last executing test programs: 5m46.671817007s ago: executing program 32 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 5m5.843495567s ago: executing program 33 (id=755): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000840)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a604", 0x9c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast2, {[], {0x4e23, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfff5, "70aa406e06d33342a89e1bc0968edeaa64cb58eee34eeb4800", "0772f933c5c2d78f91903f58d74edaf1f5bd09edd42b31a9530f79148848b7242ef7c9f01044d3bb3442a35e698d4be4", "6bbff34b6adacc361bbd6a4728607fe4d73b3d26ace9cf1b196bb62b", {"6bed9da9ef24d4ff5a9052a252499bbe", "0ce437e5dc30b6a98f6e30a732bbe164"}}}}}}}}, 0x0) 4m17.883215114s ago: executing program 34 (id=1520): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (fail_nth: 2) 3m49.99454038s ago: executing program 35 (id=1929): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2b03, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0xffff, 0x1, 0x8, 0x101, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x4001, 0x0) syz_create_resource$binfmt(0x0) syz_create_resource$binfmt(0x0) close(0xffffffffffffffff) utime(0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x200000010) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1}) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) 3m38.32809413s ago: executing program 36 (id=2079): r0 = socket(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r1, &(0x7f0000000e80)=""/4081, 0xed4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001e80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x200040c0) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x1d8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff228f}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x672692e4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d1}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbd}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4273}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff7d}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MEDIA={0x118, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7205}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4008000}, 0x40015) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x1, "00ffffffffff"}, {0x22, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) 2m5.479495984s ago: executing program 9 (id=3637): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000003, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1, 0x13, r2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) renameat2(r3, &(0x7f0000000000)='./file1\x00', r3, &(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 2m5.416252057s ago: executing program 9 (id=3638): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000002100)={&(0x7f0000000740)={0xa, 0x4e21, 0x7, @empty, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dstopts={{0x18, 0x29, 0x37, {0x16}}}], 0x18}, 0x4044812) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_GET_FPEMU(0x42, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = creat(0x0, 0x21) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000500)={0x7d6, 0x5}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x3, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x2b, 0x4}, @union={0x3, 0x3, 0x0, 0x5, 0x1, 0x3, [{0xf, 0x0, 0x100}, {0x4, 0x0, 0x1}, {0x2, 0x4, 0x7ff}]}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}, @typedef={0xd}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}, @restrict, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x39, 0x0, 0x6d, 0x2}, @ptr={0xd, 0x0, 0x0, 0x2, 0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @enum={0x0, 0xa, 0x0, 0x6, 0x4, [{0x8, 0xc000}, {0xe, 0x3}, {0x6, 0x8}, {0x4, 0x101}, {0xd, 0x6}, {0x7, 0xe4}, {0x10, 0x1}, {0x9, 0x5f89}, {0xd, 0x8001}, {0x7, 0x40}]}]}, {0x0, [0x0]}}, &(0x7f00000002c0)=""/232, 0x11b, 0xe8, 0x1, 0x8}, 0x28) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000003c0)={0x0, @loopback, @remote}, &(0x7f0000000400)=0xc) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, 0xffffffffffffffff, 0x6c}, 0x38) syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x6, 0x1f, 0x4, 'u2'}]}}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', r5, 0x2f, 0xd, 0xa4, 0xe, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x80, 0x10001, 0x6}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000002, 0x1, &(0x7f0000006680)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r8 = socket$kcm(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='GPL\x00', 0x2d5b, 0x0, 0x0, 0x0, 0xb, '\x00', r7, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 2m5.383438289s ago: executing program 9 (id=3640): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) (fail_nth: 1) 2m4.988229452s ago: executing program 9 (id=3646): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x2, 0x0, 0x2, 0x429a, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x100000008}, 0x88825, 0xccf8, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff91d}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x6, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x1ff, 0x6, 0x2, 0x0, 0x6, 0x0, 0x2006}, 0x0, 0x3, r0, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x2, 0x206, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x400, 0x100000001}, 0x619, 0x40000004, 0x0, 0x4, 0x103fe, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x20001, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f00000002c0), 0x4) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1733}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4008840) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20, 0x1) umount2(0x0, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="91d80f571a4bd0200010000a060103df0bbf000002000b07000003091002270073797a3200000000952453cddf7b3c3629534181703c4118a810b867d4b4ec4b267369c3ec80462076e64c9d804314"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x8044) unlink(&(0x7f0000000100)='./file0\x00') syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@private=0xa010101, 0x0, 0x0, 0x40, 0x0, [{@initdev}, {@local}, {@remote}, {@local}]}}) r9 = socket(0x10, 0x803, 0x0) sendto(r9, 0x0, 0x0, 0x0, 0x0, 0x0) connect$pppoe(r9, &(0x7f00000000c0)={0x18, 0x0, {0x3, @empty, 'veth0_to_team\x00'}}, 0x1e) getsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2m4.822882082s ago: executing program 9 (id=3647): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040010) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r5, 0x1000, 0xe05}, &(0x7f0000000380)=0xc) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r6, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x3000000}, 0x0) 2m4.522284109s ago: executing program 9 (id=3650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x40000000000000, 0x10, 0x209, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) r5 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x129103) keyctl$join(0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',\t\b\x00sd', @ANYRESHEX=r6, @ANYBLOB=',\x00']) sendto$packet(r5, &(0x7f00000005c0)="baa00d43fdd693e0629fd36b9023", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2m4.468680133s ago: executing program 37 (id=3650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x40000000000000, 0x10, 0x209, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) r5 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x129103) keyctl$join(0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',\t\b\x00sd', @ANYRESHEX=r6, @ANYBLOB=',\x00']) sendto$packet(r5, &(0x7f00000005c0)="baa00d43fdd693e0629fd36b9023", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1m17.304534903s ago: executing program 4 (id=4840): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 1m17.244207626s ago: executing program 4 (id=4842): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x97}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}}], 0x18}}], 0x2, 0x20000044) 1m17.159136221s ago: executing program 4 (id=4845): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x40030000000000}, 0x0) 1m17.130035383s ago: executing program 4 (id=4846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x38, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x20000840) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) 1m16.919064795s ago: executing program 4 (id=4853): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, 0x0, 0x8000002) 1m16.714015667s ago: executing program 4 (id=4858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m16.691306458s ago: executing program 38 (id=4858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m8.392363942s ago: executing program 6 (id=4974): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1m8.334527686s ago: executing program 6 (id=4975): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="0000000035fdca249bf6ffffffffffffff556eab", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @dev={0xac, 0x14, 0x14, 0x33}, @empty}}}], 0x20}}], 0x1, 0x4800) 1m8.318945776s ago: executing program 6 (id=4977): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000068fffd0000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 1m8.148841416s ago: executing program 6 (id=4978): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x4008821) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000000)=@ccm_128={{0x285}, "803a2cfac8e86208", "21bc33000e84b3d377a8de853555fb3f", "d7233fe3", "e7d152ba4beb13ec"}, 0x28) 1m7.05077445s ago: executing program 6 (id=5001): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') setuid(r3) fstat(r1, &(0x7f00000035c0)) 1m6.616833836s ago: executing program 6 (id=5007): openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 51.492272237s ago: executing program 39 (id=5007): openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 36.067975547s ago: executing program 8 (id=5516): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 36.050538348s ago: executing program 8 (id=5518): r0 = syz_pidfd_open(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x692bb, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYRES16=r0, @ANYBLOB="0100000000000000000003000000200001800400028008000300fdffffff0e0001"], 0x68}}, 0x4004) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0xfffffffffffffe5b, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40500c0) 35.852559899s ago: executing program 8 (id=5522): syz_open_dev$usbfs(0x0, 0x77, 0x141341) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)=""/6, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(0x0, 0x800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfd, 0x244, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r0, 0x10, 0x0, 0x7000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x3400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000702, r5, &(0x7f0000000800)) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x24000050) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 34.9800503s ago: executing program 8 (id=5541): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") fcntl$notify(r0, 0x402, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') setresuid(0xee01, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x10000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 34.688340237s ago: executing program 8 (id=5549): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x100}}, 0x0) 33.980451258s ago: executing program 8 (id=5560): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000100000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'macvlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x19, 0x2, 0x0, 0x0, 0x14, 0xfff, 0x0, 0x0, [0x1, 0x4]}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x40}, 0x4, 0x100000000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_mixed}, {@fat=@sys_immutable}, {@shortname_winnt}, {@numtail}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_lower}, {@rodir}]}, 0x2, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") 33.95641842s ago: executing program 40 (id=5560): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000100000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'macvlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x19, 0x2, 0x0, 0x0, 0x14, 0xfff, 0x0, 0x0, [0x1, 0x4]}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x40}, 0x4, 0x100000000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_mixed}, {@fat=@sys_immutable}, {@shortname_winnt}, {@numtail}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_lower}, {@rodir}]}, 0x2, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") 22.610681502s ago: executing program 7 (id=5795): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x3000000, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @loopback}}}], 0x20}, 0x4080800) 22.476173109s ago: executing program 7 (id=5798): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000700000a1f800533"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x8880) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00', 0x7003, [0xa, 0x8004000a, 0x41, 0x4000002, 0x8]}, &(0x7f0000000100)=0x54) r2 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000018000)=0x9, 0x4) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x130, 0x0, 0x290, 0x98, 0x290, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x2e, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010100, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xfe, 0x3}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {0xff}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth0\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x9, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010100}], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3}, {0xac, 0x0, 0x80}, {0x6, 0x0, 0xff}]}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x90) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x54004) 21.42875438s ago: executing program 7 (id=5819): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x6200, 0x80) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4100, 0x4) fspick(r1, &(0x7f0000000080)='./file0\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, 0x0, &(0x7f0000000280)=0x49) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf2510"], 0x8c}, 0x1, 0x0, 0x0, 0x4014}, 0xc004) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25030000001c0002800800090000000000080007000900000008000300f432000008000400020000005c000180060004004e2300000800090048000000080009006200000006000100020000001400030000000000000000000000ffffac1e01010800050000000b007369700008000b00736970000c000700200000003d00000008000400050000003800018006000200320000000800050000000000060001000a000000140003000000000000000000000000000000000108000b007369700000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 21.207343443s ago: executing program 7 (id=5822): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x4000004) 21.104517319s ago: executing program 7 (id=5824): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 20.75525268s ago: executing program 7 (id=5832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000308000140000000000900010073797a30000000000900020073797a320000000020000000080a01010000000000000000020000030900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockname(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x6, 0x6, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffff79}}, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x44004) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x47, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x7a3}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x1, r4, 'id0\x00'}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001480)={0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000340), 0x4) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendto$inet(r5, &(0x7f0000000240)="0d60d4899cd59e95116369ebe2956e6ae990f04c7c65ae5e2eab99636cfb907fadf73710bf76802232afeedfa3b4e2cdfcaa8e625001c22625483bb8ddc1d2aaf1dd7cdddd8d", 0x46, 0x4004805, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00', 0x0, [0x47f, 0x7, 0x20000002, 0x6, 0x5]}, &(0x7f0000000000)=0x54) 5.721864356s ago: executing program 41 (id=5832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000308000140000000000900010073797a30000000000900020073797a320000000020000000080a01010000000000000000020000030900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockname(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x6, 0x6, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffff79}}, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x44004) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x47, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x7a3}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x1, r4, 'id0\x00'}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001480)={0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000340), 0x4) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendto$inet(r5, &(0x7f0000000240)="0d60d4899cd59e95116369ebe2956e6ae990f04c7c65ae5e2eab99636cfb907fadf73710bf76802232afeedfa3b4e2cdfcaa8e625001c22625483bb8ddc1d2aaf1dd7cdddd8d", 0x46, 0x4004805, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00', 0x0, [0x47f, 0x7, 0x20000002, 0x6, 0x5]}, &(0x7f0000000000)=0x54) 2.760147719s ago: executing program 5 (id=6118): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 2.680289053s ago: executing program 5 (id=6119): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x141442, 0x139) write$UHID_INPUT(r1, 0x0, 0x0) syz_io_uring_setup(0x12ed, &(0x7f0000000340)={0x0, 0x5cb3, 0x80, 0x4003, 0xfffffffd, 0x0, r1}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = eventfd(0x0) read$eventfd(r2, &(0x7f0000000240), 0x8) writev(r2, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) 2.652667185s ago: executing program 3 (id=6121): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x18, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff5f, &(0x7f0000000000)={&(0x7f00000003c0)=@getqdisc={0x40, 0x26, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0x1d}, {0x6, 0xb}, {0xffff, 0xb}}}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20002800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={0x0, r5, 0x0, 0xe, &(0x7f00000010c0)='\\+{^*-.