Ignoring removed nobh option [ 677.747715][T30516] EXT4-fs: Ignoring removed bh option [ 677.778960][T30516] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 677.778960][T30516] [ 678.150067][T30489] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.8328: bit already cleared for inode 11 [ 678.382187][T30489] loop1: lost filesystem error report for type 5 error -117 [ 678.392001][T30489] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 678.399739][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 678.399988][ C0] EXT4-fs (loop1): initial error at time 1776391286: ext4_free_inode:354 [ 678.400064][ C0] EXT4-fs (loop1): last error at time 1776391286: ext4_free_inode:354 [ 678.664347][ T28] audit: type=1326 audit(1776391286.786:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.8.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6cdcc819 code=0x7ffc0000 [ 678.664398][ T28] audit: type=1326 audit(1776391286.786:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.8.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd6cdcc819 code=0x7ffc0000 [ 678.664423][ T28] audit: type=1326 audit(1776391286.786:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.8.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6cdcc819 code=0x7ffc0000 [ 678.664448][ T28] audit: type=1326 audit(1776391286.786:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.8.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcd6cdcc819 code=0x7ffc0000 [ 678.664538][ T28] audit: type=1326 audit(1776391286.786:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.8.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6cdcc819 code=0x7ffc0000 [ 678.664562][ T28] audit: type=1326 audit(1776391286.786:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.8.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcd6cdcc819 code=0x7ffc0000 [ 678.664614][ T28] audit: type=1326 audit(1776391286.786:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.8.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6cdcc819 code=0x7ffc0000 [ 678.664640][ T28] audit: type=1326 audit(1776391286.786:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.8.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6cdcc819 code=0x7ffc0000 [ 678.664665][ T28] audit: type=1326 audit(1776391286.786:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.8.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd6cdcc819 code=0x7ffc0000 [ 678.664735][ T28] audit: type=1326 audit(1776391286.786:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.8.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6cdcc819 code=0x7ffc0000 [ 679.392481][T30536] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8344'. [ 679.738015][T30489] loop1: lost filesystem error report for type 5 error -117 [ 679.738344][T30489] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 679.755300][T30489] loop1: lost filesystem error report for type 5 error -117 [ 679.792763][T30489] EXT4-fs (loop1): 1 orphan inode deleted [ 679.810115][T30489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.855032][T21160] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.077523][T30552] loop1: detected capacity change from 0 to 1024 [ 680.108858][T30552] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 680.153919][T30549] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8349'. [ 680.726392][T30561] loop1: detected capacity change from 0 to 8192 [ 683.038572][T30596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8361'. [ 683.706948][T30596] loop1: detected capacity change from 0 to 1024 [ 683.747713][T30596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 683.998862][T30608] x_tables: duplicate entry at hook 3 [ 684.174396][T30618] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.8369'. [ 684.306097][T30596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.430971][T21160] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.252454][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 685.252478][ T28] audit: type=1326 audit(685.147:6637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.7.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b306cc819 code=0x7ffc0000 [ 685.504778][ T28] audit: type=1326 audit(685.147:6638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.7.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b306cc819 code=0x7ffc0000 [ 685.569671][ T28] audit: type=1326 audit(685.147:6639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.7.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b306cc819 code=0x7ffc0000 [ 685.652799][ T28] audit: type=1326 audit(685.147:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.7.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1b306cc819 code=0x7ffc0000 [ 685.728168][ T28] audit: type=1326 audit(685.147:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.7.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b306cc819 code=0x7ffc0000 [ 685.808029][ T28] audit: type=1326 audit(685.147:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.7.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b306cc819 code=0x7ffc0000 [ 685.898402][ T28] audit: type=1326 audit(685.147:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.7.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b306cc819 code=0x7ffc0000 [ 685.975636][ T28] audit: type=1326 audit(685.147:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.7.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b306cc819 code=0x7ffc0000 [ 686.047008][ T28] audit: type=1326 audit(685.147:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.7.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b306cc819 code=0x7ffc0000 [ 686.125503][ T28] audit: type=1326 audit(685.147:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30637 comm="syz.7.8375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1b306cc819 code=0x7ffc0000 [ 686.300038][T30662] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8381'. [ 686.637130][T30672] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 687.354711][T30690] netlink: 'syz.0.8390': attribute type 10 has an invalid length. [ 687.460624][T30690] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8390'. [ 687.480903][T30694] Invalid ELF header magic: != ELF [ 687.572994][T30690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 687.598159][T30690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.610527][T30690] hsr0: entered promiscuous mode [ 687.663960][T30690] bridge0: port 3(hsr0) entered blocking state [ 687.676384][T30699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8392'. [ 687.687144][T30690] bridge0: port 3(hsr0) entered disabled state [ 687.708012][T30690] hsr0: entered allmulticast mode [ 687.713466][T30690] hsr_slave_0: entered allmulticast mode [ 687.721512][T30690] hsr_slave_1: entered allmulticast mode [ 688.213247][T30719] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.8398'. [ 688.512416][T30736] loop0: detected capacity change from 0 to 512 [ 688.526016][T30736] EXT4-fs: Ignoring removed i_version option [ 688.541476][T30736] EXT4-fs: Ignoring removed bh option [ 688.571357][T30736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.591514][T30736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8405'. [ 688.612670][T30736] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.8405: iget: bad i_size value: 2533274857506816 [ 688.651714][T30736] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.8405: iget: bad i_size value: 2533274857506816 [ 688.700239][T20792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.321463][T30753] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8410'. [ 692.215665][T30782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8418'. [ 695.620415][T30799] pimreg: entered allmulticast mode [ 695.936116][T30808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8425'. [ 696.306871][T30815] loop0: detected capacity change from 0 to 1024 [ 696.323933][T30815] EXT4-fs: Ignoring removed bh option [ 696.483184][T30815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.067443][T30824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8429'. [ 697.088618][T20792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.102853][T30843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.112356][T30843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.830132][ T28] kauditd_printk_skb: 842 callbacks suppressed [ 698.830148][ T28] audit: type=1400 audit(698.757:7489): avc: denied { create } for pid=30848 comm="syz.8.8446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 699.193627][T30861] loop0: detected capacity change from 0 to 128 [ 702.516364][T30881] batadv_slave_0: Caught tx_queue_len zero misconfig [ 703.102984][T30894] netlink: 'syz.6.8460': attribute type 21 has an invalid length. [ 703.556831][T30903] netlink: 'syz.6.8452': attribute type 1 has an invalid length. [ 703.726653][T30903] bond14: entered promiscuous mode [ 703.732230][T30903] 8021q: adding VLAN 0 to HW filter on device bond14 [ 703.743945][T30905] ipvlan4: entered allmulticast mode [ 703.750450][T30905] bond14: entered allmulticast mode [ 704.058798][T30903] ipvlan5: entered allmulticast mode [ 704.119898][T30905] bond14: (slave bridge0): making interface the new active one [ 704.134660][T30905] bridge0: entered promiscuous mode [ 704.141241][T30905] bridge0: entered allmulticast mode [ 704.159578][T30905] bond14: (slave bridge0): Enslaving as an active interface with an up link [ 705.611259][T30928] batadv_slave_0: Caught tx_queue_len zero misconfig [ 705.673850][T30934] loop0: detected capacity change from 0 to 512 [ 705.697871][T30934] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 709.068737][ T28] audit: type=1400 audit(708.997:7490): avc: denied { append } for pid=30978 comm="syz.0.8477" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 711.372383][T30998] pimreg: entered allmulticast mode [ 713.133197][T31014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8485'. [ 713.407593][T31020] netlink: 'syz.8.8487': attribute type 39 has an invalid length. [ 713.462380][T31014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.513794][T31023] tipc: Failed to remove unknown binding: 66,0,0/3087334733:3933091419/3933091420 [ 713.536430][T31023] tipc: Failed to remove unknown binding: 66,0,0/3087334733:3933091419/3933091420 [ 718.614246][T31057] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 718.624470][T31057] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 718.829268][ T28] audit: type=1400 audit(718.757:7491): avc: denied { execstack } for pid=31068 comm="syz.1.8502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 719.912845][T31081] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31081 comm=syz.8.8505 [ 720.151235][T31090] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8508'. [ 720.190651][T31067] autofs4:pid:31067:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 720.213449][T31090] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8508'. [ 720.244222][T31090] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8508'. [ 720.295606][T31090] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8508'. [ 720.319725][T31090] netlink: 'syz.8.8508': attribute type 6 has an invalid length. [ 720.645696][T31099] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8510'. [ 721.147642][T31114] netlink: 164 bytes leftover after parsing attributes in process `syz.8.8516'. [ 723.919973][T31155] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8529'. [ 724.121578][T31163] loop0: detected capacity change from 0 to 512 [ 724.211433][T31163] loop0: detected capacity change from 0 to 128 [ 724.462591][T31183] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8534'. [ 725.293146][T31200] loop0: detected capacity change from 0 to 1024 [ 725.314251][T31200] EXT4-fs: Ignoring removed bh option [ 725.338598][T31200] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 725.338598][T31200] [ 726.399782][T31193] syz.7.8541 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 726.414814][T31193] CPU: 1 UID: 0 PID: 31193 Comm: syz.7.8541 Tainted: G W syzkaller #0 PREEMPT(full) [ 726.414850][T31193] Tainted: [W]=WARN [ 726.414858][T31193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 726.414918][T31193] Call Trace: [ 726.414926][T31193] [ 726.414936][T31193] __dump_stack+0x1d/0x30 [ 726.414965][T31193] dump_stack_lvl+0x95/0xd0 [ 726.414991][T31193] dump_stack+0x15/0x1b [ 726.415015][T31193] dump_header+0x80/0x240 [ 726.415118][T31193] oom_kill_process+0x295/0x350 [ 726.415219][T31193] out_of_memory+0x97d/0xb80 [ 726.415280][T31193] try_charge_memcg+0x62f/0xa10 [ 726.415372][T31193] __memcg_kmem_charge_page+0x139/0x2b0 [ 726.415401][T31193] __alloc_frozen_pages_noprof+0x18a/0x350 [ 726.415474][T31193] alloc_pages_mpol+0xb3/0x260 [ 726.415503][T31193] alloc_pages_noprof+0x8f/0x140 [ 726.415535][T31193] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 726.415570][T31193] __kvmalloc_node_noprof+0x3d4/0x640 [ 726.415613][T31193] ? futex_hash_allocate+0x190/0x9a0 [ 726.415715][T31193] ? futex_hash_allocate+0x190/0x9a0 [ 726.415738][T31193] futex_hash_allocate+0x190/0x9a0 [ 726.415806][T31193] ? cap_task_prctl+0x13f/0x6b0 [ 726.415888][T31193] futex_hash_prctl+0xd8/0xf0 [ 726.415909][T31193] __se_sys_prctl+0x4f4/0x1400 [ 726.415940][T31193] __x64_sys_prctl+0x67/0x80 [ 726.416052][T31193] x64_sys_call+0x2533/0x3020 [ 726.416080][T31193] do_syscall_64+0x12c/0x3b0 [ 726.416106][T31193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.416129][T31193] RIP: 0033:0x7f1b306cc819 [ 726.416211][T31193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.416231][T31193] RSP: 002b:00007f1b2f127028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 726.416255][T31193] RAX: ffffffffffffffda RBX: 00007f1b30945fa0 RCX: 00007f1b306cc819 [ 726.416271][T31193] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 726.416354][T31193] RBP: 00007f1b30762c91 R08: 0000000000000000 R09: 0000000000000000 [ 726.416369][T31193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.416382][T31193] R13: 00007f1b30946038 R14: 00007f1b30945fa0 R15: 00007ffdb4f90648 [ 726.416403][T31193] [ 726.644936][T31200] loop0: detected capacity change from 0 to 128 [ 726.701570][T31193] memory: usage 307200kB, limit 307200kB, failcnt 4995 [ 726.717956][T31193] memory+swap: usage 362968kB, limit 9007199254740988kB, failcnt 0 [ 726.726983][T31193] kmem: usage 227280kB, limit 9007199254740988kB, failcnt 0 [ 726.734397][T31193] Memory cgroup stats for /syz7: [ 726.734768][T31193] cache 80867328 [ 726.751570][T31200] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 726.765641][T31193] rss 339968 [ 726.769669][T31193] shmem 80867328 [ 726.774922][T31193] mapped_file 0 [ 726.783361][T31193] dirty 0 [ 726.791519][T31193] writeback 0 [ 726.797426][T31193] workingset_refault_anon 8029 [ 726.814986][T31199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8542'. [ 726.837424][T31193] workingset_refault_file 549 [ 726.849195][T31193] swap 57106432 [ 726.858150][T31193] swapcached 122552320 [ 726.866792][T31193] pgpgin 1053030 [ 726.873852][T31193] pgpgout 1033050 [ 726.883941][T31193] pgfault 671949 [ 726.891601][T31193] pgmajfault 3087 [ 726.898395][T31193] inactive_anon 63160320 [ 726.909659][T31193] active_anon 18677760 [ 726.920880][T31193] inactive_file 0 [ 726.929336][T31193] active_file 0 [ 726.936269][T31193] unevictable 0 [ 726.944441][T31193] hierarchical_memory_limit 314572800 [ 726.954549][T31193] hierarchical_memsw_limit 9223372036854771712 [ 726.970968][T31193] total_cache 80867328 [ 726.985328][T31193] total_rss 339968 [ 726.990262][T31193] total_shmem 80867328 [ 726.997545][T31193] total_mapped_file 0 [ 727.006285][T31193] total_dirty 0 [ 727.014523][T31193] total_writeback 0 [ 727.027787][T31193] total_workingset_refault_anon 8029 [ 727.033283][T31193] total_workingset_refault_file 549 [ 727.043275][T31193] total_swap 57106432 [ 727.053390][T31193] total_swapcached 122552320 [ 727.063560][T31193] total_pgpgin 1053030 [ 727.070842][T31193] total_pgpgout 1033050 [ 727.085283][T31193] total_pgfault 671949 [ 727.091859][T31193] total_pgmajfault 3087 [ 727.100387][T31193] total_inactive_anon 63160320 [ 727.110472][T31193] total_active_anon 18677760 [ 727.120380][T31193] total_inactive_file 0 [ 727.129186][T31193] total_active_file 0 [ 727.138180][T31193] total_unevictable 0 [ 727.147729][T31193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.728,pid=6052,uid=0 [ 727.177665][T31193] Memory cgroup out of memory: Killed process 6052 (syz.7.728) total-vm:96080kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 727.518570][T31212] syzkaller0: entered promiscuous mode [ 727.537682][T31212] syzkaller0: entered allmulticast mode [ 727.704929][T31214] gretap0: left allmulticast mode [ 727.710243][T31214] gretap0: left promiscuous mode [ 727.715406][T31214] bridge0: port 3(gretap0) entered disabled state [ 727.759172][T31214] bridge_slave_0: left allmulticast mode [ 727.766733][T31214] bridge_slave_0: left promiscuous mode [ 727.772835][T31214] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.823907][T31214] bridge_slave_1: left allmulticast mode [ 727.877320][T31214] bridge_slave_1: left promiscuous mode [ 727.884816][T31214] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.964570][T31219] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8546'. [ 728.072212][T31214] bond11: (slave bond0): Releasing active interface [ 728.103356][T31214] bond0: (slave ip6gre3): Releasing backup interface [ 728.131324][T31214] bond2: (slave vti0): Releasing backup interface [ 728.139140][T31214] bond3: (slave geneve2): Releasing active interface [ 728.166754][T31214] veth13: left allmulticast mode [ 728.171791][T31214] veth13: left promiscuous mode [ 728.177006][T31214] bridge4: port 1(veth13) entered disabled state [ 728.646813][T31214] bond5: (slave veth17): Releasing backup interface [ 728.653834][T31214] veth17: left promiscuous mode [ 728.669916][T31214] batadv0: left allmulticast mode [ 728.675294][T31214] batadv0: left promiscuous mode [ 728.680627][T31214] bridge0: port 4(batadv0) entered disabled state [ 728.724292][T31214] bond7: (slave veth19): Releasing active interface [ 728.741072][T31214] bond8: (slave gretap1): Releasing active interface [ 728.751450][T31214] bond10: (slave bridge6): Releasing backup interface [ 728.760078][T31214] bridge6: left promiscuous mode [ 728.765200][T31214] bridge6: left allmulticast mode [ 728.789894][T31214] bond13: (slave bridge7): Releasing backup interface [ 728.798261][T31214] bridge7: left promiscuous mode [ 728.803545][T31214] bridge7: left allmulticast mode [ 729.105254][T20792] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 729.386946][T31240] loop0: detected capacity change from 0 to 512 [ 729.499665][T31240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.029109][T20792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.120370][T31247] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8554'. [ 731.355759][T31261] syzkaller0: entered promiscuous mode [ 731.363291][T31261] syzkaller0: entered allmulticast mode [ 731.513002][T31256] loop0: detected capacity change from 0 to 1024 [ 731.529378][T31256] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 731.589654][T31267] netlink: 260 bytes leftover after parsing attributes in process `syz.6.8558'. [ 731.601225][T31267] netlink: 84 bytes leftover after parsing attributes in process `syz.6.8558'. [ 733.910115][T31290] netlink: 676 bytes leftover after parsing attributes in process `syz.7.8567'. [ 734.362509][T31299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8569'. [ 734.453109][T31299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8569'. [ 734.533689][T31289] syz.7.8567(31289): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 734.599579][T31299] usb usb1: usbfs: process 31299 (syz.0.8569) did not claim interface 0 before use [ 734.814039][T31307] loop0: detected capacity change from 0 to 4096 [ 734.827217][T31307] EXT4-fs: Ignoring removed bh option [ 734.842593][T31307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.927632][T31309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8573'. [ 735.557432][T20792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.656594][T31331] netlink: 