last executing test programs: 17m48.067078834s ago: executing program 32 (id=227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) mq_open(0x0, 0x1, 0xc, &(0x7f0000000200)={0x80000001, 0xe000000000000000, 0x5, 0x3}) perf_event_open(0x0, 0x0, 0xdfdffeffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r6, &(0x7f0000000400), 0x20000000}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000380)={r9, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=@ipv4_deladdr={0x48, 0x15, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x80, 0x20, 0xff, r9}, [@IFA_LABEL={0x14, 0x3, 'gretap0\x00'}, @IFA_LABEL={0x14, 0x3, 'syzkaller0\x00'}, @IFA_FLAGS={0x8, 0x8, 0x4f8}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x4048031) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4ea0, @remote}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 14m38.314529371s ago: executing program 33 (id=1704): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 14m15.661112873s ago: executing program 34 (id=1967): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket(0x10, 0x803, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 14m12.30743846s ago: executing program 35 (id=1992): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14m11.209201212s ago: executing program 36 (id=2005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() r2 = getpid() r3 = creat(&(0x7f0000000200)='./file1\x00', 0x2) fsopen(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000000)={r3, r0, 0x4}) 14m7.112463823s ago: executing program 37 (id=2039): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x104, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2c}, {@in6=@mcast2, 0x4d6, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xfffe, 0x8251c, 0x6, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x3, 0x11}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 14m4.75352925s ago: executing program 38 (id=2062): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r1, 0x0, 0x0) 14m4.082526115s ago: executing program 39 (id=2072): socket(0x10, 0x3, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 13m44.497057011s ago: executing program 40 (id=2274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a320000000008000a4000010004090001"], 0x90}}, 0x0) 13m34.631591386s ago: executing program 41 (id=2355): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x8000) 13m30.818781505s ago: executing program 42 (id=2383): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) setgid(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 13m1.198541337s ago: executing program 43 (id=2647): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000740)="91f8a9849519def28691bbc4173c3d6f357de68907e50e997fc26e4c91ea4feb931647fc5393de1f0000000000002c847ecfbcfa0a026a6f96a4ffd844b1252fa8332e469c6b1aafc08e0e632da389ba8899e94ce0216d23bec00ff251e11ba4e19e7fe33f6d7635fbf6f16f1f0a381d1e3219c1cfa013b391b6623f164f55a0a33902f0c938d626905f8cd1fba51334c16b150281addd9ae74a51c0572bfcc1af96ea1177e68f6f60136d777fb081848b4eddb2ede3cd121b0a5630932fdbce2a202e9ad400bf330b68344c8eda3e9fcbe42abb4486553d2e3e6c6b62650eedfc021896346567b68ee468501d5174cd4febc162dd79ef058d6e6ac11d1dc8d3d06498d64ba74b1846c2abfb704cae1af98a3eb2dd6f414e350b1c25fb4571d1670499461260284142405ba6e49bdc94821f2f52a6f45e6189022f76", 0x13c}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114", 0xe6}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12m59.970894907s ago: executing program 44 (id=2661): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000740)="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", 0x13c}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114", 0xe6}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) 12m58.250402893s ago: executing program 45 (id=2672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffcf800080002400000000008000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2e45) 12m53.289694566s ago: executing program 8 (id=2701): memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, 0x0) 12m53.257010771s ago: executing program 8 (id=2702): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000280)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) r4 = syz_io_uring_setup(0x1215, 0x0, 0x0, &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000004cc0)={0x2, 0xe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 12m51.462838834s ago: executing program 8 (id=2711): syz_emit_ethernet(0x4e, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x4f4d, 0x0, 0xffff, 0x99fe, 0x15, "290200"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 12m50.774589176s ago: executing program 8 (id=2720): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) 12m50.727429038s ago: executing program 8 (id=2721): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc0100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x40000) 12m50.463591393s ago: executing program 8 (id=2722): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$tun(r1, &(0x7f00000006c0)={@val={0x0, 0x8884}, @val={0x1, 0x80, 0x7, 0x1, 0x6, 0x9}, @mpls={[], @llc={@snap={0xab, 0xaa, 'j', "4180fd", 0x9000}}}}, 0x16) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 12m50.448569281s ago: executing program 46 (id=2722): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$tun(r1, &(0x7f00000006c0)={@val={0x0, 0x8884}, @val={0x1, 0x80, 0x7, 0x1, 0x6, 0x9}, @mpls={[], @llc={@snap={0xab, 0xaa, 'j', "4180fd", 0x9000}}}}, 0x16) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 7m33.714654124s ago: executing program 4 (id=5420): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}}, 0xa0) (fail_nth: 2) 7m33.416742311s ago: executing program 4 (id=5423): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioprio_set$pid(0x1, 0x0, 0x4000) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r4, 0xfffffffffffffffe, 0x0) sendfile(r4, r4, &(0x7f0000000540), 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe00fd05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3", 0x98}], 0x1}, 0x894) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) socket$nl_route(0x10, 0x3, 0x0) 7m32.477039096s ago: executing program 4 (id=5430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000600)=""/118, &(0x7f0000000680)=0x76) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000000580)='./bus/file0\x00', &(0x7f00000005c0)='./bus\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES8=r3, @ANYBLOB="1000000000100000280012800b0001006970fc0200000000000000000000000000ff"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) 7m30.139073464s ago: executing program 4 (id=5441): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000740)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b", @ANYRES32], 0x88, 0x2a9, &(0x7f0000000c00)="$eJzs3T9rc1UYAPDnpmmSV4dkcJKCF3RwKm1XlxRpoZhJyaAOWmwL0gShhYJ/MHZydXH0EwiCm1/CxW8guApudihcuTf3mqSmaSNN9S2/39LTc89zznNOz6V0yNMPN4anR2mcXH7xa7RaSdS68SyukuhELSpfxYzuNwEAPM+usiz+yMaWiUsiorW6tACAFVr69/+PK08JAFixd959763dXm/v7TRtxf7w64t+/pd9/nX8fPckPo5BHMdWtOM6IvvbuL2fZdmonuY68dpwdNHPI4cf/FzOv/t7RBG/He3oFF2z8Qe9ve10bCp+lOfxQrl+N4/fiXa8NGf9g97ezpz46Dfi9Ven8t+MdvzyUXwSgzgqkpjEf7mdpm9m3/75+ft5enl8MrroN4txE9naI/9oAAAAAAAAAAAAAAAAAAAAAAB4wjbL2jnNKOr35F1l/Z216/yb9Ugrndn6POP4pJroRn2gURbfVfV1ttI0zcqBk/h6vFyP+n+zawAAAAAAAAAAAAAAAAAAAPh/Of/0s9PDweD47EEaVTWA6mP9/3ae7lTPK7F4cHOyVq1sLpg51qoxScTCNPJNPNCx3NV4dlvO3/+w7IStu8esLzqfh2lUt+v0MJl/hs2oelrVJflpekwj7rlW47ZHG0UC1eW4a57G3EftpffeeLFojBaMiWTRe/HGb+OEy57k5kvUKE51bvh62ZgKv3E3brvP1SnNvin/kKjWAQAAAAAAAAAAAAAAAAAAKzX5GPCch5cLQ2tZc2VpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCjmvz//yUaozL4HoMbcXY+f+X6Y24TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ+6vAAAA//+lillR") r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$binfmt_aout(r2, &(0x7f0000000140)={{0x10b, 0x7, 0x3, 0x24, 0xd4, 0x7ff, 0x35f, 0xa}, "", ['\x00', '\x00']}, 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000400), 0x2000011a) recvmmsg(r5, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1}, 0x74e96c96}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x40, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000040)) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000030a0104000000000a1700000a000004765c18f1cdb689452ef2"], 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x4000010) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r6, r6, 0x13) ptrace(0x10, r6) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:33'], 0x9) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 7m29.820129178s ago: executing program 4 (id=5443): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x2, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x6}, 0x4480, 0x401, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6d61703d6e6e726d616c2c6e6f636f6d70726573732c73686f776173736f632c6d61703d61636f726e2c6d61703d6e6f726d616c2c626c6f636b3d3078303030303030303030303030303830302c757466382c66662c646d6f643d30783030303030303030303030303948764883696f63686172736574403d646566615f6c742c00c5d2e3887110dfcc66611625b3d444619834442e8db461a9e3a0e2f91e5e9fcd0609847e3252a4550008000000"], 0x2, 0xa1a, &(0x7f0000000380)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', &(0x7f0000000180)='./file0\x00', r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="79b800000000fedbdf257e0000000c00990007000000170000001e6a72d385f92cc33c4557371280036dd28c360441275e93ea856742833045a75cf14fdeac27d5f938bc944508d86789579765e509aa693991cb6f47d179b08b63de5f1edfc9232579e1f06c8f26513abf5c847fc4cb3dda9dbcbc330900000000000000fc0241b16ace22d46b62b82c9f09ed8a67bd72e2cad31cfb8659333e3d9009f36690e3058ef3ba4374bf39ab0a9a9feedb866c806585bb532618"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = socket(0x15, 0x5, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) getsockopt(r8, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001400), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd70004f0000000400000006000b000a10000014000600fe8000000000000000000000000000bb0800020005000000140005"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) 7m29.299474396s ago: executing program 4 (id=5449): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$inet(0x2, 0x3, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}, [@ldst={0x1, 0x0, 0x4, 0x1, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x181, 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0xffeb}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x24008004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x4}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000084"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x26, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/4079, 0x1000}}, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$kcm(0x29, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f00000010c0)) 7m29.147443339s ago: executing program 47 (id=5449): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$inet(0x2, 0x3, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}, [@ldst={0x1, 0x0, 0x4, 0x1, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x181, 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0xffeb}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x24008004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x4}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000084"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x26, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/4079, 0x1000}}, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$kcm(0x29, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f00000010c0)) 3m10.797339967s ago: executing program 9 (id=7462): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000063192f2d158a907b9d9a7986a90ffe777fb25222314b8eb3d9c20dd3cdf2b701db9de5cdd64b72944df007f5b25adfac16a4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff00"/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x3c, r6, 0x40d, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008085}, 0x800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x6, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, 0x1409, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 3m7.874508752s ago: executing program 9 (id=7474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, r2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x4275a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd0a, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x385, 0xb, 0x0, 0x0, 0x0, 0x4000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) rmdir(&(0x7f00000003c0)='./file0\x00') bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r6, r1}, 0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001214190a26bd7000fbdbdf2508004b001300000008005d03a54295bb40b34b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e01060000f8fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) 3m7.485075993s ago: executing program 9 (id=7477): socket$packet(0x11, 0x2, 0x300) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x60) flock(r5, 0x1) r6 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r6, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5c"], 0xffdd) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r0, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r7, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000380)={r7, &(0x7f00000000c0)='.*(\x00', 0x0, &(0x7f00000001c0)={@align=0x80, {0xbc, 0x7, 0x7e55, 0x6}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x1136}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)={[{@grpquota}, {@auto_da_alloc}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000000e80)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") fallocate(0xffffffffffffffff, 0x20, 0x0, 0x3f015764000) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r9 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendto$inet6(r10, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r10, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0x10) 3m4.304579963s ago: executing program 9 (id=7493): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x21, r1, 0x1000047, 0x3) waitid(0x0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x0, 0x2}, 0x1090d2, 0x0, 0x43a5bd76, 0x2, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) munlock(&(0x7f00002d5000/0x2000)=nil, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x109805, 0x0, 0x7fc, 0x6, 0x0, 0xfffffffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 3m3.7203905s ago: executing program 9 (id=7497): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x40cd27c7285c2f6c}, "e7edae8b866820ea", "d892b0204dc8abb785136cadf82f494e", "631e4d92", "3207e9aed0ef6be9"}, 0x28) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x30, 0x25, 0x2, 0x70ff}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1010004, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@dax_always}]}, 0x7, 0x43a, &(0x7f0000000340)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = syz_io_uring_setup(0x10d3, &(0x7f0000000480)={0x0, 0x10b8ef, 0x80, 0x3, 0x289}, &(0x7f00000000c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) socket$isdn(0x22, 0x3, 0x25) 3m3.329448031s ago: executing program 9 (id=7500): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlinkprop={0x20, 0x6c, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0xf7a1b54ac622e07b, 0x80}}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) syz_genetlink_get_family_id$tipc2(0x0, r2) 3m3.271899101s ago: executing program 48 (id=7500): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlinkprop={0x20, 0x6c, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0xf7a1b54ac622e07b, 0x80}}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) syz_genetlink_get_family_id$tipc2(0x0, r2) 2m51.805484161s ago: executing program 3 (id=7592): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 2m51.753094291s ago: executing program 3 (id=7594): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioprio_set$pid(0x1, 0x0, 0x4000) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r4, 0xfffffffffffffffe, 0x0) sendfile(r4, r4, &(0x7f0000000540), 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe00fd05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3", 0x98}], 0x1}, 0x894) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x7fffffffffffffff) 2m49.120919368s ago: executing program 3 (id=7611): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) recvmmsg(r8, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}, 0xb529}], 0x1, 0x40000022, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}], 0x1, 0x9450) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) 2m49.068238398s ago: executing program 3 (id=7612): unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x400ffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x100000, 0x2, 0xffffffff, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x8, 0xf6, "c8d7345d0eb9df9ca05a403943a7ca88a4261c8cfcdbb3dfdc6fefe78594ca6cd32f27330b805c6070c613abb97b42195fe414ebced4de27a0ee655389912671b8b2c761ca35f94d23f4231dccaec1feb5a01b0ea1d6aa98cfb8454d825d70c9f57b3007404f416bbd2f420618f3fa4d4402f9eadce6f38b1e0002f41d8694bbe03a61ba0935f2a7d69605128d09ac0e31829b50b577db90be918637012db8a292635bf1473604fff7878bd6c4fd0a2a9ec3877856090b7b311a45a8f09de5733c4ff0de5f11a7c6014587a87c50c26860a9700429a7468386cff15de03896d77308842a4cbea1b16ee3b74170abda6bf26183a0b595"}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0xf}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "56db7a27adf81000", "acef1a3a330723599e69856bf21ad6caf77c9a99b7bbebfa6dc371290d0e3808", "33681901"}, 0x38) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x100}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {}, {@discard}]}, 0x1, 0x51a, &(0x7f0000000a40)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffffc, 0x2) r5 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x10001, 0x0, 0x8, 0x1000004}) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0xa0000c, 0x0) syz_open_procfs$namespace(r5, &(0x7f00000002c0)='ns/net\x00') r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x400}, 0xc) 2m48.834056677s ago: executing program 3 (id=7616): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f32, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x4000000000009) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r4, 0x2}], 0x1, 0xfa) r5 = dup2(r3, r4) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x10880, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x26}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4a, 0xc, "c18059de6852b0be7894ea68919c6f5db041e6f6e0c2d287fe126b778773f532627a4e2ef23ce3e07bac608bdd99f3684f8b86bf18fd9b1ea3c8cd937701d93dd8395fead707"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xac, 0x2, 0xa, 0x302, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x73, 0x6, "ec76b054d7f291b04b9508c68696affe7d76629c68228e2319b21814aaf4f773566ccca7d6cc40ba8a4680db79b1c67b37b5493ebb487d41d9f6b8f806bb2495be73c23f697bde0ef161af397a443f7399b77a19a46b496c984d2c7a3d5147f3c874808be98912b6a597235335a8c1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040015) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000727000/0x2000)=nil, &(0x7f00000be000/0x2000)=nil, 0x4, &(0x7f0000000140)=[{0x1, 0x6, 0x3ff}, {0x400000000000000, 0x1, 0x1}], 0x2, 0x0, 0x9, 0x7b, 0x6, 0x8}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") getpid() r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r7, &(0x7f0000000280)={0x7, 0x5, 0x800077, 0x20800000000412, 0x6, 0xf3, 0x80001000, 0xf67, 0x2}) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x260841, 0x0) pread64(r8, 