#$+\xb9[*\x00'}, 0x30) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="65f19977", 0x4}], 0x1}, 0x800) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x0, 0xa, 0x0, &(0x7f00000003c0)=""/10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001ed000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x42000, 0x0, 0x12, 0x100000c01, 0x74, 0x41, 0x24}) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000008400000002000000050004002800795d09dc246a", @ANYRES8=r11], 0x20, 0x2400e044}, 0x4080) 1.736211249s ago: executing program 3 (id=6131): fgetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@barrier}, {@nodiscard}, {@nogrpid}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffff}}]}, 0x0, 0x55a, &(0x7f0000001400)="$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") setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0x1a, {"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", 0x1000}}, 0x1006) 1.699585521s ago: executing program 2 (id=6133): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_clone3(&(0x7f0000000200)={0x2000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x19}, &(0x7f0000000140)=""/32, 0x20, &(0x7f0000000180)=""/7, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58) r3 = epoll_create1(0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=0xffffffffffffffff, 0x4) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000002c0)={r3, r4, 0x8001}) r5 = syz_io_uring_setup(0x597e, &(0x7f0000000300)={0x0, 0x88d0, 0x2000, 0x2, 0x2c7}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) fstatfs(r4, &(0x7f0000000400)=""/127) syz_open_dev$MSR(&(0x7f0000000480), 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x2, &(0x7f00000004c0)) fallocate(r2, 0x1, 0x1000, 0x800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000500)={0x0, 0x2}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000580)={r6, 0x5}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x9e, 0x31, &(0x7f00000005c0)="cdb0fca051092050cac932d60e73ae198a27dbd56614dca20906bc22ab7366c3aaa0a31ddd5be427fe1d3b6244ccf641a6ca100e78d3bf734a0c4bbaf2b9743258062224d5e24289db402fd84872c5887335723083e9703928907b5b306851e7f676d03775c8eae9408b8f851dba4bac3777a71471efe132b1245951431bc4ff62e7414a2920bc7c08498478768a788c46c4058d71cb59d8fb36e7cd2133", &(0x7f0000000680)=""/49, 0x1000, 0x0, 0xd2, 0x1000, &(0x7f00000006c0)="94d460e84a2de196bce0e7e198cd4b8890c998404083f64229a240c00c07c5d820d4cb60e08c10a35898ead594743e786e640226121947844af4ec2c3ab2c803b4f42a0f40b6fc85aa35e208c2f8d30c5740a1cef0f98f5c207a97e3a65cf7be58f11caa6b2adac5aa8e77a760406ca9c670298495f5381e7ca2dcb74f8d44d63ee2cdfe3fed1bb5d9b410d79c807c72c9842c9e64519ab387dc83063fcced3705deaf80d09f7e8b921d41c24f566bd1c666aa8b5b5cc0575d108bfb09374091914e7369777b56de804bfcf4a99b5382f526", &(0x7f00000007c0)="119cabdd4b199f67d3b7f11e238b7afe1470e45a0998695ec140693932c70670c118277d656752b5824217f0af958b200ca508ae698304edf6e4f5781400c22127c699492ab23c147f664a877da90cd9654f76aa7940805bfea8998dd9edad953d1ba570c608494c2aff0e711bd0f0feffe8f68781a3c052d3bce17a79b2b634e500b9b5ebf5d0c4b7ee59498700830380898a3552118ed6d13804c5056ccb537ca396a49d6cd70ed17b5c8769fb1631fd366a9e7cd16b91a846154fdae36510fb04e31d7225e1c20478b76d59ea34c10a1d202c270596023f8fbea4c174d91e9d507a2be3276113191f9ea8d5da58a4e6839b2dc324689e133dfdb43dc2d92d221cf9fb5da7e11ba8b98ee53af327831fdbadba561fd912b1e003ac10ddffac561a93092febdaf23a02704282a58c8fe4f68b58014fd88bde12bd732018e7721783753f23326eed2e81747b95ce4c6f599f6daeba19936ec6a3bf9cca996e0b3b4c90c0d39afcfc64482c120464653adb022032e19261214860e6db934e4f572fb3cd48d385cf9b5aa551b5da61fce4157bbc9a9ccd8d9e0f3f7e23e2c84106f9c2b22c75121d969caa59d890664d57631ffb2f8f72004b4c49e9c1898f0d307882805f8ba80b1d5aabfa097aea241c0c81ae19007be8da9611cff70f28da2d50663e9bc30babf2fafee8afc16bdf03f963fb09a28a88a280c3e60ed15a704edd05003d0a7b74f5e3e97cdf813c01c749d8f6ad0c344361981a821312d857791ed263893d5c5fa500e9e5e15b90ad9f2ae1adb04af23a305e0bc9d7ec0d00e94f3c549be3fd5810cc6fa40ce78a8f62c9f503c13c18db0941b0769babd7475d0c047db8c759816726b8c1e2274597827c20a799593cf8be3dcd825fd90ad527530280869a3347e463605095711e6f5cfc386137cbd873c57f501e65b69d8324aaafc4e64cd8e20d045ac6fbccefa1a6556f6c2c6df66e1c3e353733c53efc8b72098fc237d8bf2a4b5abb0492798d0d196e0902034bfbdeda3b2574bb301e091cc6369a0ed0409fc8f05a57f8922b5ab7da9b90ac52e27d2bfec3ee1c8cbe5ba78f0798757a99591ddc4a4f0ae88b6d8447a37c0e750d1c3cf83956c3e74cfdcc2cf569d3eef748da4f88dbfd469962973fff8a8fd35e9e34be8da65535af4af0a50c90d7ab055450fcb49eb145b1e76dea6a17c04b9b6c4dca24e2cfc0b7b17fc2f060681d3384c2d096b08ed35b6739b9bed3d8a06b33472964d1bf27f1ed9d0f29d785332f32c0ad0f0404659aba1ede5b82d673bf26f621d471ae589186df727785693ac6a147f4ccb334020ddcc4175d7e00e047a9b1c4f691953afbddf2e63040c669f3d3656a473c982b78d78d933b705499f9088b32364e52e1d0bcc0e7b7dd87d3e756842bf0ffd6b8143484d860d2679c6f4fde46133d1f3998241d690711a2cae87e2784d7545569e4227aa2bf960b76c5e5a2069dd3df171903f005a72f25199367c73701b341e703597e7a45f5e4bbc88e59a9479703d774eac8d5dac3963ac5589c1c6d4f123538a8aeebafaf1b5f4e8517370b85f821938eec6d28749335417e56c9aaa51ed188008a7570fd95ac7fcb9f45e3a889e64c7a3a9c43fb3037456b1c2c0ac0626dc71cce4abf73cabf648e3e8984fc12054fe9f672793e7f2e838c959b2ebbfc3dbb5a7be233b49d45440752bd8f778b7c6019e141d025d781476d6172a71ed62cbd77fd9a7f8a7dbe2830a0e7c921476d52cbda0e1ad6a49c7d5d69dcc7a86dc23ecdf4221e83b5fa9966a6a291a79d59dcbfe448bfacab4aa974aaa542df2dc0dfee948a95740811e727b45fb89c9251f4572b0a64f76ecba111405e0b2f4d6c243372f907aa7b20f86da2edabbde460f11f1fb41553c6255a917eb4003f2a2f322bc56465871578b8f1575f0b89dbd191e038b5832529b4b86b626186156e838f18d690e937eaa0517d768f206d8c6ace542d80df43eb8df4591b2721e0ee2348e3b93927d2cf8fd57a2aaad360f511b8b7c2dbdb971fcf14b58af2273642c4ecbcd460893a8a1b9bd056b97dfd7cb4ef3b1c6c439bd1d1c907d8e86e1e4be7e39ad29f15a8c543b48e97c6446746c81a5a86267204beacf1e8ddb0ecce87e12771a93590f04963c2747e3d4d7600fe481d406ca887bd7c9ce05a7256c5a9aa36a0d641c7bf8cf2f35a38a137d71a289dd2d5c5ca5cdefbe44c91fb9b50c80b2882eb677ab99068d32c4377ad5e111e29e51a29d78f7e62767d9893ed8175f99576f87f877df0367439d891f22078c3544f94cd760852fef7df762eb460f3c0f30c82f74c8f9bef9a5b72ff35662c88877f1d7ebf0e507d0719b47843615590c34ccf7276c3ffb41b4e0363bf24b8620d11b994fcbd0d95e8729698f9e5952eba66a2718af6f76d552bec95782058d553d929fcd51c6fcb9af19a005f9bce04b579b18c6ad947509d684cbb90f80497611d37169b45df0bafd1baa287a7d40de4e8a446993cc4233a307162adfed3d6ca1ee32373101fccef570facf84ab3bc58c400742046cc0184ee9eeaeae14109c317e2a6669f41d36055cddfbf0d04d7a09a6c554f471b062b85345b1ce2bd1bd70290063d1e550ec53c090b1f1a204fec1e0838ac8d8a17c91d20293a8ada52b879beb72c32c799aa1fdf1a711fe058b2e8d92a417e1a3925ab3f2ecb46b1e7171f16e7efbb5a3c00dbb97d2f82d251bbfa7925293b2e49eaaa07603627c247afe301e4c63de85a45990304a2ea54ea8dd3751e1b1236c5863fd2a221d5b7270ef21c2696b4abafd8b78d73aae7a4e8ee29691233bfbdc1491181ba6eec069c59e2f990d056663caab8906d9c7e1b4d7b1a575ee96ad5b585d97b8e037cb88cc4a7c380deb80bd8d8c5239999efc2bf929e7f6d5efd2bbb9d46118da974fea3f77430440ff21896085cd60d0835c824a496b6f74e2ce2f661f81c124605d61e3127c1de590ef40cee09362029a3c3e58c813721f787821782447957812018686d2c8bb0bf6a0926f8249076efe43511f28eba8676b825bbf3e2c016f28b487e2a87aea4861f79fe85b7a6da7e9352d969038690a17f242e69435266db41a1fc36d52351b4a79da5c6833ef4e1ac2057bda8628862b6735d941e2bf5241bada83a22a0ec276d102da5fc6e86021595aa3391ea69b532a3460b4ab7c2d9d7702c680ba82921843dc5dbfd8ac41cc37ccae928546f54cf0a828bae1b509255e1295f35ae531cf6ffbd271c71757399ab72f266194e77d5256104c45a9cbaf2c51599bb9b5589cdc9c5ac374671297879b31da8019b1d5743b5ff541867050ccd2a42dbad513d2e3892c71c9aa3b91a12ba07d66d5a1b1e312f3d606ce31efd7a8e046fa4ab311654726f92f072a135dc702c6ea0abf78c6b8d14960e7a5830eef928d4352125b78c8610c1c17f24f762e81897dcfeeba125a584ba13c3bd3cae29dcfa09c4aff68de96a734f7281fb918d1a3e0dd0de3fbf66c2e6ad797ebcfed8d07c5f8ebb2a501d7c73389c1505745f91144de26a41a636d8e42b39cdb3fcadca4979d9240f6fa421c5c8e645ac292b26e131d1644fce2870e25dc0ebdf0a2cadea0d1bac3d2a501c8eb2be3ae6406ffcd454ca6652bc86fcfabf934a2bc0ba650f8db0022285fe18913705835edab33f02cecf14478f12d72df2b45d2f15d2951638d1f18494ed6e90c2b4e5205a4944993996bc12e3be6c43aa9e2072a7d762cb574b1327f709f461fa05d2e1bd0c2d83dc03a95cd1f1b8811f9ae79fd8d4e55db2b09e0f2374eaeba416b021559290decc844e08adee7e2cd30885fa15940fda76360ce0ae14aebada3c6780223aab141c004c320e102ee4cad0929964febaa5efcd3be865b78a525d9c5db4cdf1678b02d547e0e543003c892b285d839ee63fb8d401e4402ced7fbeaacd208d66b051da1a58493dd9e8742ca327e6a85f004a33e67902f595acaed63f6c0c36c7d4107370d21f9abe6e4783d7dae88e7a929dc17b37767f61826b81c1a9dfd5f34b4f7842e2a6699048d05410ddf38b42bfe72cef54520c6a1061f10f78dafafefbea868da1fc071f9b89e1540ac649b97ef3ed568cbbcf0bdbdeb81e37cbe59a3e7b19ce213988fccd4ffdb4f798f756c7c9d866d072227e29fff249136053f57de6f8d008e1c422c90252a9237e4b986d3d3009b2879a750a19d08c2398b51c6b7d3591543e0fec741b9ef93ae10f26aa4fbf4d17a0a57da21f576b056f09916c5a51e65aa675794e99cdb6cc4badf5c69cad278dd367f605c1bcad228a459c36c33ea3762789c5e600437ce67b4a6961b9158a10e633a84c37e6ad9fb874c29e0e1b11253868b77c592855fb6be40644339f2e9a223d1731a7e499dc4e48208edf7f2bbddead5845aea44e74a58d9f3dc5289d51524b8a5610b699bc061fb124f0b9903f227a7c4c6d21ddee8306a8e9090633cacb4d23ad4e481c3a4a36468ed2bd54a84841cc069a720249f7864aa9cb2b1cf1a637a18d05548113d24b36589698edad6085f9ac1bb450792833e80cb6b8e9559cce32b38bb738ca7dc79031a7d3ec1b964606b8b4b7f0feca6f17e7c2c948b84c47034d6e2171dbf7ee3caa875269aae9915dfec2b93e0bde44efee1f0beff57d1b6065f2af7dd722de3dd49220fc303bc1e622d8ca41a8381f5576acf94b84253b3880c13dabfd09b6f57d7dba62bd1ff6618d1608794604b72e688edc56f98bf0f309d9f58509c95c4c924609e60f7f663d54bbd30cf660ed2e6047b4800ffe0b9ad70458716e010c3df118df81e68f2b33ff82b4de80656620fb57d7329334b7272b23ad8ee9244bdbb85c79d8536489bc6b31262304c9c5c8e34f4ef5cb28aac437875b1be21febd199210d0dc25a378071e21632759e140a1e8485ed40baca955a9d2b2c2a73262fd3924359e65cbb6abc94dfc1ff143746831ffd60a8eaa221e571d2eebce464ad920191ea82404815524a231809d24db60583ed23dccc67bb5df10bcd9e5ed3c1d5e7f013d0baa0e462b79cd2fc22ba4b7a049bd383cab1cbfff365edd95d548bd2ab3e4e899311b0531ebb778d0c3061453dcbd102629c9880e4820de850952489b97536fd6f043e8dd68fc2d1b6be22e93f6e97ba76756bff1069f6973cfc23f29eeb2ba899c4f29a1a803fedb86b6ef607a3f0671937786be5305497f428052e1669fc6bfceb33805379a8f9ce2b8f0f588a14fa907cbb6350ca03724ce954a8637b0cd47880ef72dcd6d0c16fbf2996c2be5f600ee58d90287bd338944f39fbd715c410bb3617037c7a19b0311b1039d9c50d25338069b905b01a0c355ac6194173a5a9eab7a8bc57741ce6422e0d79be1d8291b9e2d61aa7cb36ea5408a64c9e719b8361c613d7114184f5d247e0778ed045b09fec537019ef6650c3b2ecf24ef1b769c9d16980b7e364b748753c4e9bf4f69ad0965e1f748f966e7b49dae898a675ba93c09b5b3a228deb2c3f844494a96bb418cf6a313c5466e5aff492b4093b9ed27b5c9843c952112eb79173d0ebe96f50e4d144b3d8c57d48a4aee8ecb169600f5e7ac48e735f76584f2290930b6c62875beff50d76d98371551abed5183e9a9360ced076375cc1635f7b499b5ce48b0adf1258f3cb4d44d2ceadb0427643a4ef8b41e4104506fc389eb44b90d20aa9f9c7e2623ab00a643efb0cd46cb3b11872afefec9adf28b4e4d1fd3e1667363fce53aeee301872563bd114c82e86cbe0dcc83a53b831d940d4ff5f272bd2", 0x0, 0x0, 0x3}, 0x50) r7 = signalfd4(r5, &(0x7f0000001840)={[0x3]}, 0x8, 0x800) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) unshare(0x10000100) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = mq_open(&(0x7f0000001880)='/dev/cpu/#/msr\x00', 0x40, 0x30, &(0x7f00000018c0)={0xffffffffffffffff, 0x6, 0x100, 0x4}) r10 = dup3(r9, r3, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000001900)={0x0, 0x8, 0x8}, 0x8) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x1) r11 = socket$unix(0x1, 0x1, 0x0) splice(r11, &(0x7f0000001940), r9, &(0x7f0000001980)=0x3, 0x8, 0xc) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f00000019c0)={'mangle\x00', 0x32, "6a8b1b2cf7c7aba9ee6a533c65e29a01cd25a5a191740ab74f4321ca06e833c6fafbab8aede62cefc155cb7b340412d52439"}, &(0x7f0000001a40)=0x56) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r10) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000001ec0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e80)={&(0x7f0000001b00)={0x348, r12, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x313}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff90}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff801}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x38}, 0x81}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e0b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd8e9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804) shmget(0x1, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000002180)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002140)={&(0x7f0000001f40)={0x200, r12, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xfb, 0x3, "76bea09aae1a463f2f9fef7a90a220b31265afdff1670d5a6fcf9471697a76d82d3c0ba5edcd3b49a13004e79c4d713ba1f4d1943538efe93c1a7a4a5ad26d94db369e29350ff524a96c32d617359d8753d637d1df171718936a46450d732181bc7df2a00bdb7c6ff2cbcc8cdb4e37bc36f4109e6cfdcad662157bdbe3c47633b789c670722170e9b434e7554b53cd5fb774d1397f7f5bf3f8b0ba4e0f28af313a1741f08df7128382b540ce2147edd9ede7e9841e6865bd41f26e7636974a7ce59cdf0bb2c293a30c4b91ce514e8a5e2f5dd985332adb008ed550af02c311b15cac8995f9222fcb6a0f37b79dec5108e66b93e199af7a"}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8cd0fee1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x40001) 1.518628561s ago: executing program 2 (id=6136): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800fd0000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 1.493115383s ago: executing program 5 (id=6137): io_setup(0x7, &(0x7f0000000000)) io_setup(0x1005, &(0x7f0000000040)) io_setup(0xb, &(0x7f0000000080)) io_setup(0x9, &(0x7f0000000540)=0x0) io_getevents(r0, 0x3ff, 0x1, &(0x7f00000000c0)=[{}], 0x0) io_setup(0x6, &(0x7f0000000f40)) 1.432315326s ago: executing program 2 (id=6138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000600014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 1.312279263s ago: executing program 3 (id=6141): getpid() flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) (fail_nth: 1) 1.167333582s ago: executing program 5 (id=6145): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() capset(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0xffffffffffffffff, 0x1000, 0xf67, 0x3}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) setregid(0xee00, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xff04, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.141200113s ago: executing program 2 (id=6147): syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0580c200000086dd6200000000100000fe8025e9920000000000ffffff0700000000aafe800000000000000000f94beb4f64"], 0x0) 988.058932ms ago: executing program 3 (id=6148): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x1, 0x2b0, &(0x7f0000000280)="$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") sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000004, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@inlinecrypt}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x100) linkat(r6, &(0x7f0000000180)='./file1\x00', r6, &(0x7f0000000640)='./bus\x00', 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=@bridge_setlink={0x20, 0x13, 0xa29, 0xfffffffe, 0x0, {0x7, 0x0, 0x0, r3}}, 0x20}}, 0x0) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)={'U+', 0x7}, 0x16, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x4, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) set_mempolicy(0x3, &(0x7f0000000140), 0x8) fchown(r8, 0x0, 0xee01) 987.798182ms ago: executing program 0 (id=6149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x4, 0x100000000000000}, 0x0) 949.355975ms ago: executing program 2 (id=6150): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@nodioread_nolock}, {@quota}, {@noauto_da_alloc}, {@delalloc}, {@mblk_io_submit}, {@noauto_da_alloc}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x4, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffe, 0x70c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0xfe, 0x1000000000000192, 0x0, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x9}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x40804) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000180)="aa", 0x1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={0x0, 0xffff}, 0x8) fallocate(r0, 0x0, 0x0, 0x1001f0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x2000) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000021c0)=0x95) ppoll(&(0x7f0000000000)=[{r6, 0x8503}], 0x1, 0x0, 0x0, 0x0) close(r5) fallocate(r3, 0x10, 0x6, 0x10001) 863.51146ms ago: executing program 0 (id=6151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x50) 837.928971ms ago: executing program 1 (id=6152): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 745.897887ms ago: executing program 0 (id=6153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="911045000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 745.445677ms ago: executing program 1 (id=6154): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, 0x0, 0x0) 649.093252ms ago: executing program 1 (id=6155): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) 648.595882ms ago: executing program 3 (id=6156): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xc, @tick=0x5, 0x7, {0x3, 0xa2}, 0xec, 0x2, 0x8}) (async) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x40) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket(0x1e, 0x5, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000780)="$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") (async) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0xc17a) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) set_tid_address(0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b45, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], 0x0, 0xc1, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r8, &(0x7f0000000ec0)=""/4096, 0x1000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'erspan0\x00', r7, 0x8, 0x1, 0x2, 0x2c7e1c7, {{0x28, 0x4, 0x0, 0x0, 0xa0, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0x7, [{@private=0xa010101, 0x89}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xfffffff7}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x3d, [@rand_addr=0x64010101, @local, @loopback]}, @timestamp_addr={0x44, 0x44, 0x61, 0x1, 0x3, [{@rand_addr=0x64010101, 0x7f}, {@remote, 0x8}, {@local}, {@broadcast, 0x2}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff5a}, {@rand_addr=0x64010102, 0x8}, {@loopback, 0x6}]}, @ssrr={0x89, 0x1f, 0xf4, [@loopback, @local, @remote, @broadcast, @broadcast, @private=0xa010101, @multicast2]}]}}}}}) 648.142152ms ago: executing program 0 (id=6157): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1820000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 647.541632ms ago: executing program 2 (id=6158): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x3, 0x11) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x102) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x19) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) r4 = dup3(r0, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r6 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xfffeffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0xd, 0x1e}) io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, 0x0, &(0x7f0000000040)) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) 622.463053ms ago: executing program 1 (id=6159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000600014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 587.559486ms ago: executing program 0 (id=6160): timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x2}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 580.137806ms ago: executing program 1 (id=6161): r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000240)='J', 0x1, r0) syz_open_procfs$namespace(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 488.506282ms ago: executing program 5 (id=6162): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000700000a1f800533"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x8880) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00', 0x7003, [0xa, 0x8004000a, 0x41, 0x4000002, 0x8]}, &(0x7f0000000100)=0x54) r2 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010100}], 0x10) 488.165452ms ago: executing program 3 (id=6163): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000700000a1f800533"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x8880) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00', 0x7003, [0xa, 0x8004000a, 0x41, 0x4000002, 0x8]}, &(0x7f0000000100)=0x54) r2 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000018000)=0x9, 0x4) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x130, 0x0, 0x290, 0x98, 0x290, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x2e, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010100, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xfe, 0x3}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {0xff}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth0\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x9, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010100}], 0x10) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x54004) 450.399664ms ago: executing program 1 (id=6164): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000700000a1f800533"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x8880) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00', 