'syz.0.8577': attribute type 1 has an invalid length. [ 735.688287][T31333] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=31333 comm=syz.6.8576 [ 735.784059][T31335] 8021q: adding VLAN 0 to HW filter on device bond8 [ 735.792323][T31335] bond7: (slave bond8): making interface the new active one [ 735.800420][T31335] bond7: (slave bond8): Enslaving as an active interface with an up link [ 736.097099][T31331] bond7: (slave gretap0): Enslaving as a backup interface with an up link [ 736.132976][T31335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8577'. [ 736.155950][T31335] 8021q: adding VLAN 0 to HW filter on device bond7 [ 736.176502][T31331] vlan6: entered promiscuous mode [ 736.181650][T31331] bond7: entered promiscuous mode [ 736.196290][T31331] bond8: entered promiscuous mode [ 736.445992][T31351] xt_CT: No such helper "snmp_trap" [ 737.252266][T31358] loop0: detected capacity change from 0 to 512 [ 737.400686][T31358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 737.788457][T31358] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.8584: invalid block [ 738.118329][T31371] netlink: 'syz.8.8588': attribute type 1 has an invalid length. [ 738.168495][T31358] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 738.207296][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 738.225305][ C0] EXT4-fs (loop0): initial error at time 738: ext4_get_branch:178: inode 11: block 4294967295 [ 738.236015][ C0] EXT4-fs (loop0): last error at time 738: ext4_get_branch:178: inode 11: block 4294967295 [ 738.459569][T31376] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8588'. [ 738.524939][T31371] veth25: entered promiscuous mode [ 738.532704][T31358] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.8584: invalid indirect mapped block 4294967295 (level 1) [ 738.574725][T31371] bond13: (slave veth25): Enslaving as a backup interface with a down link [ 738.575129][T31376] 8021q: adding VLAN 0 to HW filter on device bond13 [ 739.693369][T31358] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 739.704649][T31358] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.8584: invalid indirect mapped block 4294967295 (level 1) [ 740.821232][T31358] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 740.977164][T31358] EXT4-fs (loop0): 2 truncates cleaned up [ 741.008492][T31399] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 741.125309][T31358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.184514][T20792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.241195][T31418] loop0: detected capacity change from 0 to 512 [ 741.390947][T31418] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 741.478050][T31418] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.8600: corrupted xattr entries [ 741.511489][T31418] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 741.511789][T31418] EXT4-fs (loop0): 1 truncate cleaned up [ 741.521162][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 741.521183][ C1] EXT4-fs (loop0): initial error at time 741: xattr_find_entry:337: inode 15 [ 741.521208][ C1] EXT4-fs (loop0): last error at time 741: xattr_find_entry:337: inode 15 [ 741.551807][T31418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.715383][T31466] pimreg: entered allmulticast mode [ 742.150932][ T28] audit: type=1400 audit(742.077:7492): avc: denied { watch } for pid=31417 comm="syz.0.8600" path="/598/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 742.275963][ T28] audit: type=1400 audit(742.077:7493): avc: denied { rename } for pid=31417 comm="syz.0.8600" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 742.585581][T20792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.790075][T31470] bridge7: entered promiscuous mode [ 742.796447][T31470] bridge7: entered allmulticast mode [ 744.019250][T31497] loop0: detected capacity change from 0 to 8192 [ 744.196495][T31497] loop0: detected capacity change from 8192 to 0 [ 744.216444][T31508] FAT-fs (loop0): Directory bread(block 65) failed [ 744.224680][T31508] FAT-fs (loop0): Directory bread(block 66) failed [ 744.231318][T31508] FAT-fs (loop0): Directory bread(block 67) failed [ 744.238293][T31508] FAT-fs (loop0): Directory bread(block 68) failed [ 744.244885][T31508] FAT-fs (loop0): Directory bread(block 69) failed [ 744.252289][T31508] FAT-fs (loop0): Directory bread(block 70) failed [ 744.258945][T31508] FAT-fs (loop0): Directory bread(block 71) failed [ 744.278574][T31508] FAT-fs (loop0): FAT read failed (blocknr 1) [ 744.303346][T20792] FAT-fs (loop0): Directory bread(block 65) failed [ 744.314091][T20792] FAT-fs (loop0): Directory bread(block 66) failed [ 744.852569][T29837] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 745.034032][T31523] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 4, id = 0 [ 745.189771][T31539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8628'. [ 745.293777][T31539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8628'. [ 745.395367][T31529] chnl_net:caif_netlink_parms(): no params data found [ 745.496519][T31529] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.503654][T31542] usb usb1: usbfs: process 31542 (syz.1.8628) did not claim interface 0 before use [ 745.514200][T31529] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.547325][T31529] bridge_slave_0: entered allmulticast mode [ 745.570282][T31529] bridge_slave_0: entered promiscuous mode [ 745.602477][T31529] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.619823][T31529] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.633085][T31529] bridge_slave_1: entered allmulticast mode [ 745.644309][T31529] bridge_slave_1: entered promiscuous mode [ 745.697145][T31529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.711121][T31529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.735058][T31529] team0: Port device team_slave_0 added [ 745.742211][T31529] team0: Port device team_slave_1 added [ 745.800605][T31529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.851218][T31529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.879533][T31529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.891223][T31529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.898501][T31529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.932605][T31529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.158461][T31529] hsr_slave_0: entered promiscuous mode [ 746.204326][T31529] hsr_slave_1: entered promiscuous mode [ 746.682549][ T28] audit: type=1326 audit(746.607:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 746.744396][ T28] audit: type=1326 audit(746.607:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 746.876901][ T28] audit: type=1326 audit(746.607:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 746.928514][ T28] audit: type=1326 audit(746.607:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.340558][T31529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 747.397428][T31529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 747.429654][T31529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 747.463021][ T28] audit: type=1326 audit(746.607:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.463459][T31529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 747.486902][ T28] audit: type=1326 audit(746.607:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.486934][ T28] audit: type=1326 audit(746.607:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.486961][ T28] audit: type=1326 audit(746.607:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.487054][ T28] audit: type=1326 audit(746.607:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.487081][ T28] audit: type=1326 audit(746.607:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.487108][ T28] audit: type=1326 audit(746.607:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.487128][ T28] audit: type=1326 audit(746.607:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.487159][ T28] audit: type=1326 audit(746.607:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.487235][ T28] audit: type=1326 audit(746.607:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31562 comm="syz.6.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dbccc819 code=0x7ffc0000 [ 747.822330][T31529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 747.887821][T31529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 747.918065][T31529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 747.933851][T31529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 748.023462][T31529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.055098][T31529] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.085361][ T3849] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.092603][ T3849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.219894][ T1663] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.227148][ T1663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.461509][T31529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.038826][T31529] veth0_vlan: entered promiscuous mode [ 749.069007][T31529] veth1_vlan: entered promiscuous mode [ 749.189106][T31529] veth0_macvtap: entered promiscuous mode [ 749.200667][T31529] veth1_macvtap: entered promiscuous mode [ 749.234069][T31529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.263594][T31529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.305361][ T3838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.416053][ T3838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.612044][ T3838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.704141][ T3838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.103471][T31673] loop3: detected capacity change from 0 to 256 [ 750.252986][T31673] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 752.579909][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 752.579959][ T28] audit: type=1400 audit(752.507:7643): avc: denied { ioctl } for pid=31746 comm="syz.1.8658" path="socket:[108627]" dev="sockfs" ino=108627 ioctlcmd=0x5870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 752.659246][T31745] loop3: detected capacity change from 0 to 8192 [ 753.012048][T31745] netlink: 'syz.3.8657': attribute type 20 has an invalid length. [ 753.851768][T31810] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8665'. [ 753.894029][T31827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8664'. [ 755.722734][T31920] loop3: detected capacity change from 0 to 512 [ 755.853718][T31920] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.8673: inode has both inline data and extents flags [ 755.868977][T31920] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 755.869189][T31920] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.8673: couldn't read orphan inode 15 (err -117) [ 755.878393][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 755.878411][ C1] EXT4-fs (loop3): initial error at time 755: ext4_orphan_get:1397: inode 15 [ 755.878469][ C1] EXT4-fs (loop3): last error at time 755: ext4_orphan_get:1397: inode 15 [ 755.916261][T31920] loop3: lost filesystem error report for type 5 error -117 [ 755.916827][T31920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.955356][T31920] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 755.973828][T31925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.984344][T31925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.992425][T31929] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8670'. [ 756.070492][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.253034][T31933] loop3: detected capacity change from 0 to 128 [ 756.602671][T31934] netlink: 'syz.6.8675': attribute type 20 has an invalid length. [ 757.895338][T31959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8685'. [ 758.491262][T31982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8691'. [ 758.515220][T31965] loop3: detected capacity change from 0 to 1024 [ 760.566482][T32015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.627629][T32015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.664669][T32004] netlink: 'syz.1.8700': attribute type 20 has an invalid length. [ 761.092548][T32021] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8705'. [ 762.155999][T32035] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8708'. [ 763.072663][T32049] netlink: 'syz.8.8714': attribute type 10 has an invalid length. [ 763.098723][T32049] netlink: 2 bytes leftover after parsing attributes in process `syz.8.8714'. [ 763.128146][T32049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 763.143333][T32049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 763.174132][T32049] hsr0: entered promiscuous mode [ 764.749053][T32076] autofs4:pid:32076:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 765.263984][T32137] syzkaller0: entered promiscuous mode [ 765.270009][T32137] syzkaller0: entered allmulticast mode [ 765.280047][T32137] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 766.322677][T32164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8734'. [ 766.520282][T32166] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8735'. [ 766.932755][T32170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8739'. [ 767.968865][ T28] audit: type=1326 audit(767.897:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32179 comm="syz.1.8743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3097c819 code=0x7ffc0000 [ 768.029367][ T28] audit: type=1326 audit(767.897:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32179 comm="syz.1.8743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3097c819 code=0x7ffc0000 [ 768.103409][ T28] audit: type=1326 audit(767.897:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32179 comm="syz.1.8743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3097c819 code=0x7ffc0000 [ 768.167708][ T28] audit: type=1326 audit(767.897:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32179 comm="syz.1.8743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3097c819 code=0x7ffc0000 [ 768.209293][ T28] audit: type=1326 audit(767.897:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32179 comm="syz.1.8743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3097c819 code=0x7ffc0000 [ 768.256994][ T28] audit: type=1326 audit(767.897:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32179 comm="syz.1.8743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5c3097c819 code=0x7ffc0000 [ 768.328308][ T28] audit: type=1326 audit(767.897:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32179 comm="syz.1.8743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3097c819 code=0x7ffc0000 [ 768.352547][ T28] audit: type=1326 audit(767.897:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32179 comm="syz.1.8743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3097c819 code=0x7ffc0000 [ 768.380609][ T28] audit: type=1326 audit(767.897:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32179 comm="syz.1.8743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3097c819 code=0x7ffc0000 [ 768.510201][ T28] audit: type=1326 audit(767.897:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32179 comm="syz.1.8743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5c3097c819 code=0x7ffc0000 [ 770.799867][T32212] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32212 comm=syz.6.8751 [ 771.270182][T32220] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8752'. [ 772.029333][T32232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8768'. [ 772.151379][T32232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.356131][T32243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8761'. [ 773.984675][T32247] loop3: detected capacity change from 0 to 512 [ 773.993703][T32247] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 774.567788][T32252] loop3: detected capacity change from 0 to 4096 [ 774.606813][T32252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 774.742898][T32252] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 774.979269][T32252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.012090][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.188490][T32303] syz.8.8780 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 779.221651][T32303] CPU: 1 UID: 0 PID: 32303 Comm: syz.8.8780 Tainted: G W syzkaller #0 PREEMPT(full) [ 779.221733][T32303] Tainted: [W]=WARN [ 779.221740][T32303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 779.221751][T32303] Call Trace: [ 779.221757][T32303] [ 779.221766][T32303] __dump_stack+0x1d/0x30 [ 779.221885][T32303] dump_stack_lvl+0x95/0xd0 [ 779.221913][T32303] dump_stack+0x15/0x1b [ 779.221935][T32303] dump_header+0x80/0x240 [ 779.222022][T32303] oom_kill_process+0x295/0x350 [ 779.222061][T32303] out_of_memory+0x97d/0xb80 [ 779.222100][T32303] try_charge_memcg+0x62f/0xa10 [ 779.222201][T32303] __memcg_kmem_charge_page+0x139/0x2b0 [ 779.222232][T32303] __alloc_frozen_pages_noprof+0x18a/0x350 [ 779.222265][T32303] alloc_pages_mpol+0xb3/0x260 [ 779.222294][T32303] alloc_pages_noprof+0x8f/0x140 [ 779.222377][T32303] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 779.222410][T32303] __kvmalloc_node_noprof+0x3d4/0x640 [ 779.222480][T32303] ? futex_hash_allocate+0x190/0x9a0 [ 779.222504][T32303] ? futex_hash_allocate+0x190/0x9a0 [ 779.222529][T32303] futex_hash_allocate+0x190/0x9a0 [ 779.222572][T32303] ? cap_task_prctl+0x13f/0x6b0 [ 779.222595][T32303] futex_hash_prctl+0xd8/0xf0 [ 779.222638][T32303] __se_sys_prctl+0x4f4/0x1400 [ 779.222674][T32303] __x64_sys_prctl+0x67/0x80 [ 779.222704][T32303] x64_sys_call+0x2533/0x3020 [ 779.222785][T32303] do_syscall_64+0x12c/0x3b0 [ 779.222811][T32303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.222835][T32303] RIP: 0033:0x7fcd6cdcc819 [ 779.222856][T32303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.222952][T32303] RSP: 002b:00007fcd6b827028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 779.222975][T32303] RAX: ffffffffffffffda RBX: 00007fcd6d045fa0 RCX: 00007fcd6cdcc819 [ 779.222988][T32303] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 779.223001][T32303] RBP: 00007fcd6ce62c91 R08: 0000000000000000 R09: 0000000000000000 [ 779.223013][T32303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.223028][T32303] R13: 00007fcd6d046038 R14: 00007fcd6d045fa0 R15: 00007ffd5efb9e48 [ 779.223047][T32303] [ 779.224543][T32303] memory: usage 307200kB, limit 307200kB, failcnt 7027 [ 779.726333][T32303] memory+swap: usage 375220kB, limit 9007199254740988kB, failcnt 0 [ 779.734572][T32303] kmem: usage 238188kB, limit 9007199254740988kB, failcnt 0 [ 779.742226][T32303] Memory cgroup stats for /syz8: [ 779.742503][T32303] cache 70393856 [ 779.751876][T32303] rss 217088 [ 779.755776][T32303] shmem 70389760 [ 779.759453][T32303] mapped_file 4096 [ 779.763393][T32303] dirty 4096 [ 779.767017][T32303] writeback 4096 [ 779.770590][T32303] workingset_refault_anon 7815 [ 779.776323][T32303] workingset_refault_file 5692 [ 779.781154][T32303] swap 69652480 [ 779.784681][T32303] swapcached 139804672 [ 779.789244][T32303] pgpgin 729961 [ 779.792845][T32303] pgpgout 712708 [ 779.796842][T32303] pgfault 543630 [ 779.800558][T32303] pgmajfault 3067 [ 779.804324][T32303] inactive_anon 880640 [ 779.809632][T32303] active_anon 69783552 [ 779.813831][T32303] inactive_file 4096 [ 779.820032][T32303] active_file 0 [ 779.823513][T32303] unevictable 0 [ 779.827671][T32303] hierarchical_memory_limit 314572800 [ 779.833136][T32303] hierarchical_memsw_limit 9223372036854771712 [ 779.840239][T32303] total_cache 70393856 [ 779.844451][T32303] total_rss 217088 [ 779.848812][T32303] total_shmem 70389760 [ 779.853104][T32303] total_mapped_file 4096 [ 779.857638][T32303] total_dirty 4096 [ 779.861392][T32303] total_writeback 4096 [ 779.866421][T32303] total_workingset_refault_anon 7815 [ 779.871948][T32303] total_workingset_refault_file 5692 [ 779.877520][T32303] total_swap 69652480 [ 779.881521][T32303] total_swapcached 139804672 [ 779.886414][T32303] total_pgpgin 729961 [ 779.890729][T32303] total_pgpgout 712708 [ 779.895158][T32303] total_pgfault 543630 [ 779.900187][T32303] total_pgmajfault 3067 [ 779.904504][T32303] total_inactive_anon 880640 [ 779.909372][T32303] total_active_anon 69783552 [ 779.914008][T32303] total_inactive_file 4096 [ 