0x0, 0x0, 0x6) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x3, r8, 0x10, {0x2acf, 0x100004004}, 0x9e}, 0x1) 2m48.467823212s ago: executing program 3 (id=7624): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x6}, 0x10122, 0x10003, 0xa4, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) fcntl$setown(r1, 0x8, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/22, 0x16}, {&(0x7f0000000440)=""/194, 0xc2}], 0x2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 2m48.410507642s ago: executing program 49 (id=7624): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x6}, 0x10122, 0x10003, 0xa4, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) fcntl$setown(r1, 0x8, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/22, 0x16}, {&(0x7f0000000440)=""/194, 0xc2}], 0x2) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1m17.587572475s ago: executing program 2 (id=8512): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x51292000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = eventfd2(0xfffffffd, 0x80000) read(r2, &(0x7f0000002500)=""/126, 0x7e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24008801) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m15.012677961s ago: executing program 2 (id=8525): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000680)={[{@delalloc}, {@data_err_abort}, {@nombcache}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x55f, &(0x7f0000001dc0)="$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") r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYBLOB="0d7c43bbfe419a364026e2ed14225641dec04b385f1aad88f01ff8710e9221aafdbbc77dce"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2000}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x32, @multicast1, 0x4e22, 0x3, 'nq\x00', 0x32, 0x7fffffff, 0x5e}, 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = open(&(0x7f0000000200)='./file1\x00', 0x4027e, 0xe7) fallocate(r4, 0x0, 0x0, 0x8800000) socket$nl_route(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 1m13.551489524s ago: executing program 2 (id=8532): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000063192f2d158a907b9d9a7986a90ffe777fb25222314b8eb3d9c20dd3cdf2b701db9de5cdd64b72944df007f5b25adfac16a4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff000000000000000000"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x3c, r7, 0x40d, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008085}, 0x800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x6, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, 0x1409, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 1m9.945706198s ago: executing program 2 (id=8550): openat$full(0xffffffffffffff9c, 0x0, 0x6000, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000009c0), 0x40000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@nombcache}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x147042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)={0x2}, 0x8) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r4, &(0x7f0000004400)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x20002845) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/244, 0xf4}, {0x0, 0xfd3f}, {&(0x7f00000001c0)=""/255}], 0x2, 0x6, 0x0, 0x1) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) 1m7.996351654s ago: executing program 2 (id=8562): semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f00000000c0)=[{0x2, 0x400, 0x800}, {0x1, 0x2, 0x1800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 1m5.769597632s ago: executing program 2 (id=8573): semop(0x0, &(0x7f00000000c0)=[{0x2, 0x400, 0x800}, {0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x1800}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x7fff]) 1m5.536950401s ago: executing program 50 (id=8573): semop(0x0, &(0x7f00000000c0)=[{0x2, 0x400, 0x800}, {0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x1800}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x7fff]) 8.703196954s ago: executing program 5 (id=8907): mkdir(&(0x7f00000020c0)='./file0\x00', 0xce) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (fail_nth: 8) 8.553021718s ago: executing program 5 (id=8910): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) 8.505860779s ago: executing program 5 (id=8912): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x11) ioctl$RTC_WIE_OFF(r1, 0x7010) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000280)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2b, 0x6, 0xc, 0xfffffff8, 0x1, @mcast1, @local, 0x8, 0x7, 0x9}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@private2, @rand_addr=' \x01\x00', @mcast1, 0x7dde, 0x101, 0x0, 0x0, 0x9, 0x20c0020, r6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x1c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.294657134s ago: executing program 5 (id=8920): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0xfd, 0x0, 0x2, 0xf0e61, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x28060080) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4.19540232s ago: executing program 5 (id=8932): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xa}, 0x10, 0x5, 0x43a1bd77, 0x7, 0xaa4, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (fail_nth: 2) 3.770778995s ago: executing program 5 (id=8935): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x18, 0x1, 0x2002, 0x6, 0x8088, 0x1, 0xcaff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.340637839s ago: executing program 1 (id=8939): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff00"/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x3c, r7, 0x40d, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008085}, 0x800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x6, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, 0x1409, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 2.666473501s ago: executing program 0 (id=8941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x182, 0x6}, 0x10821, 0x4005, 0x4, 0x5, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, &(0x7f0000000380)={[{@nr_blocks={'nr_blocks', 0x3d, [0x74]}}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000600000500000a48000000090a010400000000000000001a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40effffffc0c0009800805004000000001140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.506866882s ago: executing program 6 (id=8943): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x10001, 0x0, 0x8, 0x1000004}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 2.219068651s ago: executing program 6 (id=8944): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x2}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r0, &(0x7f0000004400)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x20002845) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x88101, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) 2.115431293s ago: executing program 6 (id=8946): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@nomblk_io_submit}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$eJzs3MtvVNUfAPDvvTMtlMev/Sk+QNAqGomPlpbnwg1GExeamOgC46q2hSADVVoTIUTRBS4NiXvj0sS/wJVujLoycat7Q0IMG9DEZMy9c28ZhpnSoQODzOeTXDhn7pne873nnplzz5mZAAbWePZPErEpIn6LiNFG9voC443/rl4+O/vX5bOzSdTrb/yZ5OWuXD47WxYtn7exkanXi/y6Nsc9/3bETK02f6rITy6deG9y8fSZ54+dmDk6f3T+5PTBg3v37BjeP72vJ3FmcV3Z9tHC9q2vvHXhtdnDF9756ZusvpuK/c1x9MjIeOPstvVUjw/Wb5ub0km1jxWhK5WIyJprKO//o1GJkeV9o/Hyp32tHHBb1ev1erv358K5OnAPS6LfNQD6o3yjz+5/y+0ODT3uCpcORbx/oBH/1WJr7KlGWpQZarm/7aXxiDh87u8vsy1uzzwEAMB1vjsUEc+1G/+l8WBTuf8VayhjEfH/iLgvIu6PiC0R8UBEXvahiHi4y+O3rpDcOP5JL95SYKuUjf9eKNa2lsd//9Tz+AtjlSK3OY9/KDlyrDa/uzgnu2JoXZafWuEY37/06+ed9jWP/7ItO345FmxIL1ZbJujmZpZm1hj2skufRGyrtsSfS6JcxkkiYmtEbOvqL1+7wzj2zNfbO5W6efwr6ME6U/2riKcb7X8uWuIvJR3XJ6cO7J/eN7k+avO7J8ur4kY//3L+9U7HX1P8PZC1/4bW6z+3HP9Ysj5i8fSZ4/l67WK0rhDf1PnfP+t4T3Or1/9w8maeHi4e+3BmaenUVMRw8uqNj09fe26RrzbHv2tnu/jT/DWujPaRiMgu4h0R8WhEPFbU/fGIeCIidq4Q/48vPvlu9/GvMCvfQ1n8czdr/2hu/+4TleM/fNt9/KWs/ffmqV3FI6t5/VttBddy7gAAAOC/Is0/A5+kE8vpNJ2YaHyGf0tsSGsLi0vPHln44ORc47PyYzGUljNdo03zoVPF3HCZn27J7ynmjb+ojOT5idmF2ly/g4cBt7FD/8/8Uel37YDbzve1YHDp/zC49H8YXPo/DC79HwZXu/7/cR/qAdx53v9hcOn/MLj0fxhc+j8MpI7fjU/X9JV/iXs+EWn3z6pGX+ucrPTDECN3xVltk6iu+scsbjGxru2ufr8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Ma/AQAA//+nZunQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) setregid(0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x12, 0x4}, 0x9, 0xfffffffffffffffe, 0x80, 0x290761e6, r0, r0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB], 0x10) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0xf24, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r7 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000440)={0x2, 0x4e22, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x28}}], 0x2, 0x4000810) 1.954743715s ago: executing program 0 (id=8948): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x80) socket$inet_icmp(0x2, 0x2, 0x1) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x100000000000000, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC], 0x1, 0x266, &(0x7f0000000700)="$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") ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x1f00, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.332450045s ago: executing program 0 (id=8950): open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x207}, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.314246942s ago: executing program 1 (id=8951): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x10001, 0x0, 0x8, 0x1000004}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.266858904s ago: executing program 0 (id=8952): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x10040, &(0x7f00000000c0)={[{@user_xattr}, {@nomblk_io_submit}, {@delalloc}]}, 0xfd, 0x26d, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") unshare(0x26020480) mq_open(0x0, 0x42, 0x0, 0x0) ioctl$FITRIM(r0, 0x40e8662e, 0x0) 1.2441508s ago: executing program 1 (id=8953): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {}, {@usrquota}, {@data_err_ignore}, {@init_itable}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x559, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 1.186684159s ago: executing program 6 (id=8954): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f32, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x4000000000009) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r4, 0x2}], 0x1, 0xfa) r5 = dup2(r3, r4) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x10880, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x26}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x49, 0xc, "c18059de6852b0be7894ea68919c6f5db041e6f6e0c2d287fe126b778773f532627a4e2ef23ce3e07bac608bdd99f3684f8b86bf18fd9b1ea3c8cd937701d93dd8395fead7"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xac, 0x2, 0xa, 0x302, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x73, 0x6, "ec76b054d7f291b04b9508c68696affe7d76629c68228e2319b21814aaf4f773566ccca7d6cc40ba8a4680db79b1c67b37b5493ebb487d41d9f6b8f806bb2495be73c23f697bde0ef161af397a443f7399b77a19a46b496c984d2c7a3d5147f3c874808be98912b6a597235335a8c1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x290}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040015) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") getpid() r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r7, &(0x7f0000000280)={0x7, 0x5, 0x800077, 0x20800000000412, 0x6, 0xf3, 0x80001000, 0xf67, 0x2}) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x260841, 0x0) pread64(r8, 0x0, 0x0, 0x6) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x3, r8, 0x10, {0x2acf, 0x100004004}, 0x9e}, 0x1) 1.184241819s ago: executing program 1 (id=8955): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f32, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x4000000000009) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r4, 0x2}], 0x1, 0xfa) r5 = dup2(r3, r4) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x10880, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x26}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x49, 0xc, "c18059de6852b0be7894ea68919c6f5db041e6f6e0c2d287fe126b778773f532627a4e2ef23ce3e07bac608bdd99f3684f8b86bf18fd9b1ea3c8cd937701d93dd8395fead7"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xac, 0x2, 0xa, 0x302, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x73, 0x6, "ec76b054d7f291b04b9508c68696affe7d76629c68228e2319b21814aaf4f773566ccca7d6cc40ba8a4680db79b1c67b37b5493ebb487d41d9f6b8f806bb2495be73c23f697bde0ef161af397a443f7399b77a19a46b496c984d2c7a3d5147f3c874808be98912b6a597235335a8c1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x290}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040015) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") getpid() r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r7, &(0x7f0000000280)={0x7, 0x5, 0x800077, 0x20800000000412, 0x6, 0xf3, 0x80001000, 0xf67, 0x2}) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x260841, 0x0) pread64(r8, 0x0, 0x0, 0x6) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x3, r8, 0x10, {0x2acf, 0x100004004}, 0x9e}, 0x1) 991.280185ms ago: executing program 7 (id=8956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a310000000005000100070000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x169a82, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) sendfile(r5, r5, 0x0, 0x7) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x2000040) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$HIDIOCGUSAGES(r10, 0xd01c4813, &(0x7f0000000d00)={{0x3, 0x2, 0x0, 0x100, 0x80, 0x10000}, 0x27, [0x2e9f5053, 0x6, 0x8a, 0xfffffffd, 0x2, 0x9, 0x4, 0x2, 0xffffffff, 0xfffffff8, 0xd91, 0x5, 0x20, 0x0, 0x2, 0x1, 0x2, 0x4, 0x9, 0x1, 0x4, 0x81, 0x7, 0xa, 0xd, 0x7, 0xffffffff, 0x4, 0x3, 0x1, 0x6, 0x7ca0be7b, 0xfffffff7, 0x2, 0x7, 0xd1, 0x7, 0x6, 0x8001, 0xbc, 0x7, 0xf071, 0x6, 0x5, 0x7ff, 0x17b4, 0x3, 0x5, 0xffffff81, 0x6, 0x8, 0x9, 0x3, 0x1, 0x2, 0x5, 0xffffff7f, 0xe1d, 0x3, 0x4, 0xd36f, 0x7f, 0x7fffffff, 0x5, 0x2, 0xffff, 0x6, 0xbd, 0xfffffeff, 0x800, 0x80000000, 0x9, 0x200, 0x7, 0x7, 0xce63, 0x40, 0x7, 0xfffffffe, 0x3, 0x401, 0x1, 0x4, 0x2, 0x5, 0xffffffff, 0x1, 0x4, 0x72, 0xffffffff, 0xf1d2, 0x7, 0xb3b, 0x167, 0x10001, 0x0, 0x9, 0x8000, 0xbd, 0x6, 0x3, 0xe136, 0x4, 0x1, 0x8, 0xc, 0x200, 0x4, 0x4, 0x6, 0x1, 0x3, 0x9, 0xffffff53, 0x1, 0x5, 0x3, 0x400, 0x800, 0x8, 0x4, 0x0, 0xffffffff, 0x0, 0x1, 0x9, 0x8, 0x44, 0xd3, 0x37, 0x8, 0x7, 0x0, 0x1, 0x1, 0x7, 0xf0, 0xdd1, 0x400, 0x2, 0xfffffffa, 0x6cd6, 0xf, 0x3, 0x8001, 0x6, 0x10, 0xe6, 0x0, 0x9, 0x101, 0x80000000, 0x8, 0x6, 0xb4e5, 0x8, 0x7, 0x1, 0xb5, 0x9, 0x7, 0xb, 0xffff5005, 0x2, 0x4, 0x6, 0xe6, 0x7ff, 0x8, 0xd, 0x7, 0xde, 0x1, 0x101, 0xfffffffc, 0x5, 0x7f, 0x9, 0x200, 0x5, 0xffff8001, 0x5, 0x1, 0x2, 0x391c1ec7, 0x40, 0x8, 0x11788ef9, 0xb, 0x2, 0x64, 0x10001, 0x1, 0x0, 0x9, 0x3, 0x400, 0xfffffff8, 0xfe29, 0x3, 0x4, 0x2, 0x8, 0x7, 0x6, 0x7, 0x8, 0x7f, 0x7, 0xffffffff, 0x7, 0x6, 0x8, 0xc9, 0x561, 0x400, 0x1, 0x400, 0x7fffffff, 0xc, 0x6, 0x1ff, 0xfffffff1, 0x1, 0xfffffffa, 0x3, 0x0, 0xb3b7, 0xa477, 0x55, 0x9, 0xfffffffe, 0x6, 0x4, 0x2, 0x3, 0x3, 0x75a, 0x2, 0x7fffffff, 0x100, 0x10000, 0x0, 0xff, 0xba124059, 0x1000, 0x5, 0x2, 0x11, 0x18, 0x4, 0x5, 0x7fffffff, 0x5, 0x5, 0x3, 0xd2, 0xf6, 0x4, 0xfff, 0x7, 0x5, 0x1, 0x6, 0x97, 0x0, 0x7, 0x5600, 0x6, 0x80000000, 0xfffffe00, 0x4, 0xff, 0x101, 0xfffffbff, 0x5, 0xd, 0x7, 0x80000000, 0x81, 0x4, 0x9, 0x0, 0x5, 0xa31, 0x9, 0x1000, 0x9, 0x81, 0x4, 0x0, 0xfffffffc, 0x2, 0x6076, 0x6, 0x2, 0xf90d, 0x2, 0x7ff, 0x6bf9, 0xbab, 0x6, 0x8, 0x1, 0x8, 0x7, 0x5, 0x7, 0x7, 0x40, 0x4, 0x9b2000, 0x7ff, 0x5, 0x1, 0x2, 0x5, 0x398e, 0x200, 0x7fffffff, 0x8, 0x0, 0x7, 0x5, 0x1, 0xfffff800, 0x0, 0x3deab022, 0x4, 0x6, 0x2, 0x7a, 0x2, 0x1, 0xf5e, 0xcfc9, 0x8, 0x6, 0xffff, 0x5e, 0x9, 0x1, 0x1, 0x7, 0x6, 0x5, 0x800, 0x80000001, 0x0, 0x8, 0x6, 0x401, 0x4e45, 0x0, 0x480, 0x7, 0x1, 0x7, 0x5, 0x7, 0xffff, 0x7, 0x281, 0xfffffff8, 0x7fffffff, 0x9, 0x400, 0x1, 0x76, 0x87db, 0x1000, 0xdee, 0x8, 0x9, 0x401, 0x1, 0x8, 0xfffffff1, 0x80000001, 0x8e, 0x80000000, 0x10001, 0x871, 0x80, 0xfffffff0, 0x3, 0xbac1, 0x2, 0x5, 0x187, 0x10000, 0x9, 0x4, 0x5, 0x1, 0x7, 0x7, 0x3, 0xffff, 0x7, 0x0, 0x11cd, 0x9, 0x100, 0xf60d, 0x2, 0x7, 0x7ca, 0x592, 0x123ace83, 0x7f, 0xf4fc32b, 0x1000, 0x80000000, 0x0, 0x2, 0x8, 0xadfe, 0xd448, 0xfffffffa, 0x0, 0x8, 0x4, 0x0, 0x3, 0x9, 0xfffffffe, 0x8, 0xb1d5, 0x8001, 0x3, 0xa4c9, 0x1, 0xffffd4b7, 0x4, 0x8, 0x7, 0x401, 0x7, 0x5, 0x80000000, 0x2, 0x1, 0x5c8, 0x3, 0x5, 0xe5d, 0x6, 0x5, 0x10000, 0x1ff, 0x9, 0x4, 0xfe, 0x1, 0xa, 0x9, 0x0, 0x9, 0x8, 0xf, 0xffffffc2, 0x1, 0x6, 0x5, 0x5, 0xa7, 0x198, 0x3, 0x3, 0xe, 0x6, 0x5, 0x10001, 0x3ff, 0x10001, 0x38a7, 0x8, 0x7fff, 0x8d, 0x200, 0x0, 0x500000, 0x3, 0x7ff, 0x400, 0xc4, 0x401, 0x90a, 0x2, 0x7, 0xf, 0x10, 0x9, 0x7, 0x8a7, 0x4, 0xff, 0x401, 0x6, 0x1, 0x4c50, 0x0, 0x4, 0x9, 0xcd3e, 0x287, 0x2, 0x1, 0x7fff, 0xa239, 0x7, 0x7fff, 0x4, 0x5, 0x9, 0x5, 0xb63, 0x7b8, 0x6, 0x7, 0x3, 0x9, 0x7, 0x5, 0x58, 0x401, 0x6, 0x9, 0x2, 0xff, 0x1, 0x9, 0x386d, 0x1, 0x1000, 0x400, 0x2, 0x0, 0xd328, 0x7, 0x10001, 0x9, 0x8, 0xf64e, 0x1, 0x1, 0x1832, 0xb6b1, 0x7fffffff, 0x4, 0x0, 0x8, 0xc0d, 0x2064, 0x1, 0x7, 0xf9, 0x1000, 0x2, 0xa46, 0x7f, 0xd1f6, 0x8, 0x6, 0x4, 0x7, 0xfffffffb, 0x80000001, 0x40, 0x9, 0x9, 0x3, 0x7, 0x189b80, 0x1, 0x751, 0x7, 0x8, 0x2, 0x6, 0xe278, 0xa, 0x2, 0x200, 0xfffffff8, 0x7fffffff, 0x7fff, 0x7, 0x3, 0x1, 0xffff, 0x9, 0x4521e2cc, 0x9, 0x582d, 0x4, 0xb, 0xa, 0x1, 0x2, 0x6, 0x3, 0x4, 0x3ff, 0x7, 0x8, 0xac, 0x352, 0x7, 0x9, 0x0, 0x9, 0xff, 0x9, 0x3, 0x8, 0x2, 0x2, 0x1, 0x5634, 0xfffffffe, 0x7, 0x1, 0x1, 0x4, 0xa, 0xfa62, 0xfd, 0x2, 0x80000001, 0x3, 0x40, 0x5, 0x3, 0x0, 0x5, 0x1, 0x400, 0xfff, 0x5, 0x1ff, 0x0, 0x4d, 0x6, 0x8, 0x7, 0x7, 0x7, 0x63a45251, 0x5, 0x1f, 0xa1ca, 0x5, 0x9, 0x4, 0x5, 0x3, 0x4, 0x9, 0xfffffffd, 0x3f6, 0x2, 0x1ff, 0x7, 0x6032, 0xd9c, 0x3, 0x6546, 0xd32, 0x2, 0x10001, 0x4, 0x6, 0x4, 0x1, 0xa, 0xbc, 0x1ff, 0xfa, 0x1, 0xf, 0xfffffffb, 0x1, 0x9, 0x0, 0x4, 0x6, 0x8, 0x4cc2aeb1, 0x7, 0xfffffffb, 0x6, 0x10000, 0x1, 0xfffffffa, 0x80, 0x6, 0x10, 0x7, 0x1ff, 0x4, 0x3, 0x5, 0x0, 0xffff, 0x4, 0xfff, 0x3, 0xffffffff, 0xfff, 0x4, 0xffffffff, 0x1, 0x6, 0x47e, 0x0, 0x8000, 0x101, 0x5, 0xc, 0x3, 0x6, 0x7ffb706b, 0x0, 0x2, 0xfffffff7, 0xf09b, 0xc07, 0x3, 0x9, 0x10, 0x6, 0x6, 0xff, 0x0, 0x475e908c, 0x1, 0x101, 0x80000001, 0xfffffff7, 0xb, 0x5, 0xd6, 0x5c, 0x5, 0x0, 0xff, 0x2, 0x7fffffff, 0x6, 0x8, 0xa2e, 0xfffffff8, 0x4, 0x6, 0x8, 0x9, 0x401, 0x4, 0x0, 0x401, 0x6, 0x2, 0x0, 0xffffffff, 0x7, 0x7, 0x9, 0x1, 0x2, 0x8, 0x8d1f, 0x8, 0xf13, 0x8, 0x80000001, 0x9, 0x47, 0x6, 0x0, 0x3, 0x7f1864d3, 0x0, 0x7, 0x8, 0xb, 0x8, 0x5, 0x7fff, 0x5, 0x401, 0xfffffff7, 0x7fffffff, 0x8, 0x40, 0x3, 0x3ff, 0x2c2, 0x9, 0xfffffc01, 0x7ff, 0x9, 0x0, 0x7, 0x848, 0x9, 0x9, 0x4c6e, 0x6, 0x9, 0x200, 0x101, 0xf052, 0x1, 0x100, 0xf, 0xe60, 0x6, 0x3, 0x5, 0xe, 0x0, 0x42, 0x8, 0xcd4, 0x13c, 0xeb53, 0x1, 0x0, 0xff, 0xfffffffa, 0xab9, 0xfffffffa, 0x2, 0x5, 0x2, 0xfffff000, 0x7fff, 0xfffffff3, 0x8, 0x7fff, 0x30000000, 0x4648, 0x2, 0x2, 0x1, 0x6, 0x7, 0x0, 0x0, 0x5, 0x3, 0x0, 0x78, 0x6, 0x0, 0x7, 0x8, 0xf, 0x510c, 0x5, 0x2, 0x6, 0x9, 0x1, 0xffffffff, 0x0, 0x5, 0x32177485, 0x10000, 0xa2da, 0x0, 0x3, 0xf94, 0xfffffffd, 0xfffffff9, 0x0, 0x1, 0x0, 0x2, 0x1, 0x7, 0x9, 0xffffffff, 0xf, 0xfffffff7, 0x14400000, 0x5, 0x1, 0x8001, 0x3, 0x3, 0x9, 0x10000000, 0x7cd2, 0x368, 0x0, 0x1b, 0x8, 0x9, 0x7, 0x8, 0xc, 0x7, 0x3, 0x4, 0x7, 0x9, 0xd, 0x40, 0x4, 0x7f, 0x100, 0x8000, 0x182e000, 0x1000, 0x7deb369d, 0x5, 0x3, 0xffff33a1, 0x6, 0xd89a, 0x2, 0xfffffffa, 0x11, 0x8, 0x8001, 0x7f, 0xf, 0xff, 