0x7003, [0xa, 0x8004000a, 0x41, 0x4000002, 0x8]}, &(0x7f0000000100)=0x54) r2 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000018000)=0x9, 0x4) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x130, 0x0, 0x290, 0x98, 0x290, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x2e, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010100, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xfe, 0x3}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {0xff}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth0\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x9, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010100}], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3}, {0xac, 0x0, 0x80}, {0x6, 0x0, 0xff}]}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x54004) 399.207506ms ago: executing program 0 (id=6165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC], 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x98, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x6, 0x4, 0x2, 0x1, 0x1], 0x3}, {0xffffffffffffffff, [0x1, 0x2, 0x3, 0x7, 0x2, 0x1], 0x6}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x20, 0x0, 0x1}}, @common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e22], [0x4e24, 0x4e20], 0x9, 0x9, 0x8, 0x9}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'macvtap0\x00', {0x7d5a}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000000200)="000bda8b37ddd48e", 0x8) sendfile(r4, r2, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20) 52.056296ms ago: executing program 5 (id=6166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC], 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x98, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x6, 0x4, 0x2, 0x1, 0x1], 0x3}, {0xffffffffffffffff, [0x1, 0x2, 0x3, 0x7, 0x2, 0x1], 0x6}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x20, 0x0, 0x1}}, @common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e22], [0x4e24, 0x4e20], 0x9, 0x9, 0x8, 0x9}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'macvtap0\x00', {0x7d5a}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000000200)="000bda8b37ddd48e", 0x8) sendfile(r4, r2, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20) 0s ago: executing program 42 (id=6166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC], 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x98, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x6, 0x4, 0x2, 0x1, 0x1], 0x3}, {0xffffffffffffffff, [0x1, 0x2, 0x3, 0x7, 0x2, 0x1], 0x6}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x20, 0x0, 0x1}}, @common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e22], [0x4e24, 0x4e20], 0x9, 0x9, 0x8, 0x9}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'macvtap0\x00', {0x7d5a}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000000200)="000bda8b37ddd48e", 0x8) sendfile(r4, r2, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20) kernel console output (not intermixed with test programs): 15.326:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.2.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f520c9daa22 code=0x7ffc0000 [ 351.170562][T20522] EXT4-fs: Ignoring removed orlov option [ 351.184532][ T29] audit: type=1326 audit(1768912315.326:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.2.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f520c9daab7 code=0x7ffc0000 [ 351.188652][T20522] EXT4-fs: Ignoring removed i_version option [ 351.213208][ T29] audit: type=1326 audit(1768912315.326:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.2.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f520c997a51 code=0x7ffc0000 [ 351.218497][T20522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 351.243278][ T29] audit: type=1326 audit(1768912315.326:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.2.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f520c9dbac9 code=0x7ffc0000 [ 351.272538][ T29] audit: type=1326 audit(1768912315.326:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.2.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f520c997abb code=0x7ffc0000 [ 351.296009][ T29] audit: type=1326 audit(1768912315.326:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.2.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c9dacb9 code=0x7ffc0000 [ 351.320276][ T29] audit: type=1326 audit(1768912315.326:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20514 comm="syz.2.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f520c9971ac code=0x7ffc0000 [ 351.360550][T20519] EXT4-fs (loop3): 1 truncate cleaned up [ 351.366976][T20522] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 351.368314][T20519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.374924][T20522] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 351.402260][T20522] EXT4-fs (loop0): orphan cleanup on readonly fs [ 351.409713][T20522] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 351.424389][T20522] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 351.432038][T20522] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5444: bg 0: block 40: padding at end of block bitmap is not set [ 351.447500][T20522] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 351.456719][T20522] EXT4-fs (loop0): 1 truncate cleaned up [ 351.462883][T20522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.494498][T20522] EXT4-fs (loop0): shut down requested (2) [ 351.506440][T20522] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 351.519870][T20522] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 351.529394][T20522] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 351.550921][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.602206][T20511] EXT4-fs (loop3): shut down requested (0) [ 351.659733][T20534] loop0: detected capacity change from 0 to 2048 [ 351.688859][T20534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.724998][T19890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.746264][T20534] EXT4-fs (loop0): shut down requested (0) [ 351.760407][T20543] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.812656][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.867466][T20547] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5451'. [ 351.890277][T20554] loop3: detected capacity change from 0 to 1764 [ 351.957973][T20566] loop0: detected capacity change from 0 to 256 [ 351.992241][T20566] FAT-fs (loop0): codepage cp936 not found [ 352.101525][T20576] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 352.179680][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'. [ 352.188679][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5464'. [ 352.370374][T20596] loop0: detected capacity change from 0 to 512 [ 352.379429][T20596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 352.389034][T20596] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 352.417442][T20596] EXT4-fs (loop0): 1 truncate cleaned up [ 352.516869][T20607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20607 comm=syz.0.5472 [ 352.607966][T20616] FAULT_INJECTION: forcing a failure. [ 352.607966][T20616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.621174][T20616] CPU: 1 UID: 0 PID: 20616 Comm: syz.2.5476 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 352.621206][T20616] Tainted: [W]=WARN [ 352.621213][T20616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.621225][T20616] Call Trace: [ 352.621275][T20616] [ 352.621284][T20616] __dump_stack+0x1d/0x30 [ 352.621368][T20616] dump_stack_lvl+0x95/0xd0 [ 352.621395][T20616] dump_stack+0x15/0x1b [ 352.621538][T20616] should_fail_ex+0x263/0x280 [ 352.621656][T20616] should_fail+0xb/0x20 [ 352.621677][T20616] should_fail_usercopy+0x1a/0x20 [ 352.621709][T20616] _copy_to_user+0x20/0xa0 [ 352.621744][T20616] simple_read_from_buffer+0xb5/0x130 [ 352.621806][T20616] proc_fail_nth_read+0x10e/0x150 [ 352.621873][T20616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.621905][T20616] vfs_read+0x1ab/0x7f0 [ 352.621936][T20616] ? __rcu_read_unlock+0x4e/0x70 [ 352.621973][T20616] ? __fget_files+0x184/0x1c0 [ 352.621999][T20616] ? mutex_lock+0x57/0x90 [ 352.622035][T20616] ksys_read+0xdc/0x1a0 [ 352.622082][T20616] __x64_sys_read+0x40/0x50 [ 352.622100][T20616] x64_sys_call+0x2889/0x3000 [ 352.622124][T20616] do_syscall_64+0xc0/0x2a0 [ 352.622146][T20616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.622213][T20616] RIP: 0033:0x7f520c99b58e [ 352.622264][T20616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 352.622282][T20616] RSP: 002b:00007f520b436fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.622305][T20616] RAX: ffffffffffffffda RBX: 00007f520b4376c0 RCX: 00007f520c99b58e [ 352.622332][T20616] RDX: 000000000000000f RSI: 00007f520b4370a0 RDI: 0000000000000004 [ 352.622348][T20616] RBP: 00007f520b437090 R08: 0000000000000000 R09: 0000000000000000 [ 352.622364][T20616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.622379][T20616] R13: 00007f520cc56038 R14: 00007f520cc55fa0 R15: 00007ffca2a0c0c8 [ 352.622417][T20616] [ 352.960126][T20626] netlink: 'syz.2.5480': attribute type 21 has an invalid length. [ 352.972602][T20626] netlink: 'syz.2.5480': attribute type 4 has an invalid length. [ 352.980410][T20626] netlink: 'syz.2.5480': attribute type 3 has an invalid length. [ 353.012946][T20626] netlink: 'syz.2.5480': attribute type 21 has an invalid length. [ 353.021136][T20626] netlink: 'syz.2.5480': attribute type 4 has an invalid length. [ 353.028927][T20626] netlink: 'syz.2.5480': attribute type 3 has an invalid length. [ 353.293815][T20648] loop3: detected capacity change from 0 to 512 [ 353.349630][T20649] sctp: [Deprecated]: syz.2.5490 (pid 20649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.349630][T20649] Use struct sctp_sack_info instead [ 353.390792][T20648] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.494579][T20664] loop3: detected capacity change from 0 to 1024 [ 353.501615][T20664] EXT4-fs: inline encryption not supported [ 353.533452][T20664] EXT4-fs: Ignoring removed nobh option [ 353.539175][T20664] EXT4-fs: Ignoring removed bh option [ 353.561856][T20668] __nla_validate_parse: 9 callbacks suppressed [ 353.561897][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5497'. [ 353.578523][T20668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5497'. [ 353.605343][T20664] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.5496: Allocating blocks 497-513 which overlap fs metadata [ 353.684643][T20678] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5500'. [ 353.713154][T20683] loop0: detected capacity change from 0 to 512 [ 353.842744][T20697] loop3: detected capacity change from 0 to 128 [ 353.869030][T20688] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.877720][T20701] program syz.2.5508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.889163][T20704] program syz.0.5509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.903829][T20697] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 353.987873][T20697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5502'. [ 354.009405][T20697] netlink: 'syz.3.5502': attribute type 1 has an invalid length. [ 354.017901][T20697] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5502'. [ 354.036654][T20708] program syz.2.5511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.199197][T20720] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.267758][T20722] Alternate GPT is invalid, using primary GPT. [ 354.274125][T20722] loop8: p1 p2 p3 [ 354.277956][T20722] loop8: partition table partially beyond EOD, truncated [ 354.319406][T20722] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5518'. [ 354.378581][T20729] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.378671][T20729] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.408288][T20729] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.426862][T20729] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.443366][T20734] ext3: Unknown parameter 'noacl' [ 354.449361][T20733] EXT4-fs mount: 6 callbacks suppressed [ 354.449379][T20733] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.449543][T20733] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 354.558135][T20729] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.568072][T20729] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.601923][T20739] EXT4-fs: Ignoring removed bh option [ 354.608169][T20739] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 354.625462][T20739] EXT4-fs (loop3): 1 truncate cleaned up [ 354.631610][T20739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.657894][T20729] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.667807][T20729] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.699069][T19890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.727496][T11201] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.735927][T11201] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.757640][T11201] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.765992][T11201] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.774690][T11201] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.782972][T11201] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.791645][T11201] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.799889][T11201] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.827951][T20750] EXT4-fs: Ignoring removed orlov option [ 354.838604][T20750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.909818][T19890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.933954][T20756] syz_tun: entered allmulticast mode [ 354.940664][T20756] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 354.949339][T20756] mroute: pending queue full, dropping entries [ 355.119209][T20776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5536'. [ 355.153259][T20771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.167055][T20776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5536'. [ 355.188071][T20776] netlink: 'syz.2.5536': attribute type 11 has an invalid length. [ 355.253655][T18050] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.319427][T20790] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.354017][T20790] ext4 filesystem being mounted at /166/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.410888][T20801] syzkaller0: entered promiscuous mode [ 355.417255][T20801] syzkaller0: entered allmulticast mode [ 355.501772][T18050] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 355.535590][T18050] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 355.552401][T20806] FAT-fs (loop5): codepage cp936 not found [ 355.558713][T18050] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 355.558916][T18050] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 355.559124][T18050] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 355.597542][T18050] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 355.633383][T18050] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 355.648722][T20810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20810 comm=syz.5.5550 [ 355.659175][T18050] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 355.681932][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5550'. [ 355.691035][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5550'. [ 355.700304][T18050] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 355.718964][T18050] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 355.877349][T19890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.953209][T20825] FAULT_INJECTION: forcing a failure. [ 355.953209][T20825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.966111][T18050] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.966562][T20825] CPU: 1 UID: 0 PID: 20825 Comm: syz.3.5556 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 355.966664][T20825] Tainted: [W]=WARN [ 355.966686][T20825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.966733][T20825] Call Trace: [ 355.966754][T20825] [ 355.966846][T20825] __dump_stack+0x1d/0x30 [ 355.966965][T20825] dump_stack_lvl+0x95/0xd0 [ 355.967038][T20825] dump_stack+0x15/0x1b [ 355.967109][T20825] should_fail_ex+0x263/0x280 [ 355.967187][T20825] should_fail+0xb/0x20 [ 355.967245][T20825] should_fail_usercopy+0x1a/0x20 [ 355.967377][T20825] strncpy_from_user+0x27/0x250 [ 355.967506][T20825] keyctl_restrict_keyring+0x80/0x1c0 [ 355.967655][T20825] __se_sys_keyctl+0x1ed/0xb80 [ 355.967748][T20825] ? __rcu_read_unlock+0x4e/0x70 [ 355.967805][T20825] ? __fget_files+0x184/0x1c0 [ 355.967897][T20825] ? mutex_lock+0x57/0x90 [ 355.968006][T20825] ? mutex_unlock+0x4e/0x90 [ 355.968154][T20825] ? fput+0x8f/0xc0 [ 355.968238][T20825] __x64_sys_keyctl+0x67/0x80 [ 355.968320][T20825] x64_sys_call+0x27b8/0x3000 [ 355.968459][T20825] do_syscall_64+0xc0/0x2a0 [ 355.968534][T20825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.968607][T20825] RIP: 0033:0x7fa2ca75acb9 [ 355.968658][T20825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.968712][T20825] RSP: 002b:00007fa2c91b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 355.968767][T20825] RAX: ffffffffffffffda RBX: 00007fa2ca9d5fa0 RCX: 00007fa2ca75acb9 [ 355.968889][T20825] RDX: 0000200000000200 RSI: 0000000036b17459 RDI: 000000000000001d [ 355.968931][T20825] RBP: 00007fa2c91b7090 R08: 0000000000000000 R09: 0000000000000000 [ 355.968973][T20825] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 355.969014][T20825] R13: 00007fa2ca9d6038 R14: 00007fa2ca9d5fa0 R15: 00007fffb532e898 [ 355.969071][T20825] [ 356.171580][T20831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28726 sclass=netlink_route_socket pid=20831 comm=syz.3.5559 [ 356.229041][T20831] cgroup: Invalid name [ 356.293662][T20831] Process accounting resumed [ 356.464390][T20841] ip6_vti0 speed is unknown, defaulting to 1000 [ 356.477861][T20858] set_capacity_and_notify: 9 callbacks suppressed [ 356.477876][T20858] loop0: detected capacity change from 0 to 512 [ 356.507188][T20858] journal_path: not usable as path [ 356.512414][T20858] EXT4-fs: error: could not find journal device path [ 356.640542][T20841] chnl_net:caif_netlink_parms(): no params data found [ 356.650222][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 356.650237][ T29] audit: type=1326 audit(1768912320.896:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.0.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 356.687615][ T29] audit: type=1326 audit(1768912320.936:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.0.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 356.711374][ T29] audit: type=1326 audit(1768912320.936:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.0.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa08ef9aa22 code=0x7ffc0000 [ 356.734871][ T29] audit: type=1326 audit(1768912320.936:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.0.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa08ef9aa22 code=0x7ffc0000 [ 356.758219][ T29] audit: type=1326 audit(1768912320.936:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.0.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 356.781800][ T29] audit: type=1326 audit(1768912320.936:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.0.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 356.805748][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.828605][ T29] audit: type=1326 audit(1768912321.076:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.0.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 356.852177][ T29] audit: type=1326 audit(1768912321.076:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.0.