779.918817][T32303] total_active_file 0 [ 779.922830][T32303] total_unevictable 0 [ 779.929967][T32303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.8780,pid=32302,uid=0 [ 779.992712][T32303] Memory cgroup out of memory: Killed process 32302 (syz.8.8780) total-vm:96344kB, anon-rss:1432kB, file-rss:22380kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 780.123530][T32328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8786'. [ 781.311262][T32336] netlink: 'syz.6.8799': attribute type 27 has an invalid length. [ 781.398948][T32336] bond12: left promiscuous mode [ 781.404594][T32336] ipvlan2: left allmulticast mode [ 781.411560][T32336] ipvlan3: left allmulticast mode [ 781.417888][T32336] bond12: left allmulticast mode [ 781.430688][T32336] team0: left promiscuous mode [ 781.444960][T32336] team0: left allmulticast mode [ 781.480500][T32350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8801'. [ 781.538674][T32336] bond14: left promiscuous mode [ 781.544305][T32336] bridge0: left promiscuous mode [ 781.566112][T32336] ipvlan4: left allmulticast mode [ 781.571640][T32336] ipvlan5: left allmulticast mode [ 781.578085][T32336] bond14: left allmulticast mode [ 781.583270][T32336] bridge0: left allmulticast mode [ 781.591618][T32336] bridge7: left promiscuous mode [ 781.609783][T32336] bridge7: left allmulticast mode [ 781.740467][T32342] ip6gre5: entered allmulticast mode [ 781.823979][T32347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.838808][T32347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 781.872759][T32352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8799'. [ 781.887581][ T3838] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 783.484253][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8797'. [ 783.527262][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8797'. [ 783.617151][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8797'. [ 783.664478][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8797'. [ 783.724923][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8797'. [ 783.758222][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8797'. [ 784.061482][T32398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8806'. [ 784.123919][T32409] netlink: 'syz.7.8812': attribute type 4 has an invalid length. [ 784.230971][T32412] TC_ACT_REPEAT abuse ? [ 785.416394][T32449] __nla_validate_parse: 1 callbacks suppressed [ 785.416429][T32449] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8824'. [ 785.885476][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 786.581684][T32468] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=32468 comm=syz.7.8831 [ 786.754716][T32475] xt_CT: No such helper "snmp_trap" [ 787.118261][T32489] syzkaller0: entered promiscuous mode [ 787.129832][T32489] 0: reclassify loop, rule prio 0, protocol 800 [ 787.360278][T32492] loop3: detected capacity change from 0 to 512 [ 787.520389][T32492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.966926][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.280531][T32514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8843'. [ 789.584589][T32517] pimreg: entered allmulticast mode [ 790.158378][T32524] xt_CT: No such helper "snmp_trap" [ 790.176011][ T28] kauditd_printk_skb: 148 callbacks suppressed [ 790.176030][ T28] audit: type=1400 audit(790.097:7802): avc: denied { accept } for pid=32502 comm="syz.1.8841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 790.321768][T32532] lo: Caught tx_queue_len zero misconfig [ 790.346349][T32536] syzkaller0: entered promiscuous mode [ 790.357853][T32536] syzkaller0: entered allmulticast mode [ 790.418123][T32545] netlink: 'syz.7.8855': attribute type 1 has an invalid length. [ 790.468069][T32545] 8021q: adding VLAN 0 to HW filter on device bond14 [ 790.596978][T32545] bond14: (slave veth27): Enslaving as an active interface with a down link [ 790.677316][T32545] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8855'. [ 792.732421][T32620] xt_CT: No such helper "snmp_trap" [ 795.284349][T32680] syzkaller0: entered promiscuous mode [ 795.292606][T32680] syzkaller0: entered allmulticast mode [ 795.322663][T32680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8885'. [ 795.349047][T32680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8885'. [ 795.426899][T32686] netlink: 'syz.7.8888': attribute type 27 has an invalid length. [ 795.449313][T32686] ip6gre1: left allmulticast mode [ 795.470152][T32686] bond1: left allmulticast mode [ 795.491081][T32686] ip6gre2: left allmulticast mode [ 795.509095][T32686] bridge2: left allmulticast mode [ 795.517089][T32686] team2: left allmulticast mode [ 795.523736][T32686] ip6gre4: left allmulticast mode [ 795.533375][T32686] bond4: left promiscuous mode [ 795.539331][T32686] bond4: left allmulticast mode [ 795.544901][T32686] bond5: left promiscuous mode [ 795.551270][T32686] bridge5: left promiscuous mode [ 795.563212][T32686] bridge5: left allmulticast mode [ 795.584953][T32686] veth21: left promiscuous mode [ 795.613109][T32696] xt_CT: No such helper "snmp_trap" [ 795.731733][T32686] veth21: left allmulticast mode [ 795.738852][T32686] bond9: left promiscuous mode [ 795.748543][T32686] bond9: left allmulticast mode [ 795.753741][T32686] bond10: left promiscuous mode [ 795.762695][T32686] vlan3: left allmulticast mode [ 795.772627][T32686] bond10: left allmulticast mode [ 795.780389][T32686] sit4: left allmulticast mode [ 795.786557][T32686] bond13: left promiscuous mode [ 795.791805][T32686] ipvlan0: left allmulticast mode [ 795.797835][T32686] bond13: left allmulticast mode [ 795.803241][T32686] ip6gre5: left allmulticast mode [ 795.897340][T32695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 795.919200][T32697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8888'. [ 796.202027][T32708] loop3: detected capacity change from 0 to 8192 [ 796.267011][T32708] loop3: p1 < > p2 p4 < p5 > [ 796.272881][T32708] loop3: partition table partially beyond EOD, truncated [ 796.287537][T32708] loop3: p1 start 134217728 is beyond EOD, truncated [ 796.320586][T32708] loop3: p2 size 591360 extends beyond EOD, truncated [ 796.328900][T32708] loop3: p5 size 591360 extends beyond EOD, truncated [ 797.104403][T32724] netlink: 'syz.1.8899': attribute type 14 has an invalid length. [ 799.736833][T32763] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=32763 comm=syz.1.8902 [ 801.066479][ T344] netlink: 'syz.3.8911': attribute type 14 has an invalid length. [ 802.233770][ T365] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8918'. [ 802.259221][ T368] delete_channel: no stack [ 802.321501][ T371] loop3: detected capacity change from 0 to 512 [ 802.373115][ T371] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 802.387999][ T371] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 802.417914][ T371] EXT4-fs (loop3): 1 truncate cleaned up [ 802.431458][ T371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.483227][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8921'. [ 802.520190][ T383] netlink: 'syz.7.8924': attribute type 14 has an invalid length. [ 802.763408][ T391] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=391 comm=syz.3.8920 [ 803.139810][ T371] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 803.155891][ T28] audit: type=1400 audit(803.087:7803): avc: denied { write } for pid=370 comm="syz.3.8920" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 803.208117][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.791696][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8939'. [ 805.924606][ T512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.139476][ T512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.630617][ T521] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=521 comm=syz.8.8941 [ 807.017165][ T530] lo: Caught tx_queue_len zero misconfig [ 812.800512][ T599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.196249][ T599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 813.617235][ T645] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 814.212514][ T664] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8972'. [ 814.887762][ T678] deleting an unspecified loop device is not supported. [ 814.894765][ T28] audit: type=1400 audit(814.817:7804): avc: denied { ioctl } for pid=673 comm="syz.1.8975" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 814.967274][ T28] audit: type=1400 audit(814.857:7805): avc: denied { lock } for pid=676 comm="syz.7.8978" path="socket:[110474]" dev="sockfs" ino=110474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 815.015153][ T678] bridge0: port 3(gretap0) entered blocking state [ 815.021701][ T678] bridge0: port 3(gretap0) entered forwarding state [ 815.035914][ T678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.044404][ T678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 815.471982][ T698] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.8981'. [ 815.481431][ T698] netlink: zone id is out of range [ 815.487207][ T698] netlink: zone id is out of range [ 815.492461][ T698] netlink: zone id is out of range [ 815.505988][ T698] netlink: set zone limit has 8 unknown bytes [ 816.155625][ T28] audit: type=1400 audit(816.077:7806): avc: denied { write } for pid=708 comm="syz.7.8986" path="socket:[110517]" dev="sockfs" ino=110517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 816.159911][ T708] delete_channel: no stack [ 816.241050][ T28] audit: type=1400 audit(816.077:7807): avc: denied { setopt } for pid=705 comm="syz.8.8985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 816.264658][ T716] loop3: detected capacity change from 0 to 512 [ 816.328023][ T716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.644862][ T726] EXT4-fs (loop3): resizing filesystem from 128 to 1 blocks [ 816.691172][ T726] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 817.099738][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.575943][ T745] loop3: detected capacity change from 0 to 512 [ 817.759224][ T745] FAT-fs (loop3): Directory bread(block 199916) failed [ 817.867532][ T745] FAT-fs (loop3): Directory bread(block 