0xbebc, 0x196, 0x8, 0x5, 0x3, 0x401, 0x1000, 0x3, 0x80000000, 0x7, 0xdc31, 0x9, 0xa62, 0x9, 0x5, 0x7, 0x8, 0x4, 0x6, 0x1, 0x1, 0x9, 0x7fffffff, 0xcdf2, 0x4, 0x3, 0x2, 0x290, 0x8, 0x7ff0000, 0x401, 0x7, 0x58, 0x4, 0x8, 0x146d1f3a, 0x4, 0x4, 0x9, 0x3, 0x5, 0x200, 0x7, 0x6, 0x8, 0x9, 0x2, 0x4, 0x9, 0x1ff, 0x4, 0x0, 0x1, 0x400, 0x1000, 0x3, 0xffff, 0xbe, 0xfff, 0x7fffffff, 0x9, 0xff, 0x4, 0x0, 0x0, 0x2, 0xffff7fff, 0x6, 0x2, 0x4, 0x0, 0x39, 0xffffffff, 0x8, 0x6, 0xc, 0x4000000, 0x9, 0x0, 0x0, 0x2d0, 0x3, 0x3, 0x6, 0x4, 0x2, 0x38, 0x3ff, 0x0, 0x897, 0x805, 0xfffffff6, 0x7]}) 902.135159ms ago: executing program 6 (id=8957): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc341, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], &(0x7f0000001280)=""/4109, 0x3e, 0x100d, 0xa}, 0x28) (async) getdents(r0, 0xfffffffffffffffd, 0xbb) 864.216193ms ago: executing program 7 (id=8958): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000001, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (fail_nth: 4) 822.881895ms ago: executing program 1 (id=8959): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000200)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r9) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) socket$nl_rdma(0x10, 0x3, 0x14) gettid() socket$rxrpc(0x21, 0x2, 0x2) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) fsmount(r0, 0x0, 0x4) 536.944215ms ago: executing program 0 (id=8960): setreuid(0x0, 0xee00) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000009, 0x3032, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) (fail_nth: 1) 480.431835ms ago: executing program 6 (id=8961): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) (async) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x1100) unshare(0x3a040d00) (async) unshare(0x3a040d00) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, 0x0, &(0x7f0000000180)) (async) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, 0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syslog(0x4, &(0x7f0000000040)=""/38, 0x26) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xd}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xd}, &(0x7f0000000100)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, 0x0, 0x40000000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, 0x0, 0x40000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) io_uring_enter(r6, 0x1e75, 0x82ffff, 0xe, 0x0, 0xe) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) 459.087072ms ago: executing program 7 (id=8962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0xe8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc0e99db6de761fc6, 0xa774) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000080a03000000000000000000020000050c00034000000000000000020900010073797a30000000000900020073797a32000000001400000000000000000000000a00000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004010, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) socket(0x28, 0x5, 0x0) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b0000119500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10}}}, 0x84) 341.647861ms ago: executing program 7 (id=8963): r0 = socket(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x438, 0x210, 0x0, 0xffffffff, 0x2c8, 0x210, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, &(0x7f0000000040), {[{{@ip={@multicast2, @private=0xa010101, 0x0, 0x0, 'veth1_vlan\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x8, 0x2, 0x44}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0x8}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@empty, @ipv4=@rand_addr=0x64010102, @gre_key=0x1, @gre_key=0xfffd}}}, {{@ip={@empty, @remote, 0xffffff00, 0xff, 'xfrm0\x00', 'gre0\x00', {0xff}, {0xff}, 0x4, 0x7, 0x4}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x802, 0xc00, 0x0, 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x2, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @broadcast, @rand_addr=0x64010102, @port=0x4e22, @icmp_id=0x65}}}}, {{@ip={@local, @loopback, 0xff, 0xffffffff, 'wg2\x00', 'lo\x00', {0xff}, {}, 0x88}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xa, @ipv4=@broadcast, @ipv6=@mcast2, @gre_key=0x3, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x5, 0x819}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1e, @multicast2, @rand_addr=0x64010102, @icmp_id=0x65, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 115.795331ms ago: executing program 7 (id=8964): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) 65.895052ms ago: executing program 0 (id=8965): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001340)={{}, "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"}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xffffffff}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000025c0)}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x405, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_config_ext={0xfff, 0x90001}, 0x100410, 0x200, 0x400000a, 0x1, 0x2ca, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r4) 1.25556ms ago: executing program 7 (id=8966): open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x207}, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 1 (id=8967): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x8, 0x4) kernel console output (not intermixed with test programs): 0x7ffc0000 [ 1119.191619][ T28] audit: type=1326 audit(1772590040.842:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.1.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b742c799 code=0x7ffc0000 [ 1119.215194][ T28] audit: type=1400 audit(1772590042.142:4758): avc: denied { recv } for pid=4300 comm="syz.7.8518" saddr=10.128.0.163 src=30036 daddr=10.128.0.80 dest=60476 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1119.243679][ T28] audit: type=1400 audit(1772590042.442:4759): avc: denied { perfmon } for pid=4300 comm="syz.7.8518" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1119.326203][ T4316] FAULT_INJECTION: forcing a failure. [ 1119.326203][ T4316] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.340796][ T4319] xt_recent: Unsupported userspace flags (000000b1) [ 1119.353757][ T4316] CPU: 0 UID: 0 PID: 4316 Comm: syz.5.8519 Tainted: G W syzkaller #0 PREEMPT(full) [ 1119.353794][ T4316] Tainted: [W]=WARN [ 1119.353862][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1119.353874][ T4316] Call Trace: [ 1119.353880][ T4316] [ 1119.353896][ T4316] __dump_stack+0x1d/0x30 [ 1119.353923][ T4316] dump_stack_lvl+0x95/0xd0 [ 1119.354023][ T4316] dump_stack+0x15/0x1b [ 1119.354046][ T4316] should_fail_ex+0x263/0x280 [ 1119.354144][ T4316] should_failslab+0x8c/0xb0 [ 1119.354167][ T4316] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 1119.354192][ T4316] ? sidtab_sid2str_get+0xa0/0x130 [ 1119.354292][ T4316] ? sidtab_sid2str_put+0x1b5/0x360 [ 1119.354313][ T4316] kmemdup_noprof+0x2b/0x70 [ 1119.354335][ T4316] sidtab_sid2str_get+0xa0/0x130 [ 1119.354360][ T4316] security_sid_to_context_core+0x1eb/0x2e0 [ 1119.354405][ T4316] security_sid_to_context+0x27/0x40 [ 1119.354428][ T4316] avc_audit_post_callback+0x10f/0x540 [ 1119.354462][ T4316] ? audit_log_lsm_data+0xb3e/0xbb0 [ 1119.354495][ T4316] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1119.354525][ T4316] common_lsm_audit+0x1ba/0x230 [ 1119.354621][ T4316] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1119.354749][ T4316] slow_avc_audit+0x14c/0x190 [ 1119.354778][ T4316] avc_has_perm+0x144/0x190 [ 1119.354808][ T4316] selinux_socket_setsockopt+0x19d/0x200 [ 1119.354840][ T4316] security_socket_setsockopt+0x42/0x80 [ 1119.354989][ T4316] __sys_setsockopt+0x98/0x200 [ 1119.355070][ T4316] __x64_sys_setsockopt+0x64/0x80 [ 1119.355141][ T4316] x64_sys_call+0x2327/0x3020 [ 1119.355170][ T4316] do_syscall_64+0x12c/0x370 [ 1119.355312][ T4316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.355338][ T4316] RIP: 0033:0x7f9f246cc799 [ 1119.355356][ T4316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.355451][ T4316] RSP: 002b:00007f9f2311f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1119.355471][ T4316] RAX: ffffffffffffffda RBX: 00007f9f24945fa0 RCX: 00007f9f246cc799 [ 1119.355485][ T4316] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1119.355496][ T4316] RBP: 00007f9f2311f090 R08: 0000000000000330 R09: 0000000000000000 [ 1119.355510][ T4316] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.355523][ T4316] R13: 00007f9f24946038 R14: 00007f9f24945fa0 R15: 00007ffd01d98dc8 [ 1119.355607][ T4316] [ 1119.673807][ T4328] loop5: detected capacity change from 0 to 128 [ 1119.688937][ T4330] loop2: detected capacity change from 0 to 1024 [ 1119.697328][ T4328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1119.717499][ T4328] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1119.817134][ T4330] EXT4-fs: inline encryption not supported [ 1119.823029][ T4330] EXT4-fs: Ignoring removed nobh option [ 1119.835971][ T4328] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.849933][ T4330] EXT4-fs: Ignoring removed bh option [ 1119.879389][ T4330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.879261][ T4330] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.8525: Allocating blocks 497-513 which overlap fs metadata [ 1120.891649][ T4344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4344 comm=syz.1.8528 [ 1120.908400][ T4330] EXT4-fs (loop2): pa ffff88810056ed20: logic 256, phys. 385, len 8 [ 1120.916568][ T4330] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 1120.927925][T24699] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1121.000192][ T4351] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002 [ 1121.154699][ T4032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.218513][ T4360] loop5: detected capacity change from 0 to 256 [ 1121.322229][ T4361] bond7: entered promiscuous mode [ 1121.327356][ T4361] bond7: entered allmulticast mode [ 1121.332722][ T4361] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1121.568419][ T4373] random: crng reseeded on system resumption [ 1121.595454][ T4375] siw: device registration error -23 [ 1121.603811][ T4375] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8538'. [ 1121.618739][ T4375] loop5: detected capacity change from 0 to 512 [ 1121.626444][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 1121.626510][ T28] audit: type=1400 audit(1772590044.782:4815): avc: denied { create } for pid=4368 comm="syz.5.8538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1121.727894][ T28] audit: type=1400 audit(1772590044.792:4816): avc: denied { write } for pid=4368 comm="syz.5.8538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1121.750730][ T28] audit: type=1400 audit(1772590044.882:4817): avc: denied { create } for pid=4368 comm="syz.5.8538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1121.987503][ T28] audit: type=1400 audit(1772590045.172:4818): avc: denied { read } for pid=4382 comm="syz.1.8541" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1122.011335][ T28] audit: type=1400 audit(1772590045.172:4819): avc: denied { open } for pid=4382 comm="syz.1.8541" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1122.036257][ T28] audit: type=1400 audit(1772590045.172:4820): avc: denied { ioctl } for pid=4382 comm="syz.1.8541" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1122.061978][ T28] audit: type=1400 audit(1772590045.172:4821): avc: denied { create } for pid=4382 comm="syz.1.8541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1122.082175][ T28] audit: type=1400 audit(1772590045.172:4822): avc: denied { create } for pid=4382 comm="syz.1.8541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1122.104051][ T4388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4388 comm=syz.0.8543 [ 1123.202145][ T28] audit: type=1400 audit(1772590046.372:4823): avc: denied { name_bind } for pid=4397 comm="syz.7.8546" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1124.176368][ T28] audit: type=1400 audit(1772590046.372:4824): avc: denied { node_bind } for pid=4397 comm="syz.7.8546" saddr=::ffff:127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1124.663161][ T4399] autofs4:pid:4399:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.32), cmd(0xc018937e) [ 1124.698919][ T4399] autofs4:pid:4399:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1124.841437][ T4409] devtmpfs: Unknown parameter 'inole32' [ 1124.906142][ T4408] loop2: detected capacity change from 0 to 512 [ 1124.976348][ T4412] siw: device registration error -23 [ 1125.048355][ T4408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.127473][ T4408] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1125.773405][ T4442] lo speed is unknown, defaulting to 1000 [ 1126.663390][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 1126.663487][ T28] audit: type=1400 audit(1772590049.852:4902): avc: denied { unmount } for pid=4032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1127.630096][ T4032] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 1127.642849][ T28] audit: type=1400 audit(1772590049.902:4903): avc: denied { remove_name } for pid=4032 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1127.668288][ T4032] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 1127.676246][ T28] audit: type=1400 audit(1772590049.902:4904): avc: denied { rmdir } for pid=4032 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1127.720709][ T4450] xt_recent: Unsupported userspace flags (000000b1) [ 1127.721808][ T28] audit: type=1400 audit(1772590050.912:4905): avc: denied { read write } for pid=4446 comm="syz.7.8563" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1127.721834][ T28] audit: type=1400 audit(1772590050.912:4906): avc: denied { open } for pid=4446 comm="syz.7.8563" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1128.003692][ T28] audit: type=1400 audit(1772590051.192:4907): avc: denied { write } for pid=4448 comm="syz.0.8561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1128.003724][ T28] audit: type=1400 audit(1772590051.192:4908): avc: denied { ioctl } for pid=4448 comm="syz.0.8561" path="socket:[128070]" dev="sockfs" ino=128070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1128.344591][ T28] audit: type=1400 audit(1772590051.542:4909): avc: denied { mounton } for pid=4460 comm="syz.0.8564" path="/proc/144/task" dev="proc" ino=128086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1128.376598][ T28] audit: type=1400 audit(1772590051.542:4910): avc: denied { mount } for pid=4460 comm="syz.0.8564" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1128.791464][ T4477] lo speed is unknown, defaulting to 1000 [ 1128.855626][ T4420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.905686][ T28] audit: type=1400 audit(1772590052.102:4911): avc: denied { name_bind } for pid=4481 comm="syz.5.8574" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1129.078745][T28321] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.095134][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8571'. [ 1129.272138][T28321] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.465875][T28321] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.519329][T28321] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.802426][ T4496] lo speed is unknown, defaulting to 1000 [ 1131.294207][ T4530] lo speed is unknown, defaulting to 1000 [ 1131.427365][T28321] bridge_slave_1: left allmulticast mode [ 1131.433026][T28321] bridge_slave_1: left promiscuous mode [ 1131.439990][T28321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.269980][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1132.270074][ T28] audit: type=1400 audit(1772590055.462:4924): avc: denied { read open } for pid=4540 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.400488][T28321] bridge_slave_0: left allmulticast mode [ 1132.406185][T28321] bridge_slave_0: left promiscuous mode [ 1132.411792][T28321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.724397][ T28] audit: type=1400 audit(1772590055.622:4925): avc: denied { getattr } for pid=4540 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.772279][ T28] audit: type=1400 audit(1772590055.962:4926): avc: denied { create } for pid=4543 comm="syz.0.8587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1132.822696][ T28] audit: type=1400 audit(1772590055.992:4927): avc: denied { getopt } for pid=4543 comm="syz.0.8587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1132.853698][ T28] audit: type=1400 audit(1772590055.992:4928): avc: denied { create } for pid=4543 comm="syz.0.8587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1132.901127][ T28] audit: type=1400 audit(1772590056.082:4929): avc: denied { add_name } for pid=4537 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.951517][ T28] audit: type=1400 audit(1772590056.082:4930): avc: denied { create } for pid=4537 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1132.977751][ T28] audit: type=1400 audit(1772590056.082:4931): avc: denied { write } for pid=4537 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth13.link" dev="tmpfs" ino=52147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1133.007973][ T28] audit: type=1400 audit(1772590056.082:4932): avc: denied { append } for pid=4537 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" dev="tmpfs" ino=52147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1133.033315][ T28] audit: type=1400 audit(1772590056.132:4933): avc: denied { remove_name } for pid=4559 comm="rm" name="resolv.conf.eth13.link" dev="tmpfs" ino=52147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.080444][ T4570] xt_recent: Unsupported userspace flags (000000b1) [ 1133.116678][T28321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.127854][T28321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.137456][T28321] bond0 (unregistering): Released all slaves [ 1133.166136][ T4496] chnl_net:caif_netlink_parms(): no params data found [ 1133.203328][ T4579] xt_recent: Unsupported userspace flags (000000b1) [ 1133.220488][T28321] hsr_slave_0: left promiscuous mode [ 1133.230255][T28321] hsr_slave_1: left promiscuous mode [ 1133.236044][T28321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.243427][T28321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.251150][T28321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.258695][T28321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.269507][T28321] veth1_macvtap: left promiscuous mode [ 1133.275177][T28321] veth0_macvtap: left promiscuous mode [ 1133.283479][T28321] veth1_vlan: left promiscuous mode [ 1133.293701][T28321] veth0_vlan: left promiscuous mode [ 1133.403316][T28321] team0 (unregistering): Port device team_slave_1 removed [ 1133.413341][T28321] team0 (unregistering): Port device team_slave_0 removed [ 1133.459520][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.479284][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.486617][ T4496] bridge_slave_0: entered allmulticast mode [ 1133.493131][ T4496] bridge_slave_0: entered promiscuous mode [ 1133.500976][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.523714][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.530875][ T4496] bridge_slave_1: entered allmulticast mode [ 1133.554233][ T4496] bridge_slave_1: entered promiscuous mode [ 1133.588252][ T4496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.601002][ T4496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.630244][ T4496] team0: Port device team_slave_0 added [ 1133.638073][ T4496] team0: Port device team_slave_1 