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 356.857155][T20841] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.883523][T20841] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.892931][T20841] bridge_slave_0: entered allmulticast mode [ 356.900714][T20841] bridge_slave_0: entered promiscuous mode [ 356.908076][T20841] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.915153][T20841] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.923386][T20841] bridge_slave_1: entered allmulticast mode [ 356.930248][T20841] bridge_slave_1: entered promiscuous mode [ 356.951314][T20841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.969725][ T8358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.979280][T20841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.003183][T20841] team0: Port device team_slave_0 added [ 357.012366][T20841] team0: Port device team_slave_1 added [ 357.024257][T20875] sg_write: data in/out 327903/28 bytes for SCSI command 0xe4-- guessing data in; [ 357.024257][T20875] program syz.0.5570 not setting count and/or reply_len properly [ 357.061304][T20877] loop5: detected capacity change from 0 to 128 [ 357.071211][ T29] audit: type=1400 audit(1768912321.316:7047): avc: denied { watch watch_reads } for pid=20876 comm="syz.5.5571" path="/112/file0/file0" dev="loop5" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 357.098188][T20841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.105229][T20841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.131894][T20841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.160762][T20841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.167806][T20841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.193768][T20841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.253818][T20841] hsr_slave_0: entered promiscuous mode [ 357.269300][T20841] hsr_slave_1: entered promiscuous mode [ 357.282900][T20883] IPVS: Scheduler module ip_vs_ not found [ 357.288842][T20841] debugfs: 'hsr0' already exists in 'hsr' [ 357.288860][T20841] Cannot create hsr debugfs directory [ 357.345181][T20891] loop3: detected capacity change from 0 to 1024 [ 357.354760][T20891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 357.369786][T20891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.403998][T19890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.456630][T20841] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.539135][T20841] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.598674][T20841] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.651261][T20841] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.731378][T20841] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 357.740767][T20841] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 357.751536][T20841] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 357.761312][T20841] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 357.826456][T20841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.845731][T20841] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.858879][T11216] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.866050][T11216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.879816][T11216] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.886918][T11216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.971142][T20841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.009252][ T8358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.056544][T20915] netlink: 'syz.3.5578': attribute type 298 has an invalid length. [ 358.065024][T20915] tipc: Enabling of bearer rejected, failed to enable media [ 358.127520][ T29] audit: type=1400 audit(1768912322.366:7048): avc: denied { write } for pid=20921 comm="syz.5.5581" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 358.166609][ T5634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.257091][T20937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.266110][T20937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.274365][T20937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.294622][T20939] syzkaller0: entered promiscuous mode [ 358.300344][T20939] syzkaller0: entered allmulticast mode [ 358.304337][T20937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.315025][T20937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.327198][T20939] FAULT_INJECTION: forcing a failure. [ 358.327198][T20939] name failslab, interval 1, probability 0, space 0, times 0 [ 358.339963][T20939] CPU: 1 UID: 0 PID: 20939 Comm: syz.3.5587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.340003][T20939] Tainted: [W]=WARN [ 358.340013][T20939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.340029][T20939] Call Trace: [ 358.340039][T20939] [ 358.340082][T20939] __dump_stack+0x1d/0x30 [ 358.340112][T20939] dump_stack_lvl+0x95/0xd0 [ 358.340140][T20939] dump_stack+0x15/0x1b [ 358.340227][T20939] should_fail_ex+0x263/0x280 [ 358.340259][T20939] should_failslab+0x8c/0xb0 [ 358.340286][T20939] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 358.340315][T20939] ? __alloc_skb+0x2f0/0x4b0 [ 358.340426][T20939] __alloc_skb+0x2f0/0x4b0 [ 358.340457][T20939] ? __alloc_skb+0x219/0x4b0 [ 358.340489][T20939] alloc_skb_with_frags+0x7d/0x470 [ 358.340523][T20939] ? is_bpf_text_address+0x141/0x160 [ 358.340577][T20939] ? kernel_text_address+0x94/0xb0 [ 358.340605][T20939] sock_alloc_send_pskb+0x44d/0x500 [ 358.340691][T20939] ? stack_depot_save_flags+0x4d4/0x8d0 [ 358.340722][T20939] __ip_append_data+0x192b/0x2460 [ 358.340801][T20939] ? udp_sendmsg+0x13c3/0x15d0 [ 358.340837][T20939] ? x64_sys_call+0x1e28/0x3000 [ 358.340870][T20939] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 358.340954][T20939] ? __list_add_valid_or_report+0x38/0xe0 [ 358.340996][T20939] ? __rcu_read_unlock+0x4e/0x70 [ 358.341023][T20939] ? ipv4_mtu+0x210/0x230 [ 358.341075][T20939] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 358.341110][T20939] ip_make_skb+0x150/0x2d0 [ 358.341232][T20939] udp_sendmsg+0x1133/0x15d0 [ 358.341323][T20939] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 358.341437][T20939] udpv6_sendmsg+0x621/0x17b0 [ 358.341482][T20939] ? _raw_spin_lock+0x52/0xa0 [ 358.341513][T20939] ? _raw_spin_unlock_bh+0x36/0x40 [ 358.341560][T20939] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 358.341653][T20939] inet6_sendmsg+0xac/0xd0 [ 358.341690][T20939] __sock_sendmsg+0x8b/0x170 [ 358.341713][T20939] ____sys_sendmsg+0x345/0x4a0 [ 358.341825][T20939] ___sys_sendmsg+0x195/0x1e0 [ 358.341919][T20939] __sys_sendmmsg+0x185/0x320 [ 358.341975][T20939] __x64_sys_sendmmsg+0x57/0x70 [ 358.342019][T20939] x64_sys_call+0x1e28/0x3000 [ 358.342049][T20939] do_syscall_64+0xc0/0x2a0 [ 358.342115][T20939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.342258][T20939] RIP: 0033:0x7fa2ca75acb9 [ 358.342280][T20939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.342303][T20939] RSP: 002b:00007fa2c91b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 358.342328][T20939] RAX: ffffffffffffffda RBX: 00007fa2ca9d5fa0 RCX: 00007fa2ca75acb9 [ 358.342347][T20939] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000003 [ 358.342397][T20939] RBP: 00007fa2c91b7090 R08: 0000000000000000 R09: 0000000000000000 [ 358.342414][T20939] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000001 [ 358.342492][T20939] R13: 00007fa2ca9d6038 R14: 00007fa2ca9d5fa0 R15: 00007fffb532e898 [ 358.342514][T20939] [ 358.661540][T20841] veth0_vlan: entered promiscuous mode [ 358.672275][T20841] veth1_vlan: entered promiscuous mode [ 358.705360][T20841] veth0_macvtap: entered promiscuous mode [ 358.714693][T20841] veth1_macvtap: entered promiscuous mode [ 358.736270][T20841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.752718][T20841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.768321][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.784779][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.803050][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.821119][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.850119][T20949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20949 comm=syz.7.5561 [ 358.865213][T20949] __nla_validate_parse: 2 callbacks suppressed [ 358.865230][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5561'. [ 358.880474][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5561'. [ 359.019162][T20959] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5593'. [ 359.264167][T20972] FAULT_INJECTION: forcing a failure. [ 359.264167][T20972] name failslab, interval 1, probability 0, space 0, times 0 [ 359.275805][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5600'. [ 359.277086][T20972] CPU: 1 UID: 0 PID: 20972 Comm: syz.7.5598 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.277187][T20972] Tainted: [W]=WARN [ 359.277208][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.277261][T20972] Call Trace: [ 359.277282][T20972] [ 359.277308][T20972] __dump_stack+0x1d/0x30 [ 359.277380][T20972] dump_stack_lvl+0x95/0xd0 [ 359.277504][T20972] dump_stack+0x15/0x1b [ 359.277570][T20972] should_fail_ex+0x263/0x280 [ 359.277643][T20972] should_failslab+0x8c/0xb0 [ 359.277756][T20972] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 359.277839][T20972] ? sidtab_sid2str_get+0xa0/0x130 [ 359.277951][T20972] kmemdup_noprof+0x2b/0x70 [ 359.278079][T20972] sidtab_sid2str_get+0xa0/0x130 [ 359.278260][T20972] security_sid_to_context_core+0x1eb/0x2e0 [ 359.278458][T20972] security_sid_to_context+0x27/0x40 [ 359.278646][T20972] selinux_lsmprop_to_secctx+0x67/0xf0 [ 359.278742][T20972] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 359.278823][T20972] audit_log_subj_ctx+0xa4/0x3e0 [ 359.278895][T20972] ? skb_put+0xa9/0xf0 [ 359.278993][T20972] audit_log_task_context+0x48/0x70 [ 359.279071][T20972] audit_log_task+0xf3/0x250 [ 359.279222][T20972] ? kstrtouint+0x76/0xc0 [ 359.279302][T20972] audit_seccomp+0x60/0x100 [ 359.279394][T20972] ? __seccomp_filter+0x8db/0x1350 [ 359.279514][T20972] __seccomp_filter+0x8ec/0x1350 [ 359.279605][T20972] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 359.279704][T20972] ? vfs_write+0x86e/0x9f0 [ 359.279808][T20972] __secure_computing+0x81/0x150 [ 359.279917][T20972] syscall_trace_enter+0xce/0x1e0 [ 359.279993][T20972] do_syscall_64+0x9a/0x2a0 [ 359.280018][T20972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.280095][T20972] RIP: 0033:0x7f17e82cacb9 [ 359.280147][T20972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.280203][T20972] RSP: 002b:00007f17e6d27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ea [ 359.280385][T20972] RAX: ffffffffffffffda RBX: 00007f17e8545fa0 RCX: 00007f17e82cacb9 [ 359.280497][T20972] RDX: 0000000000000021 RSI: 0000000000000011 RDI: 0000000000000011 [ 359.280539][T20972] RBP: 00007f17e6d27090 R08: 0000000000000000 R09: 0000000000000000 [ 359.280582][T20972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.280684][T20972] R13: 00007f17e8546038 R14: 00007f17e8545fa0 R15: 00007ffdd8b9da38 [ 359.280748][T20972] [ 359.576024][T20976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.709759][ T5632] IPVS: starting estimator thread 0... [ 359.725154][T21003] loop7: detected capacity change from 0 to 512 [ 359.746638][T21003] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.765287][T21003] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.805568][T21004] IPVS: using max 2160 ests per chain, 108000 per kthread [ 359.868132][T20841] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.941152][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5614'. [ 359.950310][T21025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5614'. [ 360.003755][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5619'. [ 360.012790][T21031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5619'. [ 360.048761][T21034] vlan2: entered promiscuous mode [ 360.053884][T21034] bridge0: entered promiscuous mode [ 360.092413][ T8364] net_ratelimit: 30 callbacks suppressed [ 360.092432][ T8364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.114518][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.138441][T21041] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5624'. [ 360.158326][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.176582][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.191487][T21041] dvmrp6: entered allmulticast mode [ 360.206822][T21043] FAULT_INJECTION: forcing a failure. [ 360.206822][T21043] name failslab, interval 1, probability 0, space 0, times 0 [ 360.219521][T21043] CPU: 1 UID: 0 PID: 21043 Comm: syz.2.5625 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 360.219603][T21043] Tainted: [W]=WARN [ 360.219612][T21043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.219626][T21043] Call Trace: [ 360.219660][T21043] [ 360.219669][T21043] __dump_stack+0x1d/0x30 [ 360.219772][T21043] dump_stack_lvl+0x95/0xd0 [ 360.219800][T21043] dump_stack+0x15/0x1b [ 360.219820][T21043] should_fail_ex+0x263/0x280 [ 360.219918][T21043] should_failslab+0x8c/0xb0 [ 360.219941][T21043] __kmalloc_noprof+0xb8/0x580 [ 360.219969][T21043] ? alloc_pipe_info+0x1c8/0x340 [ 360.219998][T21043] ? alloc_pipe_info+0xad/0x340 [ 360.220090][T21043] alloc_pipe_info+0x1c8/0x340 [ 360.220160][T21043] splice_direct_to_actor+0x591/0x670 [ 360.220179][T21043] ? kstrtouint_from_user+0xa8/0xf0 [ 360.220254][T21043] ? __pfx_direct_splice_actor+0x10/0x10 [ 360.220278][T21043] ? __rcu_read_unlock+0x4e/0x70 [ 360.220297][T21043] ? get_pid_task+0x96/0xd0 [ 360.220335][T21043] ? avc_policy_seqno+0x15/0x30 [ 360.220357][T21043] ? selinux_file_permission+0x1e1/0x320 [ 360.220397][T21043] do_splice_direct+0x119/0x1a0 [ 360.220420][T21043] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 360.220454][T21043] do_sendfile+0x380/0x650 [ 360.220483][T21043] __x64_sys_sendfile64+0x105/0x150 [ 360.220514][T21043] x64_sys_call+0x2db1/0x3000 [ 360.220614][T21043] do_syscall_64+0xc0/0x2a0 [ 360.220643][T21043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.220719][T21043] RIP: 0033:0x7f520c9dacb9 [ 360.220802][T21043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.220850][T21043] RSP: 002b:00007f520b437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 360.220870][T21043] RAX: ffffffffffffffda RBX: 00007f520cc55fa0 RCX: 00007f520c9dacb9 [ 360.220885][T21043] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 360.220926][T21043] RBP: 00007f520b437090 R08: 0000000000000000 R09: 0000000000000000 [ 360.220941][T21043] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000001 [ 360.221032][T21043] R13: 00007f520cc56038 R14: 00007f520cc55fa0 R15: 00007ffca2a0c0c8 [ 360.221062][T21043] [ 360.223763][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.493423][T21050] serio: Serial port ptm0 [ 360.637550][T21067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28726 sclass=netlink_route_socket pid=21067 comm=syz.0.5633 [ 360.665131][T21067] Process accounting resumed [ 360.699381][T21071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5635'. [ 360.739735][T21073] netlink: 'syz.0.5636': attribute type 21 has an invalid length. [ 360.779553][T11203] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.790744][T11203] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.815338][T11203] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.843711][T11203] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.138979][ T8355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.277952][T21111] FAULT_INJECTION: forcing a failure. [ 361.277952][T21111] name failslab, interval 1, probability 0, space 0, times 0 [ 361.290694][T21111] CPU: 0 UID: 0 PID: 21111 Comm: syz.5.5654 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.290729][T21111] Tainted: [W]=WARN [ 361.290736][T21111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.290748][T21111] Call Trace: [ 361.290755][T21111] [ 361.290763][T21111] __dump_stack+0x1d/0x30 [ 361.290812][T21111] dump_stack_lvl+0x95/0xd0 [ 361.290884][T21111] dump_stack+0x15/0x1b [ 361.290949][T21111] should_fail_ex+0x263/0x280 [ 361.291052][T21111] should_failslab+0x8c/0xb0 [ 361.291080][T21111] kmem_cache_alloc_noprof+0x68/0x490 [ 361.291176][T21111] ? skb_clone+0x151/0x1f0 [ 361.291209][T21111] skb_clone+0x151/0x1f0 [ 361.291241][T21111] __netlink_deliver_tap+0x2c9/0x500 [ 361.291304][T21111] netlink_unicast+0x66b/0x690 [ 361.291339][T21111] netlink_sendmsg+0x5c8/0x6f0 [ 361.291362][T21111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.291382][T21111] __sock_sendmsg+0x145/0x170 [ 361.291474][T21111] sock_sendmsg+0xc1/0x130 [ 361.291502][T21111] splice_to_socket+0x6e2/0xa80 [ 361.291545][T21111] ? rw_verify_area+0x8d/0x160 [ 361.291579][T21111] ? __pfx_splice_to_socket+0x10/0x10 [ 361.291673][T21111] do_splice+0x970/0x10b0 [ 361.291715][T21111] ? proc_fail_nth_write+0x13b/0x160 [ 361.291793][T21111] ? __rcu_read_unlock+0x4e/0x70 [ 361.291814][T21111] ? __fget_files+0x184/0x1c0 [ 361.291858][T21111] __se_sys_splice+0x26c/0x3a0 [ 361.291884][T21111] __x64_sys_splice+0x78/0x90 [ 361.291905][T21111] x64_sys_call+0x2e82/0x3000 [ 361.291995][T21111] do_syscall_64+0xc0/0x2a0 [ 361.292018][T21111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.292054][T21111] RIP: 0033:0x7fa34edeacb9 [ 361.292070][T21111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.292089][T21111] RSP: 002b:00007fa34d826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 361.292115][T21111] RAX: ffffffffffffffda RBX: 00007fa34f066090 RCX: 00007fa34edeacb9 [ 361.292140][T21111] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 361.292153][T21111] RBP: 00007fa34d826090 R08: 000000000004ffe6 R09: 0000000000000000 [ 361.292238][T21111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.292251][T21111] R13: 00007fa34f066128 R14: 00007fa34f066090 R15: 00007fff9a2d3db8 [ 361.292273][T21111] [ 361.292291][T21111] netlink: 'syz.5.5654': attribute type 21 has an invalid length. [ 361.543958][ T8355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.650291][T21118] syzkaller0: entered promiscuous mode [ 361.655949][T21118] syzkaller0: entered allmulticast mode [ 362.141886][T21152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.150219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.158709][T21152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.169974][T21151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.178124][T21151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.187200][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.196284][T21151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.320420][T21160] loop0: detected capacity change from 0 to 128 [ 362.332010][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 362.332038][ T29] audit: type=1400 audit(1768912326.576:7145): avc: denied { bind } for pid=21169 comm="syz.3.5676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 362.359499][T21160] vfat: Bad value for 'utf8' [ 362.403583][T21178] loop0: detected capacity change from 0 to 1024 [ 362.418237][T21179] syz_tun: entered promiscuous mode [ 362.423555][T21179] vlan2: entered promiscuous mode [ 362.436554][T21178] EXT4-fs: inline encryption not supported [ 362.477644][T21178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.522168][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.929964][T21222] FAULT_INJECTION: forcing a failure. [ 362.929964][T21222] name failslab, interval 1, probability 0, space 0, times 0 [ 362.942794][T21222] CPU: 1 UID: 0 PID: 21222 Comm: syz.5.5696 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 362.942835][T21222] Tainted: [W]=WARN [ 362.942880][T21222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.942907][T21222] Call Trace: [ 362.942915][T21222] [ 362.942924][T21222] __dump_stack+0x1d/0x30 [ 362.943011][T21222] dump_stack_lvl+0x95/0xd0 [ 362.943033][T21222] dump_stack+0x15/0x1b [ 362.943070][T21222] should_fail_ex+0x263/0x280 [ 362.943101][T21222] should_failslab+0x8c/0xb0 [ 362.943179][T21222] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 