last executing test programs: 19m27.310030852s ago: executing program 32 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000040000000000000000040000000000000002d50e54f1d1eaa3c5e270a21da6d765050000000000000039ff54e98c774e84cc"], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x8000, 0xffff85ee, 0x6, 0xfffffffffffffffa, 0x88, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xd19, 0x5, 0x0, 0xfffffffffffffffb, 0x1000007ff, 0x9]}, &(0x7f0000000080)=0x78) 19m24.930503467s ago: executing program 33 (id=114): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x602701) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15442, 0x10028}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c1}, 0x810) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x0, 0xfffffffffffffffe, 0x75, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="0dff6182b6470e7c1601a46ceb13eda6e8efe6c496352d4d7ac69e533fe5a681e82f61dce6d5947e7fc2a61c725459cafaf39808e105f9db6b2e5fd6dba5d2a02709c1648dde7367ba0b755ceac130d7101cf572ad1d41b6f1acd3aafab0970502e6056e97013090a7fb59a77454c45994e518b223", 0x0, 0x38, 0x10000, 0xffffffffffffffff, &(0x7f00000005c0)}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000380)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000700), 0x1, 0x579, &(0x7f00000007c0)="$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") 19m23.739213785s ago: executing program 34 (id=122): syz_open_dev$sg(0x0, 0x0, 0x8082) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) eventfd(0xfffffffd) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="e37a", @ANYRESHEX=r0, @ANYBLOB]) timer_create(0x0, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x50d, &(0x7f0000001280)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x1300c5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58, 0x0, 0x3}, 0x28) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8013, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x1, @perf_config_ext={0x2, 0x9}, 0x10c02c, 0x9, 0x2000004, 0x4, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19m18.391846425s ago: executing program 35 (id=139): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}, {@grpquota}]}, 0x1, 0x4ff, &(0x7f0000001540)="$eJzs3c9vG1kdAPDvOHGSzbqbLuwBELBlWSioqvOju9FqOdC9gFBVCVFx4tCGxI2i2HUUJ6UJOaRH7khU4gR/AjcOSL3AgRs3uHEpB6QCEahB4mA042niJnGcbpO4iT8faTzz3kz9fc/ue8/zavcF0LcuRcRmRAxFxJ2IGMvzk3yL660tve7Z1sbs9tbGbBLN5q1/Jtn5Z1sbxWj7M6k38+cciYgffDfix8n+uI219cWZarWynKfHV2pL44219asLhTxnanpyeuKjax9OHVtd36395ul3Fm788He//dKTP21+86dpsUo/u5CdS+t2bIHatKpejFJb3mBE3DiJYD0ymP/94exJW9tnIuK9rP2PxUD2bgIA51mzORbNsfY0AHDepff/pUgK5XwuoBSFQrncmsN7J0YL1Xpj5cpYffXeXGRzWBejWLi7UK1M5HOFF6OYpOnJ7Hg3PbUnfS0i3o6Inw+/kaXLs/XqXC8/+ABAH3tzz/j/n+HW+A8AnHMjL3m9rwgAwNn3suM/AHD2Gf8BoP+8xPhv6h8Azgn3/wDQf4z/ANB/uo7/D0+nHADAqfj+zZvp1tzO///ruftrq98q3b86V2kslmurs+XZ+vJSeb5en69WyrPNZrfnq9brS5Mf7CQba+u3a/XVeyu3F2oz85XbleIJ1wcA6O7tdx//JYmIzY/fyLZoW8vBWA3nW6HXBQB6ZqDXBQB6xu95oH8dfo9f6H4JcOYdsETvCzp+ReiRxV/hrLr8efP/0K/M/0P/+nTz/98+9nIAp8/8P/SvZjOx5j8A9Blz/MAr/fs/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9KlStiWFcrYW+Gb6WCiXIy5ExMUoJncXqpWJiHgrIv48XBxO05O9LjQA8IoKf0/y9b8uj71f2nt2KPnvcLaPiJ/88tYvHsysrCxPpvn/2slfeZTnTw31ogIAQLvr6cPvX8hqjdP5vu1G/tnWxuzz7TSL+PST1uKiadztfGudGYzBbD8SxYgY/XeSp1vSzysDxxB/82FEfG63/g/aIpSyOZDWyqd746exL5xA/N3Xf2/8wgvxC9m5dF/MXovPHkNZoN88/qTVT+ZtL21iefsrxKVsf3D7H8l6qFf3vP/b3tf/FXb6v4F98ZOszV/aSR9ekqcf/OF7+zKbY61zDyO+MHhQ/GQnftKh/33/iHX86xe//F6nc81fRVyOg+O31LJudnyltjTeWFu/ulCbma/MV+5NTU1PTk98dO3DqfFsjrr1+MeDYvzj4ytvdYqf1n+0Q/yRLvX/2hHr/+v/3fnRVw6J/42vHvz+v3NI/HRM/PoR48+MXu+4fHcaf65D/bu9/1eOGP/J39bnjngpAHAKGmvrizPVamW5y0H6WbPbNQ7O5kFsRrwGxcgPhuK1KEbfH/S6ZwJO2m6j73VJAAAAAAAAAAAAAACAThpr64vDcbI/J+p1HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi//h8AAP//vYjOcw==") mkdirat(0xffffffffffffffff, 0x0, 0x8) lsetxattr$trusted_overlay_redirect(0x0, 0x0, &(0x7f00000000c0)='./file7/file0\x00', 0xe, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x30}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 18m48.897169676s ago: executing program 36 (id=299): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000023000000000100000030000180060004000000000006000100020000000600020000000000040003"], 0x44}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) bind$inet6(r5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 18m44.829672407s ago: executing program 37 (id=315): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f0000001e00)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000340)}, 0x100, 0x20000, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) 18m41.353426288s ago: executing program 38 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) bpf$MAP_CREATE(0xff070000, 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0xa) 18m41.209584101s ago: executing program 39 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x17, 0x4, 0x0, 0x0, 0x70, 0x2, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@ssrr={0x89, 0x1b, 0x47, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x2b, 0x61, [@remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3e}, @local, @broadcast, @private=0xa010102, @private=0xa010102, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}]}]}}, {{0x4e21, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010000001800000006000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb402b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x5, 0x4a, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000050000009b2f1d777d8aceb2d2d23ba30000612dedb7e4"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x7, 0x86, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_io_uring_setup(0x4329, &(0x7f0000000180)={0x0, 0x776c, 0x130c9, 0x6, 0x8030e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) epoll_create(0x6) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x0, 0x1}, 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) 18m39.441184717s ago: executing program 40 (id=344): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x5, 0x209, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x4, 0x0]}}}}}}}, 0x0) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) fallocate(r1, 0x0, 0x0, 0x8800000) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000022c0)={0x100, 0x8}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2, 0x3}, 0x80) 18m23.013263613s ago: executing program 41 (id=417): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) syz_emit_ethernet(0x5f, &(0x7f00000006c0)={@remote, @local, @void, {@x25={0x805, {0x3, 0xa, 0xf7, "bf15aece19f9d0341b9edc6d043f02d2846196faa1aebe654ea09b3714cadc03672a822a1b7c9692f64da684427fd7bb208722c0a24bf56eb6feb2c43a8cdec7574225aca66067f1ccde6a21895e"}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x208853, &(0x7f0000000080)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000140)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40800, &(0x7f0000000240)={[{@noquota}, {@noblock_validity}, {@nogrpid}, {@data_journal}]}, 0xfe, 0x282, &(0x7f00000015c0)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xffff, 0x3}, 0x383, 0x0, 0x0, 0x2, 0x8000000, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x19, 0x0, 0x0, 0x7, 0x84, &(0x7f0000000280)=""/132, 0x41100, 0x66, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x0, 0x10, 0x60c3}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40000) ioctl$SG_IO(r3, 0x2285, 0x0) poll(&(0x7f0000000500)=[{r3, 0x4200}], 0x1, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r2], 0x38}}, 0x10) 18m5.715857022s ago: executing program 42 (id=506): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x42a, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket(0xa, 0x3, 0xff) fallocate(r1, 0x3, 0x0, 0x20000004) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) add_key$keyring(&(0x7f0000000080), &(0x7f0000001140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) link(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r4) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000000c0)=r5, 0x1) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17m47.482259925s ago: executing program 43 (id=583): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x5, 0x209, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x4, 0x0]}}}}}}}, 0x0) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000022c0)={0x100, 0x8}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x4c, 0x13, 0x100, 0x70bd29, 0x25dfdbfd, {0x6, 0x8, 0xf0, 0x5, {0x4e21, 0x4e23, [0x74, 0x1, 0xffff8001, 0x2], [0x3, 0xfd0, 0x401, 0xfb1], 0x0, [0x1, 0xe]}, 0x2, 0xfffffffc}}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 17m45.901018518s ago: executing program 44 (id=597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 17m44.880440293s ago: executing program 45 (id=599): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x4c, 0x13, 0x100, 0x70bd29, 0x25dfdbfd, {0x6, 0x8, 0xf0, 0x5, {0x4e21, 0x4e23, [0x74, 0x1, 0xffff8001, 0x2], [0x3, 0xfd0, 0x401, 0xfb1], 0x0, [0x1, 0xe]}, 0x2, 0xfffffffc}}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 17m43.558707453s ago: executing program 46 (id=604): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8000, 0xffffffffffffffff, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 17m13.825933028s ago: executing program 47 (id=734): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x2, 0x0}}], 0x10) 17m2.528113257s ago: executing program 48 (id=795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000740)={[{@data_journal}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@delalloc}, {@dax_inode}, {@nogrpid}, {@noauto_da_alloc}, {@grpquota}]}, 0x3, 0x581, &(0x7f0000001240)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file0/file0', [{0x20, 'trusted.overlay.upper\x00'}, {0x20, 'debug_want_extra_isize'}], 0xa, "68f24d44cb66efa73c4789a158681c9c4a4f6318747f537489fb6184b57080d5ea0838d83f2a8b6f5231402307c47aaefb6ef083b9992cdab5c961097cf39582ca9fc1f7961d52218abbcf73d3a55b964695711470ba86609ca5a828527dbd9e19036b13707a20d1955fce46649bc7830baec7ae90"}, 0xb4) rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x1) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x4, 0x5}, 0x50) mkdirat(r2, &(0x7f00000005c0)='./file0/file0\x00', 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000800060009"], 0xfce) 16m54.326307929s ago: executing program 49 (id=843): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8000, 0xffffffffffffffff, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 16m51.135052527s ago: executing program 50 (id=856): futex(0x0, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x2d, 0x10, 0x0, 0x1, 0x0, 0x2, 0xa8198, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x9}, 0x1194, 0x8000, 0x101, 0x9, 0x9, 0x1, 0x6, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0x203fffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x2d, 0x10, 0x0, 0x1, 0x0, 0x2, 0xa8198, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x9}, 0x1194, 0x8000, 0x101, 0x9, 0x9, 0x1, 0x6, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0x203fffffffff, 0xffffffffffffffff, 0xa) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b540800b608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x0, 0x0, &(0x7f0000000540)) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x0, 0x0, &(0x7f0000000540)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mknodat(r0, 0x0, 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@jqfmt_vfsv1}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x4008810) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x4008810) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c", @ANYRES32=r2, @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x6, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) (async) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x5, 0x4) recvmmsg(r1, &(0x7f0000006540)=[{{&(0x7f0000000880)=@isdn, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000900)=""/43, 0x2b}, {0x0}, {&(0x7f0000000e40)=""/6, 0x6}], 0x3}, 0x1}, {{&(0x7f0000001300)=@nl, 0x80, &(0x7f00000026c0)=[{0x0}, {&(0x7f0000001480)=""/246, 0xf6}, {&(0x7f0000001580)=""/124, 0x7c}, {&(0x7f0000001680)=""/55, 0x37}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002740)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003740)=@tipc, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)=""/165, 0xa5}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000003900)=""/31, 0x1f}, {&(0x7f0000003940)=""/142, 0x8e}, {&(0x7f0000003a00)=""/227, 0xe3}, {&(0x7f0000003b00)=""/151, 0x97}, {0x0}, {&(0x7f00000052c0)=""/46, 0x2e}, {&(0x7f0000005300)=""/20, 0x14}], 0x7}, 0x5}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000005400)=""/178, 0xb2}, {&(0x7f00000054c0)=""/6, 0x6}], 0x2, &(0x7f0000005540)=""/4096, 0x1000}, 0x3}], 0x5, 0x45833af92e4b39ff, 0x0) r5 = open(0x0, 0x0, 0x0) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 16m49.877920986s ago: executing program 51 (id=863): socket(0x15, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0) listen(r0, 0x7f) 16m42.546854506s ago: executing program 52 (id=890): timer_create(0xfffffffffffffffc, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x61}, {0x81}, {0x6, 0x0, 0xfd}]}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r2, 0x1}, 0x20) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0xffffffffffffff4f, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x38, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, r6}, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1, 0x4d1a}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000004) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xd895, 0x6, 0x3, 0x80000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18d823ff89d5ce01000000000000007900ff0500000000000000000000d44f070000f9"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, {[@generic={0x4, 0x5, "ab6a8c"}, @sack={0x5, 0x2}, @mss={0x2, 0x4}]}}}}}}}}, 0x0) 16m28.065372442s ago: executing program 53 (id=978): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") (fail_nth: 1) 16m26.522355915s ago: executing program 54 (id=991): syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x2, 0xff, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(r0, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x3, 0x0, 0x0, 0x0, 0x8, 0x64488, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x2, 0xd, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x18, 0x4, 0x7, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000280)={0x0, 'veth1_to_bridge\x00', 0x2}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f0000000000)=0x200004, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24008000) set_mempolicy(0x8006, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x19a55d1a) bind$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x12) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x80, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x45, 0x1, 0x2}, {0x61}, {0x81}, {0x6, 0x0, 0xfd}]}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000500)='./file0\x00', 0x240014, &(0x7f0000000300)=ANY=[], 0x1, 0x254, &(0x7f0000000a40)="$eJzs3bFu00AYB/CvadKmXeiMGCyxMFXAG0QoSAhLSEEZYCJSYWkRUroYpjwGMyOPxGN06mZEbWrjApWgwTH+/aTIn/TPnb5bchnukld33h4fvTt9k3/5GONxEsOIVZxHHMQgtqOwVT4HF/VO1K0CAOia2WwxabsH/t7u92LrSrQXEYtR/T2X5p/X3xkAAAAAAAAAAADr4Pw/APSP8///v+Vystgvv7/9yPl/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD3neX4r/82r7f4AgJtn/weA/rH/A0D/2P8BoH+ev3j5dJKm01mSjCPOVtk8mxfPIn/8JJ3eTy4cVKPOsmw+Kut0+qDIk2a+X45/+NN8J+7dLfJv2aNnaSPfjaN1Lx4AAAAAAAAAAAAAAAAAAAA2xGFyqXG/f7vID3+VF1Xt9wEa9/eHcXv4z5YBAAAAAAAAAAAAAAAAAAAAnXb6/sPx4uTk9fLa4tMo4ko0Kqe5friiQ8Ve/MGocWxG81WRb0Yb3Sxa/mACAAAAAAAAAAAAAAAAAIAeqi79tt0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSn+v//my0GtZnbXiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQD18DAAD//zURi98=") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setgroups(0x2, &(0x7f0000000080)=[r3, r3]) setregid(0xffffffffffffffff, r3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 16m24.486186926s ago: executing program 55 (id=999): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffc, 0x7, 0x8000, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @empty, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 16m18.18631559s ago: executing program 56 (id=1018): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setfsgid(0xee00) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="2769034242b2", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfc, 0x2, 0x0, @local, @local}, {0x17, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0xcf5) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000080)=[{r2, 0x2000}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TCSETSW2(r4, 0x5437, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c4, &(0x7f0000000040)={0x0, 0x7b4e, 0x400, 0xa, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) 15m46.75239692s ago: executing program 57 (id=1230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='io\x00') mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x717340, 0x0) lseek(r1, 0x2, 0x0) 15m22.645286321s ago: executing program 58 (id=1435): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) 15m20.72406349s ago: executing program 59 (id=1446): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@errors_remount}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@grpquota}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0xa, 0x5, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x149442, 0x40) fallocate(r6, 0x0, 0x1002, 0x9) 15m16.506073403s ago: executing program 60 (id=1469): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42032, r0, 0x80000000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x2f, 0x0, 0x0, 0xf}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x600}, 0x0) cachestat(r1, &(0x7f0000000200)={0x7}, &(0x7f0000000240), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000180)=@raw={0x5c, 0x61, {"5a3e5e4e17b9a8bee620d93a5d702691ec5bed7f8e44b5094be6ffdc25ada703f3a7a90818da0a5cd017a52de4e2f38e3ed3c20de93f8abad7c03bdbf58f8e703d3faf38367e30fb5fadbd39ff8d2a62068d1cc72ffe79fd3e5835c4"}}, 0xc0040) socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000), 0x80000) 15m2.68021829s ago: executing program 61 (id=1556): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x101080) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000480)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) ioctl$BLKRRPART(r5, 0x125f, 0x0) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa012101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setgid(0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r11, 0x0, r13, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r12, 0x407, 0x100004) 14m59.755608403s ago: executing program 62 (id=1587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af0000000120a0300000000000000000007000005dc000480340003800800034000000003140001002001000000000000000000000000000014000200fe80000000000000000000000000001b0500050009000000060007404e2200008c00038014000200ff02000000000000000000000000000114000100ff010000000000000000000000000001080003400000000914000100fc0200000000000000000000dfcc1df814000100fe88000000000000000000000000000114000100ff02000000000000000000000000000108000340000000ad140001000000000000000000000000000000000008000140000000041400000011000100000000000000b02b1cdc000a"], 0x118}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="6112a000000000006113380000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040801}, 0x24008840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x78bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfd, [0x0, 0x0, 0x0, 0x0, 0x80, 0x9], 0x5, [0xfffe, 0xe6, 0xfffe, 0x7, 0x0, 0xe, 0x0, 0xc, 0x0, 0x5c4, 0x8000, 0x4, 0x0, 0x3dc, 0x0, 0xffff], [0x0, 0x4, 0xc6, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0xff, 0x0, 0x400, 0x1001]}}}}]}, 0x88}}, 0x20000000) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) socket$netlink(0x10, 0x3, 0xe) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) getpid() 14m50.027209939s ago: executing program 63 (id=1624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r2 = getpid() syz_pidfd_open(r2, 0x0) mknod(0x0, 0x8000, 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x32}, 0x20, 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x6e21, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) r6 = eventfd(0x7f) io_submit(r5, 0x1f9b, &(0x7f0000000100)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, r4, 0x0, 0x0, 0x1, 0x0, 0x1, r6}]) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) unshare(0x20000400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1b, &(0x7f00000004c0)=ANY=[@ANYBLOB="18500000090000000000800000000000b7080000000000007b8af8ff00000000b7080000390000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185000000f000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=0x1, @ANYBLOB="000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000200), 0x10, 0x9}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) 14m43.521609516s ago: executing program 64 (id=1659): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xe8, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x30}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x10) 14m34.621082739s ago: executing program 65 (id=1702): lseek(0xffffffffffffffff, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xb, 0x0, 0xfffffffc, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x4) ioprio_get$pid(0x3, 0x0) 14m12.944270203s ago: executing program 66 (id=1786): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0x8}]}, {0x0, [0x30, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x2, 0x800003}, 0x28) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc081}, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0), 0x12) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204000, 0x88) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) (fail_nth: 3) 14m12.162695125s ago: executing program 2 (id=1792): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x42a, &(0x7f0000000500)="$eJzs3E2IVeUfB/DfOTNX/47j/44RTUWglGgRXvVeq622aNHGhSD0IjTk9QWvTngnShPKAhEiooUkCDEto0UuWhQRRJsIatGiIJKEahGGFdKi3cS955zxomcWjTMenT4fOHOf89w753seDhyeB875BfCftTYitkXEUEQ0IqKe96f5Fq9kW+93x1vn9ve2JGZmdv6RRBIR7da5/cWxkvxzZf5v/4uI27Yl8ejwtbndo8cOTnQ67SP5/qapQ89t6h49tvHAoYl97X3tw62tDzebWx9qPbJwYz0//mo0m9tqH2xYe+rrT9/4rne+o/l3g+NYSMkcndsXI6xCtYF2UnK9ufm8dfrNT6o+BwDgxkvzuf9wf/5fj6HIJm8Xzj99uR4vj1R9fgAAAMD1m5kZyj8BAACApSux9gcAAIAlrngOoN06t7/YbtSzBysfiLi0PSLGsvzi/eLs2+H++8ORv1taW4T8ey8swkH/he7j1eZ/s6va/NXvV5s//UO1+c+srzb/l5+qzV+3ptr805MRn23PCiBce/9L+zUPCssiYnle02DFAuWv+fzK/e/4Nfe/dPb+NxQR1/Mi1qnpiyfL+scfi7h0IuLu4bL8ZDY/yWs6zNfGb0/sLutffSli5t2I9VGeHwP5c9eH2LT3QKe9Oftbnt966cl6Wf+OL7Lxj8yRP5b/bmigTsR8nBnZ/dGqkv5djSz//vvKr/+dA+P/f16bY2we+Wvv6uwo61//epa/Z47xD17/1fPILUz/1v25rP/DrddxUABg3tL+3CZJG7PtNG00svne7TGSdia7Uw/unXz+8J5sDjQWtbSYamXzkVrS29+Sz02K/eZV+618DnGqvqK/33h2srOn6sEDAADAEjca8eNTr308vvKq9f+v9Wz9DwAAANz6euv/e6bfOdtr/1X6dCQAAABwq+ut/y+f/P3LsP4HAACAJcv6HwAAAJa+Yv0/Okf9v1UDtfs25/WHv6rXlhe1/gAAAICbX2/9n37/xIXu0WMHJzqd9hENDQ2N2UbVdygAAGChXZn0V30mAAAAwOJJLyYR0ds21NeN3rHmvfHBb5clf/erAyyLiBfO7nz7xYmpqSNbev1/zvZPncn7m1WNAQAAABhUrNOLdTwAAAAAAAAAAAAAAHDzuxHlxKseIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvnnwAAAP//UuGYiQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket(0xa, 0x3, 0xff) fallocate(r1, 0x3, 0x0, 0x20000004) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) add_key$keyring(&(0x7f0000000080), &(0x7f0000001140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) link(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r4) open_tree(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x2) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14m11.86188253s ago: executing program 2 (id=1794): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) pipe2$9p(0x0, 0x800) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x100000000830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000000c0)=0x6, 0x1000, 0x2) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x373, &(0x7f00000006c0)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) listen(r2, 0xd) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') shutdown(r2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000640)={0x60200, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), {0xa}, 0x0, 0x0, &(0x7f00000004c0)=""/251, 0x0, 0x0, {r1}}, 0x58) pwrite64(r1, 0x0, 0x0, 0xfffffffffffffffc) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00') r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885fec2e72c56542d8a7a3c63e598a354755c27793f2bc59c65980a0ddaf01b51253cf82ae7a3db51d1b962ffbd9cfd36b0036b550f6b441727d3030fe5b798f065f694619e1fb1d2da023cb6e46edfeb4255bc72922ce24f86bcfe2c8b4d5496060de", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "05bef2a0ba57e8c1", "6dae7fd38fb2a187322e750f0c24a985", "9b99a3c8", "d3b30d165d678510"}, 0x28) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto(r0, &(0x7f0000000a40)="567be0dc5c4697a456ee3144be430ca63e148f0236654f1ada97cd41babc2cbec7e6e4d52c7e40fc418f536700efdb1bbc0d01f07ab3051bdb64b5967c80330d7a9454be6fccf63f39401ccb04ced4a005e51b19fda2209405b5a6d8d907f4d9342be7f5409d8ced1836bb7e2f8dfc3dd4947dfb7debc003ce0e55b9ad2f9a7df2d802075424bb2cf8134194c351ed06dcec4aa79af25758851590ebae1dbf75eb6c2662531f5c469d58321633258ac749ddee452eaf1e5124e600858335b3a33e364d9882a2c1d5bd6058a5ab6d5f5070bc9cf850f445497a47133e63c460cd3b6c695484462ceec3503aa2e584a07614f2c19c7aa3dbc17bb782cd", 0xfc, 0x800, &(0x7f0000000b40)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x3}}, 0x80) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, 0x0, &(0x7f0000000340)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="95a8177c2bbbd2514c60b9161bff33097c7e0888dc4a08d2d929e4f5910fa7474b4bd0492a9a2f7b417302ab6b6dab58", @ANYRES8=r3], 0x38}}, 0x0) socket$kcm(0x23, 0x2, 0x0) 14m11.474154776s ago: executing program 6 (id=1798): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) pipe2$9p(0x0, 0x800) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x100000000830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000000c0)=0x6, 0x1000, 0x2) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x373, &(0x7f00000006c0)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) listen(r2, 0xd) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') shutdown(r2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000640)={0x60200, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), {0xa}, 0x0, 0x0, &(0x7f00000004c0)=""/251, 0x0, 0x0, {r1}}, 0x58) pwrite64(r1, 0x0, 0x0, 0xfffffffffffffffc) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00') r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885fec2e72c56542d8a7a3c63e598a354755c27793f2bc59c65980a0ddaf01b51253cf82ae7a3db51d1b962ffbd9cfd36b0036b550f6b441727d3030fe5b798f065f694619e1fb1d2da023cb6e46edfeb4255bc72922ce24f86bcfe2c8b4d5496060de", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "05bef2a0ba57e8c1", "6dae7fd38fb2a187322e750f0c24a985", "9b99a3c8", "d3b30d165d678510"}, 0x28) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto(r0, &(0x7f0000000a40)="567be0dc5c4697a456ee3144be430ca63e148f0236654f1ada97cd41babc2cbec7e6e4d52c7e40fc418f536700efdb1bbc0d01f07ab3051bdb64b5967c80330d7a9454be6fccf63f39401ccb04ced4a005e51b19fda2209405b5a6d8d907f4d9342be7f5409d8ced1836bb7e2f8dfc3dd4947dfb7debc003ce0e55b9ad2f9a7df2d802075424bb2cf8134194c351ed06dcec4aa79af25758851590ebae1dbf75eb6c2662531f5c469d58321633258ac749ddee452eaf1e5124e600858335b3a33e364d9882a2c1d5bd6058a5ab6d5f5070bc9cf850f445497a47133e63c460cd3b6c695484462ceec3503aa2e584a07614f2c19c7aa3dbc17bb782cd", 0xfc, 0x800, &(0x7f0000000b40)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x3}}, 0x80) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, 0x0, &(0x7f0000000340)) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="95a8177c2bbbd2514c60b9161bff33097c7e0888dc4a08d2d929e4f5910fa7474b4bd0492a9a2f7b417302ab6b6dab58", @ANYRES8=r3], 0x38}}, 0x0) socket$kcm(0x23, 0x2, 0x0) 14m11.455776885s ago: executing program 67 (id=1798): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) pipe2$9p(0x0, 0x800) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x100000000830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000000c0)=0x6, 0x1000, 0x2) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x373, &(0x7f00000006c0)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) listen(r2, 0xd) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') shutdown(r2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000640)={0x60200, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), {0xa}, 0x0, 0x0, &(0x7f00000004c0)=""/251, 0x0, 0x0, {r1}}, 0x58) pwrite64(r1, 0x0, 0x0, 0xfffffffffffffffc) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00') r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885fec2e72c56542d8a7a3c63e598a354755c27793f2bc59c65980a0ddaf01b51253cf82ae7a3db51d1b962ffbd9cfd36b0036b550f6b441727d3030fe5b798f065f694619e1fb1d2da023cb6e46edfeb4255bc72922ce24f86bcfe2c8b4d5496060de", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "05bef2a0ba57e8c1", "6dae7fd38fb2a187322e750f0c24a985", "9b99a3c8", "d3b30d165d678510"}, 0x28) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto(r0, &(0x7f0000000a40)="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", 0xfc, 0x800, &(0x7f0000000b40)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x3}}, 0x80) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, 0x0, &(0x7f0000000340)) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="95a8177c2bbbd2514c60b9161bff33097c7e0888dc4a08d2d929e4f5910fa7474b4bd0492a9a2f7b417302ab6b6dab58", @ANYRES8=r3], 0x38}}, 0x0) socket$kcm(0x23, 0x2, 0x0) 14m9.685164412s ago: executing program 2 (id=1804): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) kcmp(r1, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3fd}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) 14m9.639250883s ago: executing program 68 (id=1804): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) kcmp(r1, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3fd}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) 13m58.077538976s ago: executing program 69 (id=1854): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x115, 0x70bd2b, 0x25dfdbfd, {0x2, 0x18, 0x10, 0x0, 0x0, 0x4, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) write(r1, &(0x7f0000000b80)="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", 0xc00) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) ioctl$TUNGETVNETLE(r2, 0xc008744c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x7e, 0x0, {0x81, 0x217021a227ded9c3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1a}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000080)="ee35c4a04e4cb4aa7f92187b35f82d0ce286b4ee6f2350f641cbf6bafd1d19210fd1df8fc4c81e1b03d7d87dea325cc7e7e6d27995beab00df47ccca32", 0x3d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect={0x20393428}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x46, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 13m57.07367452s ago: executing program 1 (id=1859): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x6, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) unshare(0x22020400) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x260000) readv(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x200, 0x82) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x13c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xe8, 0x84, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x699d}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xffffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8000}, @NL80211_BAND_LC={0x8, 0x5, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffff0001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xb5b5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xf}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="cd7ab5afdb8b"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x23c}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8f42}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3a052eac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}]}]}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="34f39e220c02"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xa8a}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2044}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x13c}, 0x1, 0x0, 0x0, 0x801}, 0x4044010) 13m56.438090101s ago: executing program 1 (id=1864): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0x0, 0x360, 0x1a0, 0x1a0, 0x1a0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x40}, [0xff, 0x0, 0x0, 0xffffff00], [0x0, 0xffffffff], 'pim6reg\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@ipv6={@private1, @mcast2, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xff, 0x0, 0xff000000, 0xffffffff], 'veth0_vlan\x00', 'wlan0\x00', {}, {}, 0x11, 0x9, 0x5, 0x23}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff000000], 'pimreg1\x00', 'vlan1\x00', {0xff}, {}, 0x5e, 0x0, 0x3, 0x17}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x27, 0xe, 0x3}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xff], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x9d, 0x45, 0x7}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xc, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0x20000, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000009c62485ec000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f0000000300), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8}}, {@nombcache}, {@noinit_itable}, {@nomblk_io_submit}, {@minixdf}, {@nobarrier}, {@inode_readahead_blks}, {@usrjquota}, {@block_validity}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000000)) 13m55.12506667s ago: executing program 1 (id=1866): ppoll(&(0x7f00000009c0)=[{0xffffffffffffffff, 0x8000}, {}], 0x2, &(0x7f0000000ac0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x6}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000000b, 0x149900) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {0xffffffffffffffff, 0x100000000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000d361c32afdb09b1500000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240), 0x106, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x6) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f00000002c0)={[{@resgid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@mblk_io_submit}, {@nomblk_io_submit}, {@noblock_validity}]}, 