added [ 1133.660990][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.668467][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.698460][ T4496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.711428][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.718531][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.744879][ T4496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.788715][ T4496] hsr_slave_0: entered promiscuous mode [ 1133.795546][ T4496] hsr_slave_1: entered promiscuous mode [ 1134.936400][ T4594] lo speed is unknown, defaulting to 1000 [ 1134.962842][ T9474] Bluetooth: hci0: Frame reassembly failed (-84) [ 1136.074813][ T4570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1136.086082][ T4496] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1136.109777][ T4496] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1136.138256][ T4601] loop7: detected capacity change from 0 to 512 [ 1136.163234][ T4496] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1136.253077][ T4601] EXT4-fs: Ignoring removed mblk_io_submit option [ 1136.265207][ T4496] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1136.272886][ T4601] EXT4-fs (loop7): 1 truncate cleaned up [ 1136.283228][ T4601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.253156][T24457] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1137.371728][ T4496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.383237][ T4496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.073017][ T4635] lo speed is unknown, defaulting to 1000 [ 1138.319204][ T4496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1138.329721][ T4496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1138.349065][T28321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.356139][T28321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.418015][T28321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.425166][T28321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.527186][ T4496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.794114][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1138.794127][ T28] audit: type=1400 audit(1772590061.992:4940): avc: denied { create } for pid=4668 comm="syz.1.8604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1138.826277][ T4669] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002 [ 1138.877210][ T4496] veth0_vlan: entered promiscuous mode [ 1138.893928][ T28] audit: type=1400 audit(1772590062.022:4941): avc: denied { create } for pid=4668 comm="syz.1.8604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1138.921124][ T4496] veth1_vlan: entered promiscuous mode [ 1138.967302][ T4496] veth0_macvtap: entered promiscuous mode [ 1138.985495][ T28] audit: type=1400 audit(1772590062.022:4942): avc: denied { setopt } for pid=4668 comm="syz.1.8604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1139.015658][ T4496] veth1_macvtap: entered promiscuous mode [ 1139.038063][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.053899][ T4638] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz.7.8597: invalid fast symlink length 39 [ 1139.068075][ T4638] EXT4-fs (loop7): Remounting filesystem read-only [ 1139.068082][ T28] audit: type=1400 audit(1772590062.032:4943): avc: denied { ioctl } for pid=4668 comm="syz.1.8604" path="socket:[128755]" dev="sockfs" ino=128755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1139.105255][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.117291][ T9474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.137309][ T9474] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.158922][ T9474] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.280290][ T9474] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.298734][ T28] audit: type=1400 audit(1772590062.032:4944): avc: denied { bind } for pid=4668 comm="syz.1.8604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1139.298760][ T28] audit: type=1400 audit(1772590062.032:4945): avc: denied { write } for pid=4668 comm="syz.1.8604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1139.298781][ T28] audit: type=1400 audit(1772590062.162:4946): avc: denied { connect } for pid=4668 comm="syz.1.8604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1140.130069][ T4704] lo speed is unknown, defaulting to 1000 [ 1140.163480][T23622] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.591537][ T28] audit: type=1400 audit(1772590063.782:4947): avc: denied { create } for pid=4763 comm="syz.1.8608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1140.611402][ T4764] loop6: detected capacity change from 0 to 8 [ 1140.611945][ C1] blk_print_req_error: 1 callbacks suppressed [ 1140.611972][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1140.612005][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1140.612070][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1140.612094][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1140.612113][ T7283] loop6: unable to read partition table [ 1140.613053][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1140.613086][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1140.613203][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1140.613249][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1140.613351][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1140.613388][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1140.613479][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1140.613509][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1140.613682][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1140.613715][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1140.919545][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.041447][ T28] audit: type=1400 audit(1772590064.162:4948): avc: denied { mounton } for pid=4496 comm="syz-executor" path="/root/syzkaller.jaFBzs/syz-tmp" dev="sda1" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1141.050056][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1141.058493][ T28] audit: type=1400 audit(1772590064.162:4949): avc: denied { mount } for pid=4496 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1141.187173][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.197848][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1141.212530][ T4809] xt_recent: Unsupported userspace flags (000000b1) [ 1141.213676][ T4764] loop6: unable to read partition table [ 1141.226641][ T4764] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 1141.241236][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.251875][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1141.261118][ T4774] loop6: unable to read partition table [ 1141.266935][ T4774] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 1141.292893][ T4819] random: crng reseeded on system resumption [ 1141.300222][ T3000] loop6: unable to read partition table [ 1141.352197][ T4831] lo speed is unknown, defaulting to 1000 [ 1141.373092][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 1141.606049][ T4858] random: crng reseeded on system resumption [ 1141.708911][ T4872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8619'. [ 1141.731947][ T4872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8619'. [ 1141.759186][ T4874] lo speed is unknown, defaulting to 1000 [ 1142.219722][ T9474] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.246302][ T4875] lo speed is unknown, defaulting to 1000 [ 1142.276012][ T9474] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.397703][ T9474] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.458724][ T4875] chnl_net:caif_netlink_parms(): no params data found [ 1142.499514][ T9474] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.632673][ T4875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.656904][ T4875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.675887][ T4875] bridge_slave_0: entered allmulticast mode [ 1142.682361][ T4875] bridge_slave_0: entered promiscuous mode [ 1142.728373][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.735796][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.744968][ T4875] bridge_slave_1: entered allmulticast mode [ 1142.759629][ T4875] bridge_slave_1: entered promiscuous mode [ 1142.786847][ T9474] bridge_slave_1: left allmulticast mode [ 1142.792557][ T9474] bridge_slave_1: left promiscuous mode [ 1142.807366][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.823813][ T9474] bridge_slave_0: left allmulticast mode [ 1142.830103][ T9474] bridge_slave_0: left promiscuous mode [ 1142.836087][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.045334][ T9474] bond0 (unregistering): Released all slaves [ 1143.060536][ T9474] bond1 (unregistering): Released all slaves [ 1143.078197][ T9474] bond2 (unregistering): Released all slaves [ 1143.095693][ T9474] bond3 (unregistering): Released all slaves [ 1143.113039][ T9474] bond4 (unregistering): Released all slaves [ 1143.131517][ T9474] bond5 (unregistering): Released all slaves [ 1143.149838][ T9474] bond6 (unregistering): Released all slaves [ 1143.167016][ T9474] bond7 (unregistering): Released all slaves [ 1143.195190][ T4875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.216950][ T4875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.262600][ T9474] IPVS: stopping backup sync thread 4184 ... [ 1143.286629][ T4875] team0: Port device team_slave_0 added [ 1143.302058][ T4875] team0: Port device team_slave_1 added [ 1143.317040][ T9474] hsr_slave_0: left promiscuous mode [ 1143.327106][ T9474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.343312][ T9474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.358959][ T9474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.372327][ T9474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1143.393970][T28437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1143.402840][ T9474] veth1_macvtap: left promiscuous mode [ 1143.408754][ T9474] veth0_macvtap: left promiscuous mode [ 1143.414800][ T9474] veth1_vlan: left promiscuous mode [ 1143.420240][ T9474] veth0_vlan: left promiscuous mode [ 1143.543614][ T9474] team0 (unregistering): Port device team_slave_1 removed [ 1143.565041][ T9474] team0 (unregistering): Port device team_slave_0 removed [ 1143.618494][ T3400] lo speed is unknown, defaulting to 1000 [ 1143.624343][ T3400] infiniband syz0: ib_query_port failed (-19) [ 1143.630866][ T4956] netlink: 'syz.0.8628': attribute type 12 has an invalid length. [ 1143.655776][ T4875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.670232][ T4875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.696858][ T4875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.711642][ T4875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.726509][ T4875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.755500][ T4875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.797263][ T4875] hsr_slave_0: entered promiscuous mode [ 1143.820666][ T4875] hsr_slave_1: entered promiscuous mode [ 1143.830232][ T4875] debugfs: 'hsr0' already exists in 'hsr' [ 1143.837849][ T4875] Cannot create hsr debugfs directory [ 1144.134311][ T5000] FAULT_INJECTION: forcing a failure. [ 1144.134311][ T5000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.174708][ T5000] CPU: 1 UID: 0 PID: 5000 Comm: syz.1.8632 Tainted: G W syzkaller #0 PREEMPT(full) [ 1144.174805][ T5000] Tainted: [W]=WARN [ 1144.174812][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1144.174825][ T5000] Call Trace: [ 1144.174832][ T5000] [ 1144.174841][ T5000] __dump_stack+0x1d/0x30 [ 1144.174868][ T5000] dump_stack_lvl+0x95/0xd0 [ 1144.174961][ T5000] dump_stack+0x15/0x1b [ 1144.174983][ T5000] should_fail_ex+0x263/0x280 [ 1144.175008][ T5000] should_fail+0xb/0x20 [ 1144.175028][ T5000] should_fail_usercopy+0x1a/0x20 [ 1144.175082][ T5000] _copy_from_user+0x1c/0xb0 [ 1144.175113][ T5000] __sys_bpf+0x183/0x7e0 [ 1144.175142][ T5000] __x64_sys_bpf+0x41/0x50 [ 1144.175178][ T5000] x64_sys_call+0x10cb/0x3020 [ 1144.175288][ T5000] do_syscall_64+0x12c/0x370 [ 1144.175312][ T5000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.175359][ T5000] RIP: 0033:0x7f07b742c799 [ 1144.175378][ T5000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.175398][ T5000] RSP: 002b:00007f07b5e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1144.175464][ T5000] RAX: ffffffffffffffda RBX: 00007f07b76a5fa0 RCX: 00007f07b742c799 [ 1144.175544][ T5000] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1144.175559][ T5000] RBP: 00007f07b5e87090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.175574][ T5000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.175589][ T5000] R13: 00007f07b76a6038 R14: 00007f07b76a5fa0 R15: 00007ffc469bb0b8 [ 1144.175664][ T5000] [ 1144.180614][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1144.180629][ T28] audit: type=1400 audit(1772590067.372:4974): avc: denied { write } for pid=5003 comm="syz.6.8633" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1144.221636][ T5004] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.8633' sets config #0 [ 1144.312601][ T28] audit: type=1400 audit(1772590067.512:4975): avc: denied { unmount } for pid=24699 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1144.319624][ T5020] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.8633' sets config #1 [ 1144.346455][ T4875] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1144.355328][ T5004] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8633'. [ 1144.426678][ T28] audit: type=1400 audit(1772590067.602:4976): avc: denied { create } for pid=5009 comm="syz.0.8635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1144.463344][ T4875] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1144.492775][ T4875] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1144.501203][ T4875] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1144.520164][ T9009] Bluetooth: hci0: Frame reassembly failed (-84) [ 1144.520236][ T9009] Bluetooth: hci0: Frame reassembly failed (-84) [ 1144.520256][ T9009] Bluetooth: hci0: Frame reassembly failed (-84) [ 1144.520289][ T9009] Bluetooth: hci0: Frame reassembly failed (-84) [ 1144.520308][ T9009] Bluetooth: hci0: Frame reassembly failed (-84) [ 1144.591698][ T5049] netlink: 63 bytes leftover after parsing attributes in process `syz.6.8641'. [ 1144.618749][ T4875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.653210][ T28] audit: type=1400 audit(1772590067.842:4977): avc: denied { write } for pid=5048 comm="syz.6.8641" name="fib_trie" dev="proc" ino=4026532602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1144.689565][ T4875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.712616][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.719770][ T9885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.729870][ T28] audit: type=1400 audit(1772590067.922:4978): avc: denied { ioctl } for pid=5066 comm="syz.1.8643" path="socket:[129583]" dev="sockfs" ino=129583 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1144.759690][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.766774][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.769994][ T28] audit: type=1400 audit(1772590067.952:4979): avc: denied { write } for pid=5066 comm="syz.1.8643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1144.803884][ T28] audit: type=1400 audit(1772590067.952:4980): avc: denied { nlmsg_write } for pid=5066 comm="syz.1.8643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1144.849051][ T28] audit: type=1400 audit(1772590068.042:4981): avc: denied { relabelfrom } for pid=5068 comm="syz.6.8644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1144.873315][ T28] audit: type=1400 audit(1772590068.042:4982): avc: denied { relabelto } for pid=5068 comm="syz.6.8644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1144.938474][ T4875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.962692][ T5079] FAULT_INJECTION: forcing a failure. [ 1144.962692][ T5079] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.975622][ T5079] CPU: 0 UID: 0 PID: 5079 Comm: syz.1.8645 Tainted: G W syzkaller #0 PREEMPT(full) [ 1144.975659][ T5079] Tainted: [W]=WARN [ 1144.975667][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1144.975681][ T5079] Call Trace: [ 1144.975688][ T5079] [ 1144.975731][ T5079] __dump_stack+0x1d/0x30 [ 1144.975760][ T5079] dump_stack_lvl+0x95/0xd0 [ 1144.975848][ T5079] dump_stack+0x15/0x1b [ 1144.975873][ T5079] should_fail_ex+0x263/0x280 [ 1144.975899][ T5079] should_failslab+0x8c/0xb0 [ 1144.975923][ T5079] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1144.975951][ T5079] ? __alloc_skb+0x2d6/0x690 [ 1144.976026][ T5079] __alloc_skb+0x2d6/0x690 [ 1144.976049][ T5079] ? asm_sysvec_call_function_single+0x10/0x20 [ 1144.976137][ T5079] ? __alloc_skb+0x200/0x690 [ 1144.976236][ T5079] netlink_alloc_large_skb+0xbf/0xf0 [ 1144.976290][ T5079] netlink_sendmsg+0x40c/0x6f0 [ 1144.976414][ T5079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1144.976448][ T5079] ____sys_sendmsg+0x5af/0x600 [ 1144.976481][ T5079] ___sys_sendmsg+0x195/0x1e0 [ 1144.976588][ T5079] __x64_sys_sendmsg+0xd4/0x160 [ 1144.976617][ T5079] x64_sys_call+0x194c/0x3020 [ 1144.976642][ T5079] do_syscall_64+0x12c/0x370 [ 1144.976666][ T5079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.976773][ T5079] RIP: 0033:0x7f07b742c799 [ 1144.976792][ T5079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.976812][ T5079] RSP: 002b:00007f07b5e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1144.976835][ T5079] RAX: ffffffffffffffda RBX: 00007f07b76a5fa0 RCX: 00007f07b742c799 [ 1144.976851][ T5079] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 1144.976867][ T5079] RBP: 00007f07b5e87090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.976928][ T5079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.976942][ T5079] R13: 00007f07b76a6038 R14: 00007f07b76a5fa0 R15: 00007ffc469bb0b8 [ 1144.977022][ T5079] [ 1145.263467][ T4875] veth0_vlan: entered promiscuous mode [ 1145.276765][ T4875] veth1_vlan: entered promiscuous mode [ 1145.293051][ T4875] veth0_macvtap: entered promiscuous mode [ 1145.302347][ T4875] veth1_macvtap: entered promiscuous mode [ 1145.319164][ T5102] FAULT_INJECTION: forcing a failure. [ 1145.319164][ T5102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.338003][ T4875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.345973][ T5102] CPU: 0 UID: 0 PID: 5102 Comm: syz.6.8649 Tainted: G W syzkaller #0 PREEMPT(full) [ 1145.346004][ T5102] Tainted: [W]=WARN [ 1145.346010][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.346021][ T5102] Call Trace: [ 1145.346027][ T5102] [ 1145.346062][ T5102] __dump_stack+0x1d/0x30 [ 1145.346087][ T5102] dump_stack_lvl+0x95/0xd0 [ 1145.346109][ T5102] dump_stack+0x15/0x1b [ 1145.346130][ T5102] should_fail_ex+0x263/0x280 [ 1145.346252][ T5102] should_fail+0xb/0x20 [ 1145.346271][ T5102] should_fail_usercopy+0x1a/0x20 [ 1145.346296][ T5102] _copy_from_iter+0xcf/0xea0 [ 1145.346321][ T5102] ? skb_set_owner_w+0x19b/0x200 [ 1145.346348][ T5102] ? sock_alloc_send_pskb+0x469/0x500 [ 1145.346418][ T5102] skb_copy_datagram_from_iter+0xb2/0x480 [ 1145.346449][ T5102] ? skb_put+0xa9/0xf0 [ 1145.346471][ T5102] tun_get_user+0x90b/0x27c0 [ 1145.346494][ T5102] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1145.346555][ T5102] tun_chr_write_iter+0x15e/0x210 [ 1145.346677][ T5102] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1145.346735][ T5102] vfs_write+0x5a6/0x9f0 [ 1145.346769][ T5102] ksys_write+0xdc/0x1a0 [ 1145.346788][ T5102] __x64_sys_write+0x40/0x50 [ 1145.346805][ T5102] x64_sys_call+0x27e1/0x3020 [ 1145.346903][ T5102] do_syscall_64+0x12c/0x370 [ 1145.346930][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.346952][ T5102] RIP: 0033:0x7f7e1541c799 [ 1145.347038][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.347055][ T5102] RSP: 002b:00007f7e13e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1145.347075][ T5102] RAX: ffffffffffffffda RBX: 00007f7e15695fa0 RCX: 00007f7e1541c799 [ 1145.347089][ T5102] RDX: 000000000000ffdd RSI: 00002000000000c0 RDI: 0000000000000004 [ 1145.347102][ T5102] RBP: 00007f7e13e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.347116][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.347128][ T5102] R13: 00007f7e15696038 R14: 00007f7e15695fa0 R15: 00007fffbd8365c8 [ 1145.347182][ T5102] [ 1145.348685][ T4875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.552841][ T28] audit: type=1400 audit(1772590068.742:4983): avc: denied { setopt } for pid=5108 comm="syz.1.8651" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1145.587792][ T5110] xt_hashlimit: size too large, truncated to 1048576 [ 1145.628084][ T5112] –: renamed from veth0_to_batadv (while UP) [ 1145.640406][T10221] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.656560][T10221] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.688020][T10221] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.707928][T10221] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.868460][ T5132] xt_socket: unknown flags 0x48 [ 1146.593692][T28437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1146.599901][T24457] Bluetooth: hci0: command 0x1003 tx timeout [ 1148.180111][ T5166] lo speed is unknown, defaulting to 1000 [ 1148.185958][ T5166] lo speed is unknown, defaulting to 1000 [ 1148.191992][ T5166] lo speed is unknown, defaulting to 1000 [ 1148.199359][ T5166] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1148.216277][ T5167] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1148.225394][ T5167] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8666'. [ 1148.240223][ T5167] loop7: detected capacity change from 0 to 512 [ 1148.264917][ T5166] lo speed is unknown, defaulting to 1000 [ 1148.271230][ T5166] lo speed is unknown, defaulting to 1000 [ 1148.277684][ T5166] lo speed is unknown, defaulting to 1000 [ 1148.283912][ T5166] lo speed is unknown, defaulting to 1000 [ 1148.290022][ T5166] lo speed is unknown, defaulting to 1000 [ 1148.521165][ T5177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8673'. [ 1148.593605][ T5179] loop6: detected capacity change from 0 to 512 [ 1148.610402][ T5179] EXT4-fs: Ignoring removed orlov option [ 1148.616474][ T5179] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1148.782052][ T5179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1149.078881][ T5179] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.8672: corrupted in-inode xattr: e_value size too large [ 1149.603017][ T5193] lo speed is unknown, defaulting to 1000 [ 1149.632441][ T5195] lo speed is unknown, defaulting to 1000 [ 1149.842214][ T5179] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1149.843655][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1149.859207][ C1] EXT4-fs (loop6): initial error at time 1772590073: ext4_iget_extra_inode:5025: inode 15 [ 1149.869132][ C1] EXT4-fs (loop6): last error at time 1772590073: ext4_iget_extra_inode:5025: inode 15 [ 1150.633941][ T9474] Bluetooth: hci0: Frame reassembly failed (-84) [ 1150.681222][ T5179] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8672: couldn't read orphan inode 15 (err -117) [ 1150.847379][ T5179] loop6: lost filesystem error report for type 5 error -117 [ 1150.888203][ T5179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1150.928447][ T5208] loop5: detected capacity change from 0 to 512 [ 1150.942817][ T5208] EXT4-fs: Ignoring removed mblk_io_submit option [ 1150.971119][ T5208] EXT4-fs (loop5): 1 truncate cleaned up [ 1150.980326][ T5208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.063796][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1151.063812][ T28] audit: type=1400 audit(1772590074.262:4993): avc: denied { ioctl } for pid=5178 comm="syz.6.8672" path="socket:[130962]" dev="sockfs" ino=130962 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1151.121220][ T5216] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.8679: invalid fast symlink length 39 [ 1151.179146][ T5221] netlink: 35 bytes leftover after parsing attributes in process `syz.0.8680'. [ 1151.191073][ T5216] EXT4-fs (loop5): Remounting filesystem read-only [ 1151.649767][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.675352][T24699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.805241][ T5237] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8684'. [ 1151.885258][ T5245] loop5: detected capacity change from 0 to 512 [ 1151.892736][ T5241] loop6: detected capacity change from 0 to 8192 [ 1151.912128][ T5245] EXT4-fs: Ignoring removed mblk_io_submit option [ 1151.985493][ T28] audit: type=1326 audit(1772590075.182:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.6.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1152.008985][ T28] audit: type=1326 audit(1772590075.182:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.6.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1152.038457][ T28] audit: type=1326 audit(1772590075.202:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.6.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1152.062217][ T28] audit: type=1326 audit(1772590075.202:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.6.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1152.089037][ T5249] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1152.098496][ T5249] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8686'. [ 1152.112733][ T5249] loop7: detected capacity change from 0 to 512 [ 1152.132742][ T5245] EXT4-fs (loop5): 1 truncate cleaned up [ 1152.150678][ T5245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.168573][ T28] audit: type=1326 audit(1772590075.202:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.6.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1152.252428][ T28] audit: type=1326 audit(1772590075.202:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.6.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1152.276175][ T28] audit: type=1326 audit(1772590075.202:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.6.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1152.299802][ T28] audit: type=1326 audit(1772590075.202:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.6.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1152.325074][ T5250] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.8687: invalid fast symlink length 39 [ 1152.336812][ T28] audit: type=1326 audit(1772590075.202:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.6.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1152.364201][ T5250] EXT4-fs (loop5): Remounting filesystem read-only [ 1152.673733][T28437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1152.679882][T24457] Bluetooth: hci0: command 0x1003 tx timeout [ 1152.723469][ T5261] lo speed is unknown, defaulting to 1000 [ 1152.760959][ T5266] netlink: 35 bytes leftover after parsing attributes in process `syz.7.8693'. [ 1152.795790][T24699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.864065][ T5273] FAULT_INJECTION: forcing a failure. [ 1152.864065][ T5273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.905446][ T5273] CPU: 0 UID: 0 PID: 5273 Comm: syz.6.8696 Tainted: G W syzkaller #0 PREEMPT(full) [ 1152.905480][ T5273] Tainted: [W]=WARN [ 1152.905488][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1152.905503][ T5273] Call Trace: [ 1152.905510][ T5273] [ 1152.905518][ T5273] __dump_stack+0x1d/0x30 [ 1152.905588][ T5273] dump_stack_lvl+0x95/0xd0 [ 1152.905610][ T5273] dump_stack+0x15/0x1b [ 1152.905632][ T5273] should_fail_ex+0x263/0x280 [ 1152.905659][ T5273] should_fail+0xb/0x20 [ 1152.905715][ T5273] should_fail_usercopy+0x1a/0x20 [ 1152.905811][ T5273] _copy_to_user+0x20/0xa0 [ 1152.905840][ T5273] simple_read_from_buffer+0xb5/0x130 [ 1152.905862][ T5273] proc_fail_nth_read+0x10e/0x150 [ 1152.905891][ T5273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1152.906077][ T5273] vfs_read+0x1ab/0x7f0 [ 1152.906111][ T5273] ? __rcu_read_unlock+0x4e/0x70 [ 1152.906199][ T5273] ? __fget_files+0x184/0x1c0 [ 1152.906275][ T5273] ? mutex_lock+0x57/0x90 [ 1152.906304][ T5273] ksys_read+0xdc/0x1a0 [ 1152.906397][ T5273] __x64_sys_read+0x40/0x50 [ 1152.906431][ T5273] x64_sys_call+0x2886/0x3020 [ 1152.906457][ T5273] do_syscall_64+0x12c/0x370 [ 1152.906543][ T5273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.906576][ T5273] RIP: 0033:0x7f7e153dcfce [ 1152.906594][ T5273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1152.906610][ T5273] RSP: 002b:00007f7e13e6efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1152.906630][ T5273] RAX: ffffffffffffffda RBX: 00007f7e13e6f6c0 RCX: 00007f7e153dcfce [ 1152.906646][ T5273] RDX: 000000000000000f RSI: 00007f7e13e6f0a0 RDI: 0000000000000003 [ 1152.906661][ T5273] RBP: 00007f7e13e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.906676][ T5273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.906768][ T5273] R13: 00007f7e15696038 R14: 00007f7e15695fa0 R15: 00007fffbd8365c8 [ 1152.906790][ T5273] [ 1153.190954][ T5281] program syz.6.8700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1153.231736][ T5283] lo speed is unknown, defaulting to 1000 [ 1154.368965][ T5296] siw: device registration error -23 [ 1154.705495][ T5296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8703'. [ 1154.892739][ T5305] loop5: detected capacity change from 0 to 512 [ 1154.914926][ T5305] EXT4-fs: Ignoring removed mblk_io_submit option [ 1154.933497][ T5305] EXT4-fs (loop5): 1 truncate cleaned up [ 1154.944337][ T5305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.961000][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.970464][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.033034][ T5322] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.8706: invalid fast symlink length 39 [ 1155.045243][ T5322] EXT4-fs (loop5): Remounting filesystem read-only [ 1155.216853][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8714'. [ 1155.237170][ T5329] futex_wake_op: syz.1.8715 tries to shift op by 36; fix this program [ 1155.348750][ T5329] random: crng reseeded on system resumption [ 1155.459732][ T5335] tmpfs: Unknown parameter 'inoxe32' [ 1156.073193][ T5344] FAULT_INJECTION: forcing a failure. [ 1156.073193][ T5344] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.085868][ T5344] CPU: 1 UID: 0 PID: 5344 Comm: syz.0.8719 Tainted: G W syzkaller #0 PREEMPT(full) [ 1156.085939][ T5344] Tainted: [W]=WARN [ 1156.085948][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1156.085963][ T5344] Call Trace: [ 1156.085971][ T5344] [ 1156.085983][ T5344] __dump_stack+0x1d/0x30 [ 1156.086011][ T5344] dump_stack_lvl+0x95/0xd0 [ 1156.086135][ T5344] dump_stack+0x15/0x1b [ 1156.086160][ T5344] should_fail_ex+0x263/0x280 [ 1156.086184][ T5344] should_failslab+0x8c/0xb0 [ 1156.086220][ T5344] kmem_cache_alloc_noprof+0x66/0x400 [ 1156.086247][ T5344] ? do_getname+0x2e/0x1c0 [ 1156.086276][ T5344] do_getname+0x2e/0x1c0 [ 1156.086299][ T5344] getname_flags+0x1d/0x30 [ 1156.086348][ T5344] do_sys_openat2+0x60/0x130 [ 1156.086379][ T5344] __x64_sys_openat+0xf2/0x120 [ 1156.086410][ T5344] x64_sys_call+0x1e39/0x3020 [ 1156.086441][ T5344] do_syscall_64+0x12c/0x370 [ 1156.086573][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.086600][ T5344] RIP: 0033:0x7fc54debc799 [ 1156.086619][ T5344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.086665][ T5344] RSP: 002b:00007fc54c8d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1156.086687][ T5344] RAX: ffffffffffffffda RBX: 00007fc54e136180 RCX: 00007fc54debc799 [ 1156.086704][ T5344] RDX: 0000000000028000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1156.086717][ T5344] RBP: 00007fc54c8d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.086732][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.086846][ T5344] R13: 00007fc54e136218 R14: 00007fc54e136180 R15: 00007fff51fd9778 [ 1156.086868][ T5344] [ 1156.444233][T24699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.506247][ T28] kauditd_printk_skb: 265 callbacks suppressed [ 1156.512184][ T5373] loop7: detected capacity change from 0 to 128 [ 1156.512618][ T28] audit: type=1400 audit(1772591105.676:5268): avc: denied { bind } for pid=5370 comm="syz.1.8725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1156.529798][ T5372] loop5: detected capacity change from 0 to 512 [ 1156.588045][ T5372] EXT4-fs: Ignoring removed mblk_io_submit option [ 1156.596950][ T28] audit: type=1400 audit(1772591105.686:5269): avc: denied { setopt } for pid=5370 comm="syz.1.8725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1156.639171][ T5382] lo speed is unknown, defaulting to 1000 [ 1156.645770][ T5372] EXT4-fs (loop5): 1 truncate cleaned up [ 1156.654283][ T5372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.705826][ T5372] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.8721: invalid fast symlink length 39 [ 1156.718735][ T5372] EXT4-fs (loop5): Remounting filesystem read-only [ 1156.719054][ T5393] netlink: 596 bytes leftover after parsing attributes in process `syz.0.8732'. [ 1156.744663][ T5393] FAULT_INJECTION: forcing a failure. [ 1156.744663][ T5393] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.757583][ T5393] CPU: 0 UID: 0 PID: 5393 Comm: syz.0.8732 Tainted: G W syzkaller #0 PREEMPT(full) [ 1156.757617][ T5393] Tainted: [W]=WARN [ 1156.757623][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1156.757635][ T5393] Call Trace: [ 1156.757641][ T5393] [ 1156.757649][ T5393] __dump_stack+0x1d/0x30 [ 1156.757764][ T5393] dump_stack_lvl+0x95/0xd0 [ 1156.757819][ T5393] dump_stack+0x15/0x1b [ 1156.757841][ T5393] should_fail_ex+0x263/0x280 [ 1156.757918][ T5393] should_failslab+0x8c/0xb0 [ 1156.757939][ T5393] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1156.757997][ T5393] ? __alloc_skb+0x2d6/0x690 [ 1156.758021][ T5393] __alloc_skb+0x2d6/0x690 [ 1156.758043][ T5393] ? __alloc_skb+0x200/0x690 [ 1156.758090][ T5393] netlink_ack+0xfd/0x500 [ 1156.758197][ T5393] netlink_rcv_skb+0x192/0x220 [ 1156.758300][ T5393] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1156.758325][ T5393] xfrm_netlink_rcv+0x48/0x60 [ 1156.758343][ T5393] netlink_unicast+0x5c0/0x690 [ 1156.758367][ T5393] netlink_sendmsg+0x5c8/0x6f0 [ 1156.758496][ T5393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.758522][ T5393] ____sys_sendmsg+0x5af/0x600 [ 1156.758551][ T5393] ___sys_sendmsg+0x195/0x1e0 [ 1156.758643][ T5393] __x64_sys_sendmsg+0xd4/0x160 [ 1156.758713][ T5393] x64_sys_call+0x194c/0x3020 [ 1156.758774][ T5393] do_syscall_64+0x12c/0x370 [ 1156.758845][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.758949][ T5393] RIP: 0033:0x7fc54debc799 [ 1156.758966][ T5393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.758982][ T5393] RSP: 002b:00007fc54c917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1156.759047][ T5393] RAX: ffffffffffffffda RBX: 00007fc54e135fa0 RCX: 00007fc54debc799 [ 1156.759063][ T5393] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003 [ 1156.759086][ T5393] RBP: 00007fc54c917090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.759099][ T5393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.759112][ T5393] R13: 00007fc54e136038 R14: 00007fc54e135fa0 R15: 00007fff51fd9778 [ 1156.759198][ T5393] [ 1156.761546][T24699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.837442][ T5395] random: crng reseeded on system resumption [ 1157.034578][ T5407] loop5: detected capacity change from 0 to 512 [ 1157.071869][ T5407] EXT4-fs: Ignoring removed mblk_io_submit option [ 1157.187740][ T5407] EXT4-fs (loop5): 1 truncate cleaned up [ 1157.194857][ T5407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.269460][ T5427] FAULT_INJECTION: forcing a failure. [ 1157.269460][ T5427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.290615][ T5429] siw: device registration error -23 [ 1157.298039][ T5429] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1157.307616][ T5429] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8735'. [ 1157.322570][ T5429] loop6: detected capacity change from 0 to 512 [ 1157.359787][ T5427] CPU: 1 UID: 0 PID: 5427 Comm: syz.1.8737 Tainted: G W syzkaller #0 PREEMPT(full) [ 1157.359838][ T5427] Tainted: [W]=WARN [ 1157.359922][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1157.359937][ T5427] Call Trace: [ 1157.359945][ T5427] [ 1157.359953][ T5427] __dump_stack+0x1d/0x30 [ 1157.359985][ T5427] dump_stack_lvl+0x95/0xd0 [ 1157.360057][ T5427] dump_stack+0x15/0x1b [ 1157.360083][ T5427] should_fail_ex+0x263/0x280 [ 1157.360110][ T5427] should_fail+0xb/0x20 [ 1157.360131][ T5427] should_fail_usercopy+0x1a/0x20 [ 1157.360200][ T5427] _copy_from_user+0x1c/0xb0 [ 1157.360231][ T5427] ___sys_sendmsg+0xc1/0x1e0 [ 1157.360272][ T5427] __x64_sys_sendmsg+0xd4/0x160 [ 1157.360308][ T5427] x64_sys_call+0x194c/0x3020 [ 1157.360338][ T5427] do_syscall_64+0x12c/0x370 [ 1157.360367][ T5427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.360391][ T5427] RIP: 0033:0x7f07b742c799 [ 1157.360406][ T5427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.360423][ T5427] RSP: 002b:00007f07b5e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.360444][ T5427] RAX: ffffffffffffffda RBX: 00007f07b76a5fa0 RCX: 00007f07b742c799 [ 1157.360511][ T5427] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 1157.360523][ T5427] RBP: 00007f07b5e87090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.360535][ T5427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.360547][ T5427] R13: 00007f07b76a6038 R14: 00007f07b76a5fa0 R15: 00007ffc469bb0b8 [ 1157.360565][ T5427] [ 1157.569549][ T5427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8737'. [ 1157.655434][ T5442] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.8733: invalid fast symlink length 39 [ 1157.672507][ T5442] EXT4-fs (loop5): Remounting filesystem read-only [ 1157.681154][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8740'. [ 1157.727511][ T5444] batadv_slave_0: entered promiscuous mode [ 1157.762964][ T5444] batadv_slave_0: left promiscuous mode [ 1157.891237][T24699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.914979][ T28] audit: type=1400 audit(1772591107.075:5270): avc: denied { create } for pid=5464 comm="syz.7.8747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1157.982682][ T5469] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8746'. [ 1158.002020][ T28] audit: type=1400 audit(1772591107.075:5271): avc: denied { bind } for pid=5464 comm="syz.7.8747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1158.091275][ T28] audit: type=1400 audit(1772591107.144:5272): avc: denied { bind } for pid=5466 comm="syz.5.8746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1159.070995][ T28] audit: type=1400 audit(1772591107.154:5273): avc: denied { ioctl } for pid=5466 comm="syz.5.8746" path="socket:[132275]" dev="sockfs" ino=132275 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1159.098424][ T28] audit: type=1400 audit(1772591107.323:5274): avc: denied { bind } for