362.943204][T21222] ? __alloc_skb+0x2f0/0x4b0 [ 362.943250][T21222] __alloc_skb+0x2f0/0x4b0 [ 362.943281][T21222] ? __alloc_skb+0x219/0x4b0 [ 362.943308][T21222] netlink_alloc_large_skb+0xbf/0xf0 [ 362.943344][T21222] netlink_sendmsg+0x40c/0x6f0 [ 362.943371][T21222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.943403][T21222] __sock_sendmsg+0x145/0x170 [ 362.943429][T21222] ____sys_sendmsg+0x345/0x4a0 [ 362.943462][T21222] ___sys_sendmsg+0x195/0x1e0 [ 362.943546][T21222] __sys_sendmmsg+0x185/0x320 [ 362.943660][T21222] __x64_sys_sendmmsg+0x57/0x70 [ 362.943696][T21222] x64_sys_call+0x1e28/0x3000 [ 362.943753][T21222] do_syscall_64+0xc0/0x2a0 [ 362.943838][T21222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.943860][T21222] RIP: 0033:0x7fa34edeacb9 [ 362.943879][T21222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.943902][T21222] RSP: 002b:00007fa34d847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.943976][T21222] RAX: ffffffffffffffda RBX: 00007fa34f065fa0 RCX: 00007fa34edeacb9 [ 362.943994][T21222] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 362.944012][T21222] RBP: 00007fa34d847090 R08: 0000000000000000 R09: 0000000000000000 [ 362.944082][T21222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.944095][T21222] R13: 00007fa34f066038 R14: 00007fa34f065fa0 R15: 00007fff9a2d3db8 [ 362.944117][T21222] [ 363.184779][T21225] loop7: detected capacity change from 0 to 2048 [ 363.205907][ T29] audit: type=1400 audit(1768912327.456:7146): avc: denied { append } for pid=21229 comm="syz.5.5700" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 363.240189][T21230] loop5: detected capacity change from 0 to 128 [ 363.252090][T21230] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 363.276058][ T3310] Alternate GPT is invalid, using primary GPT. [ 363.282357][ T3310] loop7: p1 p2 p3 [ 363.286432][ T3310] loop7: partition table partially beyond EOD, truncated [ 363.294753][T21230] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.324804][T21225] Alternate GPT is invalid, using primary GPT. [ 363.331168][T21225] loop7: p1 p2 p3 [ 363.334904][T21225] loop7: partition table partially beyond EOD, truncated [ 363.428225][T18596] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.450852][T21248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.479877][T21248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.670155][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 363.681709][T13258] udevd[13258]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 363.704018][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 363.797639][T21264] loop5: detected capacity change from 0 to 256 [ 363.812031][T21266] netlink: 'syz.0.5710': attribute type 30 has an invalid length. [ 363.968210][T21277] loop0: detected capacity change from 0 to 2048 [ 363.987846][T21278] __nla_validate_parse: 15 callbacks suppressed [ 363.987863][T21278] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5715'. [ 363.992854][T21280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=21280 comm=syz.5.5717 [ 363.994226][T21278] netem: change failed [ 364.040147][ T3310] Alternate GPT is invalid, using primary GPT. [ 364.046522][ T3310] loop0: p1 p2 p3 [ 364.050288][ T3310] loop0: partition table partially beyond EOD, truncated [ 364.066237][T21277] Alternate GPT is invalid, using primary GPT. [ 364.072619][T21277] loop0: p1 p2 p3 [ 364.073475][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5718'. [ 364.076495][T21277] loop0: partition table partially beyond EOD, truncated [ 364.093478][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5718'. [ 364.350364][T21293] Process accounting resumed [ 364.444493][ T29] audit: type=1326 audit(1768912328.686:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e82cacb9 code=0x7ffc0000 [ 364.490224][ T29] audit: type=1326 audit(1768912328.686:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e82cacb9 code=0x7ffc0000 [ 364.514609][ T29] audit: type=1326 audit(1768912328.716:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e82cacb9 code=0x7ffc0000 [ 364.539003][ T29] audit: type=1326 audit(1768912328.716:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e82cacb9 code=0x7ffc0000 [ 364.563368][ T29] audit: type=1326 audit(1768912328.716:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f17e82cacb9 code=0x7ffc0000 [ 364.587777][ T29] audit: type=1326 audit(1768912328.716:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e82cacb9 code=0x7ffc0000 [ 364.612119][ T29] audit: type=1326 audit(1768912328.716:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e82cacb9 code=0x7ffc0000 [ 364.636285][ T29] audit: type=1326 audit(1768912328.716:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21308 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e82cacb9 code=0x7ffc0000 [ 364.787741][T21326] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5737'. [ 364.920259][T21331] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5740'. [ 364.966684][T21331] dvmrp6: entered allmulticast mode [ 365.031781][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5743'. [ 365.040859][T21338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5743'. [ 365.128662][T21346] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 365.172845][T21346] block device autoloading is deprecated and will be removed. [ 365.197880][T21291] net_ratelimit: 49 callbacks suppressed [ 365.197899][T21291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.288827][ T8358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.298637][T21349] loop7: detected capacity change from 0 to 8192 [ 365.364407][T21356] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5750'. [ 365.373847][T21353] loop0: detected capacity change from 0 to 1024 [ 365.522109][T21362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5754'. [ 365.531211][T21362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5754'. [ 365.541014][T21362] netlink: 'syz.0.5754': attribute type 4 has an invalid length. [ 365.882521][T21380] loop5: detected capacity change from 0 to 1024 [ 365.981408][T21385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.989735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.196931][T21397] bridge_slave_0: left allmulticast mode [ 366.202800][T21397] bridge_slave_0: left promiscuous mode [ 366.208641][T21397] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.233090][T21397] bridge_slave_1: left allmulticast mode [ 366.238856][T21397] bridge_slave_1: left promiscuous mode [ 366.244534][T21397] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.279118][T21397] bond0: (slave bond_slave_0): Releasing backup interface [ 366.300611][T21397] bond0: (slave bond_slave_1): Releasing backup interface [ 366.336997][ T8364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.355059][T21397] team0: Port device team_slave_0 removed [ 366.396921][T21397] team0: Port device team_slave_1 removed [ 366.404233][T21397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.411719][T21397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.451308][T21397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.459648][T21397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.514039][T21397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 366.539642][T21413] loop5: detected capacity change from 0 to 1024 [ 366.564072][T21412] vlan2: entered allmulticast mode [ 366.569434][T21412] bridge0: port 3(vlan2) entered blocking state [ 366.575779][T21412] bridge0: port 3(vlan2) entered disabled state [ 366.582856][T21412] vlan2: entered promiscuous mode [ 366.761385][T21424] wireguard0: entered promiscuous mode [ 366.767003][T21424] wireguard0: entered allmulticast mode [ 366.914844][T21434] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.5783' sets config #0 [ 366.962103][T21440] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 366.995033][T11216] Bluetooth: hci0: Frame reassembly failed (-84) [ 367.323357][T21448] ip6_vti0 speed is unknown, defaulting to 1000 [ 367.369568][ T8358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.669133][T21469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21469 comm=syz.0.5797 [ 367.685636][ T5634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.749989][T21471] ip6_vti0 speed is unknown, defaulting to 1000 [ 367.757030][T21473] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 367.771840][T21473] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 368.128331][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 368.128351][ T29] audit: type=1326 audit(1768912332.356:7239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.7.5798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17e82cacb9 code=0x0 [ 368.163875][T21497] SELinux: policydb magic number 0x5f637072 does not match expected magic number 0xf97cff8c [ 368.193206][T21497] SELinux: failed to load policy [ 368.243346][T21502] syzkaller0: entered promiscuous mode [ 368.249003][T21502] syzkaller0: entered allmulticast mode [ 368.299735][T21509] FAULT_INJECTION: forcing a failure. [ 368.299735][T21509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.312978][T21509] CPU: 1 UID: 0 PID: 21509 Comm: syz.0.5815 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 368.313013][T21509] Tainted: [W]=WARN [ 368.313091][T21509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.313107][T21509] Call Trace: [ 368.313114][T21509] [ 368.313124][T21509] __dump_stack+0x1d/0x30 [ 368.313151][T21509] dump_stack_lvl+0x95/0xd0 [ 368.313173][T21509] dump_stack+0x15/0x1b [ 368.313216][T21509] should_fail_ex+0x263/0x280 [ 368.313246][T21509] should_fail+0xb/0x20 [ 368.313276][T21509] should_fail_usercopy+0x1a/0x20 [ 368.313301][T21509] _copy_to_user+0x20/0xa0 [ 368.313381][T21509] simple_read_from_buffer+0xb5/0x130 [ 368.313468][T21509] proc_fail_nth_read+0x10e/0x150 [ 368.313582][T21509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.313691][T21509] vfs_read+0x1ab/0x7f0 [ 368.313733][T21509] ? dev_ioctl+0x793/0x960 [ 368.313759][T21509] ? sock_ioctl+0x5a9/0x610 [ 368.313784][T21509] ksys_read+0xdc/0x1a0 [ 368.313829][T21509] __x64_sys_read+0x40/0x50 [ 368.313849][T21509] x64_sys_call+0x2889/0x3000 [ 368.313874][T21509] do_syscall_64+0xc0/0x2a0 [ 368.313903][T21509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.313952][T21509] RIP: 0033:0x7fa08ef5b58e [ 368.313972][T21509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 368.313993][T21509] RSP: 002b:00007fa08d9f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.314014][T21509] RAX: ffffffffffffffda RBX: 00007fa08d9f76c0 RCX: 00007fa08ef5b58e [ 368.314036][T21509] RDX: 000000000000000f RSI: 00007fa08d9f70a0 RDI: 0000000000000004 [ 368.314052][T21509] RBP: 00007fa08d9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.314131][T21509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.314143][T21509] R13: 00007fa08f216038 R14: 00007fa08f215fa0 R15: 00007ffe98b25d08 [ 368.314164][T21509] [ 368.537967][ T29] audit: type=1326 audit(1768912332.786:7240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.0.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 368.589445][ T29] audit: type=1326 audit(1768912332.786:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.0.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 368.613782][ T29] audit: type=1326 audit(1768912332.786:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.0.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 368.638013][ T29] audit: type=1326 audit(1768912332.786:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21513 comm="syz.0.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa08ef5b58e code=0x7ffc0000 [ 368.662314][ T29] audit: type=1326 audit(1768912332.786:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.0.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 368.686536][ T29] audit: type=1326 audit(1768912332.786:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.0.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 368.710136][ T29] audit: type=1326 audit(1768912332.786:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.0.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 368.734446][ T29] audit: type=1326 audit(1768912332.786:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.0.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 368.758906][ T29] audit: type=1326 audit(1768912332.786:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.0.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa08ef9acb9 code=0x7ffc0000 [ 368.775079][T21517] loop0: detected capacity change from 0 to 1024 [ 368.838486][T21517] EXT4-fs: Ignoring removed bh option [ 368.861224][T21517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 368.873572][T21517] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.891982][T21511] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5816: bg 0: block 112: padding at end of block bitmap is not set [ 368.947346][T21511] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 117 [ 368.948933][T21517] veth0_vlan: entered allmulticast mode [ 368.960139][T21511] EXT4-fs (loop0): This should not happen!! Data will be lost [ 368.960139][T21511] [ 369.055967][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 369.077154][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 369.166574][T21539] __nla_validate_parse: 18 callbacks suppressed [ 369.166590][T21539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5823'. [ 369.250892][T21545] loop0: detected capacity change from 0 to 1024 [ 369.290851][T21545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.335065][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.345730][T21550] SELinux: policydb magic number 0x79732f2f does not match expected magic number 0xf97cff8c [ 369.405604][T21550] SELinux: failed to load policy [ 369.521413][T21558] loop5: detected capacity change from 0 to 2048 [ 369.605606][T21562] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 369.626651][ T3310] Alternate GPT is invalid, using primary GPT. [ 369.632974][ T3310] loop5: p1 p2 p3 [ 369.636775][ T3310] loop5: partition table partially beyond EOD, truncated [ 369.678066][T21558] Alternate GPT is invalid, using primary GPT. [ 369.684564][T21558] loop5: p1 p2 p3 [ 369.689180][T21558] loop5: partition table partially beyond EOD, truncated [ 369.743085][ T3007] Alternate GPT is invalid, using primary GPT. [ 369.749601][ T3007] loop5: p1 p2 p3 [ 369.753340][ T3007] loop5: partition table partially beyond EOD, truncated [ 369.836436][T21570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5838'. [ 369.904297][T13258] udevd[13258]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 369.919453][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 369.941964][T21572] loop5: detected capacity change from 0 to 128 [ 369.972210][T21572] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 370.003082][T21574] loop0: detected capacity change from 0 to 1024 [ 370.017920][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 370.028519][T21572] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 370.034123][T13258] udevd[13258]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 370.056811][T21574] EXT4-fs: inline encryption not supported [ 370.068024][T21574] EXT4-fs: Ignoring removed nobh option [ 370.073758][T21574] EXT4-fs: Ignoring removed bh option [ 370.091386][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 370.103229][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 370.124726][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 370.135304][T11203] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 370.166668][T21574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.180589][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 370.337299][T21591] loop5: detected capacity change from 0 to 1024 [ 370.355860][T21591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.368451][T21594] netlink: 'syz.3.5847': attribute type 10 has an invalid length. [ 370.377587][T21594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.385535][T21594] FAULT_INJECTION: forcing a failure. [ 370.385535][T21594] name failslab, interval 1, probability 0, space 0, times 0 [ 370.388106][T21591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.398271][T21594] CPU: 1 UID: 0 PID: 21594 Comm: syz.3.5847 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 370.398334][T21594] Tainted: [W]=WARN [ 370.398343][T21594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.398358][T21594] Call Trace: [ 370.398367][T21594] [ 370.398377][T21594] __dump_stack+0x1d/0x30 [ 370.398406][T21594] dump_stack_lvl+0x95/0xd0 [ 370.398433][T21594] dump_stack+0x15/0x1b [ 370.398526][T21594] should_fail_ex+0x263/0x280 [ 370.398557][T21594] should_failslab+0x8c/0xb0 [ 370.398580][T21594] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 370.398627][T21594] ? __alloc_skb+0x2f0/0x4b0 [ 370.398654][T21594] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 370.398705][T21594] __alloc_skb+0x2f0/0x4b0 [ 370.398735][T21594] ? __alloc_skb+0x219/0x4b0 [ 370.398764][T21594] inet_ifmcaddr_notify+0x64/0x120 [ 370.398818][T21594] __ip_mc_dec_group+0x191/0x390 [ 370.398854][T21594] ip_mc_down+0x125/0x190 [ 370.398887][T21594] inetdev_event+0x197/0xba0 [ 370.398911][T21594] ? ib_netdevice_event+0x20b/0x350 [ 370.399141][T21594] ? __pfx_inetdev_event+0x10/0x10 [ 370.399214][T21594] raw_notifier_call_chain+0x6f/0x1b0 [ 370.399430][T21594] ? __dev_notify_flags+0x14e/0x390 [ 370.399518][T21594] __dev_notify_flags+0x1f0/0x390 [ 370.399659][T21594] netif_change_flags+0xac/0xd0 [ 370.399741][T21594] do_setlink+0x905/0x2940 [ 370.399829][T21594] ? _raw_spin_unlock+0x26/0x50 [ 370.399900][T21594] ? finish_task_switch+0x79/0x280 [ 370.400017][T21594] ? __schedule+0x82d/0xc90 [ 370.400101][T21594] rtnl_newlink+0xea4/0x1370 [ 370.400248][T21594] ? __memcg_slab_free_hook+0x135/0x230 [ 370.400394][T21594] ? __rcu_read_unlock+0x4e/0x70 [ 370.400481][T21594] ? avc_has_perm_noaudit+0xab/0x130 [ 370.400570][T21594] ? cred_has_capability+0x224/0x290 [ 370.400784][T21594] ? selinux_capable+0x31/0x40 [ 370.400856][T21594] ? security_capable+0x7b/0x90 [ 370.400961][T21594] ? ns_capable+0x7c/0xb0 [ 370.401122][T21594] ? __pfx_rtnl_newlink+0x10/0x10 [ 370.401187][T21594] rtnetlink_rcv_msg+0x64b/0x720 [ 370.401219][T21594] netlink_rcv_skb+0x123/0x220 [ 370.401365][T21594] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.401468][T21594] rtnetlink_rcv+0x1c/0x30 [ 370.401528][T21594] netlink_unicast+0x5c0/0x690 [ 370.401627][T21594] netlink_sendmsg+0x5c8/0x6f0 [ 370.401770][T21594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.401931][T21594] __sock_sendmsg+0x145/0x170 [ 370.402003][T21594] ____sys_sendmsg+0x31e/0x4a0 [ 370.402116][T21594] ___sys_sendmsg+0x195/0x1e0 [ 370.402329][T21594] __x64_sys_sendmsg+0xd4/0x160 [ 370.402450][T21594] x64_sys_call+0x17ba/0x3000 [ 370.402539][T21594] do_syscall_64+0xc0/0x2a0 [ 370.402609][T21594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.402674][T21594] RIP: 0033:0x7fa2ca75acb9 [ 370.402726][T21594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.402826][T21594] RSP: 002b:00007fa2c91b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.402906][T21594] RAX: ffffffffffffffda RBX: 00007fa2ca9d5fa0 RCX: 00007fa2ca75acb9 [ 370.403014][T21594] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 370.403056][T21594] RBP: 00007fa2c91b7090 R08: 0000000000000000 R09: 0000000000000000 [ 370.403090][T21594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.403156][T21594] R13: 00007fa2ca9d6038 R14: 00007fa2ca9d5fa0 R15: 00007fffb532e898 [ 370.403248][T21594] [ 370.458221][T21594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.773092][T21594] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 