0xfe, 0x4bb, &(0x7f0000001180)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000000c0)={0xd270, 0x0, 0x1, 0xc05, 0xd4}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000008c0)={[], [{@permit_directio}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) 13m54.185671314s ago: executing program 1 (id=1871): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x42a, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket(0xa, 0x3, 0xff) fallocate(r1, 0x3, 0x0, 0x20000004) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) add_key$keyring(&(0x7f0000000080), &(0x7f0000001140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) link(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r4) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000000c0)=r5, 0x1) openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13m53.80026152s ago: executing program 1 (id=1873): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 13m53.601539953s ago: executing program 70 (id=1875): socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fallocate(r3, 0x60, 0x800, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRESDEC=r3, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f00000002c0)={0x8}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000200)={[{@grpquota}]}, 0x9, 0xbac, &(0x7f00000017c0)="$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") r6 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r6, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 13m53.526631224s ago: executing program 1 (id=1877): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) socket$key(0xf, 0x3, 0x2) open(0x0, 0x8000, 0x112) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001400)={0x0, 0x6, 0xfff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) vmsplice(r4, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x20, 0x7, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020100006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) close(r2) 13m53.479990425s ago: executing program 71 (id=1877): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) socket$key(0xf, 0x3, 0x2) open(0x0, 0x8000, 0x112) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001400)={0x0, 0x6, 0xfff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) vmsplice(r4, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x20, 0x7, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020100006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) close(r2) 13m53.159092949s ago: executing program 5 (id=1880): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) close(0xffffffffffffffff) socket$kcm(0x2, 0xf, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x600002, 0x0) socket(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x9) pidfd_getfd(r1, r1, 0x0) fcntl$addseals(r2, 0x409, 0x3f) io_submit(0x0, 0xffffffffffffff8d, 0x0) lremovexattr(0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000080)="87fc5d85da2153056207", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x67, 0x1, 0x9, 0x5, 0xbf8b, 0x81}) fcntl$setlease(r3, 0x400, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13m53.004219782s ago: executing program 5 (id=1881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) close(0xffffffffffffffff) socket$kcm(0x2, 0xf, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x600002, 0x0) socket(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x9) pidfd_getfd(r1, r1, 0x0) fcntl$addseals(r2, 0x409, 0x3f) io_submit(0x0, 0xffffffffffffff8d, 0x0) lremovexattr(0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000080)="87fc5d85da2153056207", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x67, 0x1, 0x9, 0x5, 0xbf8b, 0x81}) fcntl$setlease(r3, 0x400, 0x1) 13m52.944372062s ago: executing program 5 (id=1882): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x24}}, 0x64000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(0xffffffffffffffff, 0x50) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r6, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000ec0), 0x1, 0xb87, &(0x7f00000017c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r7, 0x0, 0x0, 0x8080c61) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x2e12, 0x8001, 0x1, 0x3}) socket$packet(0x11, 0x3, 0x300) r9 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r9, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000100)=ANY=[@ANYBLOB="78000300", @ANYRES16=r1, @ANYBLOB="01002abd70000000400a0100000007000100272a000014000500fc01000000000000000000000000000108000c000200000006000b000a00000008000200050000000800040000000000140006"], 0x78}, 0x1, 0x2000000, 0x0, 0x41}, 0x50) 13m52.600212798s ago: executing program 5 (id=1885): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x42a, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket(0xa, 0x3, 0xff) fallocate(r1, 0x3, 0x0, 0x20000004) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) add_key$keyring(&(0x7f0000000080), &(0x7f0000001140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) link(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r4) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000000c0)=r5, 0x1) openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a}]}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13m52.340669292s ago: executing program 5 (id=1887): gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read(r0, &(0x7f0000000600)=""/4096, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 13m50.738087805s ago: executing program 5 (id=1891): clock_adjtime(0xa000000, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1, 0xec, 0x2, 0x8, 0x0, 0x1, 0x1}) 13m50.095431315s ago: executing program 72 (id=1891): clock_adjtime(0xa000000, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1, 0xec, 0x2, 0x8, 0x0, 0x1, 0x1}) 13m40.37440804s ago: executing program 6 (id=1893): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x7ba, 0x5, 0xd, 0xd, 0xe, "b3c90442508c4be372b809fe13666a6bb3a5bc"}) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="c304050100000000000080", @ANYRES32=r3, @ANYBLOB='\b\x00'], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x40000) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f000000a300)=[{{0x0, 0x1800, &(0x7f0000000700)=[{&(0x7f0000000580)=""/250, 0xfa}], 0x1}, 0xbc}, {{0x0, 0x0, &(0x7f0000006840)=[{&(0x7f0000004400)=""/103, 0x67}], 0x1}, 0x2a0}], 0x2, 0x40002122, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)=0x7f) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x9, 0x6, 0xd, 0x9, 0x0, "7c412dd33c3f4bbfa5b5252dd981fb1b3486df"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={&(0x7f0000000840)="75a2a082504b5e9060f8040e808b106a5f4fd78478dabec468f013555f1a5e5f29aa811d0516cf7a6b090c2eaf2028949c14523519dcf4f00d403e4b0b34ecb9ecfe941b1723fe6d4baaf4c190f871e63c8de58ee31a1c044862c52e747b9ef1ac4cbccef2d2374e3ed55e891788d752ddf89c1efcdc87ed33dc4b926c121e5133a2355aabbf6d67447c9bd02de91e282ff8bdebe970a8fc9f1176ab440e985ed91f8c73160452f58020ab0e23a0f9c7798beb07bc2de3a4eb0c2ab40cf2a504ef28e23996cd994fcdb6919f42e297c547c26c84eed0", &(0x7f0000000940)=""/223, &(0x7f00000017c0)="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", &(0x7f00000018c0), 0x5}, 0x38) sendmmsg$unix(r5, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38, 0x40044}}], 0x1, 0x4) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x20000, 0x100) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={0x0, 0x1e4}, 0x1, 0x0, 0x0, 0x20000045}, 0x20000010) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 13m38.962248612s ago: executing program 6 (id=1936): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e168d530830a0100000000000000fbe772de6f540000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x515600, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r4, @ANYBLOB="0f07000000000000000067000000", @ANYBLOB], 0x270}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0xe000202b}) 13m38.179145403s ago: executing program 6 (id=1942): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x42a, &(0x7f0000000500)="$eJzs3E2IVeUfB/DfOTNX/47j/44RTUWglGgRXvVeq622aNHGhSD0IjTk9QWvTngnShPKAhEiooUkCDEto0UuWhQRRJsIatGiIJKEahGGFdKi3cS955zxomcWjTMenT4fOHOf89w753seDhyeB875BfCftTYitkXEUEQ0IqKe96f5Fq9kW+93x1vn9ve2JGZmdv6RRBIR7da5/cWxkvxzZf5v/4uI27Yl8ejwtbndo8cOTnQ67SP5/qapQ89t6h49tvHAoYl97X3tw62tDzebWx9qPbJwYz0//mo0m9tqH2xYe+rrT9/4rne+o/l3g+NYSMkcndsXI6xCtYF2UnK9ufm8dfrNT6o+BwDgxkvzuf9wf/5fj6HIJm8Xzj99uR4vj1R9fgAAAMD1m5kZyj8BAACApSux9gcAAIAlrngOoN06t7/YbtSzBysfiLi0PSLGsvzi/eLs2+H++8ORv1taW4T8ey8swkH/he7j1eZ/s6va/NXvV5s//UO1+c+srzb/l5+qzV+3ptr805MRn23PCiBce/9L+zUPCssiYnle02DFAuWv+fzK/e/4Nfe/dPb+NxQR1/Mi1qnpiyfL+scfi7h0IuLu4bL8ZDY/yWs6zNfGb0/sLutffSli5t2I9VGeHwP5c9eH2LT3QKe9Oftbnt966cl6Wf+OL7Lxj8yRP5b/bmigTsR8nBnZ/dGqkv5djSz//vvKr/+dA+P/f16bY2we+Wvv6uwo61//epa/Z47xD17/1fPILUz/1v25rP/DrddxUABg3tL+3CZJG7PtNG00svne7TGSdia7Uw/unXz+8J5sDjQWtbSYamXzkVrS29+Sz02K/eZV+618DnGqvqK/33h2srOn6sEDAADAEjca8eNTr308vvKq9f+v9Wz9DwAAANz6euv/e6bfOdtr/1X6dCQAAABwq+ut/y+f/P3LsP4HAACAJcv6HwAAAJa+Yv0/Okf9v1UDtfs25/WHv6rXlhe1/gAAAICbX2/9n37/xIXu0WMHJzqd9hENDQ2N2UbVdygAAGChXZn0V30mAAAAwOJJLyYR0ds21NeN3rHmvfHBb5clf/erAyyLiBfO7nz7xYmpqSNbev1/zvZPncn7m1WNAQAAABhUrNOLdTwAAAAAAAAAAAAAAHDzuxHlxKseIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvnnwAAAP//UuGYiQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket(0xa, 0x3, 0xff) fallocate(r1, 0x3, 0x0, 0x20000004) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) add_key$keyring(&(0x7f0000000080), &(0x7f0000001140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) link(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r4) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000000c0)=r5, 0x1) openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13m37.419733235s ago: executing program 6 (id=1945): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}, 0x0) 13m35.834564969s ago: executing program 6 (id=1951): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1e, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a0001002bbd2fb01a239ae4d9c97000fbdbdf250a8018afd2b90d95261cda005c36e5c8b08e43833549000000000000080010000c000000"], 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000800)="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", 0x0}, 0x20) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025bdff00ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) (rerun: 32) socket(0x1, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8000000000000001, 0xf980}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0xffffffffffffffea, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x5, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180080001400a010102"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001200010720f80000000000000700", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13m35.834099758s ago: executing program 73 (id=1951): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1e, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a0001002bbd2fb01a239ae4d9c97000fbdbdf250a8018afd2b90d95261cda005c36e5c8b08e43833549000000000000080010000c000000"], 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000800)="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", 0x0}, 0x20) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025bdff00ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) (rerun: 32) socket(0x1, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8000000000000001, 0xf980}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0xffffffffffffffea, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x5, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180080001400a010102"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001200010720f80000000000000700", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13m15.751582039s ago: executing program 2 (id=1960): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x42a, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket(0xa, 0x3, 0xff) fallocate(r1, 0x3, 0x0, 0x20000004) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) add_key$keyring(&(0x7f0000000080), &(0x7f0000001140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) link(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r4) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000000c0)=r5, 0x1) openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13m15.186844277s ago: executing program 2 (id=2001): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x113, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x4008000) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000180)=@tcp, 0x1}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xe8, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x30}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x10) 13m14.586117016s ago: executing program 2 (id=2004): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x1ff}, 0x10c0e8, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa0c72, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x37}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) socket$kcm(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffff8}, 0x100, 0x0, 0x0, 0x3, 0x17b, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000035b5128d0340000200000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000053c0002806c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000004000018006000340000100002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001060003400002000008000740000000000800084000000e8b"], 0xa0}}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) timer_create(0x7, &(0x7f0000001100)={0x0, 0x2b, 0x1, @thr={&(0x7f0000000f80)="3583673924cb5383ee6107fe1dc5865204698f2d1ed58e864a162ecd17a1f323a0235c0acfdb9a97949f05f2bd1860198ee26f6245dc8cb0aab96547657e6c00df8719c9ce507f5e3da9d837d403221f0cd6c6f1a299fec2a955cac10dbb8964feb8ad8f49e2d42d8ef1dd79bc74a3c3cdb50238f739f3fb418991d15c1099c98f23", &(0x7f0000001040)="2b4b40e38f61858368a640396e1b2089bec0f41014874edcc953765ff5ea3ab7465e5c37ef8f5f4c268494cd9c749f71883d79e9b50ee8d6fd6a05af9ffd40422d80d986da89697e590c93297fd0eb31c6dae5989dbef465ee3e5e9f16f2f7e23241768063b40267659bb93a7e17ea8f113c3677c5baa6a45f45e391cc1588028b8928e34a81ab5bc8ce4084067607a9b37f566bca85d7e2b9c02c5470ecc8b24652b9c886edc5804cc93e1872c24148756146142cd480cda5d45d3b9272c4"}}, &(0x7f0000001140)) 13m14.585509536s ago: executing program 74 (id=2004): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x1ff}, 0x10c0e8, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa0c72, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x37}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) socket$kcm(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffff8}, 0x100, 0x0, 0x0, 0x3, 0x17b, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000035b5128d0340000200000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000053c0002806c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000004000018006000340000100002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001060003400002000008000740000000000800084000000e8b"], 0xa0}}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) timer_create(0x7, &(0x7f0000001100)={0x0, 0x2b, 0x1, @thr={&(0x7f0000000f80)="3583673924cb5383ee6107fe1dc5865204698f2d1ed58e864a162ecd17a1f323a0235c0acfdb9a97949f05f2bd1860198ee26f6245dc8cb0aab96547657e6c00df8719c9ce507f5e3da9d837d403221f0cd6c6f1a299fec2a955cac10dbb8964feb8ad8f49e2d42d8ef1dd79bc74a3c3cdb50238f739f3fb418991d15c1099c98f23", &(0x7f0000001040)="2b4b40e38f61858368a640396e1b2089bec0f41014874edcc953765ff5ea3ab7465e5c37ef8f5f4c268494cd9c749f71883d79e9b50ee8d6fd6a05af9ffd40422d80d986da89697e590c93297fd0eb31c6dae5989dbef465ee3e5e9f16f2f7e23241768063b40267659bb93a7e17ea8f113c3677c5baa6a45f45e391cc1588028b8928e34a81ab5bc8ce4084067607a9b37f566bca85d7e2b9c02c5470ecc8b24652b9c886edc5804cc93e1872c24148756146142cd480cda5d45d3b9272c4"}}, &(0x7f0000001140)) 8m23.182564065s ago: executing program 3 (id=4255): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x88000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 8m22.327087597s ago: executing program 3 (id=4258): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x0, 0x80000) (async) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) getpid() (async) r3 = getpid() r4 = gettid() rt_sigqueueinfo(r4, 0x0, &(0x7f0000002d00)={0x2, 0x0, 0xffffffff}) (async) rt_sigqueueinfo(r4, 0x0, &(0x7f0000002d00)={0x2, 0x0, 0xffffffff}) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000580)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000580)={0x0, 0x4}, 0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000003bc0)=[{{&(0x7f0000000340)=@sco, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/71, 0x47}], 0x1, &(0x7f00000005c0)=""/135, 0x87}, 0x800}, {{&(0x7f0000000680)=@x25={0x9, @remote}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000700)=""/88, 0x58}, {&(0x7f0000000780)=""/93, 0x5d}, {&(0x7f0000003f00)=""/199, 0xc7}, {&(0x7f0000000900)=""/224, 0xe0}, {&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000b00)=""/126, 0x7e}, {&(0x7f0000000b80)=""/169, 0xa9}, {&(0x7f0000003e40)=""/163, 0xa3}], 0x8, &(0x7f0000000d80)=""/223, 0xdf}, 0xa7}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/197, 0xc5}, {&(0x7f0000001000)=""/251, 