199917) failed [ 818.000795][ T745] FAT-fs (loop3): Directory bread(block 199918) failed [ 818.028704][ T745] FAT-fs (loop3): Directory bread(block 199919) failed [ 818.055240][ T745] FAT-fs (loop3): Directory bread(block 199920) failed [ 818.135990][ T745] FAT-fs (loop3): Directory bread(block 199921) failed [ 818.149180][ T745] FAT-fs (loop3): Directory bread(block 199922) failed [ 818.175560][ T745] FAT-fs (loop3): Directory bread(block 199923) failed [ 818.340406][ T761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 818.454949][ T763] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 818.952110][ T763] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 819.090283][ T763] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 819.414173][ T787] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9007'. [ 819.428793][ T763] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 819.457468][ T786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9006'. [ 819.523409][ T3849] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 819.678483][ T3849] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 819.694384][ T3849] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 819.711855][ T3849] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 823.027474][ T827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9017'. [ 823.054942][ T827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9017'. [ 823.932528][ T833] tunl0: Caught tx_queue_len zero misconfig [ 824.891160][ T843] loop3: detected capacity change from 0 to 512 [ 824.999488][ T843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 825.482773][ T843] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.9024: invalid indirect mapped block 4294967295 (level 1) [ 825.609120][ T843] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 825.615553][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 825.632353][ C1] EXT4-fs (loop3): initial error at time 825: ext4_free_branches:1023: inode 11 [ 825.642382][ C1] EXT4-fs (loop3): last error at time 825: ext4_free_branches:1023: inode 11 [ 825.703578][ T843] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.9024: invalid indirect mapped block 4294967295 (level 1) [ 825.744953][ T843] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 825.773473][ T843] EXT4-fs (loop3): 2 truncates cleaned up [ 825.914687][ T843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.984142][ T28] audit: type=1400 audit(825.907:7808): avc: denied { setattr } for pid=855 comm="syz.7.9028" name="PACKET" dev="sockfs" ino=112316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 826.034205][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.744819][ T898] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9038'. [ 827.756475][ T894] loop3: detected capacity change from 0 to 1024 [ 827.847469][ T894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.415356][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.471477][ T908] netlink: 'syz.1.9043': attribute type 14 has an invalid length. [ 829.588208][ T914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9045'. [ 830.414488][ T919] loop3: detected capacity change from 0 to 256 [ 830.485495][ T919] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 830.603251][ T929] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9048'. [ 830.867058][ T940] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 831.015249][ T945] pimreg: entered allmulticast mode [ 831.146511][ T938] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 831.151278][ T940] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 831.162913][ T938] FAT-fs (loop3): Filesystem has been set read-only [ 831.181767][ T938] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 831.394749][ T940] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 831.456559][ T940] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 831.503867][ T49] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 831.523150][ T49] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 831.541294][ T49] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 831.562330][ T49] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 831.711121][ T955] bridge8: entered promiscuous mode [ 831.716492][ T955] bridge8: entered allmulticast mode [ 831.733445][ T954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9059'. [ 832.424266][ T967] loop3: detected capacity change from 0 to 512 [ 832.504387][ T967] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 832.574371][ T967] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 832.620453][ T967] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9056: bg 0: block 248: padding at end of block bitmap is not set [ 832.648092][ T967] loop3: lost filesystem error report for type 5 error -117 [ 832.653915][ T967] Quota error (device loop3): write_blk: dquota write failed [ 832.661389][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 832.661817][ C1] EXT4-fs (loop3): last error at time 832: ext4_validate_block_bitmap:441 [ 832.698816][ T967] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 832.710550][ T967] EXT4-fs error (device loop3): ext4_acquire_dquot:7028: comm syz.3.9056: Failed to acquire dquot type 1 [ 832.732501][ T967] loop3: lost filesystem error report for type 5 error -28 [ 832.745665][ T967] EXT4-fs (loop3): 1 truncate cleaned up [ 832.775754][ T967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 832.850603][ T967] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 832.863234][ T967] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074 [ 832.874447][ T967] EXT4-fs error (device loop3): ext4_acquire_dquot:7028: comm syz.3.9056: Failed to acquire dquot type 1 [ 834.015130][ T985] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9063'. [ 834.098402][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 834.882929][ T1002] loop3: detected capacity change from 0 to 4096 [ 834.950423][ T1002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.786384][ T1026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1026 comm=syz.1.9073 [ 835.804722][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.816504][ T1026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.825915][ T1026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.840793][ T1026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.853674][ T1026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.946096][ T1036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9077'. [ 835.992933][ T1032] vlan5: entered allmulticast mode [ 835.999090][ T1032] ip6gretap0: entered allmulticast mode [ 836.444377][ T1035] syz.8.9078 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 836.464787][ T1035] CPU: 1 UID: 0 PID: 1035 Comm: syz.8.9078 Tainted: G W syzkaller #0 PREEMPT(full) [ 836.464831][ T1035] Tainted: [W]=WARN [ 836.464838][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 836.464850][ T1035] Call Trace: [ 836.464857][ T1035] [ 836.464873][ T1035] __dump_stack+0x1d/0x30 [ 836.464904][ T1035] dump_stack_lvl+0x95/0xd0 [ 836.464965][ T1035] dump_stack+0x15/0x1b [ 836.464990][ T1035] dump_header+0x80/0x240 [ 836.465017][ T1035] oom_kill_process+0x295/0x350 [ 836.465114][ T1035] out_of_memory+0x97d/0xb80 [ 836.465151][ T1035] try_charge_memcg+0x62f/0xa10 [ 836.465248][ T1035] __memcg_kmem_charge_page+0x139/0x2b0 [ 836.465278][ T1035] __alloc_frozen_pages_noprof+0x18a/0x350 [ 836.465382][ T1035] alloc_pages_mpol+0xb3/0x260 [ 836.465413][ T1035] alloc_pages_noprof+0x8f/0x140 [ 836.465441][ T1035] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 836.465488][ T1035] __kvmalloc_node_noprof+0x3d4/0x640 [ 836.465612][ T1035] ? futex_hash_allocate+0x190/0x9a0 [ 836.465649][ T1035] ? futex_hash_allocate+0x190/0x9a0 [ 836.465675][ T1035] futex_hash_allocate+0x190/0x9a0 [ 836.465700][ T1035] ? cap_task_prctl+0x13f/0x6b0 [ 836.465728][ T1035] futex_hash_prctl+0xd8/0xf0 [ 836.465805][ T1035] __se_sys_prctl+0x4f4/0x1400 [ 836.465840][ T1035] __x64_sys_prctl+0x67/0x80 [ 836.466017][ T1035] x64_sys_call+0x2533/0x3020 [ 836.466047][ T1035] do_syscall_64+0x12c/0x3b0 [ 836.466186][ T1035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.466212][ T1035] RIP: 0033:0x7fcd6cdcc819 [ 836.466233][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.466255][ T1035] RSP: 002b:00007fcd6b827028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 836.466280][ T1035] RAX: ffffffffffffffda RBX: 00007fcd6d045fa0 RCX: 00007fcd6cdcc819 [ 836.466373][ T1035] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 836.466389][ T1035] RBP: 00007fcd6ce62c91 R08: 0000000000000000 R09: 0000000000000000 [ 836.466405][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.466420][ T1035] R13: 00007fcd6d046038 R14: 00007fcd6d045fa0 R15: 00007ffd5efb9e48 [ 836.466443][ T1035] [ 836.767815][ T1035] memory: usage 307200kB, limit 307200kB, failcnt 7226 [ 836.774722][ T1035] memory+swap: usage 375220kB, limit 9007199254740988kB, failcnt 0 [ 836.783837][ T1035] kmem: usage 238548kB, limit 9007199254740988kB, failcnt 0 [ 836.791320][ T1035] Memory cgroup stats for /syz8: [ 836.791633][ T1035] cache 70025216 [ 836.816475][ T1035] rss 217088 [ 836.844636][ T1035] shmem 70025216 [ 836.849152][ T1035] mapped_file 0 [ 836.872482][ T1035] dirty 0 [ 836.923964][ T1035] writeback 0 [ 836.960083][ T1035] workingset_refault_anon 7925 [ 836.986440][ T1035] workingset_refault_file 5695 [ 836.991559][ T1035] swap 69652480 [ 836.995061][ T1035] swapcached 140267520 [ 837.001172][ T1035] pgpgin 773805 [ 837.004737][ T1035] pgpgout 756642 [ 837.009213][ T1035] pgfault 588660 [ 837.012803][ T1035] pgmajfault 3095 [ 837.017420][ T1035] inactive_anon 532480 [ 837.021520][ T1035] active_anon 69767168 [ 837.027956][ T1035] inactive_file 0 [ 837.031768][ T1035] active_file 0 [ 837.035306][ T1035] unevictable 0 [ 837.039823][ T1035] hierarchical_memory_limit 314572800 [ 837.045309][ T1035] hierarchical_memsw_limit 9223372036854771712 [ 837.052704][ T1035] total_cache 70025216 [ 837.059845][ T1035] total_rss 217088 [ 837.070539][ T1035] total_shmem 70025216 [ 837.076279][ T1035] total_mapped_file 0 [ 837.090183][ T1035] total_dirty 