pid=5464 comm="syz.7.8747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1159.137506][ T5481] siw: device registration error -23 [ 1160.054510][ T5481] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1160.063737][ T5481] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8749'. [ 1160.077104][ T5481] loop6: detected capacity change from 0 to 512 [ 1160.093334][ T28] audit: type=1400 audit(1772591107.323:5275): avc: denied { ioctl } for pid=5464 comm="syz.7.8747" path="socket:[131399]" dev="sockfs" ino=131399 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1160.349228][ T5488] lo speed is unknown, defaulting to 1000 [ 1160.376334][T10221] Bluetooth: hci0: Frame reassembly failed (-84) [ 1160.395346][ T5499] FAULT_INJECTION: forcing a failure. [ 1160.395346][ T5499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.425591][ T5501] FAULT_INJECTION: forcing a failure. [ 1160.425591][ T5501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.447352][ T5499] CPU: 0 UID: 0 PID: 5499 Comm: syz.6.8757 Tainted: G W syzkaller #0 PREEMPT(full) [ 1160.447386][ T5499] Tainted: [W]=WARN [ 1160.447393][ T5499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1160.447469][ T5499] Call Trace: [ 1160.447475][ T5499] [ 1160.447482][ T5499] __dump_stack+0x1d/0x30 [ 1160.447513][ T5499] dump_stack_lvl+0x95/0xd0 [ 1160.447584][ T5499] dump_stack+0x15/0x1b [ 1160.447607][ T5499] should_fail_ex+0x263/0x280 [ 1160.447708][ T5499] should_fail+0xb/0x20 [ 1160.447782][ T5499] should_fail_usercopy+0x1a/0x20 [ 1160.447817][ T5499] _copy_from_user+0x1c/0xb0 [ 1160.447848][ T5499] do_ip6t_set_ctl+0x3b2/0x8f0 [ 1160.447933][ T5499] ? _parse_integer+0x27/0x40 [ 1160.447959][ T5499] nf_setsockopt+0x199/0x1b0 [ 1160.447982][ T5499] ipv6_setsockopt+0x11a/0x130 [ 1160.448009][ T5499] tcp_setsockopt+0x98/0xb0 [ 1160.448055][ T5499] sock_common_setsockopt+0x69/0x80 [ 1160.448074][ T5499] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1160.448146][ T5499] smc_setsockopt+0x183/0x750 [ 1160.448233][ T5499] ? __pfx_smc_setsockopt+0x10/0x10 [ 1160.448254][ T5499] __sys_setsockopt+0x184/0x200 [ 1160.448282][ T5499] __x64_sys_setsockopt+0x64/0x80 [ 1160.448306][ T5499] x64_sys_call+0x2327/0x3020 [ 1160.448364][ T5499] do_syscall_64+0x12c/0x370 [ 1160.448384][ T5499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.448406][ T5499] RIP: 0033:0x7f7e1541c799 [ 1160.448425][ T5499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.448580][ T5499] RSP: 002b:00007f7e13e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1160.448602][ T5499] RAX: ffffffffffffffda RBX: 00007f7e15695fa0 RCX: 00007f7e1541c799 [ 1160.448618][ T5499] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1160.448632][ T5499] RBP: 00007f7e13e6f090 R08: 0000000000000060 R09: 0000000000000000 [ 1160.448655][ T5499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.448722][ T5499] R13: 00007f7e15696038 R14: 00007f7e15695fa0 R15: 00007fffbd8365c8 [ 1160.448828][ T5499] [ 1160.450671][ T28] audit: type=1400 audit(1772591109.595:5276): avc: denied { write } for pid=5502 comm="syz.7.8758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1160.481866][ T5501] CPU: 0 UID: 0 PID: 5501 Comm: syz.0.8759 Tainted: G W syzkaller #0 PREEMPT(full) [ 1160.481905][ T5501] Tainted: [W]=WARN [ 1160.481913][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1160.481928][ T5501] Call Trace: [ 1160.481935][ T5501] [ 1160.481943][ T5501] __dump_stack+0x1d/0x30 [ 1160.482019][ T5501] dump_stack_lvl+0x95/0xd0 [ 1160.482044][ T5501] dump_stack+0x15/0x1b [ 1160.482078][ T5501] should_fail_ex+0x263/0x280 [ 1160.482105][ T5501] should_fail+0xb/0x20 [ 1160.482135][ T5501] should_fail_usercopy+0x1a/0x20 [ 1160.482231][ T5501] _copy_to_iter+0x251/0xea0 [ 1160.482258][ T5501] ? show_fd_locks+0x315/0x320 [ 1160.482288][ T5501] ? seq_show+0x31b/0x370 [ 1160.482368][ T5501] seq_read_iter+0x776/0x940 [ 1160.482405][ T5501] seq_read+0x279/0x2c0 [ 1160.482489][ T5501] ? __pfx_seq_read+0x10/0x10 [ 1160.482537][ T5501] vfs_readv+0x432/0x6e0 [ 1160.482601][ T5501] __x64_sys_preadv+0xfd/0x1c0 [ 1160.482625][ T5501] x64_sys_call+0x2915/0x3020 [ 1160.482654][ T5501] do_syscall_64+0x12c/0x370 [ 1160.482678][ T5501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.482781][ T5501] RIP: 0033:0x7fc54debc799 [ 1160.482811][ T5501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.482830][ T5501] RSP: 002b:00007fc54c917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1160.482895][ T5501] RAX: ffffffffffffffda RBX: 00007fc54e135fa0 RCX: 00007fc54debc799 [ 1160.482910][ T5501] RDX: 0000000000000001 RSI: 0000200000001600 RDI: 0000000000000007 [ 1160.482924][ T5501] RBP: 00007fc54c917090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.482946][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.482959][ T5501] R13: 00007fc54e136038 R14: 00007fc54e135fa0 R15: 00007fff51fd9778 [ 1160.482979][ T5501] [ 1160.868175][ T28] audit: type=1400 audit(1772591109.664:5277): avc: denied { read } for pid=5502 comm="syz.7.8758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1160.930589][ T5516] netlink: 'syz.0.8762': attribute type 3 has an invalid length. [ 1160.993506][ T5518] FAULT_INJECTION: forcing a failure. [ 1160.993506][ T5518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.011787][ T5518] CPU: 0 UID: 0 PID: 5518 Comm: syz.7.8763 Tainted: G W syzkaller #0 PREEMPT(full) [ 1161.011819][ T5518] Tainted: [W]=WARN [ 1161.011825][ T5518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1161.011916][ T5518] Call Trace: [ 1161.011923][ T5518] [ 1161.011930][ T5518] __dump_stack+0x1d/0x30 [ 1161.011957][ T5518] dump_stack_lvl+0x95/0xd0 [ 1161.011980][ T5518] dump_stack+0x15/0x1b [ 1161.012070][ T5518] should_fail_ex+0x263/0x280 [ 1161.012093][ T5518] should_fail+0xb/0x20 [ 1161.012122][ T5518] should_fail_usercopy+0x1a/0x20 [ 1161.012146][ T5518] _copy_from_user+0x1c/0xb0 [ 1161.012174][ T5518] btf_new_fd+0x223/0x7d0 [ 1161.012195][ T5518] ? ns_capable+0x7c/0xb0 [ 1161.012213][ T5518] bpf_btf_load+0x112/0x130 [ 1161.012277][ T5518] __sys_bpf+0x3d8/0x7e0 [ 1161.012301][ T5518] __x64_sys_bpf+0x41/0x50 [ 1161.012330][ T5518] x64_sys_call+0x10cb/0x3020 [ 1161.012357][ T5518] do_syscall_64+0x12c/0x370 [ 1161.012454][ T5518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.012476][ T5518] RIP: 0033:0x7f0f952ac799 [ 1161.012567][ T5518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.012648][ T5518] RSP: 002b:00007f0f93cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1161.012668][ T5518] RAX: ffffffffffffffda RBX: 00007f0f95525fa0 RCX: 00007f0f952ac799 [ 1161.012683][ T5518] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 1161.012697][ T5518] RBP: 00007f0f93cff090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.012741][ T5518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.012754][ T5518] R13: 00007f0f95526038 R14: 00007f0f95525fa0 R15: 00007ffc3e5ff598 [ 1161.012773][ T5518] [ 1161.261150][ T5527] FAULT_INJECTION: forcing a failure. [ 1161.261150][ T5527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.274559][ T5527] CPU: 0 UID: 0 PID: 5527 Comm: syz.0.8767 Tainted: G W syzkaller #0 PREEMPT(full) [ 1161.274635][ T5527] Tainted: [W]=WARN [ 1161.274643][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1161.274661][ T5527] Call Trace: [ 1161.274669][ T5527] [ 1161.274678][ T5527] __dump_stack+0x1d/0x30 [ 1161.274710][ T5527] dump_stack_lvl+0x95/0xd0 [ 1161.274752][ T5527] dump_stack+0x15/0x1b [ 1161.274805][ T5527] should_fail_ex+0x263/0x280 [ 1161.274832][ T5527] should_fail+0xb/0x20 [ 1161.274853][ T5527] should_fail_usercopy+0x1a/0x20 [ 1161.274882][ T5527] _copy_from_iter+0xcf/0xea0 [ 1161.274908][ T5527] ? __alloc_skb+0x4f6/0x690 [ 1161.274960][ T5527] ? __alloc_skb+0x200/0x690 [ 1161.274984][ T5527] netlink_sendmsg+0x4ae/0x6f0 [ 1161.275020][ T5527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1161.275152][ T5527] ____sys_sendmsg+0x5af/0x600 [ 1161.275209][ T5527] ___sys_sendmsg+0x195/0x1e0 [ 1161.275251][ T5527] __x64_sys_sendmsg+0xd4/0x160 [ 1161.275285][ T5527] x64_sys_call+0x194c/0x3020 [ 1161.275312][ T5527] do_syscall_64+0x12c/0x370 [ 1161.275406][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.275433][ T5527] RIP: 0033:0x7fc54debc799 [ 1161.275449][ T5527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.275465][ T5527] RSP: 002b:00007fc54c917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1161.275485][ T5527] RAX: ffffffffffffffda RBX: 00007fc54e135fa0 RCX: 00007fc54debc799 [ 1161.275568][ T5527] RDX: 0000000002000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1161.275585][ T5527] RBP: 00007fc54c917090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.275598][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.275610][ T5527] R13: 00007fc54e136038 R14: 00007fc54e135fa0 R15: 00007fff51fd9778 [ 1161.275645][ T5527] [ 1161.580972][ T5543] siw: device registration error -23 [ 1161.588288][ T5543] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1161.597645][ T5543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8764'. [ 1161.619972][ T5542] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8772'. [ 1161.634508][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1161.634583][ T28] audit: type=1326 audit(1772591110.766:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.7.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f952ac799 code=0x7ffc0000 [ 1161.683090][ T5540] loop7: detected capacity change from 0 to 1024 [ 1161.691236][ T5540] EXT4-fs: Ignoring removed oldalloc option [ 1161.701794][ T5540] EXT4-fs: Ignoring removed bh option [ 1161.747546][ T28] audit: type=1326 audit(1772591110.806:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.7.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f952ac799 code=0x7ffc0000 [ 1161.774174][ T28] audit: type=1326 audit(1772591110.806:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.7.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f952ac799 code=0x7ffc0000 [ 1161.801181][ T28] audit: type=1326 audit(1772591110.806:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.7.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f952ac799 code=0x7ffc0000 [ 1161.828080][ T5540] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.841439][ T28] audit: type=1326 audit(1772591110.806:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.7.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f952ac799 code=0x7ffc0000 [ 1161.890310][ T28] audit: type=1326 audit(1772591110.806:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.7.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f952ac799 code=0x7ffc0000 [ 1161.915338][ T28] audit: type=1326 audit(1772591110.806:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.7.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f952ac799 code=0x7ffc0000 [ 1161.939224][ T28] audit: type=1326 audit(1772591110.806:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.7.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f952ac799 code=0x7ffc0000 [ 1161.963550][ T28] audit: type=1326 audit(1772591110.806:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.7.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0f952ac799 code=0x7ffc0000 [ 1161.966022][ T5551] loop6: detected capacity change from 0 to 128 [ 1161.986963][ T28] audit: type=1326 audit(1772591110.806:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.7.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f952ac799 code=0x7ffc0000 [ 1162.031594][ T4875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.078930][ T5561] FAULT_INJECTION: forcing a failure. [ 1162.078930][ T5561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.092393][ T5561] CPU: 0 UID: 0 PID: 5561 Comm: syz.6.8778 Tainted: G W syzkaller #0 PREEMPT(full) [ 1162.092472][ T5561] Tainted: [W]=WARN [ 1162.092478][ T5561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1162.092490][ T5561] Call Trace: [ 1162.092496][ T5561] [ 1162.092503][ T5561] __dump_stack+0x1d/0x30 [ 1162.092588][ T5561] dump_stack_lvl+0x95/0xd0 [ 1162.092625][ T5561] dump_stack+0x15/0x1b [ 1162.092647][ T5561] should_fail_ex+0x263/0x280 [ 1162.092673][ T5561] should_fail+0xb/0x20 [ 1162.092694][ T5561] should_fail_usercopy+0x1a/0x20 [ 1162.092759][ T5561] _copy_to_user+0x20/0xa0 [ 1162.092798][ T5561] simple_read_from_buffer+0xb5/0x130 [ 1162.092825][ T5561] proc_fail_nth_read+0x10e/0x150 [ 1162.092871][ T5561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1162.092904][ T5561] vfs_read+0x1ab/0x7f0 [ 1162.092940][ T5561] ? __rcu_read_unlock+0x4e/0x70 [ 1162.093028][ T5561] ? __fget_files+0x184/0x1c0 [ 1162.093051][ T5561] ? mutex_lock+0x57/0x90 [ 1162.093078][ T5561] ksys_read+0xdc/0x1a0 [ 1162.093182][ T5561] __x64_sys_read+0x40/0x50 [ 1162.093220][ T5561] x64_sys_call+0x2886/0x3020 [ 1162.093247][ T5561] do_syscall_64+0x12c/0x370 [ 1162.093333][ T5561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.093355][ T5561] RIP: 0033:0x7f7e153dcfce [ 1162.093440][ T5561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1162.093499][ T5561] RSP: 002b:00007f7e13e6efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1162.093522][ T5561] RAX: ffffffffffffffda RBX: 00007f7e13e6f6c0 RCX: 00007f7e153dcfce [ 1162.093536][ T5561] RDX: 000000000000000f RSI: 00007f7e13e6f0a0 RDI: 0000000000000005 [ 1162.093550][ T5561] RBP: 00007f7e13e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.093565][ T5561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.093580][ T5561] R13: 00007f7e15696038 R14: 00007f7e15695fa0 R15: 00007fffbd8365c8 [ 1162.093647][ T5561] [ 1162.318411][ T5564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8779'. [ 1162.421940][T28437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1162.421981][T24457] Bluetooth: hci0: command 0x1003 tx timeout [ 1162.716921][ T5597] siw: device registration error -23 [ 1162.725220][ T5597] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8791'. [ 1162.738996][ T5597] loop6: detected capacity change from 0 to 512 [ 1162.898559][ T5599] loop7: detected capacity change from 0 to 512 [ 1162.995755][ T5599] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1163.023062][ T5599] System zones: 0-2, 18-18, 34-34 [ 1163.043296][ T5599] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8792: bg 0: block 248: padding at end of block bitmap is not set [ 1163.087187][ T5599] loop7: lost filesystem error report for type 5 error -117 [ 1163.088814][ T5599] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.8792: Failed to acquire dquot type 1 [ 1163.107613][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1163.107653][ C0] EXT4-fs (loop7): last error at time 1772591112: ext4_validate_block_bitmap:441 [ 1163.161955][ T5599] loop7: lost filesystem error report for type 5 error -117 [ 1163.186630][ T5599] EXT4-fs (loop7): 1 truncate cleaned up [ 1163.205366][ T5613] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 1163.208145][ T5599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.247720][ T5599] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.288637][ T5620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8800'. [ 1163.291675][ T4875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.297924][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8800'. [ 1163.329918][ T5616] loop5: detected capacity change from 0 to 4096 [ 1163.427183][ T5616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.458845][ T5616] FAULT_INJECTION: forcing a failure. [ 1163.458845][ T5616] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.515551][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: syz.5.8799 Tainted: G W syzkaller #0 PREEMPT(full) [ 1163.515585][ T5616] Tainted: [W]=WARN [ 1163.515636][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1163.515648][ T5616] Call Trace: [ 1163.515655][ T5616] [ 1163.515663][ T5616] __dump_stack+0x1d/0x30 [ 1163.515697][ T5616] dump_stack_lvl+0x95/0xd0 [ 1163.515723][ T5616] dump_stack+0x15/0x1b [ 1163.515754][ T5616] should_fail_ex+0x263/0x280 [ 1163.515777][ T5616] should_failslab+0x8c/0xb0 [ 1163.515801][ T5616] __kmalloc_noprof+0xb8/0x4e0 [ 1163.515831][ T5616] ? iovec_from_user+0x84/0x200 [ 1163.515861][ T5616] iovec_from_user+0x84/0x200 [ 1163.515979][ T5616] __import_iovec+0xf3/0x530 [ 1163.516010][ T5616] import_iovec+0x60/0x80 [ 1163.516040][ T5616] vfs_writev+0xfb/0x900 [ 1163.516072][ T5616] __se_sys_pwritev2+0xfc/0x1c0 [ 1163.516110][ T5616] __x64_sys_pwritev2+0x67/0x80 [ 1163.516131][ T5616] x64_sys_call+0xe07/0x3020 [ 1163.516160][ T5616] do_syscall_64+0x12c/0x370 [ 1163.516184][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.516224][ T5616] RIP: 0033:0x7f9f246cc799 [ 1163.516270][ T5616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.516287][ T5616] RSP: 002b:00007f9f2311f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1163.516306][ T5616] RAX: ffffffffffffffda RBX: 00007f9f24945fa0 RCX: 00007f9f246cc799 [ 1163.516364][ T5616] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000004 [ 1163.516380][ T5616] RBP: 00007f9f2311f090 R08: 0000000000000000 R09: 0000000000000003 [ 1163.516392][ T5616] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 1163.516404][ T5616] R13: 00007f9f24946038 R14: 00007f9f24945fa0 R15: 00007ffd01d98dc8 [ 1163.516422][ T5616] [ 1163.563782][ T5631] lo speed is unknown, defaulting to 1000 [ 1163.710070][T24699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.732758][ T5640] netlink: 35 bytes leftover after parsing attributes in process `syz.1.8806'. [ 1165.102185][ T5670] FAULT_INJECTION: forcing a failure. [ 1165.102185][ T5670] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1165.649865][ T5674] siw: device registration error -23 [ 1165.657791][ T5674] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8812'. [ 1165.708927][ T5670] CPU: 1 UID: 0 PID: 5670 Comm: syz.7.8814 Tainted: G W syzkaller #0 PREEMPT(full) [ 1165.709074][ T5670] Tainted: [W]=WARN [ 1165.709082][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1165.709097][ T5670] Call Trace: [ 1165.709104][ T5670] [ 1165.709112][ T5670] __dump_stack+0x1d/0x30 [ 1165.709140][ T5670] dump_stack_lvl+0x95/0xd0 [ 1165.709206][ T5670] dump_stack+0x15/0x1b [ 1165.709226][ T5670] should_fail_ex+0x263/0x280 [ 1165.709250][ T5670] should_fail_alloc_page+0xf2/0x100 [ 1165.709272][ T5670] __alloc_frozen_pages_noprof+0x108/0x360 [ 1165.709432][ T5670] alloc_pages_mpol+0xb3/0x260 [ 1165.709532][ T5670] alloc_pages_noprof+0x8f/0x130 [ 1165.709631][ T5670] __pmd_alloc+0x47/0x480 [ 1165.709702][ T5670] handle_mm_fault+0x1ecf/0x3020 [ 1165.709826][ T5670] ? mt_find+0x291/0x3d0 [ 1165.709856][ T5670] ? lock_mm_and_find_vma+0x8b/0x440 [ 1165.709880][ T5670] ? terminate_walk+0x1e6/0x210 [ 1165.709909][ T5670] do_user_addr_fault+0x3fd/0x1050 [ 1165.709954][ T5670] exc_page_fault+0x62/0xa0 [ 1165.710022][ T5670] asm_exc_page_fault+0x26/0x30 [ 1165.710045][ T5670] RIP: 0010:__get_user_4+0x14/0x20 [ 1165.710132][ T5670] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1165.710187][ T5670] RSP: 0018:ffffc9000222bd48 EFLAGS: 00050283 [ 1165.710204][ T5670] RAX: 0000200000000040 RBX: 0000200000000040 RCX: ffff888104df53c0 [ 1165.710221][ T5670] RDX: 00007ffffffff000 RSI: ffffffff86ea9140 RDI: 0000000040047459 [ 1165.710295][ T5670] RBP: 0000000040047459 R08: ffff888104df53c0 R09: 0000000000000005 [ 1165.710359][ T5670] R10: 0000000080047453 R11: 0000000000000000 R12: ffff88810a86ac00 [ 1165.710373][ T5670] R13: ffffffff85b4c0f0 R14: ffff888108302080 R15: ffff888108302080 [ 1165.710391][ T5670] pppoe_ioctl+0x128/0x3a0 [ 1165.710474][ T5670] ? __pfx_pppoe_ioctl+0x10/0x10 [ 1165.710506][ T5670] pppox_ioctl+0xcb/0x160 [ 1165.710565][ T5670] sock_do_ioctl+0x73/0x230 [ 1165.710667][ T5670] sock_ioctl+0x41b/0x610 [ 1165.710700][ T5670] ? mutex_lock+0x57/0x90 [ 1165.710726][ T5670] ? __pfx_sock_ioctl+0x10/0x10 [ 1165.710863][ T5670] __se_sys_ioctl+0xce/0x140 [ 1165.710900][ T5670] __x64_sys_ioctl+0x43/0x50 [ 1165.710932][ T5670] x64_sys_call+0x1563/0x3020 [ 1165.710975][ T5670] do_syscall_64+0x12c/0x370 [ 1165.710993][ T5670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.711015][ T5670] RIP: 0033:0x7f0f952ac799 [ 1165.711033][ T5670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.711131][ T5670] RSP: 002b:00007f0f93cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1165.711198][ T5670] RAX: ffffffffffffffda RBX: 00007f0f95525fa0 RCX: 00007f0f952ac799 [ 1165.711213][ T5670] RDX: 0000200000000040 RSI: 0000000040047459 RDI: 0000000000000003 [ 1165.711272][ T5670] RBP: 00007f0f93cff090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.711329][ T5670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.711341][ T5670] R13: 00007f0f95526038 R14: 00007f0f95525fa0 R15: 00007ffc3e5ff598 [ 1165.711359][ T5670] [ 1166.130130][ T5684] loop5: detected capacity change from 0 to 1024 [ 1166.140629][ T5684] EXT4-fs: inline encryption not supported [ 1166.146579][ T5684] EXT4-fs: Ignoring removed nobh option [ 1166.147346][ T5677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.152693][ T5684] EXT4-fs: Ignoring removed bh option [ 1166.183697][ T5677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.196719][ T5684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.260596][ T5684] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.8820: Allocating blocks 497-513 which overlap fs metadata [ 1166.275138][ T5684] EXT4-fs (loop5): pa ffff88810056ed20: logic 256, phys. 385, len 8 [ 1166.283290][ T5684] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 1166.337558][ T5697] xt_recent: Unsupported userspace flags (000000b1) [ 1166.353762][T24699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.364346][ T5699] xt_recent: Unsupported userspace flags (000000b1) [ 1166.872024][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8826'. [ 1166.927638][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 1166.927748][ T28] audit: type=1400 audit(1772591116.028:5372): avc: denied { setopt } for pid=5713 comm="syz.0.8826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1167.297141][ T5714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8826'. [ 1167.306137][ T5714] bridge0: entered allmulticast mode [ 1167.424467][ T28] audit: type=1326 audit(1772591116.515:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.0.