0xfb}], 0x3, &(0x7f0000001140)=""/142, 0x8e}, 0x1}, {{&(0x7f0000001200)=@x25, 0x80, &(0x7f0000001480)=[{&(0x7f0000001340)=""/180, 0xb4}, {&(0x7f0000001400)=""/82, 0x52}], 0x2, &(0x7f00000014c0)=""/113, 0x71}, 0xfffffff6}, {{&(0x7f0000001540)=@sco, 0x80, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/242, 0xf2}], 0x1, &(0x7f0000001700)=""/109, 0x6d}}, {{&(0x7f0000001780)=@hci, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/185, 0xb9}, {&(0x7f0000000c40)=""/99, 0x63}, {&(0x7f0000002940)=""/15, 0xf}, {&(0x7f0000002980)=""/47, 0x2f}, {&(0x7f00000029c0)=""/49, 0x31}, {&(0x7f0000002a00)=""/22, 0x16}], 0x7, &(0x7f0000002ac0)=""/176, 0xb0}, 0xf8}, {{&(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003280), 0x0, &(0x7f0000003340)=""/59, 0x3b}, 0xc0}, {{&(0x7f0000003380)=@caif=@dbg, 0x80, &(0x7f0000003600)=[{&(0x7f0000003400)=""/247, 0xf7}, {&(0x7f0000003500)=""/137, 0x89}, {&(0x7f00000035c0)=""/63, 0x3f}], 0x3}, 0x1}, {{&(0x7f0000003640)=@un=@abs, 0x80, &(0x7f0000003980)=[{&(0x7f00000036c0)=""/245, 0xf5}, {&(0x7f00000037c0)=""/253, 0xfd}, {&(0x7f00000038c0)=""/78, 0x4e}, {&(0x7f0000003940)=""/54, 0x36}], 0x4, &(0x7f00000039c0)=""/238, 0xee}, 0xd1}, {{&(0x7f0000003ac0)=@qipcrtr, 0x80, &(0x7f0000003b40), 0x0, &(0x7f0000003b80)=""/59, 0x3b}, 0x6a75}], 0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) openat(0xffffffffffffff9c, 0x0, 0x105042, 0xcb) (async) r8 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0xcb) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x100000a, 0x11, r8, 0x0) read(r8, 0x0, 0x0) unshare(0x26020480) (async) unshare(0x26020480) listen(r1, 0x28) poll(&(0x7f0000000000)=[{r1, 0x3530}, {r1, 0x6}], 0x2, 0x40000400) shutdown(r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000140)="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") 8m22.219309029s ago: executing program 3 (id=4259): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x6, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) unshare(0x22020400) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x260000) readv(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x200, 0x82) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x20}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x134, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xe0, 0x84, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x699d}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xffffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff7}, @NL80211_BAND_LC={0x8, 0x5, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffff0001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xb5b5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xf}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="cd7ab5afdb8b"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x23c}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8f42}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3a052eac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}]}]}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="34f39e220c02"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xa8a}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2044}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x4044010) 8m21.977409163s ago: executing program 3 (id=4265): r0 = socket(0x15, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4) recvmmsg(r1, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0x400c000) connect$unix(r0, &(0x7f00000003c0)=@abs={0xa}, 0x6e) socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r3, 0x0) splice(r3, 0x0, r2, 0x0, 0x800, 0x0) getsockname$netlink(r2, &(0x7f0000000140), &(0x7f0000000200)=0xc) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000540)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@bsdgroups}, {@mb_optimize_scan}, {@barrier_val={'barrier', 0x3d, 0x8f43}}, {@noauto_da_alloc}, {@noquota}]}, 0x2, 0x46c, &(0x7f00000014c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="e5000000f800000000000000fbe2033384533762b85e59e416e7e0606b754ebc040a4dd053bcfbb4c3aa364f7792bd563ab33aae2aa09a33ca9e567176ec380ee5b72b494802d7f3c8be7a29182572e89f2bead6a044048ff76c8d7e404a77ec4d6e0402a5807ca7c9297488aabf34889f9c06501e3c794da024f20a303645570ec3c318c0b01d848f8a63186fedaa9abfc4a9de71016b2c3eb8516108c2c1bc473dabffb620089e9ca62774990229481b8f43541c5fcd2bfd2b872a9bea8cafc4658872296b09ff3fbf85c7b8dc320fe4cce4b79776bf0cf94d20d6fa2f067c6fe1f2f540cf3e67364dcfa382"], 0xa641) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0x4, 0x1, 0x3}, 0x10) 8m21.422355291s ago: executing program 3 (id=4269): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000080)={0x1, 0x8a, 0x1c0000}, 0x20) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x8, 0xa, 0xf26) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x40404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x8, r0, 'id1\x00'}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe02c, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x1403, 0x800, 0x70bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000180001a600000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1e, 0x1}, {0xfff1, 0x1}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r4, &(0x7f0000000080)='\x00\x00', 0x2}]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002a00010028bd7000fbdbdf25040117800c00160006ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x0) 8m21.030101587s ago: executing program 3 (id=4271): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000080)={0x1, 0x8a, 0x1c0000}, 0x20) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x8, 0xa, 0xf26) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x40404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x8, r0, 'id1\x00'}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe02c, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x1403, 0x800, 0x70bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000180001a600000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1e, 0x1}, {0xfff1, 0x1}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r4, &(0x7f0000000080)='\x00\x00', 0x2}]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002a00010028bd7000fbdbdf25040117800c00160006ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x0) 8m21.029913517s ago: executing program 75 (id=4271): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000080)={0x1, 0x8a, 0x1c0000}, 0x20) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x8, 0xa, 0xf26) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x40404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x8, r0, 'id1\x00'}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe02c, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x1403, 0x800, 0x70bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000180001a600000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1e, 0x1}, {0xfff1, 0x1}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r4, &(0x7f0000000080)='\x00\x00', 0x2}]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002a00010028bd7000fbdbdf25040117800c00160006ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x0) 10.500497055s ago: executing program 9 (id=7803): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000081, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0x10000000, 0x0, 0x7, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000480)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x243, &(0x7f0000000540)="$eJzs3D9oM2UcB/DvXRJr2yBVF0FQQUS0UOomuNRFoSCliAgqVERclFaoLW6tk4uDziqdXIq4WTtKl+KiCE5VO9RF0OJgcdAhklyr1Vb8k5p7ee/zgUvukrv7Pcfl+1yW5wnQWFNJ5pK0kkwn6SQpzu9wV7VMnW5uje8vJb3e4z8Ug/2q7crZcZNJNpM8mGSvLPJiO1nfefrop4NH731jrXPPeztPjY/0Ik8dHx0+dvLuwusfzj+w/tkX3y0UmUv3D9d19YpLPmsXyS3/R7FrRNGuuwX8E4uvfvBlP/e3Jrl7kP9OylQ3783VG/Y6uf+dvzr2re8/v32UbQWuXq/X6T8DN3tA45RJuinKmSTVelnOzFT/4b9qTZQvray+Mv3Cytry83X3VMBV6SaHj+yOfTT5p/x/26ryD1y/+vl/YnH76/76Savu1gCj1M//9LMb90X+oXHkH5pL/qG55B+aS/6huf5V/nfL0TQKGAnPf2gu+YfG+W1klvxDc8k/NNf5/AMAzdIbq3sEMlCXuvsfAAAAAAAAAAAAAAAAAADgoq3x/aWzZVQ1P3k7OX64mpXwYv1WqlnHbxy8TvxY/D55YZLi/GSG/9Ezdw55giG9X/Po65u+qbf+p3fUW39jOdl8Lclsu33x91dk2Fnvb/6b7zvPDVlgSA89WW/9X7brrT9/kHzc739mL+t/ytw2eL+8/+n279+Q9V/+ecgTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDK/BgAA///oWm3n") ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40e8662e, &(0x7f0000000000)={0xd8b, 0x40000000000001, 0x0, 0x6, 0x8000101, 0x905}) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc040}, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000900)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRES16=r7, @ANYRES16=r0, @ANYRES8=r0, @ANYRES32=r5, @ANYRESHEX=r8], 0x0) openat2(0xffffffffffffffff, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x110, 0x2}, 0x18) 10.380756487s ago: executing program 9 (id=7808): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3c4, &(0x7f0000000a80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000011c0)={0xf92f, 0x4, 0x0, 'queue1\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000041401652dbd7000fedbdf25e202010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendfile(r1, r1, 0x0, 0xe3aa6ea) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) recvmmsg(r5, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x2, 0x0) 7.358751761s ago: executing program 9 (id=7834): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) readv(0xffffffffffffffff, &(0x7f00000011c0)=[{&(0x7f0000001980)=""/4102, 0x1006}, {0x0}], 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[], 0xc4}, 0x1, 0x1000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000340)=@generic={0x1, 0x200, 0xc4df}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x4080) 7.315103382s ago: executing program 9 (id=7835): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x210, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000b00)=""/237, 0xed}, {0x0}, {0x0, 0x29}, {0x0}], 0x4, 0x6c, 0x10000000) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7, 0xff, 0x9, 0x9, 0x0, 0x4, 0x24000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x56, 0xe75}, 0x10444, 0x4, 0x4a38, 0x4, 0xa61, 0x8f9, 0x9, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2003, r2, 0xa) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000008, 0x0, 0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, 0xff7fffffffffffff, r5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ppoll(0x0, 0x0, &(0x7f0000001240), &(0x7f0000001280), 0x8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r6, &(0x7f0000000240)="6bb41d3f", 0x4, 0xc0400c0, 0x0, 0x0) sendto(r6, &(0x7f0000001e00)="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", 0xca9, 0x2000c010, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2001000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000080)='cpu~-0\xd9\xc8\xb9\xdbJ`g\x9b\xe8\xa2\n\x00|') sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8], 0x40}}, 0x2204c080) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 7.089720885s ago: executing program 9 (id=7836): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync_file_range(r3, 0x6, 0x9fd, 0x3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x7, 0x33, 0x20, 0x0, @in6={0xa, 0x4e20, 0x2, @private0, 0x7fffffff}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb1, 0x9, {0x6, 0x6c, 0x1, 0x8, 0x0, 0x6, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@multicast1}}]}, 0x78}, 0x1, 0x7}, 0x40040) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzs079KwlEUB/CjQ0EtFj3A3SKQ+vknySkqGhrMwamxwkIQg7RwaelteqQeoOcwMIP4lYMFBfH5TOfe7z2Xs5zVl6eDiCjs3A1648gpRsRkWu0XIwoRUZ8lhfzT4XWvf37R7b91FfMxCyvNuX94nBVLi/+5uRZxmiJiZfS8cfST6fgnlrfOPh4nU5/3+3tODlupfdxKWaNR7VSq6V0t1bKvO7Ism5P8tvVS52qc7ru3w97NIO1u18qpfTlKlb1yqjSb9b8eDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGUHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WSXRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAAAAP//CaUg2w==") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x198, r8, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x28, 0x2a, [@gcr_ga={0xbd, 0x6}, @cf={0x4, 0x6, {0x6e, 0xf, 0x5b, 0x9}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @broadcast}}]}, @NL80211_ATTR_IE={0x141, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @mic={0x8c, 0x18, {0xbca, "f2deb0a1dfe7", @long="a3745465919d725cb83f4eaa949d030f"}}, @peer_mgmt={0x75, 0x6, {0x2763, 0xff, @void, @val=0x23, @void}}, @chsw_timing={0x68, 0x4, {0x3, 0x6}}, @chsw_timing={0x68, 0x4, {0x9, 0x7f08}}, @perr={0x84, 0x102, {0x9, 0x10, [{{}, @device_b, 0x0, @void, 0x1d}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x5}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x2f}, {{}, @device_b, 0x9, @void, 0x39}, {{}, @device_a, 0x1, @void, 0x24}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x1a}, {{}, @broadcast, 0xc9fd, @void, 0x14}, {{}, @broadcast, 0x8, @void, 0x32}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x5}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_a, 0xfffffff6, @value=@broadcast, 0x2a}, {{}, @device_a, 0x5, @void, 0x4}, {{}, @device_b, 0x5, @void, 0x37}, {{0x0, 0x1}, @device_a, 0xfffffffa, @value=@broadcast, 0x2b}, {{0x0, 0x1}, @broadcast, 0xb, @value=@device_b, 0x7}, {{}, @device_b, 0x6, @void, 0x35}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x98}]}, 0x198}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r10, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1c2, 0x65}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4000000) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x7, 0x5, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 5.435923889s ago: executing program 0 (id=7845): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b420000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 5.39291366s ago: executing program 0 (id=7846): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x210, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000b00)=""/237, 0xed}, {0x0}, {0x0, 0x29}, {0x0}], 0x4, 0x6c, 0x10000000) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7, 0xff, 0x9, 0x9, 0x0, 0x4, 0x24000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x56, 0xe75}, 0x10444, 0x4, 0x4a38, 0x4, 0xa61, 0x8f9, 0x9, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2003, r2, 0xa) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000008, 0x0, 0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, 0xff7fffffffffffff, r5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ppoll(0x0, 0x0, &(0x7f0000001240), &(0x7f0000001280), 0x8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r6, &(0x7f0000000240)="6bb41d3f", 0x4, 0xc0400c0, 0x0, 0x0) sendto(r6, &(0x7f0000001e00)="63e4388ab27b23b768b7cf242441c7fb94cddae59d93e6b37aa833092fc0fd71241d0a72b760945f9d0e52e3a4e133b8bbdbbf5acc15b3cdad871264c121b6edd798155c2361e9d673839cf640d686be732df9e6bbce33ca8a10dea3228062715d88fa0dade761719c1fb2d8b0649e2bb4916e2252fda3bddacff190b3905b9fc8973246fd6b857a95efd68d2b0c554bfebd31e18e5a60828b1941946e9a198ad5f8b20dedc88f8fd7a475ea2c8cc4654912b9bb4faaf02cfe297dfe8d19165db55933af82abd75b7bdb39e515cf02664417a0a723dcfa764d4c0bcacaebbe5d8ddcabea7ec20656d4aea7a5a0a92156b081bf36eb2bce70aa5736993def22a519a6ea86b660bf82d6b307baaabb82bb64e296d2a46dd2b965da2450fbd7f12c2870f9cfbd0b6c06def1a17cf8d64c6f2eeab16e6bed2ec39e6470b0836ff1047205b16377e83a92842d0b4a252c49e563014d81a83f104ffa8bc65e8f982352cc12eb1345108e831aec1bc056f769aae1457b3fa7b135182b363a15bb6b7b6c63a4fa4237b75c63138d05299bbda0be7bcde3045336261bce7cfa3bd11443af5b6c2664d8f26e5090842d53a6ff245bbe6676191aad741b60b4aaa59912cafb88c5e7c6bf3ea480eeb1827a560fe68a99116a4319de85d44ecd48872782e3a867c8ca0859c178885b3ac4a2eff8e58ac1dc04ce9ebef43987945191d5a0d8d9566d186999e283d21a0a202b19154728d49d5dfafb6e6e6eae07b44cec02fa59adee4bbe4cd053c5fe5210f3b65b9a2bd991f323c982352569edaecf2fdee4e95711e8b1349a4ed438b3e39114e877a4c06660672d1452eb8727cee98ac0f1adc99c8cfffdcbf77906cab0eba05794b720a7f789a62cc3092c4df54b8054688ec8ebb7329f3c11d2267e19dff6ee24374823ffc758eb850aea25f1c74b52ab7857902a06653c0d999f6b723a1158d2b6dc5552e1330cbdf8606e284fd3097081e3b87424007c1e113a138c5a0a373e7f8cf7e739c363fb7f50e042350ab2aeaf22cc5867ae9e591bc3245a73947dcee26598aa5863ba4404a19dcf333c0883ba8373eaf1962e4dcbdefc7e7e1e990522eb0f2867148a0f82fc9708ad453072fd82074ce0a5d2c9ea4ae7ecca1bee683e704e956f9b4647a111091ddbdf75b82807847b71e6cfd80ad311924e795035946a1648d4dd030bf82c6e4c2080368e904aabed16c8ed97289f8ee179a40c7c568f606e306cd0855c532b1aacc29183bd281976b5941333a2facdcaee22cdc49778795a2320ceffb037962e9d4fe8f3963cfa8676af927e0937f67016f494380e7aa412d345768b082565ca02d335aa9fc8c86898f1c28fd7e47c2f7f463db352c75ff71cd636944a47752848c685a4a22487391ff120c60e0c5509def3ab702a7d05d0ab9ed4ba2897bd602c87d72c2a4e8cfd824ad10ad488cff0763260644121fa8c059f0b49ae7f89a21791e9958ee7d3d6e8a6b90afd347f125fbc2bba0b0fec4a66bf2ba617b7926f144dff96d0073b57ee3113cfa2dbd6ab0cd4c40079040b521a30da095f9e25a368ee512a8c028380e2b660d626034c996635c85f632da7a5e984365b452f53dacd7b9f662944da1ebb01c09684af641ed1075dbc5d4e1b3d3f37c9389c8fa89df9cd06b61ba8612b8ebe6ea237631b284286c68cb3fd9c61b38b017e053006e0fad7e54101aa06a30f9e3cef92d2d5506a5967eccb46c0510ec5b5cbbc25dac7b0d3afcb7c3e7f929758e709bac861541f37ebbdecc5234e910b762ab034fe1d54309e24c8baa70c36e7ab6e59930af872845a8e097fa16d318f07ca6a43b11ec47fa3e147fa961e8d81be1d84c10ce4ad4fcf692