370.827606][T18596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.839901][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.869953][T21597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5850'. [ 370.963172][T21602] syzkaller0: entered promiscuous mode [ 370.971075][T21602] syzkaller0: entered allmulticast mode [ 371.044405][T21606] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.256629][T21622] loop5: detected capacity change from 0 to 2048 [ 371.264622][T21624] FAULT_INJECTION: forcing a failure. [ 371.264622][T21624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.278534][T21624] CPU: 0 UID: 0 PID: 21624 Comm: syz.0.5860 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 371.278570][T21624] Tainted: [W]=WARN [ 371.278579][T21624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.278594][T21624] Call Trace: [ 371.278601][T21624] [ 371.278682][T21624] __dump_stack+0x1d/0x30 [ 371.278754][T21624] dump_stack_lvl+0x95/0xd0 [ 371.278826][T21624] dump_stack+0x15/0x1b [ 371.278846][T21624] should_fail_ex+0x263/0x280 [ 371.278869][T21624] should_fail+0xb/0x20 [ 371.278914][T21624] should_fail_usercopy+0x1a/0x20 [ 371.278958][T21624] _copy_from_user+0x1c/0xb0 [ 371.278986][T21624] ___sys_sendmsg+0xc1/0x1e0 [ 371.279031][T21624] __x64_sys_sendmsg+0xd4/0x160 [ 371.279091][T21624] x64_sys_call+0x17ba/0x3000 [ 371.279114][T21624] do_syscall_64+0xc0/0x2a0 [ 371.279139][T21624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.279171][T21624] RIP: 0033:0x7fa08ef9acb9 [ 371.279189][T21624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.279207][T21624] RSP: 002b:00007fa08d9f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.279225][T21624] RAX: ffffffffffffffda RBX: 00007fa08f215fa0 RCX: 00007fa08ef9acb9 [ 371.279305][T21624] RDX: 0000000000040080 RSI: 0000200000000300 RDI: 0000000000000004 [ 371.279319][T21624] RBP: 00007fa08d9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 371.279335][T21624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.279350][T21624] R13: 00007fa08f216038 R14: 00007fa08f215fa0 R15: 00007ffe98b25d08 [ 371.279444][T21624] [ 371.480996][ T3310] Alternate GPT is invalid, using primary GPT. [ 371.487424][ T3310] loop5: p1 p2 p3 [ 371.491180][ T3310] loop5: partition table partially beyond EOD, truncated [ 371.554367][T21622] Alternate GPT is invalid, using primary GPT. [ 371.560759][T21622] loop5: p1 p2 p3 [ 371.564498][T21622] loop5: partition table partially beyond EOD, truncated [ 371.686714][T21634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.695326][T21634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.007483][T21643] atomic_op ffff88810464e128 conn xmit_atomic 0000000000000000 [ 372.020445][T21644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5867'. [ 372.275640][T21655] loop3: detected capacity change from 0 to 2048 [ 372.339538][ T3310] Alternate GPT is invalid, using primary GPT. [ 372.346012][ T3310] loop3: p1 p2 p3 [ 372.349771][ T3310] loop3: partition table partially beyond EOD, truncated [ 372.386987][T21655] Alternate GPT is invalid, using primary GPT. [ 372.393432][T21655] loop3: p1 p2 p3 [ 372.397222][T21655] loop3: partition table partially beyond EOD, truncated [ 372.465255][T21666] program syz.3.5876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.494191][T13258] udevd[13258]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 372.502723][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 372.633540][T21677] FAULT_INJECTION: forcing a failure. [ 372.633540][T21677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.647445][T21677] CPU: 0 UID: 0 PID: 21677 Comm: syz.0.5882 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 372.647487][T21677] Tainted: [W]=WARN [ 372.647563][T21677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.647579][T21677] Call Trace: [ 372.647589][T21677] [ 372.647600][T21677] __dump_stack+0x1d/0x30 [ 372.647631][T21677] dump_stack_lvl+0x95/0xd0 [ 372.647725][T21677] dump_stack+0x15/0x1b [ 372.647751][T21677] should_fail_ex+0x263/0x280 [ 372.647850][T21677] should_fail+0xb/0x20 [ 372.647871][T21677] should_fail_usercopy+0x1a/0x20 [ 372.647896][T21677] _copy_from_user+0x1c/0xb0 [ 372.647930][T21677] ___sys_sendmsg+0xc1/0x1e0 [ 372.648019][T21677] __x64_sys_sendmsg+0xd4/0x160 [ 372.648126][T21677] x64_sys_call+0x17ba/0x3000 [ 372.648153][T21677] do_syscall_64+0xc0/0x2a0 [ 372.648178][T21677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.648215][T21677] RIP: 0033:0x7fa08ef9acb9 [ 372.648311][T21677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.648335][T21677] RSP: 002b:00007fa08d9f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.648362][T21677] RAX: ffffffffffffffda RBX: 00007fa08f215fa0 RCX: 00007fa08ef9acb9 [ 372.648380][T21677] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 372.648397][T21677] RBP: 00007fa08d9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 372.648467][T21677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.648482][T21677] R13: 00007fa08f216038 R14: 00007fa08f215fa0 R15: 00007ffe98b25d08 [ 372.648503][T21677] [ 372.964636][T21692] loop0: detected capacity change from 0 to 2048 [ 373.172583][T21692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.245057][T21701] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5890'. [ 373.301887][T21702] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5887'. [ 373.311714][T21702] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5887'. [ 373.464549][T21709] loop3: detected capacity change from 0 to 2048 [ 373.528679][T21713] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.539511][T21713] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.551402][T21709] Alternate GPT is invalid, using primary GPT. [ 373.557703][T21709] loop3: p1 p2 p3 [ 373.561486][T21709] loop3: partition table partially beyond EOD, truncated [ 373.628427][T21713] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.638309][T21713] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.688224][T21713] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.698126][T21713] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.747571][T21729] netlink: 'syz.3.5901': attribute type 1 has an invalid length. [ 373.747561][T21713] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.765111][T21713] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.786656][T21729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.797215][T21729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5901'. [ 373.807453][T21729] bond1: entered promiscuous mode [ 373.818829][T21729] bond1: (slave dummy0): making interface the new active one [ 373.827042][T21729] dummy0: entered promiscuous mode [ 373.833005][T21729] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 373.859696][ T1733] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.868774][ T1733] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.888952][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.905272][ T1733] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.914241][ T1733] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.937969][ T1733] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.946888][ T1733] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.955712][ T4102] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.964042][ T4102] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.011531][T21739] program syz.5.5903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.036082][T21741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5904'. [ 374.067213][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 374.067232][ T29] audit: type=1326 audit(1768912338.296:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.3.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ca75acb9 code=0x7ffc0000 [ 374.097709][ T29] audit: type=1326 audit(1768912338.296:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.3.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ca75acb9 code=0x7ffc0000 [ 374.121677][ T29] audit: type=1326 audit(1768912338.296:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.3.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ca75acb9 code=0x7ffc0000 [ 374.146245][ T29] audit: type=1326 audit(1768912338.296:7278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.3.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa2ca75acb9 code=0x7ffc0000 [ 374.171539][ T29] audit: type=1326 audit(1768912338.296:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.3.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa2ca75aa22 code=0x7ffc0000 [ 374.195703][ T29] audit: type=1326 audit(1768912338.296:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.3.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa2ca75aa22 code=0x7ffc0000 [ 374.219942][ T29] audit: type=1326 audit(1768912338.296:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.3.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ca75acb9 code=0x7ffc0000 [ 374.244185][ T29] audit: type=1326 audit(1768912338.296:7282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.3.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2ca75acb9 code=0x7ffc0000 [ 374.268334][ T29] audit: type=1326 audit(1768912338.296:7283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.3.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ca75acb9 code=0x7ffc0000 [ 374.292617][ T29] audit: type=1326 audit(1768912338.296:7284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.3.5904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa2ca75acb9 code=0x7ffc0000 [ 374.295821][T21747] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5906'. [ 374.360293][T21753] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 374.460940][T21759] ip6_vti0 speed is unknown, defaulting to 1000 [ 375.010806][T21795] FAULT_INJECTION: forcing a failure. [ 375.010806][T21795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.023991][T21795] CPU: 1 UID: 0 PID: 21795 Comm: syz.0.5920 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 375.024037][T21795] Tainted: [W]=WARN [ 375.024054][T21795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.024068][T21795] Call Trace: [ 375.024076][T21795] [ 375.024086][T21795] __dump_stack+0x1d/0x30 [ 375.024115][T21795] dump_stack_lvl+0x95/0xd0 [ 375.024140][T21795] dump_stack+0x15/0x1b [ 375.024210][T21795] should_fail_ex+0x263/0x280 [ 375.024237][T21795] should_fail+0xb/0x20 [ 375.024260][T21795] should_fail_usercopy+0x1a/0x20 [ 375.024309][T21795] _copy_from_user+0x1c/0xb0 [ 375.024340][T21795] __sys_bpf+0x183/0x7b0 [ 375.024372][T21795] __x64_sys_bpf+0x41/0x50 [ 375.024516][T21795] x64_sys_call+0x28e1/0x3000 [ 375.024545][T21795] do_syscall_64+0xc0/0x2a0 [ 375.024571][T21795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.024595][T21795] RIP: 0033:0x7fa08ef9acb9 [ 375.024621][T21795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.024643][T21795] RSP: 002b:00007fa08d9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.024666][T21795] RAX: ffffffffffffffda RBX: 00007fa08f215fa0 RCX: 00007fa08ef9acb9 [ 375.024681][T21795] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 0000000000000000 [ 375.024696][T21795] RBP: 00007fa08d9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 375.024772][T21795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.024787][T21795] R13: 00007fa08f216038 R14: 00007fa08f215fa0 R15: 00007ffe98b25d08 [ 375.024811][T21795] [ 375.444187][T21808] xt_TCPMSS: Only works on TCP SYN packets [ 375.481192][T21808] set_capacity_and_notify: 1 callbacks suppressed [ 375.481206][T21808] loop3: detected capacity change from 0 to 1024 [ 375.518928][T21808] EXT4-fs: Ignoring removed orlov option [ 375.534445][T21808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.553813][T21813] FAULT_INJECTION: forcing a failure. [ 375.553813][T21813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.567006][T21813] CPU: 1 UID: 0 PID: 21813 Comm: syz.5.5931 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 375.567035][T21813] Tainted: [W]=WARN [ 375.567041][T21813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.567053][T21813] Call Trace: [ 375.567059][T21813] [ 375.567072][T21813] __dump_stack+0x1d/0x30 [ 375.567099][T21813] dump_stack_lvl+0x95/0xd0 [ 375.567118][T21813] dump_stack+0x15/0x1b [ 375.567136][T21813] should_fail_ex+0x263/0x280 [ 375.567158][T21813] should_fail+0xb/0x20 [ 375.567225][T21813] should_fail_usercopy+0x1a/0x20 [ 375.567311][T21813] _copy_from_user+0x1c/0xb0 [ 375.567335][T21813] ___sys_sendmsg+0xc1/0x1e0 [ 375.567454][T21813] __x64_sys_sendmsg+0xd4/0x160 [ 375.567485][T21813] x64_sys_call+0x17ba/0x3000 [ 375.567535][T21813] do_syscall_64+0xc0/0x2a0 [ 375.567555][T21813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.567574][T21813] RIP: 0033:0x7fa34edeacb9 [ 375.567588][T21813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.567686][T21813] RSP: 002b:00007fa34d847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.567704][T21813] RAX: ffffffffffffffda RBX: 00007fa34f065fa0 RCX: 00007fa34edeacb9 [ 375.567716][T21813] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 375.567727][T21813] RBP: 00007fa34d847090 R08: 0000000000000000 R09: 0000000000000000 [ 375.567767][T21813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.567779][T21813] R13: 00007fa34f066038 R14: 00007fa34f065fa0 R15: 00007fff9a2d3db8 [ 375.567820][T21813] [ 375.747042][T21808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.917457][T21821] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5935'. [ 375.943079][T21823] loop3: detected capacity change from 0 to 1024 [ 375.950148][T21823] EXT4-fs: Ignoring removed oldalloc option [ 375.956274][T21823] EXT4-fs: Ignoring removed bh option [ 375.964574][T21821] dvmrp6: entered allmulticast mode [ 375.986245][T21823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.261060][T21839] ip6_vti0 speed is unknown, defaulting to 1000 [ 376.754449][T19756] syz_tun (unregistering): left allmulticast mode [ 376.922869][T19890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.009063][T21844] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.226430][T21871] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.469410][T21844] chnl_net:caif_netlink_parms(): no params data found [ 377.731256][T21844] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.738393][T21844] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.797120][T21844] bridge_slave_0: entered allmulticast mode [ 377.817105][T21844] bridge_slave_0: entered promiscuous mode [ 377.843482][T21844] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.850684][T21844] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.902390][T21844] bridge_slave_1: entered allmulticast mode [ 377.916169][T21844] bridge_slave_1: entered promiscuous mode [ 377.979202][T21844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.017525][T21885] FAULT_INJECTION: forcing a failure. [ 378.017525][T21885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.023441][T21844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.030661][T21885] CPU: 0 UID: 0 PID: 21885 Comm: syz.0.5952 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 378.030790][T21885] Tainted: [W]=WARN [ 378.030827][T21885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.030890][T21885] Call Trace: [ 378.030919][T21885] [ 378.030941][T21885] __dump_stack+0x1d/0x30 [ 378.031018][T21885] dump_stack_lvl+0x95/0xd0 [ 378.031091][T21885] dump_stack+0x15/0x1b [ 378.031190][T21885] should_fail_ex+0x263/0x280 [ 378.031266][T21885] should_fail+0xb/0x20 [ 378.031330][T21885] should_fail_usercopy+0x1a/0x20 [ 378.031415][T21885] _copy_from_user+0x1c/0xb0 [ 378.031530][T21885] ___sys_sendmsg+0xc1/0x1e0 [ 378.031666][T21885] __x64_sys_sendmsg+0xd4/0x160 [ 378.031781][T21885] x64_sys_call+0x17ba/0x3000 [ 378.031910][T21885] do_syscall_64+0xc0/0x2a0 [ 378.032065][T21885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.032137][T21885] RIP: 0033:0x7fa08ef9acb9 [ 378.032240][T21885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.032327][T21885] RSP: 002b:00007fa08d9f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.032453][T21885] RAX: ffffffffffffffda RBX: 00007fa08f215fa0 RCX: 00007fa08ef9acb9 [ 378.032526][T21885] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 378.032573][T21885] RBP: 00007fa08d9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 378.032638][T21885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.032680][T21885] R13: 00007fa08f216038 R14: 00007fa08f215fa0 R15: 00007ffe98b25d08 [ 378.032751][T21885] [ 378.270248][T21887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5953'. [ 378.279940][T21887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5953'. [ 378.294967][T21844] team0: Port device team_slave_0 added [ 378.306921][T21844] team0: Port device team_slave_1 added [ 378.314733][T21891] loop0: detected capacity change from 0 to 1024 [ 378.322260][T21891] EXT4-fs: Ignoring removed oldalloc option [ 378.328278][T21891] EXT4-fs: Ignoring removed bh option [ 378.344006][T21844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.351155][T21844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.377185][T21844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.392871][T21844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.399924][T21844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.426702][T21844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.443267][T21891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.531563][T21844] hsr_slave_0: entered promiscuous mode [ 378.569579][T21844] hsr_slave_1: entered promiscuous mode [ 378.577546][T21844] debugfs: 'hsr0' already exists in 'hsr' [ 378.583320][T21844] Cannot create hsr debugfs directory [ 378.918447][T21844] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.928323][T21844] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.983364][T21912] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.030195][T21844] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.040669][T21844] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.120759][T21844] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.130778][T21844] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.191854][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.239141][T21844] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.239793][T21923] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.249084][T21844] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.281054][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5968'. [ 379.290195][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5968'. [ 379.402389][T21925] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.433716][T21844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.494242][T21931] loop3: detected capacity change from 0 to 512 [ 379.501967][T21931] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 379.511166][T21844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.528850][T21844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 379.565587][T21844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 379.586019][T21934] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5971'. [ 379.614782][T21934] dvmrp6: entered allmulticast mode [ 379.737050][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 379.737067][ T29] audit: type=1326 audit(1768912343.986:7286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21924 comm="syz.0.5967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x0 [ 379.859287][T21844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.876567][T21844] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.901946][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.909065][T11203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.971357][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.978597][T11203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.097585][T21967] loop0: detected capacity change from 0 to 2048 [ 380.130397][ T3310] Alternate GPT is invalid, using primary GPT. [ 380.136833][ T3310] loop0: p1 p2 p3 [ 380.140586][ T3310] loop0: partition table partially beyond EOD, truncated [ 380.169560][T21844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.177676][T21969] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.202440][T21967] Alternate GPT is invalid, using primary GPT. [ 380.209635][T21967] loop0: p1 p2 p3 [ 380.213469][T21967] loop0: partition table partially beyond EOD, truncated [ 380.267689][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 380.279153][T13258] udevd[13258]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 380.290417][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 380.331020][T21978] loop0: detected capacity change from 0 to 512 [ 380.376611][T21978] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (35007!