0 [ 837.111963][ T1035] total_writeback 0 [ 837.533517][ T1035] total_workingset_refault_anon 7925 [ 837.573679][ T1053] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.9084'. [ 837.589443][ T1053] netlink: zone id is out of range [ 837.591426][ T1035] total_workingset_refault_file 5695 [ 837.613416][ T1053] netlink: zone id is out of range [ 837.614105][ T1035] total_swap 69652480 [ 837.614155][ T1035] total_swapcached 140267520 [ 837.614165][ T1035] total_pgpgin 773805 [ 837.614174][ T1035] total_pgpgout 756642 [ 837.614183][ T1035] total_pgfault 588660 [ 837.614227][ T1035] total_pgmajfault 3095 [ 837.614237][ T1035] total_inactive_anon 532480 [ 837.614247][ T1035] total_active_anon 69767168 [ 837.614255][ T1035] total_inactive_file 0 [ 837.614278][ T1035] total_active_file 0 [ 837.614287][ T1035] total_unevictable 0 [ 837.614295][ T1035] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.9078,pid=1034,uid=0 [ 837.614426][ T1035] Memory cgroup out of memory: Killed process 1034 (syz.8.9078) total-vm:96344kB, anon-rss:1432kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 837.823010][ T1053] netlink: zone id is out of range [ 837.836817][ T1053] netlink: set zone limit has 8 unknown bytes [ 837.940540][ T1065] loop3: detected capacity change from 0 to 1024 [ 837.960539][ T1065] EXT4-fs: test_dummy_encryption option not supported [ 839.507599][ T1083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9092'. [ 841.746823][ T1083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9092'. [ 842.135009][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9093'. [ 843.760346][ T1109] IPVS: stopping backup sync thread 26865 ... [ 843.932633][ T28] audit: type=1326 audit(843.857:7809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1107 comm="syz.1.9105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c3097c819 code=0x0 [ 844.297027][ T1115] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.9097'. [ 844.325696][ T1115] netlink: zone id is out of range [ 844.331202][ T1115] netlink: zone id is out of range [ 844.341891][ T1115] netlink: zone id is out of range [ 844.655287][ T1115] netlink: set zone limit has 8 unknown bytes [ 844.983917][ T1120] loop3: detected capacity change from 0 to 1024 [ 845.298192][ T1120] EXT4-fs: Mount option(s) incompatible with ext3 [ 845.720757][ T1120] loop3: detected capacity change from 0 to 512 [ 845.913234][ T1132] netlink: 'syz.6.9101': attribute type 16 has an invalid length. [ 845.938801][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9101'. [ 846.075062][ T1120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.137874][ T1138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9104'. [ 846.972664][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.016939][ T1149] blktrace: Concurrent blktraces are not allowed on loop12 [ 847.230190][ T28] audit: type=1400 audit(846.937:7810): avc: denied { create } for pid=1148 comm="syz.6.9108" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 847.262083][ T28] audit: type=1400 audit(846.947:7811): avc: denied { write } for pid=1148 comm="syz.6.9108" name="file0" dev="tmpfs" ino=5468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 847.293654][ T1164] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.310497][ T28] audit: type=1400 audit(846.947:7812): avc: denied { open } for pid=1148 comm="syz.6.9108" path="/1052/file0" dev="tmpfs" ino=5468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 847.386789][ T1167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1167 comm=syz.3.9111 [ 847.440977][ T28] audit: type=1400 audit(846.947:7813): avc: denied { ioctl } for pid=1148 comm="syz.6.9108" path="/1052/file0" dev="tmpfs" ino=5468 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 847.454794][ T1167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.466861][ T28] audit: type=1400 audit(847.137:7814): avc: denied { accept } for pid=1160 comm="syz.3.9109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 847.506576][ T1167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.539778][ T1164] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.595568][ T28] audit: type=1400 audit(847.137:7815): avc: denied { read } for pid=1160 comm="syz.3.9109" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 847.674530][ T1167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.696470][ T28] audit: type=1400 audit(847.137:7816): avc: denied { open } for pid=1160 comm="syz.3.9109" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 847.730667][ T1167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.827280][ T28] audit: type=1400 audit(847.137:7817): avc: denied { ioctl } for pid=1160 comm="syz.3.9109" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 847.827978][ T1164] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.863075][ T28] audit: type=1400 audit(847.177:7818): avc: denied { unlink } for pid=15655 comm="syz-executor" name="file0" dev="tmpfs" ino=5468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 847.962068][ T1164] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.992511][ T1176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9115'. [ 848.150680][ T1171] xt_hashlimit: max too large, truncated to 1048576 [ 848.158027][ T1188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9128'. [ 848.217059][ T3853] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.231801][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.252434][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.269378][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.100190][ T1194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9119'. [ 849.404408][ T1194] bridge0: port 3(gretap0) entered disabled state [ 849.509214][ T1196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9120'. [ 849.634705][ T1208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9123'. [ 850.175319][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.182605][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.224891][ T1206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.265848][ T1210] bond15: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 850.277831][ T1210] bond15 (unregistering): Released all slaves [ 850.296457][ T1208] geneve2: entered promiscuous mode [ 852.245658][ T1251] loop3: detected capacity change from 0 to 1024 [ 852.364793][ T1251] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 854.404620][ T1295] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 854.785919][ T1295] bond9 (unregistering): Released all slaves [ 855.587083][ T1312] loop3: detected capacity change from 0 to 256 [ 856.830170][ T1312] FAT-fs (loop3): Directory bread(block 64) failed [ 856.838135][ T1312] FAT-fs (loop3): Directory bread(block 65) failed [ 856.845244][ T1312] FAT-fs (loop3): Directory bread(block 66) failed [ 856.852028][ T1312] FAT-fs (loop3): Directory bread(block 67) failed [ 856.858788][ T1312] FAT-fs (loop3): Directory bread(block 68) failed [ 856.865426][ T1312] FAT-fs (loop3): Directory bread(block 69) failed [ 856.872054][ T1312] FAT-fs (loop3): Directory bread(block 70) failed [ 856.880678][ T1312] FAT-fs (loop3): Directory bread(block 71) failed [ 856.888293][ T1312] FAT-fs (loop3): Directory bread(block 72) failed [ 856.894986][ T1312] FAT-fs (loop3): Directory bread(block 73) failed [ 858.534628][ T1321] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9147'. [ 859.810050][ T1339] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9149'. [ 860.143110][ T1350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1350 comm=syz.6.9153 [ 860.269446][ T1355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9151'. [ 860.279569][ T1355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9151'. [ 860.984937][ T1364] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9157'. [ 861.963742][ T1376] loop3: detected capacity change from 0 to 4096 [ 862.253453][ T1381] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9160'. [ 863.016835][ T1392] tipc: Enabling of bearer rejected, failed to enable media [ 864.702700][ T1426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.754419][ T1426] tipc: Failed to remove unknown binding: 66,1,1/4:4147816814/4147816816 [ 864.914185][ T1410] xt_hashlimit: max too large, truncated to 1048576 [ 865.370058][ T1445] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9177'. [ 865.390833][ T213] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.399583][ T1445] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9177'. [ 865.411462][ T213] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.429275][ T213] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.455495][ T213] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.298030][ T1487] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9183'. [ 868.341811][ T1487] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9183'. [ 868.864711][ T1501] loop3: detected capacity change from 0 to 512 [ 868.910647][ T1501] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 869.016453][ T1501] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 869.060545][ T1501] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 869.177354][ T1501] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 869.227111][ T1501] System zones: 0-2, 18-18, 34-35 [ 869.244906][ T1501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.443011][ T1558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9188'. [ 870.130394][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.284912][ T1577] loop3: detected capacity change from 0 to 1024 [ 870.325041][ T1577] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 870.340475][ T1570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9192'. [ 871.513077][ T1596] sctp: [Deprecated]: syz.6.9203 (pid 1596) Use of int in max_burst socket option. [ 871.513077][ T1596] Use struct sctp_assoc_value instead [ 871.539783][ T28] audit: type=1400 audit(871.467:7819): avc: denied { lock } for pid=1595 comm="syz.6.9203" path="socket:[114982]" dev="sockfs" ino=114982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 871.851161][ T1617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1617 comm=syz.7.9209 [ 874.152673][ T1647] syz.1.9217 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 874.224417][ T1647] CPU: 0 UID: 0 PID: 1647 Comm: syz.1.9217 Tainted: G W syzkaller #0 PREEMPT(full) [ 874.224458][ T1647] Tainted: [W]=WARN [ 874.224466][ T1647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 874.224480][ T1647] Call Trace: [ 874.224489][ T1647] [ 874.224499][ T1647] __dump_stack+0x1d/0x30 [ 874.224545][ T1647] dump_stack_lvl+0x95/0xd0 [ 874.224567][ T1647] dump_stack+0x15/0x1b [ 874.224590][ T1647] dump_header+0x80/0x240 [ 874.224618][ T1647] oom_kill_process+0x295/0x350 [ 874.224719][ T1647] out_of_memory+0x97d/0xb80 [ 874.224832][ T1647] try_charge_memcg+0x62f/0xa10 [ 874.224866][ T1647] __mem_cgroup_charge+0x65/0x150 [ 874.224925][ T1647] shmem_get_folio_gfp+0x47b/0xd60 [ 874.224961][ T1647] shmem_write_begin+0xfc/0x1f0 [ 874.224991][ T1647] generic_perform_write+0x183/0x490 [ 874.225041][ T1647] shmem_file_write_iter+0xc5/0xf0 [ 874.225073][ T1647] iter_file_splice_write+0x6c4/0xa80 [ 874.225102][ T1647] ? __pfx_iter_file_splice_write+0x10/0x10 [ 874.225134][ T1647] direct_splice_actor+0x156/0x2a0 [ 874.225176][ T1647] ? shmem_file_write_iter+0x61/0xf0 [ 874.225201][ T1647] splice_direct_to_actor+0x311/0x670 [ 874.225223][ T1647] ? __pfx_direct_splice_actor+0x10/0x10 [ 874.225286][ T1647] do_splice_direct+0x119/0x1a0 [ 874.225305][ T1647] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 874.225415][ T1647] do_sendfile+0x382/0x650 [ 874.225444][ T1647] __x64_sys_sendfile64+0x105/0x150 [ 874.225516][ T1647] x64_sys_call+0x2dc4/0x3020 [ 874.225545][ T1647] do_syscall_64+0x12c/0x3b0 [ 874.225572][ T1647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.225597][ T1647] RIP: 0033:0x7f5c3097c819 [ 874.225615][ T1647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.225738][ T1647] RSP: 002b:00007f5c2f3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 874.225759][ T1647] RAX: ffffffffffffffda RBX: 00007f5c30bf6090 RCX: 00007f5c3097c819 [ 874.225775][ T1647] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 874.225790][ T1647] RBP: 00007f5c30a12c91 R08: 0000000000000000 R09: 0000000000000000 [ 874.225804][ T1647] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000 [ 874.225819][ T1647] R13: 00007f5c30bf6128 R14: 00007f5c30bf6090 R15: 00007ffd5033bc78 [ 874.225970][ T1647] [ 874.574418][ T1647] memory: usage 165016kB, limit 307200kB, failcnt 763 [ 874.628259][ T1647] memory+swap: usage 101232kB, limit 9007199254740988kB, failcnt 0 [ 874.636502][ T1647] kmem: usage 28280kB, limit 9007199254740988kB, failcnt 0 [ 874.701316][ T1647] Memory cgroup stats for /syz1: [ 874.701704][ T1647] cache 73752576 [ 874.827094][ T1647] rss 593920 [ 874.830979][ T1647] shmem 73224192 [ 874.834568][ T1647] mapped_file 8192 [ 874.856284][ T1647] dirty 8192 [ 874.868463][ T1647] writeback 0 [ 875.244011][ T1676] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.9223'. [ 875.263413][ T1676] netlink: zone id is out of range [ 875.277182][ T1676] netlink: zone id is out of range [ 875.311722][ T1676] netlink: zone id is out of range [ 875.413215][ T1647] workingset_refault_anon 2472 [ 875.465330][ T1647] workingset_refault_file 1683 [ 875.549801][ T1647] swap 0 [ 875.550411][ T1676] netlink: set zone limit has 8 unknown bytes [ 875.552733][ T1647] swapcached 10457088 [ 875.563967][ T1647] pgpgin 579466 [ 875.569440][ T1647] pgpgout 561313 [ 875.573003][ T1647] pgfault 586128 [ 875.577502][ T1647] pgmajfault 2507 [ 875.581162][ T1647] inactive_anon 72110080 [ 875.586299][ T1647] active_anon 1708032 [ 875.590387][ T1647] inactive_file 0 [ 875.594319][ T1647] active_file 536576 [ 875.600773][ T1647] unevictable 0 [ 875.604544][ T1647] hierarchical_memory_limit 314572800 [ 875.610431][ T1647] hierarchical_memsw_limit 9223372036854771712 [ 875.616795][ T1647] total_cache 73752576 [ 875.620910][ T1647] total_rss 593920 [ 875.624849][ T1647] total_shmem 73224192 [ 875.750837][ T1647] total_mapped_file 8192 [ 875.797621][ T1647] total_dirty 8192 [ 875.814909][ T1647] total_writeback 0 [ 875.826353][ T1647] total_workingset_refault_anon 2472 [ 875.844060][ T1647] total_workingset_refault_file 1683 [ 875.866272][ T1647] total_swap 0 [ 875.886953][ T1647] total_swapcached 10457088 [ 876.046263][ T1647] total_pgpgin 579466 [ 876.067858][ T1647] total_pgpgout 561313 [ 876.108652][ T1647] total_pgfault 586128 [ 876.191572][ T1647] total_pgmajfault 2507 [ 876.241812][ T1647] total_inactive_anon 72110080 [ 876.345228][ T1647] total_active_anon 1708032 [ 876.359161][ T1647] total_inactive_file 0 [ 876.398575][ T1647] total_active_file 536576 [ 876.408331][ T1647] total_unevictable 0 [ 876.416296][ T1647] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9217,pid=1643,uid=0 [ 876.442980][ T1647] Memory cgroup out of memory: Killed process 1647 (syz.1.9217) total-vm:98532kB, anon-rss:1448kB, file-rss:26384kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 876.593241][ T1693] x_tables: duplicate underflow at hook 1 [ 879.242902][ T1719] loop3: detected capacity change from 0 to 128 [ 879.282556][ T1719] vfat: Unknown parameter '0x00000000000000000xffffffffffffffffµ‚³zXDb„&·™Så!²|:]¼ŽĶdN' [ 879.477875][ T1735] 9pnet_fd: p9_fd_create_unix (1735): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 880.199132][ T1759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 880.386880][ T1759] tipc: Failed to remove unknown binding: 66,1,1/0:594988335/594988337 [ 880.406453][ T1757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9247'. [ 880.422751][ T1757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9247'. [ 880.432976][ T3853] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.442071][ T3853] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.458135][ T3853] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.476640][ T3853] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.549131][ T1802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9261'. [ 883.648595][ T1812] tipc: Enabling of bearer rejected, failed to enable media [ 883.659234][ T1812] tipc: Enabled bearer , priority 0 [ 885.379606][ T1828] loop3: detected capacity change from 0 to 512 [ 885.689236][ T1828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.782737][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.810518][ T1861] loop3: detected capacity change from 0 to 512 [ 888.998227][ T1861] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 889.018951][ T1867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9275'. [ 889.042986][ T1861] EXT4-fs (loop3): orphan cleanup on readonly fs [ 889.084856][ T1861] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 889.113317][ T1861] EXT4-fs warning (device loop3): ext4_enable_quotas:7263: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 889.162143][ T1861] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 889.253217][ T1861] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.9273: bg 0: block 15: invalid block bitmap [ 889.281398][ T1861] loop3: lost filesystem error report for type 5 error -117 [ 889.285418][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 889.299581][ C1] EXT4-fs (loop3): initial error at time 889: ext4_validate_block_bitmap:432 [ 889.308424][ C1] EXT4-fs (loop3): last error at time 889: ext4_validate_block_bitmap:432 [ 889.318408][ T1861] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 889.332920][ T1861] loop3: lost filesystem error report for type 5 error -117 [ 889.362078][ T1861] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.9273: data will be lost [ 889.641313][ T1861] EXT4-fs (loop3): 1 truncate cleaned up [ 889.788171][ T1861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 889.843188][ T1861] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.9273: iget: bad i_size value: 360287970189639690 [ 889.914601][T31529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.544843][ T1895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9280'. [ 892.950908][ T1910] loop3: detected capacity change from 0 to 1024 [ 893.011916][ T1910] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 895.841423][ T1966] loop3: detected capacity change from 0 to 128 [ 895.849873][ T35] ================================================================== [ 895.857972][ T35] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 895.865145][ T35] [ 895.867663][ T35] read-write to 0xffff888237c2a8e4 of 4 bytes by task 25297 on cpu 0: [ 895.875813][ T35] wq_worker_running+0x9b/0x120 [ 895.880741][ T35] schedule_timeout+0xca/0x180 [ 895.885520][ T35] msleep+0x4f/0x90 [ 895.889521][ T35] nsim_fib_event+0x3e32/0x4d70 [ 895.894363][ T35] nsim_fib_event_work+0x13d/0x210 [ 895.899477][ T35] process_scheduled_works+0x4f0/0x9c0 [ 895.904936][ T35] worker_thread+0x58a/0x780 [ 895.909532][ T35] kthread+0x22a/0x280 [ 895.913628][ T35] ret_from_fork+0x146/0x330 [ 895.918309][ T35] ret_from_fork_asm+0x1a/0x30 [ 895.923140][ T35] [ 895.925467][ T35] read to 0xffff888237c2a8e4 of 4 bytes by task 35 on cpu 1: [ 895.933000][ T35] kick_pool+0x49/0x2d0 [ 895.937148][ T35] __queue_work+0x899/0xaa0 [ 895.941735][ T35] queue_work_on+0xa9/0x140 [ 895.946404][ T35] process_srcu+0xa44/0xda0 [ 895.950922][ T35] process_scheduled_works+0x4f0/0x9c0 [ 895.956390][ T35] worker_thread+0x58a/0x780 [ 895.961004][ T35] kthread+0x22a/0x280 [ 895.965063][ T35] ret_from_fork+0x146/0x330 [ 895.969644][ T35] ret_from_fork_asm+0x1a/0x30 [ 895.974492][ T35] [ 895.976808][ T35] value changed: 0x00000000 -> 0x00000001 [ 895.982612][ T35] [ 895.984927][ T35] Reported by Kernel Concurrency Sanitizer on: [ 895.991162][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/1:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 896.002036][ T35] Tainted: [W]=WARN [ 896.005836][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 896.016239][ T35] Workqueue: rcu_gp process_srcu [ 896.021217][ T35] ================================================================== [ 897.009877][ T1966] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 899.055670][T31529] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.