185ce0d994ba1385add76b41d116bdbddd86853f90518466a3c120604911ce1fc69b193baa97517713faa0ae715577f83edeefde9487da6e85c1ca4c102f473169c2aea946cc6e3d3be0bf9de96a8c6e16b7a874bbb4e20a62d1c1ef6bbe4ded777da4aba014861a78dcc3ffd46c085c4e1ca8d230f0fd30cae22f7164a039b2032f1350892c967cfa5b03ca9791456d75febb329a122291d93127f8407533cd162193610e0249943bdec8113fcdd2415e4bd75e521f857c689efc9e97d974644f698a2b26557974051f6ffa3082a81f9e64b9afd24898062a7a41511e968ac9f6ccd7a52ac73b393bf5d0ccba72ff957d1e8395ff31fdfafe67230650133f6a9a7f2b2f4c3150865f9ea55ab32f3718da9bfeefeb911b044b0e755a7c9819558e2a813f2cdbf40de279c3e8edcbe4630886634de8cb349a04030213d487999a07d79f39cf5922c2671ff3435ab97825bea7213904d77c31852d06ab60a51b4d5cdb6e047766265d8389d306bf652b4e512cfc97bcdd1eb3d7e39d913c2463a89cf34e5bdfe186f7131518ae568758f9da3b2d4ec6968ef6a1b3f167271d878847f04d4375ffd6859716edffb246e7c80ac81d438d176a848a7dcbe8870b83a733022fdadaf5a95e66e27e896f033b3efa521276021088ffa5c7939856994de7f9647ff25fea28eb068879fecf72b6a57a510dd198f9b05866810c8663394fa401722f6fe15bfdb0489ae220415cdaf3428398a0bdbcdd0d0c74d0a8c96f0e037b1f750f975e4c2e543cd3c8545ed495000eedefb9d3b19d3e91f0fc3e86ac8c6d1f698c3e6561d8d515ef4a0e12ac194379b07745b1216ee3355ac830514b90829f80b5e3286d2a18e06ed7b21e52e8c3d21afe55fbccca2eb3ea1c287d74e1d97a58972f0e4422be88921ef6b41c92778cc1d2d3ba400cb8ed6138cdadc8c2bc88e4741b24d3bad76151dac1a38b9e3fe074f908580a395768f649bdf0245f45bf63bd680331e3615e6da0448f67c1c3ebe450cbc83664308653d33998b54e5e1db2ab92a88d834aa9823b29ac06c3d6a4971a04728c021c2e80ca73f33fccc71dc21bd3d28dec373ea23c44357aadffd8d0818f76c8565f353989f9b5b12a5cdcbecf062730e22c7c6f112b718eac6824bf57582f547698a58df25eef28cb61d7b418a6e51cfd931f5ebb7f2e1c199ae0a558be2c505040082c4f6d3d7d36887e990cb8a63770fd88801df7677a262c818f7c570e2cb8389e4aeb6fdb63d113551137ca59f9bf43f2acd7e80ce07d784cb8316253a85825b09c6696905e247a16b6912bf67cb72cbc20bbe235d37769ddb1f95b876658d7ee1cb27fecf0d8799de4ec5f3eb59db33a6fb5aed94e757c3247108a76c709d70effa9c4b83804c50237b44252bf59894934ba6a92829f897b5c794211af3f373c10a948b1244eb413f81d19db082318fa2e33015bcb4a84e4614f333e67185a03172937d7ecbda01fb3ab7738c53f48cdce988d34f4bb7c7f42c0df9f16e6a9c014b5ba79597810e8270f31710a6b0f12a44d650594a32c7fa94d02674d737e9f95c1e4bec21d9bca5096a4bbec98fb32286d9c4820cfca211f46c985b343e5de31597cf56ae535a19116caa33c80e51c569f4a447063e00134cb1b8bf7384144eedb5e84994d9cd1c8f696c43c8d6e150a9a8942a9919e2a8e0c425d656fec8774611d3dd66616fa93a511b8b18f4946b5cec0d2c5c4ba948c3ad82c08d441ad56982323bb27efc4d9662edea97592691de66dd15aaf8196e50b6e926f7836ea82025823654f186dff679e15dc86909916e25cd45f543f291cf07514145f8c1f43dc3325ab00f9e891d9526521c866c7a35bb8afa9a09994708f73ad9d05c59ca10821427342c92f2ad5696d1261902bfb4e51c13d202cb8022b81cd7326998fdd1830a4d25bc0fe8b7d2f804384a210cbea076f6cc1f66c5be00d7d023bde24bc22235d728d9c88e0257dfa67efc044ef5ccafb91d319e4f8e9461f19c526630eb58e731fd23b9419ebb038898a479ff05df97aae243e323a8722f7248c858a6477d7f6793210373736b289de52f86c957bc88753f2e79666faa34e70fa1d843225aa24b3e919dbdc5694d1db4cd6ee853ea513a12374a8063bc9d736cf362edfb486bc05c4b648281101eb498c3467a674482b9adf2cca574aff046ea464ad4b96cf4dbcd8f214057c2f2ab1d799fbd4f2a571ab274341092c40197ef8c766716813e0a46ea2c148b2d232f7265efa570baab3d20cce15a86cf7089c599da0c543ff860fe14414c51c0689f09c20b7c2de740bef5730223dcebb86a8ad87b94a03b1e41d0cd1aa17c318d2ac4af99ccd49671808ef0cdf49bfb494e101bfd50aa9c62473a2cb30f43a6a407a18d7cab073cb13263c51d4d11c430dabf819ed61d51ccb9839fe8ed8ef330f801fbeadf7f0c008c643532f8df0cc75cdb42129b60271337c999478bd219ddfcf560674237c6a1a9893ea5e96f7e28c0a1c81b5b9e3b33e513e054daead00065494e440c958f7205d93ff44547a6e674b2603a8c8b3a21e81b1c9b07f78f3a083a7fb2a7c1c699512676d8e5eed98280ef374e083f81660a99afc1cb7280ae98f0151e55cdf496e9025f597dcb75531bb3e00d0fcaf2f0002fa7abd8d3672d38f3ce2b49312184eea4f1a61053a302ae98cbb7", 0xca9, 0x2000c010, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2001000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000080)='cpu~-0\xd9\xc8\xb9\xdbJ`g\x9b\xe8\xa2\n\x00|') sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8], 0x40}}, 0x2204c080) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 5.175195254s ago: executing program 0 (id=7847): r0 = socket$kcm(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/184, 0xb8}, 0x3}, {{&(0x7f0000000900)=@un=@abs, 0x80, &(0x7f0000002a40)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/101, 0x65}, {&(0x7f0000002a00)=""/64, 0x40}], 0x4}, 0x4}, {{&(0x7f0000002a80)=@alg, 0x80, &(0x7f0000002c00), 0x0, &(0x7f0000002c40)=""/161, 0xa1}, 0x2}], 0x3, 0x40000020, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x1, 0x598, 0x6, {}, {}, {0x3, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "d28a1eef8c3ac2e5"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004a005) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ff63000000000000000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x13}, 0x44) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40000010) 4.813910679s ago: executing program 7 (id=7849): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000081, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0x10000000, 0x0, 0x7, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000480)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x243, &(0x7f0000000540)="$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") ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40e8662e, &(0x7f0000000000)={0xd8b, 0x40000000000001, 0x0, 0x6, 0x8000101, 0x905}) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000900)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRES16=r7, @ANYRES16=r0, @ANYRES8=r0, @ANYRES32=r5, @ANYRESHEX=r8], 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat2(0xffffffffffffffff, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x110, 0x2}, 0x18) 4.813267339s ago: executing program 9 (id=7850): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000001040)='?Nw-all\x1dl]', 0x68140, 0x0, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x2}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000012c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3c4, &(0x7f0000000a80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000011c0)={0xf92f, 0x4, 0x0, 'queue1\x00'}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000041401652dbd7000fedbdf25e202010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendfile(r2, r2, 0x0, 0xe3aa6ea) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) recvmmsg(r6, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x2, 0x0) 4.668054351s ago: executing program 0 (id=7853): socket(0x8, 0xa, 0xf26) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x40404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 4.501307774s ago: executing program 7 (id=7856): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = open(0x0, 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b420000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 4.344332136s ago: executing program 0 (id=7860): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync_file_range(r3, 0x6, 0x9fd, 0x3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x7, 0x33, 0x20, 0x0, @in6={0xa, 0x4e20, 0x2, @private0, 0x7fffffff}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb1, 0x9, {0x6, 0x6c, 0x1, 0x8, 0x0, 0x6, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@multicast1}}]}, 0x78}, 0x1, 0x7}, 0x40040) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzs079KwlEUB/CjQ0EtFj3A3SKQ+vknySkqGhrMwamxwkIQg7RwaelteqQeoOcwMIP4lYMFBfH5TOfe7z2Xs5zVl6eDiCjs3A1648gpRsRkWu0XIwoRUZ8lhfzT4XWvf37R7b91FfMxCyvNuX94nBVLi/+5uRZxmiJiZfS8cfST6fgnlrfOPh4nU5/3+3tODlupfdxKWaNR7VSq6V0t1bKvO7Ism5P8tvVS52qc7ru3w97NIO1u18qpfTlKlb1yqjSb9b8eDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGUHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WSXRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAAAAP//CaUg2w==") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x198, r8, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x28, 0x2a, [@gcr_ga={0xbd, 0x6}, @cf={0x4, 0x6, {0x6e, 0xf, 0x5b, 0x9}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @broadcast}}]}, @NL80211_ATTR_IE={0x141, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @mic={0x8c, 0x18, {0xbca, "f2deb0a1dfe7", @long="a3745465919d725cb83f4eaa949d030f"}}, @peer_mgmt={0x75, 0x6, {0x2763, 0xff, @void, @val=0x23, @void}}, @chsw_timing={0x68, 0x4, {0x3, 0x6}}, @chsw_timing={0x68, 0x4, {0x9, 0x7f08}}, @perr={0x84, 0x102, {0x9, 0x10, [{{}, @device_b, 0x0, @void, 0x1d}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x5}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x2f}, {{}, @device_b, 0x9, @void, 0x39}, {{}, @device_a, 0x1, @void, 0x24}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x1a}, {{}, @broadcast, 0xc9fd, @void, 0x14}, {{}, @broadcast, 0x8, @void, 0x32}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x5}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_a, 0xfffffff6, @value=@broadcast, 0x2a}, {{}, @device_a, 0x5, @void, 0x4}, {{}, @device_b, 0x5, @void, 0x37}, {{0x0, 0x1}, @device_a, 0xfffffffa, @value=@broadcast, 0x2b}, {{0x0, 0x1}, @broadcast, 0xb, @value=@device_b, 0x7}, {{}, @device_b, 0x6, @void, 0x35}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x98}]}, 0x198}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r10, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1c2, 0x65}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4000000) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x7, 0x5, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 4.334820686s ago: executing program 7 (id=7861): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4050, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x2, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) ptrace(0x4208, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x45440, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x789}, 0x14200, 0xfcc, 0x0, 0x8, 0x3fe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x8, 0xfffffffffffffffe, 0x7, 0x8, 0x65f69e76, 0x8001}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.282090172s ago: executing program 4 (id=7868): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000340)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2110ddffffff11000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$inet6(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000012006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040012000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5500f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000d40)={[{@nogrpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}], [{@euid_lt}, {@uid_lt}, {@obj_type={'obj_type', 0x3d, 'Jn\xdfo\x9b^\xc2b\"Y+4\x81\xc5\x8ew|\xf2\x9e\xc9\xb5\xa3\xf4\r\xd8\x1b\xa6\x12\xd3\xa7'}}, {@fsmagic}, {@flag='posixacl'}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '//:*\n?\x88K\xa5\xc6\x86\x05V\x16\x82\x96\x89^\xd5\x93\xa7KN\x89\'p\xc7ZO\x11o\xef\x8d\x15.\xef\\4/\xaf\x17\x16J\xc9\x91\xae\xe0\x06\xb6\x9dZ\x86\xac\x98\xd3\rh\xc8\ak\xb8#\xadl\xcdBC\x9f\x03A\x19\xb2\xf9\x95\a\xdbm\xb9{\xe3\xf9\xe9=\x0e\xba\xc0k\xff_YQ\';\xaa`(@\xd3\xc3\xcf\x88m\x89\xe6\xb2 \xb6\x94;\xa1\xbb\x9c\xbf\\Bn}*p\xe8\x84{T_\x97\r\x9a\x1d\fQzM\xec\xf2\n\xfb 2\x8e{\xaf|\x88|uz\xe8t\xda\xa0\x1fh\n\xd0\x8f\xb0\xb5V4\xdeD_\'\x99\xa8\x8b'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x62, 0x32, 0x38, 0x38, 0x38, 0xfd, 0x38], 0x2d, [0x31, 0x31, 0x63, 0x35], 0x2d, [0x30, 0x62, 0x62, 0x35], 0x2d, [0x31, 0x30, 0x33, 0x30], 0x2d, [0x31, 0x0, 0x62, 0x64, 0x62, 0x61, 0x66, 0x36]}}}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, @perf_bp={0x0}, 0x424, 0x0, 0x0, 0x2, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) read$char_usb(r7, &(0x7f0000000080)=""/248, 0xf8) 3.015965455s ago: executing program 8 (id=7871): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = open(0x0, 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 2.979991376s ago: executing program 8 (id=7872): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x17, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xd, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x30a}, 0x94) (fail_nth: 1) 2.72234657s ago: executing program 8 (id=7873): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101040, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r3 = open(&(0x7f0000000100)='./file1\x00', 0x40016b042, 0x2a) pwritev2(r3, &(0x7f0000000380)=[{&(0x7f0000000000)="84", 0x1}], 0x1, 0x1ffffff, 0x0, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x20441, 0x42) fallocate(r4, 0x20, 0x0, 0x8000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x24, r5, 0x200, 0x70bd29, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x24}}, 0x0) 2.72205918s ago: executing program 8 (id=7874): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x210, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="090000000500000000020000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000b00)=""/237, 0xed}, {0x0}, {0x0, 0x29}, {0x0}], 0x4, 0x6c, 0x10000000) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7, 0xff, 0x9, 0x9, 0x0, 0x4, 0x24000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x56, 0xe75}, 0x10444, 0x4, 0x4a38, 0x4, 0xa61, 0x8f9, 0x9, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2003, r2, 0xa) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000008, 0x0, 0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, 0xff7fffffffffffff, r5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ppoll(0x0, 0x0, &(0x7f0000001240), 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r6, &(0x7f0000000240)="6bb41d3f", 0x4, 0xc0400c0, 0x0, 0x0) sendto(r6, &(0x7f0000001e00)="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", 0xca9, 0x2000c010, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2001000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000080)='cpu~-0\xd9\xc8\xb9\xdbJ`g\x9b\xe8\xa2\n\x00|') sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8], 0x40}}, 0x2204c080) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 2.544477843s ago: executing program 8 (id=7875): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpgrp(0x0) fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) socket$nl_route(0x10, 0x3, 0x0) fstatfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x8001) 2.431487494s ago: executing program 4 (id=7876): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x113, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x4008000) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=@tcp, 0x1}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1.285029691s ago: executing program 4 (id=7878): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet(0x2, 0xa, 0x400) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@init_itable}]}, 0x3, 0x581, &(0x7f0000001700)="$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") r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x3d9b) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={&(0x7f00000001c0), 0x7}, 0xc41, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x1}) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'sed\x00', 0x1f, 0x660f537e, 0x3}, 0x2c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000f80)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'none\x00', 0x5, 0x1000000c, 0x6c}, {@loopback, 0x4e23, 0x10002, 0xfffff801, 0x1}}, 0x44) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 1.260923691s ago: executing program 0 (id=7879): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3c4, &(0x7f0000000a80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000011c0)={0xf92f, 0x4, 0x0, 'queue1\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000041401652dbd7000fedbdf25e202010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendfile(r1, r1, 0x0, 0xe3aa6ea) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) recvmmsg(r5, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x2, 0x0) 1.080830014s ago: executing program 4 (id=7880): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000081, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0x10000000, 0x0, 0x7, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000480)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x243, &(0x7f0000000540)="$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") ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40e8662e, &(0x7f0000000000)={0xd8b, 0x40000000000001, 0x0, 0x6, 0x8000101, 0x905}) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x69, &(0x7f0000000900)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRES16=r7, @ANYRES16=r0, @ANYRES8=r0, @ANYRES32=r5, @ANYRESHEX=r8], 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat2(0xffffffffffffffff, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x110, 0x2}, 0x18) 1.022881295s ago: executing program 7 (id=7881): socket(0x8, 0xa, 0xf26) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x40404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 853.848517ms ago: executing program 4 (id=7882): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = open(0x0, 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 849.867787ms ago: executing program 7 (id=7883): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0xdc0, 0xfe7f, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 757.497969ms ago: executing program 4 (id=7884): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xa}, 0x1073, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x3482, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x6) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) sendfile(r1, r1, 0x0, 0x10000000) bind$802154_dgram(r0, 0x0, 0x0) 335.388575ms ago: executing program 7 (id=7885): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x113, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x4008000) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=@tcp, 0x1}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (fail_nth: 1) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) 0s ago: executing program 8 (id=7886): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x1}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4000000b, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xffff, 0x8, @mcast2, 0xa088}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x2008001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000050000000060a010400000000000000000100000208000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000000c080002400000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x4004095) ioctl$XFS_IOC_ERROR_CLEARALL(r6, 0x40085875) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x849f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): 0 [ 1041.459664][ T2501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6702'. [ 1041.512233][ T2510] loop7: detected capacity change from 0 to 512 [ 1041.519088][ T2510] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1041.556255][ T2510] rdma_rxe: rxe_newlink: failed to add lo [ 1041.558433][ T2512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.589541][ T2510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.590488][ T2512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.598230][ T2510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.687101][ T2495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.695791][ T2495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.786717][ T2528] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6712'. [ 1041.886156][ T2531] wireguard0: entered promiscuous mode [ 1041.891832][ T2531] wireguard0: entered allmulticast mode [ 1042.149684][ T2536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6715'. [ 1042.168616][ T2538] netlink: 'syz.8.6716': attribute type 12 has an invalid length. [ 1042.215352][T32553] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 1042.234553][T32553] hid-generic 0000:0000:0000.0097: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1042.282121][ T2543] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6717'. [ 1042.283155][ T2547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.299540][ T2547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.432901][ T2559] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6724'. [ 1043.115756][ T2563] netlink: 'syz.9.6726': attribute type 5 has an invalid length. [ 1043.141615][ T2577] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6728'. [ 1043.422325][ T2585] wireguard0: entered promiscuous mode [ 1043.427986][ T2585] wireguard0: entered allmulticast mode [ 1043.444983][ T649] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 1043.461308][ T649] hid-generic 0000:0000:0000.0098: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1043.494564][ T2591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6732'. [ 1043.543802][ T2595] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1045.010320][ T2623] syzkaller0: entered promiscuous mode [ 1045.017876][ T2623] syzkaller0: entered allmulticast mode [ 1045.031589][ T649] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1045.064773][ T649] hid-generic 0000:0000:0000.0099: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1045.099263][ T2625] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6744'. [ 1045.108349][ T2623] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1045.108349][ T2623] program syz.4.6745 not setting count and/or reply_len properly [ 1045.421714][ T2636] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6750'. [ 1045.547639][ T2637] loop7: detected capacity change from 0 to 512 [ 1045.555403][ T2637] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1045.577177][ T2637] EXT4-fs (loop7): 1 truncate cleaned up [ 1045.583260][ T2637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.384748][ T2657] netlink: 'syz.4.6754': attribute type 5 has an invalid length. [ 1046.635432][ T3405] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 1046.650577][ T3405] hid-generic 0000:0000:0000.009A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1046.701367][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.750466][ T2661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6756'. [ 1046.796261][ T2666] loop7: detected capacity change from 0 to 2048 [ 1046.816603][ T2666] EXT4-fs: Ignoring removed mblk_io_submit option [ 1046.823087][ T2666] EXT4-fs: Ignoring removed mblk_io_submit option [ 1046.926219][ T2666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.442357][ T2683] syzkaller0: entered promiscuous mode [ 1047.448332][ T2683] syzkaller0: entered allmulticast mode [ 1047.479972][ T2683] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1047.479972][ T2683] program syz.0.6763 not setting count and/or reply_len properly [ 1047.778555][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.119104][T32554] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 1048.126779][ T2687] loop7: detected capacity change from 0 to 1024 [ 1048.133720][ T2687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1048.153120][T32554] hid-generic 0000:0000:0000.009B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1048.172919][ T2702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6772'. [ 1048.253293][ T2687] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1048.267143][ T2687] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.363364][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1048.609331][ T2718] xt_hashlimit: size too large, truncated to 1048576 [ 1048.720134][ T2709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.744117][ T2709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.931221][ T2727] loop7: detected capacity change from 0 to 128 [ 1048.980057][ T2727] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1048.992907][ T2727] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.073120][T32554] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 1049.086335][T32554] hid-generic 0000:0000:0000.009C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1049.108690][ T2740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6783'. [ 1049.545169][ T2741] fido_id[2741]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1049.703021][ T2747] netlink: 'syz.7.6779': attribute type 5 has an invalid length. [ 1049.933079][T29031] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1050.010740][ T2754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.021860][ T2766] loop7: detected capacity change from 0 to 512 [ 1050.023594][ T2754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.039656][ T2766] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6788'. [ 1051.213606][ T649] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 1051.222619][ T649] hid-generic 0000:0000:0000.009D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1051.227675][ T2779] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6793'. [ 1051.245699][ T2783] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6795'. [ 1051.296886][ T2784] fido_id[2784]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1051.367188][ T2793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6799'. [ 1051.406838][ T2789] syzkaller0: entered promiscuous mode [ 1051.424771][ T2789] syzkaller0: entered allmulticast mode [ 1051.489035][ T2789] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1051.489035][ T2789] program syz.0.6796 not setting count and/or reply_len properly [ 1052.296111][ T2813] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6805'. [ 1052.392024][ T2798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.425440][ T2820] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6807'. [ 1052.426824][ T2798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.501322][ T2827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6810'. [ 1052.735179][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.745918][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.928135][ T2846] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6818'. [ 1053.271409][ T2854] syzkaller0: entered promiscuous mode [ 1053.295151][ T2854] syzkaller0: entered allmulticast mode [ 1053.355757][ T2855] loop7: detected capacity change from 0 to 128 [ 1053.419487][ T2855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 1053.448498][ T2855] System zones: 1-3, 19-19, 35-36 [ 1053.466033][ T2855] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1053.488446][ T2855] ext4 filesystem being mounted at /377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.535094][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1053.535177][ T28] audit: type=1400 audit(1782511846.410:3256): avc: denied { write } for pid=2853 comm="syz.7.6819" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1053.565775][ T2854] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1053.565775][ T2854] program syz.7.6819 not setting count and/or reply_len properly [ 1053.709729][T29031] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1053.798350][ T2880] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6830'. [ 1054.227613][ T2893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.236148][ T2893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.326461][ T2919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6844'. [ 1055.337815][ T2919] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6844'. [ 1057.808385][ T2954] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6855'. [ 1057.886739][ T2967] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6860'. [ 1059.187103][ T2984] wireguard0: entered promiscuous mode [ 1059.192764][ T2984] wireguard0: entered allmulticast mode [ 1059.268872][ T2983] rdma_rxe: rxe_newlink: failed to add lo [ 1059.523407][ T2990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.542902][ T2990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.727988][ T2989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.752260][ T2989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.131968][ T3025] loop7: detected capacity change from 0 to 512 [ 1061.140042][ T3025] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1061.389798][ T3025] rdma_rxe: rxe_newlink: failed to add lo [ 1061.399060][ T3025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.408000][ T3025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.041756][ T3029] wireguard0: entered promiscuous mode [ 1062.160314][ T3029] wireguard0: entered allmulticast mode [ 1062.240983][ T3038] sz1: rxe_newlink: already configured on lo [ 1062.250775][ T3038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.259757][ T3038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.426022][ T3048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6886'. [ 1062.436493][ T3047] xt_hashlimit: size too large, truncated to 1048576 [ 1062.728074][ T3052] netlink: 'syz.8.6884': attribute type 5 has an invalid length. [ 1063.014702][ T3058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.023258][ T3058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.316324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1063.337074][ T3064] xt_hashlimit: size too large, truncated to 1048576 [ 1063.598057][ T3068] rdma_rxe: rxe_newlink: failed to add lo [ 1063.661129][ T3070] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6891'. [ 1063.707162][ T3073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6892'. [ 1063.918226][ T3084] wireguard0: entered promiscuous mode [ 1063.923796][ T3084] wireguard0: entered allmulticast mode [ 1064.092423][ T3087] syzkaller0: entered promiscuous mode [ 1064.098036][ T3087] syzkaller0: entered allmulticast mode [ 1064.114305][ T3087] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1064.114305][ T3087] program syz.8.6897 not setting count and/or reply_len properly [ 1064.140538][ T3089] loop7: detected capacity change from 0 to 1024 [ 1064.148979][ T3089] EXT4-fs: Ignoring removed nobh option [ 1064.154712][ T3089] EXT4-fs: Ignoring removed i_version option [ 1064.161148][ T3089] ext4: Bad value for 'min_batch_time' [ 1064.212944][ T3091] loop7: detected capacity change from 0 to 128 [ 1064.261533][ T3091] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1064.283015][ T3091] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.296492][ T3095] rdma_rxe: rxe_newlink: failed to add lo [ 1064.306546][ T3095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.315278][ T3095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.694839][ T3098] netlink: 'syz.7.6899': attribute type 5 has an invalid length. [ 1064.889694][ T3097] netlink: 'syz.9.6901': attribute type 5 has an invalid length. [ 1064.984577][T29031] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1065.381678][ T3133] loop7: detected capacity change from 0 to 8192 [ 1065.480975][ T3135] syzkaller0: entered promiscuous mode [ 1065.494594][ T3135] syzkaller0: entered allmulticast mode [ 1065.568891][ T3137] syzkaller0: entered promiscuous mode [ 1065.602181][ T3137] syzkaller0: entered allmulticast mode [ 1065.665383][ T3135] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1065.665383][ T3135] program syz.9.6910 not setting count and/or reply_len properly [ 1065.719901][ T3137] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1065.719901][ T3137] program syz.0.6911 not setting count and/or reply_len properly [ 1065.932500][ T3143] wireguard0: entered promiscuous mode [ 1066.080266][ T3143] wireguard0: entered allmulticast mode [ 1067.992577][ T3161] netlink: 'syz.0.6917': attribute type 5 has an invalid length. [ 1068.099372][ T3177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1068.162703][ T3177] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1068.186733][ T3176] xt_hashlimit: size too large, truncated to 1048576 [ 1068.538917][ T3189] xt_hashlimit: size too large, truncated to 1048576 [ 1069.092401][ T3203] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6929'. [ 1069.389338][ T3203] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6929'. [ 1069.938175][ T3216] syzkaller0: entered promiscuous mode [ 1069.943718][ T3216] syzkaller0: entered allmulticast mode [ 1069.972014][ T3216] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1069.972014][ T3216] program syz.8.6933 not setting count and/or reply_len properly [ 1070.041207][ T3405] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 1070.063222][ T3405] hid-generic 0000:0000:0000.009E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1070.133699][ T3222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6936'. [ 1070.344548][ T3234] xt_hashlimit: size too large, truncated to 1048576 [ 1070.757941][ T3249] loop7: detected capacity change from 0 to 164 [ 1070.799550][ T3249] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1070.968118][ T3255] wireguard0: entered promiscuous mode [ 1071.156428][ T3255] wireguard0: entered allmulticast mode [ 1071.210741][ T3361] hid-generic 0000:0000:0000.009F: unknown main item tag 0x0 [ 1071.247937][ T3266] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6951'. [ 1071.292934][ T3361] hid-generic 0000:0000:0000.009F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1071.357153][ T3268] loop7: detected capacity change from 0 to 1024 [ 1071.377934][ T3268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1071.391905][ T3264] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6952'. [ 1071.474988][ T3268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.487674][ T3268] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.512209][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1071.965498][ T3297] xt_hashlimit: size too large, truncated to 1048576 [ 1072.459545][ T3307] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6965'. [ 1072.469433][ T4403] hid-generic 0000:0000:0000.00A0: unknown main item tag 0x0 [ 1072.477863][ T4403] hid-generic 0000:0000:0000.00A0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1072.516614][ T3308] fido_id[3308]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1072.787558][ T3320] wireguard0: entered promiscuous mode [ 1072.797706][ T3329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6975'. [ 1072.799436][ T3320] wireguard0: entered allmulticast mode [ 1072.848529][ T3361] hid-generic 0000:0000:0000.00A1: unknown main item tag 0x0 [ 1072.858065][ T3361] hid-generic 0000:0000:0000.00A1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1072.875239][ T3331] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6976'. [ 