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54debc799 code=0x7ffc0000 [ 1167.458591][ T5717] openvswitch: netlink: EtherType 0 is less than min 600 [ 1167.496104][ T28] audit: type=1326 audit(1772591116.544:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.0.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54debc799 code=0x7ffc0000 [ 1167.669227][ T28] audit: type=1326 audit(1772591116.554:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.0.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc54debc799 code=0x7ffc0000 [ 1167.695036][ T28] audit: type=1326 audit(1772591116.554:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.0.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54debc799 code=0x7ffc0000 [ 1167.936284][ T5722] siw: device registration error -23 [ 1167.943904][ T5722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8828'. [ 1167.963002][ T28] audit: type=1326 audit(1772591116.554:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.0.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54debc799 code=0x7ffc0000 [ 1167.994384][ T28] audit: type=1326 audit(1772591116.554:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.0.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc54debc799 code=0x7ffc0000 [ 1168.022711][ T28] audit: type=1326 audit(1772591116.564:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.0.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54debc799 code=0x7ffc0000 [ 1168.047145][ T28] audit: type=1326 audit(1772591116.564:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.0.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54debc799 code=0x7ffc0000 [ 1168.246689][ T5727] loop5: detected capacity change from 0 to 8192 [ 1168.304092][ T7283] loop5: p1 < > p2 p4 < p5 > [ 1168.309029][ T7283] loop5: partition table partially beyond EOD, truncated [ 1168.316440][ T7283] loop5: p1 start 134217728 is beyond EOD, truncated [ 1168.323328][ T7283] loop5: p2 size 591360 extends beyond EOD, truncated [ 1168.332974][ T7283] loop5: p5 size 591360 extends beyond EOD, truncated [ 1168.342702][ T5727] loop5: p1 < > p2 p4 < p5 > [ 1168.347497][ T5727] loop5: partition table partially beyond EOD, truncated [ 1168.354705][ T5727] loop5: p1 start 134217728 is beyond EOD, truncated [ 1168.361456][ T5727] loop5: p2 size 591360 extends beyond EOD, truncated [ 1168.369412][ T5727] loop5: p5 size 591360 extends beyond EOD, truncated [ 1168.381440][ T5726] 9p: Bad value for 'rfdno' [ 1168.386202][ T28] audit: type=1400 audit(1772591117.468:5381): avc: denied { mounton } for pid=5725 comm="syz.5.8830" path="/dev/loop5p2" dev="devtmpfs" ino=4992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1168.849853][ T5731] FAULT_INJECTION: forcing a failure. [ 1168.849853][ T5731] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.862566][ T5731] CPU: 1 UID: 0 PID: 5731 Comm: syz.5.8831 Tainted: G W syzkaller #0 PREEMPT(full) [ 1168.862597][ T5731] Tainted: [W]=WARN [ 1168.862679][ T5731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1168.862691][ T5731] Call Trace: [ 1168.862697][ T5731] [ 1168.862706][ T5731] __dump_stack+0x1d/0x30 [ 1168.862734][ T5731] dump_stack_lvl+0x95/0xd0 [ 1168.862756][ T5731] dump_stack+0x15/0x1b [ 1168.862811][ T5731] should_fail_ex+0x263/0x280 [ 1168.862835][ T5731] should_failslab+0x8c/0xb0 [ 1168.862856][ T5731] kmem_cache_alloc_noprof+0x66/0x400 [ 1168.862879][ T5731] ? dst_alloc+0xbd/0x100 [ 1168.862943][ T5731] dst_alloc+0xbd/0x100 [ 1168.862981][ T5731] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 1168.863070][ T5731] ip_route_output_flow+0x65/0x110 [ 1168.863102][ T5731] udp_sendmsg+0x1383/0x1590 [ 1168.863134][ T5731] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1168.863189][ T5731] ? __account_obj_stock+0x211/0x350 [ 1168.863213][ T5731] udpv6_sendmsg+0x621/0x17d0 [ 1168.863332][ T5731] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1168.863361][ T5731] inet6_sendmsg+0xac/0xd0 [ 1168.863398][ T5731] ____sys_sendmsg+0x3c4/0x600 [ 1168.863428][ T5731] ___sys_sendmsg+0x195/0x1e0 [ 1168.863454][ T5731] ? path_openat+0x1b01/0x2050 [ 1168.863535][ T5731] __sys_sendmmsg+0x185/0x320 [ 1168.863569][ T5731] __x64_sys_sendmmsg+0x57/0x70 [ 1168.863597][ T5731] x64_sys_call+0x27aa/0x3020 [ 1168.863657][ T5731] do_syscall_64+0x12c/0x370 [ 1168.863676][ T5731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.863739][ T5731] RIP: 0033:0x7f9f246cc799 [ 1168.863783][ T5731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.863801][ T5731] RSP: 002b:00007f9f2311f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1168.863819][ T5731] RAX: ffffffffffffffda RBX: 00007f9f24945fa0 RCX: 00007f9f246cc799 [ 1168.863853][ T5731] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000003 [ 1168.863866][ T5731] RBP: 00007f9f2311f090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.863879][ T5731] R10: 0000000004000810 R11: 0000000000000246 R12: 0000000000000001 [ 1168.863892][ T5731] R13: 00007f9f24946038 R14: 00007f9f24945fa0 R15: 00007ffd01d98dc8 [ 1168.863910][ T5731] [ 1169.100811][ T5733] loop5: detected capacity change from 0 to 512 [ 1169.107450][ T5733] EXT4-fs: Ignoring removed mblk_io_submit option [ 1169.115493][ T5733] EXT4-fs (loop5): 1 truncate cleaned up [ 1169.121856][ T5733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.194060][ T5736] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.8832: invalid fast symlink length 39 [ 1169.206456][ T5736] EXT4-fs (loop5): Remounting filesystem read-only [ 1169.346913][ T5697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1169.706554][ T5757] xt_hashlimit: size too large, truncated to 1048576 [ 1169.713470][ T5757] xt_hashlimit: max too large, truncated to 1048576 [ 1169.915251][ T5758] siw: device registration error -23 [ 1169.923662][ T5758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8836'. [ 1170.011925][T24699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.465089][ T5773] xt_recent: Unsupported userspace flags (000000b1) [ 1172.642734][ T5788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8848'. [ 1174.194965][ T5797] loop6: detected capacity change from 0 to 1024 [ 1174.212124][ T5797] EXT4-fs: Ignoring removed orlov option [ 1174.217919][ T5797] EXT4-fs: Ignoring removed nobh option [ 1174.264144][ T5797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.287877][ T5802] lo speed is unknown, defaulting to 1000 [ 1174.616789][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.634647][ T5814] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8857'. [ 1174.645908][ T5814] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8857'. [ 1176.863132][T24457] Bluetooth: hci0: command 0x1003 tx timeout [ 1176.920447][T28437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1177.252865][ T5835] loop7: detected capacity change from 0 to 512 [ 1177.302502][ T5835] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8862: invalid indirect mapped block 256 (level 2) [ 1177.918143][ T5835] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1177.919847][ T5835] EXT4-fs (loop7): 2 truncates cleaned up [ 1177.929044][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1177.929071][ C0] EXT4-fs (loop7): initial error at time 1177: ext4_free_branches:1023: inode 11 [ 1177.929121][ C0] EXT4-fs (loop7): last error at time 1177: ext4_free_branches:1023: inode 11 [ 1178.361679][ T5835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.508907][ T5853] loop6: detected capacity change from 0 to 1024 [ 1179.964820][ T5837] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1181.448473][ T5853] EXT4-fs: inline encryption not supported [ 1181.466110][ T5853] EXT4-fs: Ignoring removed nobh option [ 1181.477740][ T5853] EXT4-fs: Ignoring removed bh option [ 1182.139831][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8870'. [ 1182.163463][ T5853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1182.213142][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1182.213160][ T28] audit: type=1400 audit(1181.951:5387): avc: denied { bind } for pid=5864 comm="syz.5.8870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1182.262873][ T5853] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.8867: Allocating blocks 497-513 which overlap fs metadata [ 1182.296672][ T28] audit: type=1400 audit(1181.951:5388): avc: denied { connect } for pid=5864 comm="syz.5.8870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1182.323440][ T5853] EXT4-fs (loop6): pa ffff88810056ed20: logic 256, phys. 385, len 8 [ 1182.331516][ T5853] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 1182.396853][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.568735][ T4875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.584721][ T28] audit: type=1400 audit(1182.341:5389): avc: denied { write } for pid=5875 comm="syz.6.8871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1182.694345][ T28] audit: type=1326 audit(1182.441:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5875 comm="syz.6.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1182.740469][ T28] audit: type=1326 audit(1182.441:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5875 comm="syz.6.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1541c799 code=0x7ffc0000 [ 1182.740816][ T5883] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8875'. [ 1182.791086][ T28] audit: type=1400 audit(1182.481:5392): avc: denied { sqpoll } for pid=5880 comm="syz.7.8874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1182.839685][ T5883] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8875'. [ 1182.897759][ T5895] netlink: 'syz.7.8876': attribute type 4 has an invalid length. [ 1182.926552][T24384] lo speed is unknown, defaulting to 1000 [ 1182.932303][T24384] syz0: Port: 1 Link DOWN [ 1183.023365][ T28] audit: type=1400 audit(1182.770:5393): avc: denied { bind } for pid=5903 comm="syz.5.8880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1183.432684][ T28] audit: type=1400 audit(1183.010:5394): avc: denied { listen } for pid=5898 comm="syz.1.8878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1183.551522][ T5914] loop7: detected capacity change from 0 to 1024 [ 1183.600143][ T5914] EXT4-fs: inline encryption not supported [ 1183.633471][ T5914] EXT4-fs: Ignoring removed nobh option [ 1183.675617][ T5914] EXT4-fs: Ignoring removed bh option [ 1183.696212][ T5914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.764241][ T5914] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.8882: Allocating blocks 497-513 which overlap fs metadata [ 1183.834142][ T5914] EXT4-fs (loop7): pa ffff88810824a9a0: logic 256, phys. 385, len 8 [ 1183.842296][ T5914] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 1183.884382][ T5922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=5922 comm=syz.0.8884 [ 1183.910611][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8884'. [ 1183.931608][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8884'. [ 1184.033890][ T4875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.052074][ T5930] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8888'. [ 1184.113690][ T5934] siw: device registration error -23 [ 1184.121064][ T5934] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8885'. [ 1184.181248][ T5936] loop5: detected capacity change from 0 to 512 [ 1184.319704][ T5937] random: crng reseeded on system resumption [ 1184.527361][ T5930] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8888'. [ 1184.623425][ T5945] netlink: 596 bytes leftover after parsing attributes in process `syz.1.8892'. [ 1184.697342][ T28] audit: type=1400 audit(1184.450:5395): avc: denied { getopt } for pid=5946 comm="syz.0.8893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1184.820731][ T5956] loop5: detected capacity change from 0 to 1024 [ 1184.838151][ T5956] EXT4-fs: inline encryption not supported [ 1184.864625][ T5956] EXT4-fs: Ignoring removed nobh option [ 1184.882787][ T5956] EXT4-fs: Ignoring removed bh option [ 1184.891123][ T5960] FAULT_INJECTION: forcing a failure. [ 1184.891123][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.929961][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.7.8899 Tainted: G W syzkaller #0 PREEMPT(full) [ 1184.930081][ T5960] Tainted: [W]=WARN [ 1184.930089][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1184.930103][ T5960] Call Trace: [ 1184.930110][ T5960] [ 1184.930120][ T5960] __dump_stack+0x1d/0x30 [ 1184.930149][ T5960] dump_stack_lvl+0x95/0xd0 [ 1184.930200][ T5960] dump_stack+0x15/0x1b [ 1184.930225][ T5960] should_fail_ex+0x263/0x280 [ 1184.930313][ T5960] should_fail+0xb/0x20 [ 1184.930335][ T5960] should_fail_usercopy+0x1a/0x20 [ 1184.930363][ T5960] _copy_to_user+0x20/0xa0 [ 1184.930394][ T5960] simple_read_from_buffer+0xb5/0x130 [ 1184.930488][ T5960] proc_fail_nth_read+0x10e/0x150 [ 1184.930596][ T5960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1184.930629][ T5960] vfs_read+0x1ab/0x7f0 [ 1184.930678][ T5960] ? __rcu_read_unlock+0x4e/0x70 [ 1184.930703][ T5960] ? __fget_files+0x184/0x1c0 [ 1184.930732][ T5960] ? mutex_lock+0x57/0x90 [ 1184.930773][ T5960] ksys_read+0xdc/0x1a0 [ 1184.930817][ T5960] __x64_sys_read+0x40/0x50 [ 1184.930882][ T5960] x64_sys_call+0x2886/0x3020 [ 1184.930913][ T5960] do_syscall_64+0x12c/0x370 [ 1184.930938][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.930962][ T5960] RIP: 0033:0x7f0f9526cfce [ 1184.931052][ T5960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1184.931117][ T5960] RSP: 002b:00007f0f93cfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1184.931143][ T5960] RAX: ffffffffffffffda RBX: 00007f0f93cff6c0 RCX: 00007f0f9526cfce [ 1184.931159][ T5960] RDX: 000000000000000f RSI: 00007f0f93cff0a0 RDI: 0000000000000004 [ 1184.931215][ T5960] RBP: 00007f0f93cff090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.931230][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.931244][ T5960] R13: 00007f0f95526038 R14: 00007f0f95525fa0 R15: 00007ffc3e5ff598 [ 1184.931265][ T5960] [ 1185.185372][ T5956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.248268][ T5956] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.8896: Allocating blocks 497-513 which overlap fs metadata [ 1185.350954][ T5956] EXT4-fs (loop5): pa ffff88810056ecb0: logic 256, phys. 385, len 8 [ 1185.359061][ T5956] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 1185.446349][ T5974] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1185.456520][ T5974] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8900'. [ 1185.470882][ T5974] loop7: detected capacity change from 0 to 512 [ 1185.685698][T24699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.767836][ T5979] loop6: detected capacity change from 0 to 512 [ 1185.861595][ T5981] random: crng reseeded on system resumption [ 1185.871289][ T5979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.890673][ T5979] pimreg: entered allmulticast mode [ 1185.898034][ T5979] pimreg: left allmulticast mode [ 1185.925085][ T28] audit: type=1400 audit(1185.669:5396): avc: denied { setopt } for pid=5984 comm="syz.5.8906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1185.971032][ T5988] FAULT_INJECTION: forcing a failure. [ 1185.971032][ T5988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.985822][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.5.8907 Tainted: G W syzkaller #0 PREEMPT(full) [ 1185.985911][ T5988] Tainted: [W]=WARN [ 1185.985918][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1185.985930][ T5988] Call Trace: [ 1185.985937][ T5988] [ 1185.985952][ T5988] __dump_stack+0x1d/0x30 [ 1185.985977][ T5988] dump_stack_lvl+0x95/0xd0 [ 1185.986001][ T5988] dump_stack+0x15/0x1b [ 1185.986076][ T5988] should_fail_ex+0x263/0x280 [ 1185.986134][ T5988] should_fail+0xb/0x20 [ 1185.986152][ T5988] should_fail_usercopy+0x1a/0x20 [ 1185.986178][ T5988] _copy_to_user+0x20/0xa0 [ 1185.986285][ T5988] simple_read_from_buffer+0xb5/0x130 [ 1185.986309][ T5988] proc_fail_nth_read+0x10e/0x150 [ 1185.986402][ T5988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1185.986430][ T5988] vfs_read+0x1ab/0x7f0 [ 1185.986462][ T5988] ? __rcu_read_unlock+0x4e/0x70 [ 1185.986486][ T5988] ? __fget_files+0x184/0x1c0 [ 1185.986522][ T5988] ? mutex_lock+0x57/0x90 [ 1185.986548][ T5988] ksys_read+0xdc/0x1a0 [ 1185.986651][ T5988] __x64_sys_read+0x40/0x50 [ 1185.986681][ T5988] x64_sys_call+0x2886/0x3020 [ 1185.986740][ T5988] do_syscall_64+0x12c/0x370 [ 1185.986760][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.986838][ T5988] RIP: 0033:0x7f9f2468cfce [ 1185.986860][ T5988] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1185.986877][ T5988] RSP: 002b:00007f9f2311efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1185.986896][ T5988] RAX: ffffffffffffffda RBX: 00007f9f2311f6c0 RCX: 00007f9f2468cfce [ 1185.986909][ T5988] RDX: 000000000000000f RSI: 00007f9f2311f0a0 RDI: 0000000000000004 [ 1185.986921][ T5988] RBP: 00007f9f2311f090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.987001][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.987013][ T5988] R13: 00007f9f24946038 R14: 00007f9f24945fa0 R15: 00007ffd01d98dc8 [ 1185.987111][ T5988] [ 1185.988089][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.624232][ T6024] random: crng reseeded on system resumption [ 1186.660085][ T6020] lo speed is unknown, defaulting to 1000 [ 1187.342697][ T6023] lo speed is unknown, defaulting to 1000 [ 1189.206664][ T6034] siw: device registration error -23 [ 1189.362100][ T6034] __nla_validate_parse: 2 callbacks suppressed [ 1189.362121][ T6034] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8908'. [ 1189.383833][ T6034] loop6: detected capacity change from 0 to 512 [ 1189.476894][ T6036] lo speed is unknown, defaulting to 1000 [ 1189.590744][ T6052] FAULT_INJECTION: forcing a failure. [ 1189.590744][ T6052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1189.597731][ T28] audit: type=1400 audit(1189.347:5397): avc: denied { create } for pid=6032 comm="syz.0.8919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1189.612612][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.6.8926 Tainted: G W syzkaller #0 PREEMPT(full) [ 1189.612714][ T6052] Tainted: [W]=WARN [ 1189.612722][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1189.612735][ T6052] Call Trace: [ 1189.612743][ T6052] [ 1189.612752][ T6052] __dump_stack+0x1d/0x30 [ 1189.612779][ T6052] dump_stack_lvl+0x95/0xd0 [ 1189.612870][ T6052] dump_stack+0x15/0x1b [ 1189.612893][ T6052] should_fail_ex+0x263/0x280 [ 1189.612974][ T6052] should_fail+0xb/0x20 [ 1189.613066][ T6052] should_fail_usercopy+0x1a/0x20 [ 1189.613092][ T6052] strncpy_from_user+0x27/0x250 [ 1189.613122][ T6052] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 1189.613149][ T6052] do_getname+0x59/0x1c0 [ 1189.613223][ T6052] user_path_at+0x28/0x100 [ 1189.613253][ T6052] __se_sys_mount+0x25b/0x2e0 [ 1189.613276][ T6052] ? fput+0x8f/0xc0 [ 1189.613383][ T6052] __x64_sys_mount+0x67/0x80 [ 1189.613421][ T6052] x64_sys_call+0x2d61/0x3020 [ 1189.613449][ T6052] do_syscall_64+0x12c/0x370 [ 1189.613472][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.613572][ T6052] RIP: 0033:0x7f7e1541c799 [ 1189.613589][ T6052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.613607][ T6052] RSP: 002b:00007f7e13e6f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1189.613634][ T6052] RAX: ffffffffffffffda RBX: 00007f7e15695fa0 RCX: 00007f7e1541c799 [ 1189.613650][ T6052] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 1189.613663][ T6052] RBP: 00007f7e13e6f090 R08: 0000200000000840 R09: 0000000000000000 [ 1189.613721][ T6052] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 1189.613734][ T6052] R13: 00007f7e15696038 R14: 00007f7e15695fa0 R15: 00007fffbd8365c8 [ 1189.613795][ T6052] [ 1189.675555][ T6051] netlink: 596 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1189.730457][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1189.764234][ T6060] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8927'. [ 1189.895805][ T6063] lo speed is unknown, defaulting to 1000 [ 1190.204364][ T28] audit: type=1400 audit(1189.947:5398): avc: denied { bind } for pid=6062 comm="syz.6.8928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1190.236493][ T6066] loop6: detected capacity change from 0 to 1024 [ 1190.245013][ T28] audit: type=1400 audit(1189.977:5399): avc: denied { listen } for pid=6062 comm="syz.6.8928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1190.349580][ T6066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1190.369305][ T28] audit: type=1400 audit(1190.117:5400): avc: denied { watch watch_reads } for pid=6062 comm="syz.6.8928" path="/62/file1" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1190.392497][ T28] audit: type=1400 audit(1190.127:5401): avc: denied { setattr } for pid=6062 comm="syz.6.8928" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1190.417349][ T28] audit: type=1400 audit(1190.127:5402): avc: denied { ioctl } for pid=6062 comm="syz.6.8928" path="socket:[133407]" dev="sockfs" ino=133407 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1190.475811][ T6080] FAULT_INJECTION: forcing a failure. [ 1190.475811][ T6080] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.488766][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: syz.5.8932 Tainted: G W syzkaller #0 PREEMPT(full) [ 1190.488885][ T6080] Tainted: [W]=WARN [ 1190.488892][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1190.488904][ T6080] Call Trace: [ 1190.488910][ T6080] [ 1190.488918][ T6080] __dump_stack+0x1d/0x30 [ 1190.488968][ T6080] dump_stack_lvl+0x95/0xd0 [ 1190.488991][ T6080] dump_stack+0x15/0x1b [ 1190.489013][ T6080] should_fail_ex+0x263/0x280 [ 1190.489041][ T6080] should_failslab+0x8c/0xb0 [ 1190.489065][ T6080] __kmalloc_noprof+0xb8/0x4e0 [ 1190.489126][ T6080] ? do_sys_poll+0x186/0xc10 [ 1190.489217][ T6080] do_sys_poll+0x186/0xc10 [ 1190.489267][ T6080] ? avc_has_perm+0x101/0x190 [ 1190.489301][ T6080] ? selinux_file_open+0x2e6/0x330 [ 1190.489349][ T6080] ? timespec64_add_safe+0x106/0x150 [ 1190.489375][ T6080] __x64_sys_poll+0x12c/0x230 [ 1190.489418][ T6080] x64_sys_call+0x2891/0x3020 [ 1190.489467][ T6080] do_syscall_64+0x12c/0x370 [ 1190.489490][ T6080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.489515][ T6080] RIP: 0033:0x7f9f246cc799 [ 1190.489531][ T6080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.489547][ T6080] RSP: 002b:00007f9f2311f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1190.489566][ T6080] RAX: ffffffffffffffda RBX: 00007f9f24945fa0 RCX: 00007f9f246cc799 [ 1190.489674][ T6080] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 1190.489687][ T6080] RBP: 00007f9f2311f090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.489757][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.489832][ T6080] R13: 00007f9f24946038 R14: 00007f9f24945fa0 R15: 00007ffd01d98dc8 [ 1190.489856][ T6080] [ 1190.839713][ T28] audit: type=1326 audit(1190.577:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b742c799 code=0x7fc00000 [ 1190.926858][ T6096] 9p: Bad value for 'wfdno' [ 1191.069510][ T28] audit: type=1400 audit(1190.667:5404): avc: denied { mounton } for pid=6095 comm="syz.5.8935" path="/599/file0" dev="tmpfs" ino=3260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1191.195482][ T28] audit: type=1326 audit(1190.926:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.1.8931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07b742c799 code=0x7fc00000 [ 1191.263250][ T6104] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8938'. [ 1191.451272][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.062638][ T28] audit: type=1400 audit(1191.806:5406): avc: denied { mounton } for pid=6118 comm="syz.0.8941" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1192.127561][ T6121] loop7: detected capacity change from 0 to 256 [ 1192.326646][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8941'. [ 1192.488320][T24384] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1192.520499][ T41] erspan0 (unregistering): left promiscuous mode [ 1192.547164][ T6143] loop6: detected capacity change from 0 to 512 [ 1192.568738][ T6143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1192.592427][ T6143] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1192.609451][ T41] gretap0 (unregistering): left promiscuous mode [ 1192.732420][ T6143] EXT4-fs (loop6): 1 truncate cleaned up [ 1192.740225][ T6143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1192.859946][ T41] bond0 (unregistering): Released all slaves [ 1192.867609][ T41] bond1 (unregistering): Released all slaves [ 1192.876303][ T41] bond2 (unregistering): Released all slaves [ 1192.885546][ T41] bond3 (unregistering): Released all slaves [ 1192.894286][ T41] bond4 (unregistering): Released all slaves [ 1193.234020][ T41] bond5 (unregistering): Released all slaves [ 1193.243335][ T41] bond6 (unregistering): Released all slaves [ 1193.251845][ T41] bond7 (unregistering): Released all slaves [ 1193.284476][ T6105] lo speed is unknown, defaulting to 1000 [ 1193.315264][ T6154] lo speed is unknown, defaulting to 1000 [ 1193.370553][ T41] hsr_slave_0: left promiscuous mode [ 1193.427586][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.545507][ T41] team0 (unregistering): Port device vxcan1 removed [ 1193.695025][ T6198] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8956'. [ 1193.713949][ T6105] chnl_net:caif_netlink_parms(): no params data found [ 1193.769459][ T6206] random: crng reseeded on system resumption [ 1193.815196][ T6215] FAULT_INJECTION: forcing a failure. [ 1193.815196][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.842909][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.857342][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz.7.8958 Tainted: G W syzkaller #0 PREEMPT(full) [ 1193.857420][ T6215] Tainted: [W]=WARN [ 1193.857427][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1193.857465][ T6215] Call Trace: [ 1193.857472][ T6215] [ 1193.857480][ T6215] __dump_stack+0x1d/0x30 [ 1193.857511][ T6215] dump_stack_lvl+0x95/0xd0 [ 1193.857538][ T6215] dump_stack+0x15/0x1b [ 1193.857558][ T6215] should_fail_ex+0x263/0x280 [ 1193.857624][ T6215] should_failslab+0x8c/0xb0 [ 1193.857644][ T6215] kmem_cache_alloc_noprof+0x66/0x400 [ 1193.857665][ T6215] ? __anon_vma_prepare+0x70/0x2f0 [ 1193.857746][ T6215] __anon_vma_prepare+0x70/0x2f0 [ 1193.857772][ T6215] __vmf_anon_prepare+0x91/0x100 [ 1193.857800][ T6215] hugetlb_no_page+0x1c5/0xf50 [ 1193.857902][ T6215] ? huge_pte_alloc+0x2cc/0x490 [ 1193.857937][ T6215] hugetlb_fault+0x555/0xe00 [ 1193.858061][ T6215] handle_mm_fault+0x1be1/0x3020 [ 1193.858094][ T6215] ? mt_find+0x291/0x3d0 [ 1193.858118][ T6215] ? find_vma+0x6c/0xa0 [ 1193.858221][ T6215] ? lock_mm_and_find_vma+0x8b/0x440 [ 1193.858247][ T6215] do_user_addr_fault+0x3fd/0x1050 [ 1193.858279][ T6215] exc_page_fault+0x62/0xa0 [ 1193.858311][ T6215] asm_exc_page_fault+0x26/0x30 [ 1193.858342][ T6215] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1193.858373][ T6215] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1193.858393][ T6215] RSP: 0018:ffffc9000268bdf8 EFLAGS: 00050206 [ 1193.858412][ T6215] RAX: ffff888105280ab8 RBX: 000000000000001c RCX: 000000000000001c [ 1193.858425][ T6215] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: ffffc9000268be20 [ 1193.858483][ T6215] RBP: 000000000000001c R08: 0000000000000241 R09: 0000000000000000 [ 1193.858498][ T6215] R10: 0001c9000268be20 R11: 0001c9000268be3b R12: 0000000000000000 [ 1193.858514][ T6215] R13: ffff888105280000 R14: ffffc9000268be20 R15: 00002000000001c0 [ 1193.858534][ T6215] _copy_from_user+0x6f/0xb0 [ 1193.858560][ T6215] __sys_connect+0xd0/0x2a0 [ 1193.858612][ T6215] __x64_sys_connect+0x3f/0x50 [ 1193.858634][ T6215] x64_sys_call+0x2df0/0x3020 [ 1193.858659][ T6215] do_syscall_64+0x12c/0x370 [ 1193.858752][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.858775][ T6215] RIP: 0033:0x7f0f952ac799 [ 1193.858789][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.858804][ T6215] RSP: 002b:00007f0f93cff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1193.858825][ T6215] RAX: ffffffffffffffda RBX: 00007f0f95525fa0 RCX: 00007f0f952ac799 [ 1193.858838][ T6215] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003 [ 1193.858870][ T6215] RBP: 00007f0f93cff090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.858883][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.858895][ T6215] R13: 00007f0f95526038 R14: 00007f0f95525fa0 R15: 00007ffc3e5ff598 [ 1193.858912][ T6215] [ 1194.155359][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.162869][ T6105] bridge_slave_0: entered allmulticast mode [ 1194.169507][ T6105] bridge_slave_0: entered promiscuous mode [ 1194.176446][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.183585][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.190781][ T6105] bridge_slave_1: entered allmulticast mode [ 1194.197612][ T6105] bridge_slave_1: entered promiscuous mode [ 1194.215261][ T6105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.225746][ T6105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.244977][ T6105] team0: Port device team_slave_0 added [ 1194.251318][ T6105] team0: Port device team_slave_1 added [ 1194.267471][ T6105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.273145][ T6231] FAULT_INJECTION: forcing a failure. [ 1194.273145][ T6231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.276402][ T6105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.314802][ T6231] CPU: 0 UID: 0 PID: 6231 Comm: syz.0.8960 Tainted: G W syzkaller #0 PREEMPT(full) [ 1194.314836][ T6231] Tainted: [W]=WARN [ 1194.314928][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1194.314941][ T6231] Call Trace: [ 1194.314948][ T6231] [ 1194.314956][ T6231] __dump_stack+0x1d/0x30 [ 1194.315003][ T6231] dump_stack_lvl+0x95/0xd0 [ 1194.315025][ T6231] dump_stack+0x15/0x1b [ 1194.315088][ T6231] should_fail_ex+0x263/0x280 [ 1194.315126][ T6231] should_fail+0xb/0x20 [ 1194.315144][ T6231] should_fail_usercopy+0x1a/0x20 [ 1194.315169][ T6231] _copy_from_user+0x1c/0xb0 [ 1194.315266][ T6231] io_register_pbuf_ring+0x51/0x410 [ 1194.315289][ T6231] ? __fget_files+0x184/0x1c0 [ 1194.315311][ T6231] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1194.315346][ T6231] __se_sys_io_uring_register+0x888/0x12d0 [ 1194.315415][ T6231] ? mutex_unlock+0x4e/0x90 [ 1194.315442][ T6231] ? fput+0x8f/0xc0 [ 1194.315466][ T6231] ? ksys_write+0x194/0x1a0 [ 1194.315485][ T6231] __x64_sys_io_uring_register+0x55/0x70 [ 1194.315579][ T6231] x64_sys_call+0x2be0/0x3020 [ 1194.315677][ T6231] do_syscall_64+0x12c/0x370 [ 1194.315699][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.315750][ T6231] RIP: 0033:0x7fc54debc799 [ 1194.315765][ T6231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.315784][ T6231] RSP: 002b:00007fc54c8d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1194.315872][ T6231] RAX: ffffffffffffffda RBX: 00007fc54e136180 RCX: 00007fc54debc799 [ 1194.315913][ T6231] RDX: 0000200000000040 RSI: 0000000000000016 RDI: 0000000000000003 [ 1194.315928][ T6231] RBP: 00007fc54c8d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.315996][ T6231] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1194.316008][ T6231] R13: 00007fc54e136218 R14: 00007fc54e136180 R15: 00007fff51fd9778 [ 1194.316106][ T6231] [ 1194.511599][ T6105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.527999][ T6105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.535467][ T6105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.561452][ T6105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.613795][ T6105] hsr_slave_0: entered promiscuous mode [ 1194.620125][ T6105] hsr_slave_1: entered promiscuous mode [ 1194.675499][ T6105] debugfs: 'hsr0' already exists in 'hsr' [ 1194.675627][ T6229] ================================================================== [ 1194.689437][ T6229] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1194.696483][ T6229] [ 1194.698791][ T6229] write to 0xffffffff86d45b80 of 88 bytes by task 6105 on cpu 0: [ 1194.706495][ T6229] prb_reserve+0x6e6/0xae0 [ 1194.710908][ T6229] vprintk_store+0x54a/0x910 [ 1194.715484][ T6229] vprintk_emit+0x1a4/0x600 [ 1194.719976][ T6229] vprintk_default+0x26/0x30 [ 1194.724551][ T6229] vprintk+0x1d/0x30 [ 1194.728447][ T6229] _printk+0x79/0xa0 [ 1194.732345][ T6229] debugfs_start_creating+0x145/0x150 [ 1194.737723][ T6229] debugfs_create_dir+0x20/0x230 [ 1194.742660][ T6229] hsr_debugfs_init+0x36/0xe0 [ 1194.747331][ T6229] hsr_dev_finalize+0x6a3/0x6d0 [ 1194.752185][ T6229] hsr_newlink+0x5ba/0x650 [ 1194.756590][ T6229] rtnl_newlink_create+0x1e4/0x650 [ 1194.761696][ T6229] rtnl_newlink+0x10a0/0x1330 [ 1194.766456][ T6229] rtnetlink_rcv_msg+0x64b/0x720 [ 1194.771392][ T6229] netlink_rcv_skb+0x123/0x220 [ 1194.776145][ T6229] rtnetlink_rcv+0x1c/0x30 [ 1194.780558][ T6229] netlink_unicast+0x5c0/0x690 [ 1194.785311][ T6229] netlink_sendmsg+0x5c8/0x6f0 [ 1194.790155][ T6229] __sys_sendto+0x470/0x4d0 [ 1194.794656][ T6229] __x64_sys_sendto+0x76/0x90 [ 1194.799326][ T6229] x64_sys_call+0x2d35/0x3020 [ 1194.803998][ T6229] do_syscall_64+0x12c/0x370 [ 1194.808581][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.814463][ T6229] [ 1194.816778][ T6229] read to 0xffffffff86d45b80 of 8 bytes by task 6229 on cpu 1: [ 1194.824736][ T6229] _prb_read_valid+0x383/0x950 [ 1194.829497][ T6229] prb_read_valid_info+0x7a/0xa0 [ 1194.834432][ T6229] find_first_fitting_seq+0x1cc/0x330 [ 1194.839794][ T6229] syslog_print_all+0x11b/0x3c0 [ 1194.844630][ T6229] do_syslog+0x2fd/0x7f0 [ 1194.848948][ T6229] __x64_sys_syslog+0x41/0x50 [ 1194.853608][ T6229] x64_sys_call+0x2b9e/0x3020 [ 1194.858276][ T6229] do_syscall_64+0x12c/0x370 [ 1194.862851][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.868731][ T6229] [ 1194.871037][ T6229] value changed: 0x0000000000003f30 -> 0x0000000000005f30 [ 1194.878125][ T6229] [ 1194.880432][ T6229] Reported by Kernel Concurrency Sanitizer on: [ 1194.886566][ T6229] CPU: 1 UID: 0 PID: 6229 Comm: syz.6.8961 Tainted: G W syzkaller #0 PREEMPT(full) [ 1194.897405][ T6229] Tainted: [W]=WARN [ 1194.901190][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1194.911316][ T6229] ================================================================== [ 1194.925070][ T6105] Cannot create hsr debugfs directory [ 1194.939765][ T6248] netlink: 'syz.0.8965': attribute type 2 has an invalid length. [ 1194.991439][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1194.991453][ T28] audit: type=1400 audit(1194.735:5415): avc: denied { read } for pid=6241 comm="syz.0.8965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1195.351180][ T6105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1195.359973][ T6105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1195.368888][ T6105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1195.378084][ T6105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1195.417151][ T6105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.429990][ T6105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.439415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.446503][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.469220][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.476412][ T9885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.511796][ T6105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1195.522328][ T6105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.567893][ T6105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.652217][ T6105] veth0_vlan: entered promiscuous mode [ 1195.659741][ T6105] veth1_vlan: entered promiscuous mode [ 1195.673713][ T6105] veth0_macvtap: entered promiscuous mode [ 1195.680740][ T6105] veth1_macvtap: entered promiscuous mode [ 1195.691257][ T6105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1195.701588][ T6105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.712563][T28321] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.722329][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.731729][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.740492][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0