=33349) [ 380.407886][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 380.410399][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 380.437594][T13258] udevd[13258]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 380.454376][T21978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 380.462738][T21978] EXT4-fs (loop0): orphan cleanup on readonly fs [ 380.469892][T21978] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5984: bad orphan inode 267 [ 380.489921][T21978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 380.544322][T21844] veth0_vlan: entered promiscuous mode [ 380.556467][T21844] veth1_vlan: entered promiscuous mode [ 380.574688][T21844] veth0_macvtap: entered promiscuous mode [ 380.587389][T21844] veth1_macvtap: entered promiscuous mode [ 380.609658][T21844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.641098][T21844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.659263][T21990] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.668543][T11217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.699088][T11217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.725702][T11217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.744340][T11217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.770061][T21995] FAULT_INJECTION: forcing a failure. [ 380.770061][T21995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.783336][T21995] CPU: 1 UID: 0 PID: 21995 Comm: syz.2.5943 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 380.783381][T21995] Tainted: [W]=WARN [ 380.783459][T21995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.783472][T21995] Call Trace: [ 380.783478][T21995] [ 380.783506][T21995] __dump_stack+0x1d/0x30 [ 380.783530][T21995] dump_stack_lvl+0x95/0xd0 [ 380.783556][T21995] dump_stack+0x15/0x1b [ 380.783581][T21995] should_fail_ex+0x263/0x280 [ 380.783677][T21995] should_fail+0xb/0x20 [ 380.783704][T21995] should_fail_usercopy+0x1a/0x20 [ 380.783752][T21995] _copy_from_user+0x1c/0xb0 [ 380.783780][T21995] ___sys_sendmsg+0xc1/0x1e0 [ 380.783899][T21995] __sys_sendmmsg+0x185/0x320 [ 380.783941][T21995] __x64_sys_sendmmsg+0x57/0x70 [ 380.783978][T21995] x64_sys_call+0x1e28/0x3000 [ 380.784113][T21995] do_syscall_64+0xc0/0x2a0 [ 380.784142][T21995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.784193][T21995] RIP: 0033:0x7fe3a1b9acb9 [ 380.784214][T21995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.784237][T21995] RSP: 002b:00007fe3a05f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 380.784298][T21995] RAX: ffffffffffffffda RBX: 00007fe3a1e15fa0 RCX: 00007fe3a1b9acb9 [ 380.784314][T21995] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 380.784326][T21995] RBP: 00007fe3a05f7090 R08: 0000000000000000 R09: 0000000000000000 [ 380.784338][T21995] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000001 [ 380.784386][T21995] R13: 00007fe3a1e16038 R14: 00007fe3a1e15fa0 R15: 00007ffdc96c6198 [ 380.784414][T21995] [ 381.093012][ T29] audit: type=1326 audit(1768912345.336:7287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21988 comm="syz.3.5987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2ca75acb9 code=0x0 [ 381.154394][T22006] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.173575][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 381.184178][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5992'. [ 381.193270][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5992'. [ 381.247217][T22010] loop0: detected capacity change from 0 to 2048 [ 381.302956][T22014] sctp: [Deprecated]: syz.2.5996 (pid 22014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.302956][T22014] Use struct sctp_sack_info instead [ 381.353133][T22019] IPv6: addrconf: prefix option has invalid lifetime [ 381.362614][T22010] Alternate GPT is invalid, using primary GPT. [ 381.369047][T22010] loop0: p1 p2 p3 [ 381.372803][T22010] loop0: partition table partially beyond EOD, truncated [ 381.397196][ T29] audit: type=1326 audit(1768912345.646:7288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1b9acb9 code=0x7ffc0000 [ 381.421461][ T29] audit: type=1326 audit(1768912345.646:7289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1b9acb9 code=0x7ffc0000 [ 381.445794][ T29] audit: type=1326 audit(1768912345.646:7290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1b9acb9 code=0x7ffc0000 [ 381.525075][ T29] audit: type=1326 audit(1768912345.766:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1b9acb9 code=0x7ffc0000 [ 381.549359][ T29] audit: type=1326 audit(1768912345.766:7292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1b9acb9 code=0x7ffc0000 [ 381.573895][ T29] audit: type=1326 audit(1768912345.766:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe3a1b9acb9 code=0x7ffc0000 [ 381.626212][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 381.639572][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 381.652797][T13258] udevd[13258]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 381.675842][ T29] audit: type=1326 audit(1768912345.766:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1b9acb9 code=0x7ffc0000 [ 381.677879][T22028] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 381.699447][ T29] audit: type=1326 audit(1768912345.766:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22020 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1b9acb9 code=0x7ffc0000 [ 381.743283][T22032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6000'. [ 381.756474][T22033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6000'. [ 381.811939][T22036] ip6_vti0 speed is unknown, defaulting to 1000 [ 381.843470][T22040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6006'. [ 381.853505][T22040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6006'. [ 381.959557][ T8357] IPVS: starting estimator thread 0... [ 381.969443][T22046] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 381.999740][T22051] netlink: 'syz.0.6008': attribute type 21 has an invalid length. [ 382.034576][T22046] bond2 (unregistering): Released all slaves [ 382.043903][T22053] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6010'. [ 382.054983][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6008'. [ 382.064145][T22055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6008'. [ 382.065681][T22050] IPVS: using max 2208 ests per chain, 110400 per kthread [ 382.092384][T22051] netlink: 'syz.0.6008': attribute type 6 has an invalid length. [ 382.104840][T22053] dvmrp6: entered allmulticast mode [ 382.352590][T22071] serio: Serial port ptm0 [ 382.397468][T22082] FAULT_INJECTION: forcing a failure. [ 382.397468][T22082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.411396][T22082] CPU: 0 UID: 0 PID: 22082 Comm: syz.2.6020 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 382.411427][T22082] Tainted: [W]=WARN [ 382.411436][T22082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.411457][T22082] Call Trace: [ 382.411465][T22082] [ 382.411481][T22082] __dump_stack+0x1d/0x30 [ 382.411570][T22082] dump_stack_lvl+0x95/0xd0 [ 382.411660][T22082] dump_stack+0x15/0x1b [ 382.411754][T22082] should_fail_ex+0x263/0x280 [ 382.411779][T22082] should_fail+0xb/0x20 [ 382.411882][T22082] should_fail_usercopy+0x1a/0x20 [ 382.411915][T22082] _copy_from_user+0x1c/0xb0 [ 382.411965][T22082] get_user_ifreq+0x52/0x110 [ 382.412003][T22082] sock_ioctl+0x54e/0x610 [ 382.412031][T22082] ? __pfx_sock_ioctl+0x10/0x10 [ 382.412109][T22082] __se_sys_ioctl+0xce/0x140 [ 382.412212][T22082] __x64_sys_ioctl+0x43/0x50 [ 382.412300][T22082] x64_sys_call+0x14b0/0x3000 [ 382.412327][T22082] do_syscall_64+0xc0/0x2a0 [ 382.412370][T22082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.412394][T22082] RIP: 0033:0x7fe3a1b9acb9 [ 382.412460][T22082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.412486][T22082] RSP: 002b:00007fe3a05f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.412579][T22082] RAX: ffffffffffffffda RBX: 00007fe3a1e15fa0 RCX: 00007fe3a1b9acb9 [ 382.412593][T22082] RDX: 0000200000000080 RSI: 00000000000089f4 RDI: 0000000000000004 [ 382.412607][T22082] RBP: 00007fe3a05f7090 R08: 0000000000000000 R09: 0000000000000000 [ 382.412624][T22082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.412671][T22082] R13: 00007fe3a1e16038 R14: 00007fe3a1e15fa0 R15: 00007ffdc96c6198 [ 382.412699][T22082] [ 382.597567][T22071] serio: Serial port ptm0 [ 382.767844][T22102] ip6_vti0 speed is unknown, defaulting to 1000 [ 382.986415][T22122] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.101258][T22133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.289694][T22144] random: crng reseeded on system resumption [ 383.357277][T22149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=22149 comm=syz.3.6049 [ 383.431477][T22151] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.598132][T22163] loop3: detected capacity change from 0 to 512 [ 383.627955][ T3310] udevd[3310]: incorrect ext4 checksum on /dev/loop3 [ 383.651079][T22163] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 383.838492][T22179] sctp: [Deprecated]: syz.0.6062 (pid 22179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.838492][T22179] Use struct sctp_sack_info instead [ 383.914305][T22179] syz_tun: entered allmulticast mode [ 383.920341][T22179] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 383.928929][T22179] mroute: pending queue full, dropping entries [ 383.939082][T22179] loop0: detected capacity change from 0 to 512 [ 383.946185][T22179] ext4: Unknown parameter 'nouser_xattr' [ 384.035653][T22151] sctp: [Deprecated]: syz.2.6051 (pid 22151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.035653][T22151] Use struct sctp_sack_info instead [ 384.141988][ T8357] hid (null): unknown global tag 0xd0 [ 384.147535][ T8357] hid (null): bogus close delimiter [ 384.152755][ T8357] hid (null): nested delimiters [ 384.157706][ T8357] hid (null): unknown global tag 0xd [ 384.163027][ T8357] hid (null): unknown global tag 0xd [ 384.168499][ T8357] hid (null): unknown global tag 0xe [ 384.173854][ T8357] hid (null): unknown global tag 0xb3 [ 384.183105][ T8357] hid (null): unknown global tag 0xc [ 384.188553][ T8357] hid (null): invalid report_size -1411227038 [ 384.194670][ T8357] hid (null): unknown global tag 0xd [ 384.200065][ T8357] hid (null): unknown global tag 0x2c [ 384.205668][ T8357] hid (null): unknown global tag 0xd [ 384.211083][ T8357] hid (null): bogus close delimiter [ 384.216442][ T8357] hid (null): report_id 0 is invalid [ 384.221746][ T8357] hid (null): unknown global tag 0xc [ 384.230705][ T8357] hid (null): unknown global tag 0xd [ 384.236135][ T8357] hid (null): usage index exceeded [ 384.245528][ T8357] hid (null): invalid report_size 1343936812 [ 384.247190][T22197] sctp: [Deprecated]: syz.0.6070 (pid 22197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.247190][T22197] Use struct sctp_sack_info instead [ 384.252908][ T8357] hid (null): unknown global tag 0xe [ 384.273218][ T8357] hid (null): unknown global tag 0xe [ 384.278640][ T8357] hid (null): invalid report_count -1216678601 [ 384.284913][ T8357] hid (null): invalid report_count 1332639858 [ 384.291146][ T8357] hid (null): unknown global tag 0xd3 [ 384.296673][ T8357] hid (null): unknown global tag 0x1b [ 384.302166][ T8357] hid (null): unknown global tag 0x55 [ 384.307699][ T8357] hid (null): bogus close delimiter [ 384.318159][T22199] x_tables: duplicate underflow at hook 2 [ 384.366736][ T8357] hid-generic 0002:0009:0003.0006: unexpected long global item [ 384.376695][ T8357] hid-generic 0002:0009:0003.0006: probe with driver hid-generic failed with error -22 [ 384.524476][T22214] loop3: detected capacity change from 0 to 512 [ 384.582198][T22214] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.6079: error while reading EA inode 32 err=-116 [ 384.611344][T22221] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.641730][T22214] EXT4-fs (loop3): Remounting filesystem read-only [ 384.656258][T22214] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 384.680851][T22214] EXT4-fs (loop3): 1 orphan inode deleted [ 384.690243][T22214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.734992][T22214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.802123][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 384.802137][ T29] audit: type=1326 audit(1768912349.046:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22239 comm="syz.0.6086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08ef9acb9 code=0x0 [ 384.833544][ T1733] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.843882][ T1733] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.882520][T22229] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.917183][ T1733] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.928612][ T1733] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.001457][ T1733] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.012708][ T1733] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.026469][T22248] loop3: detected capacity change from 0 to 4096 [ 385.081180][ T1733] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.091696][ T1733] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.103797][T22248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.183360][T22221] sctp: [Deprecated]: syz.5.6082 (pid 22221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.183360][T22221] Use struct sctp_sack_info instead [ 385.230072][T22257] __nla_validate_parse: 5 callbacks suppressed [ 385.230093][T22257] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6088'. [ 385.276428][T22257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.288596][T22257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.290809][T22257] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 385.292504][T22257] bond0 (unregistering): Released all slaves [ 385.295058][T22256] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.311567][T22263] loop5: detected capacity change from 0 to 512 [ 385.324794][T22263] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.6093: bad orphan inode 15 [ 385.324956][T22263] ext4_test_bit(bit=14, block=18) = 1 [ 385.325046][T22263] is_bad_inode(inode)=0 [ 385.325056][T22263] NEXT_ORPHAN(inode)=1023 [ 385.325066][T22263] max_ino=32 [ 385.325075][T22263] i_nlink=0 [ 385.325335][T22263] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.6093: corrupted xattr block 19: invalid header [ 385.363444][T22263] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 385.363857][T22263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 385.364025][T22263] ext4 filesystem being mounted at /258/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 385.434847][T22268] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.6093: bad entry in directory: directory entry overrun - offset=60, inode=458767, rec_len=4096, size=4096 fake=0 [ 385.435492][T22268] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.6093: bad entry in directory: directory entry overrun - offset=60, inode=458767, rec_len=4096, size=4096 fake=0 [ 385.443252][T19890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.449298][ T1733] dvmrp6 (unregistering): left allmulticast mode [ 385.517646][ T1733] bond0 (unregistering): Released all slaves [ 385.604170][T18596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 385.745864][T22229] chnl_net:caif_netlink_parms(): no params data found [ 385.762719][T22294] loop3: detected capacity change from 0 to 128 [ 385.782314][ T1733] hsr_slave_0: left promiscuous mode [ 385.792530][ T1733] hsr_slave_1: left promiscuous mode [ 385.807339][ T1733] veth1_macvtap: left promiscuous mode [ 385.815612][ T1733] veth0_macvtap: left promiscuous mode [ 385.834722][ T1733] veth1_vlan: left promiscuous mode [ 385.849098][ T1733] veth0_vlan: left promiscuous mode [ 386.019153][ T29] audit: type=1326 audit(1768912350.266:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22291 comm="syz.5.6095" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34edeacb9 code=0x0 [ 386.078951][ T8365] kernel write not supported for file /input/event2 (pid: 8365 comm: kworker/1:25) [ 386.091211][T22292] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.157365][T22229] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.164558][T22229] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.172308][T22229] bridge_slave_0: entered allmulticast mode [ 386.179725][T22229] bridge_slave_0: entered promiscuous mode [ 386.187009][T22229] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.194182][T22229] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.201701][T22229] bridge_slave_1: entered allmulticast mode [ 386.208682][T22229] bridge_slave_1: entered promiscuous mode [ 386.228663][T22229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.239784][T22229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.289039][T22229] team0: Port device team_slave_0 added [ 386.301449][ T1733] IPVS: stop unused estimator thread 0... [ 386.347696][T22229] team0: Port device team_slave_1 added [ 386.356818][T22327] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6104'. [ 386.391288][T22315] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.416697][T22327] dvmrp6: entered allmulticast mode [ 386.431299][T22229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.439056][T22229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.466011][T22229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.480027][T22229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.488207][T22229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.515224][T22229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.594170][T22335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6105'. [ 386.628924][T22229] hsr_slave_0: entered promiscuous mode [ 386.644757][T22229] hsr_slave_1: entered promiscuous mode [ 386.650904][T22229] debugfs: 'hsr0' already exists in 'hsr' [ 386.656728][T22229] Cannot create hsr debugfs directory [ 386.776295][T22315] sctp: [Deprecated]: syz.3.6102 (pid 22315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.776295][T22315] Use struct sctp_sack_info instead [ 386.887645][T22359] loop5: detected capacity change from 0 to 128 [ 386.945262][T22359] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.963333][T22359] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.018977][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6110'. [ 387.028075][T22366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6110'. [ 387.056806][ T29] audit: type=1400 audit(1768912351.306:7302): avc: denied { rename } for pid=22358 comm="syz.5.6109" name="file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 387.089469][ T29] audit: type=1400 audit(1768912351.326:7303): avc: denied { create } for pid=22358 comm="syz.5.6109" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 387.132359][ T29] audit: type=1400 audit(1768912351.326:7304): avc: denied { link } for pid=22358 comm="syz.5.6109" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 387.176845][ T29] audit: type=1326 audit(1768912351.336:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34edeacb9 code=0x7ffc0000 [ 387.201247][ T29] audit: type=1326 audit(1768912351.336:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34edeacb9 code=0x7ffc0000 [ 387.225576][ T29] audit: type=1326 audit(1768912351.336:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fa34edeacb9 code=0x7ffc0000 [ 387.249727][ T29] audit: type=1326 audit(1768912351.336:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34edeacb9 code=0x7ffc0000 [ 387.274028][ T29] audit: type=1326 audit(1768912351.336:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22358 comm="syz.5.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34edeacb9 code=0x7ffc0000 [ 387.276560][T22371] loop0: detected capacity change from 0 to 4096 [ 387.313540][T18596] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.324626][T22371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.354197][T22371] EXT4-fs error (device loop0): ext4_get_first_dir_block:3547: inode #12: block 80: comm syz.0.6112: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 387.386191][T22371] EXT4-fs error (device loop0): ext4_get_first_dir_block:3550: inode #12: comm syz.0.6112: directory missing '..' [ 387.508797][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.577888][T22229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 387.621039][T22229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 387.640502][T22229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 387.659724][T22229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 387.728846][T22411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.823651][T22229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.852295][T22229] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.875091][T11208] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.882233][T11208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.912853][T11208] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.920065][T11208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.009782][T22417] loop5: detected capacity change from 0 to 32768 [ 388.110501][T22459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6125'. [ 388.135645][T22229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.258570][T22229] veth0_vlan: entered promiscuous mode [ 388.278260][T22229] veth1_vlan: entered promiscuous mode [ 388.301483][T22484] loop0: detected capacity change from 0 to 512 [ 388.325064][T22229] veth0_macvtap: entered promiscuous mode [ 388.345890][T22229] veth1_macvtap: entered promiscuous mode [ 388.355191][T22484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.389156][T22484] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.404173][T22229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.434529][T22229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.463209][T20137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.487330][T22497] loop3: detected capacity change from 0 to 512 [ 388.509216][T22497] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.517237][ T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.559965][T22497] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 388.568074][T22497] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002] [ 388.569305][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.588191][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.597046][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.607028][T22497] System zones: 0-1, 15-15, 18-18, 34-34 [ 388.612908][T22497] EXT4-fs (loop3): orphan cleanup on readonly fs [ 388.619997][T22497] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.6131: bg 0: block 15: invalid block bitmap [ 388.634419][T22497] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 388.643956][T22497] EXT4-fs (loop3): 1 truncate cleaned up [ 388.650927][T22497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 388.730201][T22511] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6135'. [ 388.835061][T22524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6138'. [ 388.863218][T19890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.909996][T22524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6138'. [ 388.932932][T22527] loop1: detected capacity change from 0 to 512 [ 388.961215][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6141'. [ 388.981935][T22527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.016257][T22542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.073272][T22534] FAULT_INJECTION: forcing a failure. [ 389.073272][T22534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.087291][T22534] CPU: 0 UID: 0 PID: 22534 Comm: syz.3.6141 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 389.087323][T22534] Tainted: [W]=WARN [ 389.087330][T22534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.087344][T22534] Call Trace: [ 389.087405][T22534] [ 389.087415][T22534] __dump_stack+0x1d/0x30 [ 389.087447][T22534] dump_stack_lvl+0x95/0xd0 [ 389.087498][T22534] dump_stack+0x15/0x1b [ 389.087553][T22534] should_fail_ex+0x263/0x280 [ 389.087585][T22534] should_fail+0xb/0x20 [ 389.087611][T22534] should_fail_usercopy+0x1a/0x20 [ 389.087669][T22534] _copy_from_user+0x1c/0xb0 [ 389.087759][T22534] ___sys_sendmsg+0xc1/0x1e0 [ 389.087813][T22534] __x64_sys_sendmsg+0xd4/0x160 [ 389.087922][T22534] x64_sys_call+0x17ba/0x3000 [ 389.087949][T22534] do_syscall_64+0xc0/0x2a0 [ 389.087975][T22534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.088051][T22534] RIP: 0033:0x7fa2ca75acb9 [ 389.088150][T22534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.088168][T22534] RSP: 002b:00007fa2c91b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.088192][T22534] RAX: ffffffffffffffda RBX: 00007fa2ca9d5fa0 RCX: 00007fa2ca75acb9 [ 389.088209][T22534] RDX: 000000000404c080 RSI: 0000200000000040 RDI: 0000000000000008 [ 389.088225][T22534] RBP: 00007fa2c91b7090 R08: 0000000000000000 R09: 0000000000000000 [ 389.088256][T22534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.088268][T22534] R13: 00007fa2ca9d6038 R14: 00007fa2ca9d5fa0 R15: 00007fffb532e898 [ 389.088288][T22534] [ 389.110392][T22527] netlink: 'syz.1.6139': attribute type 83 has an invalid length. [ 389.272997][T22565] loop5: detected capacity change from 0 to 512 [ 389.294272][T22566] loop3: detected capacity change from 0 to 256 [ 389.308215][T22527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.350655][T22565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.442486][T22565] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.622524][T22611] loop3: detected capacity change from 0 to 128 [ 389.701423][T18596] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 389.742823][T18596] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 389.800003][T22626] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.850306][T22633] loop0: detected capacity change from 0 to 1024 [ 389.857185][T22633] EXT4-fs: Ignoring removed oldalloc option [ 389.863321][T22633] EXT4-fs: Ignoring removed bh option [ 389.880483][T22633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.895200][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 389.895217][ T29] audit: type=1326 audit(1768912354.136:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22605 comm="syz.2.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1b9acb9 code=0x7fc00000 [ 390.049336][ T1733] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.059262][ T1733] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.104037][T22606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.124307][T22629] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.148488][ T1733] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.158364][ T1733] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.293379][ T1733] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.303256][ T1733] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.333940][T22641] ================================================================== [ 390.342088][T22641] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 390.350110][T22641] [ 390.352462][T22641] write to 0xffff88811abddcfc of 4 bytes by task 22633 on cpu 1: [ 390.360199][T22641] xas_set_mark+0x12b/0x140 [ 390.364773][T22641] tag_pages_for_writeback+0xe3/0x2e0 [ 390.370179][T22641] ext4_do_writepages+0x6a8/0x2800 [ 390.375320][T22641] ext4_writepages+0x18f/0x320 [ 390.380160][T22641] do_writepages+0x1c6/0x310 [ 390.384786][T22641] file_write_and_wait_range+0x178/0x2f0 [ 390.390442][T22641] generic_buffers_fsync_noflush+0x45/0x130 [ 390.396361][T22641] ext4_sync_file+0x1aa/0x680 [ 390.401057][T22641] vfs_fsync_range+0x10d/0x130 [ 390.405842][T22641] ext4_buffered_write_iter+0x34f/0x3c0 [ 390.411425][T22641] ext4_file_write_iter+0x380/0xf70 [ 390.416655][T22641] iter_file_splice_write+0x6bc/0xa80 [ 390.422048][T22641] direct_splice_actor+0x156/0x2a0 [ 390.427180][T22641] splice_direct_to_actor+0x311/0x670 [ 390.432578][T22641] do_splice_direct+0x119/0x1a0 [ 390.437445][T22641] do_sendfile+0x380/0x650 [ 390.441889][T22641] __x64_sys_sendfile64+0x105/0x150 [ 390.447107][T22641] x64_sys_call+0x2db1/0x3000 [ 390.451809][T22641] do_syscall_64+0xc0/0x2a0 [ 390.456359][T22641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.462273][T22641] [ 390.464627][T22641] read to 0xffff88811abddcfc of 4 bytes by task 22641 on cpu 0: [ 390.472270][T22641] file_write_and_wait_range+0x130/0x2f0 [ 390.477927][T22641] generic_buffers_fsync_noflush+0x45/0x130 [ 390.483870][T22641] ext4_sync_file+0x1aa/0x680 [ 390.488589][T22641] vfs_fsync_range+0x10d/0x130 [ 390.493375][T22641] ext4_buffered_write_iter+0x34f/0x3c0 [ 390.498953][T22641] ext4_file_write_iter+0x380/0xf70 [ 390.504199][T22641] iter_file_splice_write+0x6bc/0xa80 [ 390.509590][T22641] direct_splice_actor+0x156/0x2a0 [ 390.514728][T22641] splice_direct_to_actor+0x311/0x670 [ 390.520120][T22641] do_splice_direct+0x119/0x1a0 [ 390.524990][T22641] do_sendfile+0x380/0x650 [ 390.529427][T22641] __x64_sys_sendfile64+0x105/0x150 [ 390.534734][T22641] x64_sys_call+0x2db1/0x3000 [ 390.539445][T22641] do_syscall_64+0xc0/0x2a0 [ 390.543966][T22641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.549880][T22641] [ 390.552218][T22641] value changed: 0x02000021 -> 0x04000021 [ 390.557945][T22641] [ 390.560283][T22641] Reported by Kernel Concurrency Sanitizer on: [ 390.566451][T22641] CPU: 0 UID: 0 PID: 22641 Comm: syz.0.6165 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 390.577845][T22641] Tainted: [W]=WARN [ 390.581659][T22641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.591730][T22641] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 390.625464][ T29] audit: type=1400 audit(1768912354.846:7323): avc: denied { write } for pid=3304 comm="syz-executor" path="pipe:[2521]" dev="pipefs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 390.806872][ T1733] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.817329][ T1733] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.854086][ T29] audit: type=1326 audit(1768912355.096:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22605 comm="syz.2.6158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3a1b94ad7 code=0x7fc00000 [ 390.982174][ T1733] bridge_slave_1: left allmulticast mode [ 390.987957][ T1733] bridge_slave_1: left promiscuous mode [ 390.993909][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.020911][ T1733] bridge_slave_0: left allmulticast mode [ 391.026746][ T1733] bridge_slave_0: left promiscuous mode [ 391.032531][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.112398][ T1733] dvmrp6 (unregistering): left allmulticast mode [ 391.378384][ T1733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.389057][ T1733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.398962][ T1733] bond0 (unregistering): Released all slaves [ 391.407251][ T1733] bond1 (unregistering): Released all slaves [ 391.419485][T22641] syz_tun (unregistering): left allmulticast mode [ 391.474115][ T1733] hsr_slave_0: left promiscuous mode [ 391.482410][ T1733] hsr_slave_1: left promiscuous mode [ 391.494731][ T1733] veth1_macvtap: left promiscuous mode [ 391.501204][ T1733] veth0_macvtap: left promiscuous mode [ 391.507420][ T1733] veth1_vlan: left promiscuous mode [ 391.512706][ T1733] veth0_vlan: left promiscuous mode [ 391.606678][T22641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.654245][ T1733] team0 (unregistering): Port device team_slave_1 removed [ 391.665037][ T1733] team0 (unregistering): Port device team_slave_0 removed [ 392.055094][ T1733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.109500][ T1733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.189605][ T1733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.259273][ T1733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.314736][ T1733] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.325142][ T1733] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.387054][ T1733] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.397176][ T1733] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.457865][ T1733] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.467801][ T1733] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.507048][ T1733] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.517724][ T1733] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.589584][ T1733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.629957][ T1733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.668738][ T1733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.718488][ T1733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.779375][ T1733] bridge_slave_1: left allmulticast mode [ 392.785042][ T1733] bridge_slave_1: left promiscuous mode [ 392.790771][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.799737][ T1733] bridge_slave_0: left allmulticast mode [ 392.805537][ T1733] bridge_slave_0: left promiscuous mode [ 392.811248][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.819853][ T1733] vlan2: left promiscuous mode [ 392.824769][ T1733] bridge0: port 3(vlan2) entered disabled state [ 392.831710][ T1733] bridge_slave_1: left allmulticast mode [ 392.837496][ T1733] bridge_slave_1: left promiscuous mode [ 392.843120][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.851108][ T1733] bridge_slave_0: left promiscuous mode [ 392.856828][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.865301][ T1733] bridge_slave_1: left allmulticast mode [ 392.871086][ T1733] bridge_slave_1: left promiscuous mode [ 392.876839][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.884929][ T1733] bridge_slave_0: left allmulticast mode [ 392.890923][ T1733] bridge_slave_0: left promiscuous mode [ 392.896776][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.998105][ T1733] dvmrp6 (unregistering): left allmulticast mode [ 393.058177][ T1733] bond1 (unregistering): (slave dummy0): Releasing active interface [ 393.066250][ T1733] dummy0: left promiscuous mode [ 393.072775][ T1733] bond1 (unregistering): Released all slaves [ 393.082308][ T1733] bond0 (unregistering): Released all slaves [ 393.107310][ T1733] dvmrp6 (unregistering): left allmulticast mode [ 393.148133][ T1733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.159019][ T1733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.168976][ T1733] bond0 (unregistering): Released all slaves [ 393.177728][ T1733] bond1 (unregistering): Released all slaves [ 393.200867][ T1733] dvmrp6 (unregistering): left allmulticast mode [ 393.258754][ T1733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.269195][ T1733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.279241][ T1733] bond0 (unregistering): Released all slaves [ 393.459336][ T1733] hsr_slave_0: left promiscuous mode [ 393.465125][ T1733] hsr_slave_1: left promiscuous mode [ 393.473076][ T1733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.481172][ T1733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.491984][ T1733] hsr_slave_0: left promiscuous mode [ 393.498665][ T1733] hsr_slave_1: left promiscuous mode [ 393.504534][ T1733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.511982][ T1733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.521313][ T1733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.529012][ T1733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.542859][ T1733] hsr_slave_0: left promiscuous mode [ 393.548823][ T1733] hsr_slave_1: left promiscuous mode [ 393.554637][ T1733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.562818][ T1733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.570909][ T1733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.579143][ T1733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.599077][ T1733] veth1_macvtap: left promiscuous mode [ 393.604642][ T1733] veth0_macvtap: left promiscuous mode [ 393.610803][ T1733] veth1_vlan: left promiscuous mode [ 393.616943][ T1733] veth0_vlan: left promiscuous mode [ 393.622724][ T1733] veth1_macvtap: left promiscuous mode [ 393.629131][ T1733] veth0_macvtap: left promiscuous mode [ 393.634817][ T1733] veth1_vlan: left promiscuous mode [ 393.640989][ T1733] veth0_vlan: left promiscuous mode [ 393.647982][ T1733] veth1_macvtap: left promiscuous mode [ 393.653493][ T1733] veth0_macvtap: left promiscuous mode [ 393.659754][ T1733] veth1_vlan: left promiscuous mode [ 393.665043][ T1733] veth0_vlan: left promiscuous mode [ 393.822474][ T1733] team0 (unregistering): Port device team_slave_1 removed [ 393.832622][ T1733] team0 (unregistering): Port device team_slave_0 removed [ 393.899098][ T1733] team0 (unregistering): Port device team_slave_1 removed [ 393.909566][ T1733] team0 (unregistering): Port device team_slave_0 removed [ 393.973384][ T1733] team0 (unregistering): Port device team_slave_1 removed [ 393.984573][ T1733] team0 (unregistering): Port device team_slave_0 removed [ 394.637629][ T1733] IPVS: stop unused estimator thread 0... [ 394.720849][ T1733] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.773138][ T1733] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.815153][ T1733] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.880293][ T1733] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.952265][ T1733] bridge_slave_1: left allmulticast mode [ 394.958046][ T1733] bridge_slave_1: left promiscuous mode [ 394.963721][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.972268][ T1733] bridge_slave_0: left allmulticast mode [ 394.978018][ T1733] bridge_slave_0: left promiscuous mode [ 394.983758][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.078260][ T1733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.089805][ T1733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.099710][ T1733] bond0 (unregistering): Released all slaves [ 395.183478][ T1733] hsr_slave_0: left promiscuous mode [ 395.190096][ T1733] hsr_slave_1: left promiscuous mode [ 395.197136][ T1733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.204632][ T1733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.214964][ T1733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.222444][ T1733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.235645][ T1733] veth1_macvtap: left promiscuous mode [ 395.241169][ T1733] veth0_macvtap: left promiscuous mode [ 395.247795][ T1733] veth1_vlan: left promiscuous mode [ 395.253150][ T1733] veth0_vlan: left promiscuous mode [ 395.330614][ T1733] team0 (unregistering): Port device team_slave_1 removed [ 395.340883][ T1733] team0 (unregistering): Port device team_slave_0 removed