1073.047699][ T3332] fido_id[3332]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1073.446289][ T3339] xt_hashlimit: size too large, truncated to 1048576 [ 1073.537427][ T3344] loop7: detected capacity change from 0 to 164 [ 1073.566303][ T3344] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1073.822001][ T3354] loop7: detected capacity change from 0 to 1024 [ 1073.831034][ T3354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1073.915932][T32552] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 1073.948647][ T3362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6987'. [ 1073.976063][T32552] hid-generic 0000:0000:0000.00A2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1074.023826][ T3363] fido_id[3363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1074.054419][ T3369] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6988'. [ 1074.095688][ T3354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.136821][ T3354] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.165475][ T3369] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6988'. [ 1074.228964][ T3357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.238451][ T3357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.247495][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1074.297451][ T3381] wireguard0: entered promiscuous mode [ 1074.307853][ T3381] wireguard0: entered allmulticast mode [ 1074.528768][ T3395] xt_hashlimit: size too large, truncated to 1048576 [ 1074.707723][ T3396] loop7: detected capacity change from 0 to 8192 [ 1075.425277][ T3361] hid-generic 0000:0000:0000.00A3: unknown main item tag 0x0 [ 1075.455957][ T3361] hid-generic 0000:0000:0000.00A3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1075.759230][ T3420] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7005'. [ 1075.769246][ T3420] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7005'. [ 1076.282407][ T3361] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 1076.291960][ T3361] hid-generic 0000:0000:0000.00A4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1076.352447][ T3437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7011'. [ 1076.419782][ T3440] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7012'. [ 1076.500323][ T3442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.513645][ T3442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.536186][ T3450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7016'. [ 1076.575618][ T3452] loop7: detected capacity change from 0 to 164 [ 1076.595668][ T3456] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7019'. [ 1076.613672][ T3456] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7019'. [ 1076.718002][ T3452] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1076.729189][ T3463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.744780][ T3463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.761947][ T3452] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1076.774030][ T3452] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1076.788567][ T3361] hid-generic 0000:0000:0000.00A5: unknown main item tag 0x0 [ 1076.799963][ T3361] hid-generic 0000:0000:0000.00A5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1076.849880][ T3468] fido_id[3468]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1077.417623][ T3486] rdma_rxe: rxe_newlink: failed to add lo [ 1077.427474][ T3486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.436395][ T3486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.842415][ T3361] hid-generic 0000:0000:0000.00A6: unknown main item tag 0x0 [ 1077.981291][ T3361] hid-generic 0000:0000:0000.00A6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1078.122287][ T3499] fido_id[3499]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1078.490865][ T3498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.564668][ T3498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.311893][ T3531] rdma_rxe: rxe_newlink: failed to add lo [ 1079.336443][ T3531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.346224][ T3531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.565598][ T3535] __nla_validate_parse: 7 callbacks suppressed [ 1079.565644][ T3535] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7048'. [ 1079.583524][ T3535] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7048'. [ 1079.751726][ T3542] wireguard0: entered promiscuous mode [ 1079.757429][ T3542] wireguard0: entered allmulticast mode [ 1079.815487][ T3545] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7051'. [ 1080.472415][ T3559] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7055'. [ 1081.234526][ T3569] syzkaller0: entered promiscuous mode [ 1081.254610][ T3569] syzkaller0: entered allmulticast mode [ 1081.301355][ T3569] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1081.301355][ T3569] program syz.8.7059 not setting count and/or reply_len properly [ 1081.623653][ T3576] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1083.247927][ T3595] netlink: 'syz.9.7063': attribute type 5 has an invalid length. [ 1083.681001][ T3609] syzkaller0: entered promiscuous mode [ 1083.700345][ T3609] syzkaller0: entered allmulticast mode [ 1083.773759][ T3609] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1083.773759][ T3609] program syz.8.7069 not setting count and/or reply_len properly [ 1083.899399][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7070'. [ 1084.018261][ T3618] syzkaller0: entered promiscuous mode [ 1084.036691][ T3618] syzkaller0: entered allmulticast mode [ 1084.077012][ T3623] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1084.077012][ T3623] program syz.8.7072 not setting count and/or reply_len properly [ 1084.233682][ T3625] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7075'. [ 1084.464000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.828556][ T3644] loop7: detected capacity change from 0 to 2048 [ 1084.872937][ T3644] EXT4-fs: Ignoring removed mblk_io_submit option [ 1084.960276][ T3644] EXT4-fs: Ignoring removed mblk_io_submit option [ 1085.018974][ T3644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.352888][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.694746][ T3660] loop7: detected capacity change from 0 to 512 [ 1085.702753][ T3660] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1085.733010][ T3660] rdma_rxe: rxe_newlink: failed to add lo [ 1085.741445][ T3660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.750190][ T3660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.992489][ T3665] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7087'. [ 1086.383012][ T3674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7091'. [ 1089.188436][ T3686] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7096'. [ 1089.355184][ T3693] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7098'. [ 1089.475729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1090.515679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1091.440716][ T3709] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7102'. [ 1091.571274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1092.463781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.246522][ T3734] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7109'. [ 1093.268580][T32553] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1093.316130][T32553] hid-generic 0000:0000:0000.00A7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1093.340678][ T3736] loop7: detected capacity change from 0 to 512 [ 1093.386908][ T3736] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1093.447545][ T3736] EXT4-fs (loop7): 1 truncate cleaned up [ 1093.472828][ T3736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1093.520641][ T28] audit: type=1400 audit(1782511886.400:3257): avc: denied { write } for pid=3735 comm="syz.7.7110" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1093.555995][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7110'. [ 1093.615147][ T28] audit: type=1400 audit(1782511886.430:3258): avc: denied { write } for pid=3735 comm="syz.7.7110" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1093.662164][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.812895][ T3745] wireguard0: entered promiscuous mode [ 1093.827214][ T3745] wireguard0: entered allmulticast mode [ 1094.181124][ T3758] syzkaller0: entered promiscuous mode [ 1094.215737][ T3758] syzkaller0: entered allmulticast mode [ 1094.528408][ T3758] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1094.528408][ T3758] program syz.4.7117 not setting count and/or reply_len properly [ 1095.162636][T32552] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 1095.196812][T32552] hid-generic 0000:0000:0000.00A8: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1095.268571][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7122'. [ 1095.352507][ T3779] wireguard0: entered promiscuous mode [ 1095.490949][ T3779] wireguard0: entered allmulticast mode [ 1096.123480][ T3792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.271271][ T3792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.431118][ T3797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1096.454170][ T3797] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1096.477103][ T3781] loop7: detected capacity change from 0 to 1024 [ 1096.495316][ T3781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1096.503102][ T3800] xt_hashlimit: size too large, truncated to 1048576 [ 1096.597479][ T3781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.609606][ T3781] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.731982][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1096.848204][ T3815] loop7: detected capacity change from 0 to 512 [ 1097.475685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.831615][ T3815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.869805][ T3815] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.076033][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.515887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1098.767948][ T3840] netlink: 'syz.0.7137': attribute type 5 has an invalid length. [ 1098.951358][ T3846] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7143'. [ 1098.987160][ T3846] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7143'. [ 1099.252640][ T3856] loop7: detected capacity change from 0 to 128 [ 1099.275891][ T3856] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1099.293100][ T3856] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.421335][ T3852] xt_hashlimit: size too large, truncated to 1048576 [ 1099.556929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.761868][ T3862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.783919][ T3862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.962493][T29031] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1100.419065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1103.037867][ T3876] wireguard0: entered promiscuous mode [ 1103.053184][ T3882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7153'. [ 1103.055398][ T3876] wireguard0: entered allmulticast mode [ 1103.269997][ T3887] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7155'. [ 1103.336633][ T3895] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7158'. [ 1103.430266][ T3887] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7155'. [ 1103.472111][ T3903] loop7: detected capacity change from 0 to 512 [ 1103.502160][ T3903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.514843][ T3903] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.529717][ T3908] 9p: Bad value for 'rfdno' [ 1103.545251][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.650521][ T3912] loop7: detected capacity change from 0 to 128 [ 1103.725099][ T3912] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1103.740245][ T3912] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.922092][ T3910] xt_hashlimit: size too large, truncated to 1048576 [ 1104.098671][ T3912] netlink: 'syz.7.7164': attribute type 5 has an invalid length. [ 1104.149858][T29031] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1105.475690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1106.515698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1107.154714][ T3944] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1107.161381][ T3944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1107.169171][ T3944] vhci_hcd vhci_hcd.0: Device attached [ 1107.178986][ T3949] vhci_hcd: connection closed [ 1107.179204][ T8477] vhci_hcd vhci_hcd.8: stop threads [ 1107.203903][ T8477] vhci_hcd vhci_hcd.8: release socket [ 1107.214552][ T3948] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7176'. [ 1107.218885][ T8477] vhci_hcd vhci_hcd.8: disconnect device [ 1107.229933][ T3940] ucma_write: process 1561 (syz.4.7173) changed security contexts after opening file descriptor, this is not allowed. [ 1107.282414][ T3960] loop7: detected capacity change from 0 to 164 [ 1107.289690][ T3960] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1107.299190][ T3960] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1107.315121][ T3960] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1107.366475][ T3964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7182'. [ 1107.555669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1107.709174][ T3973] xt_hashlimit: size too large, truncated to 1048576 [ 1109.039337][ T3994] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7191'. [ 1109.513078][ T4000] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7195'. [ 1110.476713][ T4008] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7195'. [ 1110.562571][ T4005] sz1: rxe_newlink: already configured on lo [ 1110.596423][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.605774][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.084896][ T4001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.107283][ T4001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.704469][ T4032] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7203'. [ 1112.838809][ T4032] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7203'. [ 1112.877339][ T4038] loop7: detected capacity change from 0 to 1024 [ 1112.937947][ T4038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1113.098805][ T4038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.127674][ T4038] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.222363][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1114.330617][ T4036] wireguard0: entered promiscuous mode [ 1114.338044][ T4036] wireguard0: entered allmulticast mode [ 1114.352188][ T4062] wireguard0: entered promiscuous mode [ 1114.357924][ T4062] wireguard0: entered allmulticast mode [ 1114.379472][ T4063] wireguard0: entered promiscuous mode [ 1114.384974][ T4063] wireguard0: entered allmulticast mode [ 1114.772382][ T4077] netlink: 'syz.4.7211': attribute type 5 has an invalid length. [ 1114.968749][ T4075] xt_hashlimit: size too large, truncated to 1048576 [ 1115.079200][ T4092] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7220'. [ 1115.089171][ T4083] loop7: detected capacity change from 0 to 1024 [ 1115.109476][ T4083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1115.423913][ T4083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.440573][ T4083] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.633936][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1116.051339][ T4103] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7222'. [ 1116.141233][ T4099] wireguard0: entered promiscuous mode [ 1116.146793][ T4099] wireguard0: entered allmulticast mode [ 1116.170216][ T4105] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7222'. [ 1116.341012][ T4115] wireguard0: entered promiscuous mode [ 1116.346522][ T4115] wireguard0: entered allmulticast mode [ 1116.354348][ T4118] loop7: detected capacity change from 0 to 512 [ 1116.361073][ T4118] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1116.402093][ T4118] rdma_rxe: rxe_newlink: failed to add lo [ 1116.408868][ T4118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.417341][ T4118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.944040][ T4132] netlink: 'syz.9.7228': attribute type 5 has an invalid length. [ 1117.011245][ T3405] hid-generic 0000:0000:0000.00A9: unknown main item tag 0x0 [ 1117.021773][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7234'. [ 1117.031420][ T3405] hid-generic 0000:0000:0000.00A9: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1117.075633][ T4142] fido_id[4142]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1117.107728][ T4139] wireguard0: entered promiscuous mode [ 1117.114126][ T4139] wireguard0: entered allmulticast mode [ 1117.140516][ T4144] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7236'. [ 1117.211411][ T4146] xt_hashlimit: size too large, truncated to 1048576 [ 1117.278313][ T4155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7240'. [ 1117.295191][ T4155] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7240'. [ 1117.568320][ T4168] wireguard0: entered promiscuous mode [ 1117.573841][ T4168] wireguard0: entered allmulticast mode [ 1117.775946][ T4162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.785026][ T4162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.926888][ T4172] syzkaller0: entered promiscuous mode [ 1117.932548][ T4172] syzkaller0: entered allmulticast mode [ 1117.949577][ T4172] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1117.949577][ T4172] program syz.0.7246 not setting count and/or reply_len properly [ 1118.103591][ T4176] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7248'. [ 1118.216661][ T4179] syzkaller0: entered promiscuous mode [ 1118.222292][ T4179] syzkaller0: entered allmulticast mode [ 1118.247720][ T4179] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1118.247720][ T4179] program syz.8.7249 not setting count and/or reply_len properly [ 1118.430793][ T4193] netlink: 'syz.0.7247': attribute type 5 has an invalid length. [ 1118.635289][ T4188] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7252'. [ 1118.878222][ T4181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.892658][ T4181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.188002][T32556] hid-generic 0000:0000:0000.00AA: unknown main item tag 0x0 [ 1119.196860][T32556] hid-generic 0000:0000:0000.00AA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1119.571633][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7260'. [ 1120.026200][ T4219] xt_hashlimit: size too large, truncated to 1048576 [ 1120.690777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.022775][ T4239] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7267'. [ 1121.487258][ T4250] netlink: 'syz.0.7265': attribute type 5 has an invalid length. [ 1121.792139][ T4256] sz1: rxe_newlink: already configured on lo [ 1121.813777][ T4256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.823140][ T4256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.217042][ T4263] loop7: detected capacity change from 0 to 512 [ 1122.224038][ T4263] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1122.243699][ T4263] EXT4-fs (loop7): 1 truncate cleaned up [ 1122.249864][ T4263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.331035][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.456814][ T4274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.465370][ T4274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.484633][ T4271] wireguard0: entered promiscuous mode [ 1122.490366][ T4271] wireguard0: entered allmulticast mode [ 1122.726750][ T4280] loop7: detected capacity change from 0 to 2048 [ 1122.733454][ T4280] EXT4-fs: Ignoring removed mblk_io_submit option [ 1122.739914][ T4280] EXT4-fs: Ignoring removed mblk_io_submit option [ 1122.779340][ T4280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.830966][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.863841][ T4284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.873873][ T4284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.340634][ T4302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.349932][ T4302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.719737][ T4298] lo speed is unknown, defaulting to 1000 [ 1124.271790][ T4321] loop7: detected capacity change from 0 to 128 [ 1124.328594][ T4321] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1124.342764][ T4321] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.359344][ T4321] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1124.482611][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.497615][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.513183][ T4298] bridge_slave_0: entered allmulticast mode [ 1124.523640][ T4298] bridge_slave_0: entered promiscuous mode [ 1124.547171][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.561803][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.576865][ T4298] bridge_slave_1: entered allmulticast mode [ 1124.590364][ T4298] bridge_slave_1: entered promiscuous mode [ 1124.633117][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.646255][ T4332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.659212][ T4332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.668288][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.704196][ T4298] team0: Port device team_slave_0 added [ 1124.717747][ T4298] team0: Port device team_slave_1 added [ 1124.734853][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.741839][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.766734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.767745][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.793823][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.800842][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.905581][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.941177][ T4298] hsr_slave_0: entered promiscuous mode [ 1124.947450][ T4298] hsr_slave_1: entered promiscuous mode [ 1124.953530][ T4298] debugfs: 'hsr0' already exists in 'hsr' [ 1124.959272][ T4298] Cannot create hsr debugfs directory [ 1125.181854][ T4339] loop7: detected capacity change from 0 to 512 [ 1125.210872][ T4298] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.221376][ T4298] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.237723][ T4339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.250272][ T4339] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1125.272363][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.456203][ T4298] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.479893][ T4298] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.717115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1125.806721][ T4351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.815386][ T4351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.910045][ T4298] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.964646][ T4298] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.243552][ T4298] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.372917][ T4298] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.459886][ T4362] rdma_rxe: rxe_newlink: failed to add lo [ 1126.468638][ T4362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.477885][ T4362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.512162][ T4298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1126.521539][ T4298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1126.542051][ T4298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1126.559307][ T4298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1126.569502][ T4298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1126.578684][ T4298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1126.586996][ T4298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1126.597529][ T4298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1126.641138][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.656979][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.670001][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.677156][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.694020][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.701162][ T4638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.755692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1126.854855][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.067290][ T4298] veth0_vlan: entered promiscuous mode [ 1127.099271][ T4298] veth1_vlan: entered promiscuous mode [ 1127.270920][ T4298] veth0_macvtap: entered promiscuous mode [ 1127.289679][ T4298] veth1_macvtap: entered promiscuous mode [ 1127.297965][ T4398] loop7: detected capacity change from 0 to 512 [ 1127.306219][ T4398] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1127.500351][ T4398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.509887][ T4398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.558322][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.570109][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.795651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1128.282507][ T4638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.291489][ T4638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.305215][ T4389] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1128.328482][ T4638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.348442][ T4638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.481031][ T4417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7310'. [ 1128.509141][ T4416] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7309'. [ 1128.528881][ T4417] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7310'. [ 1129.375307][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7317'. [ 1129.631819][ T4440] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7318'. [ 1130.599445][ T4460] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7323'. [ 1130.909130][ T4466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.918336][ T4466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.979564][ T4462] wireguard0: entered promiscuous mode [ 1131.003545][ T4462] wireguard0: entered allmulticast mode [ 1132.294200][ T4485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.305166][ T4485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.719660][ T4493] syzkaller0: entered promiscuous mode [ 1132.731505][ T4493] syzkaller0: entered allmulticast mode [ 1132.782679][ T4493] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1132.782679][ T4493] program syz.7.7334 not setting count and/or reply_len properly [ 1133.735712][ T4507] syzkaller0: entered promiscuous mode [ 1133.774095][ T4507] syzkaller0: entered allmulticast mode [ 1133.906363][ T4507] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1133.906363][ T4507] program syz.4.7337 not setting count and/or reply_len properly [ 1134.418293][ T4522] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7342'. [ 1134.551042][ T4522] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7342'. [ 1135.158330][ T4528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.275798][ T4528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.654363][ T4533] wireguard0: entered promiscuous mode [ 1135.716127][ T4533] wireguard0: entered allmulticast mode [ 1135.908255][ T4513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.916796][ T4513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.855349][ T4547] rdma_rxe: rxe_newlink: failed to add lo [ 1136.868941][ T4547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.879448][ T4547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.639002][ T28] audit: type=1400 audit(1782511931.520:3259): avc: denied { shutdown } for pid=4550 comm="syz.0.7351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1138.905293][ T4539] wireguard0: entered promiscuous mode [ 1138.911173][ T4539] wireguard0: entered allmulticast mode [ 1139.321606][ T4563] netlink: 'syz.4.7352': attribute type 5 has an invalid length. [ 1139.389879][ T4573] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7356'. [ 1139.504781][ T4574] wireguard0: entered promiscuous mode [ 1139.516562][ T4574] wireguard0: entered allmulticast mode [ 1139.777965][ T4584] xt_hashlimit: size too large, truncated to 1048576 [ 1139.893479][ T4586] rdma_rxe: rxe_newlink: failed to add lo [ 1139.907501][ T4586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.916308][ T4586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.966116][ T4589] syzkaller0: entered promiscuous mode [ 1139.974589][ T4589] syzkaller0: entered allmulticast mode [ 1140.032064][ T4589] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1140.032064][ T4589] program syz.7.7362 not setting count and/or reply_len properly [ 1140.057802][ T4591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.066402][ T4591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.201420][ T4595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.212792][ T4595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.393142][ T4606] wireguard0: entered promiscuous mode [ 1141.398820][ T4606] wireguard0: entered allmulticast mode [ 1141.505042][ T4617] sz1: rxe_newlink: already configured on lo [ 1141.514773][ T4617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.523644][ T4617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.741106][ T4633] xt_hashlimit: size too large, truncated to 1048576 [ 1142.891458][ T4632] wireguard0: entered promiscuous mode [ 1142.897045][ T4632] wireguard0: entered allmulticast mode [ 1143.058674][ T4640] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7378'. [ 1144.312533][ T4654] loop7: detected capacity change from 0 to 2048 [ 1144.321991][ T4654] EXT4-fs: Ignoring removed mblk_io_submit option [ 1144.328565][ T4654] EXT4-fs: Ignoring removed mblk_io_submit option [ 1144.434284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1144.522086][ T4654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.637866][ T4664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.854389][ T4664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.105017][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.251317][ T4669] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7387'. [ 1145.315742][ T4679] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7390'. [ 1145.351810][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7388'. [ 1145.869220][ T4692] xt_hashlimit: size too large, truncated to 1048576 [ 1146.137700][ T4699] syzkaller0: entered promiscuous mode [ 1146.143221][ T4699] syzkaller0: entered allmulticast mode [ 1146.159576][ T4699] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1146.159576][ T4699] program syz.0.7396 not setting count and/or reply_len properly [ 1146.259883][ T4697] loop7: detected capacity change from 0 to 2048 [ 1146.284153][ T4697] EXT4-fs: Ignoring removed mblk_io_submit option [ 1146.304659][ T4697] EXT4-fs: Ignoring removed mblk_io_submit option [ 1146.321648][ T4703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7398'. [ 1146.338066][ T4703] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7398'. [ 1146.352433][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7400'. [ 1146.393949][ T4697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.467279][ T4713] xt_hashlimit: size too large, truncated to 1048576 [ 1146.474755][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.621058][ T4717] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7402'. [ 1146.640009][T23200] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.648828][T23200] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.656628][ T4721] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7403'. [ 1146.668626][ T4717] loop7: detected capacity change from 0 to 1024 [ 1146.675416][T23200] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.684231][T23200] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.694568][ T4717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1146.731265][ T4724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1146.766051][ T4717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1146.787493][ T4717] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.807866][ T4728] wireguard0: entered promiscuous mode [ 1146.813383][ T4728] wireguard0: entered allmulticast mode [ 1146.826049][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1146.852014][ T4731] syzkaller0: entered promiscuous mode [ 1146.857607][ T4731] syzkaller0: entered allmulticast mode [ 1146.872951][ T4731] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1146.872951][ T4731] program syz.7.7406 not setting count and/or reply_len properly [ 1146.978006][ T4734] loop7: detected capacity change from 0 to 512 [ 1147.027834][ T4736] loop7: detected capacity change from 0 to 1024 [ 1147.035972][ T4736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1147.077246][ T4736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.089430][ T4736] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.112331][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1147.165378][ T3361] hid-generic 0000:0000:0000.00AB: unknown main item tag 0x0 [ 1147.173834][ T3361] hid-generic 0000:0000:0000.00AB: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1147.229722][ T4745] fido_id[4745]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1147.263137][ T3361] hid-generic 0000:0000:0000.00AC: unknown main item tag 0x0 [ 1147.310594][ T3361] hid-generic 0000:0000:0000.00AC: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1147.362636][ T4756] fido_id[4756]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1147.421947][ T4762] random: crng reseeded on system resumption [ 1148.853813][ T4760] loop7: detected capacity change from 0 to 1024 [ 1148.973763][ T4760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1149.475665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1150.052452][ T4776] __nla_validate_parse: 6 callbacks suppressed [ 1150.052487][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7420'. [ 1150.515649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1150.812900][ T28] audit: type=1400 audit(1782511943.510:3260): avc: denied { create } for pid=4767 comm="syz.8.7418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1150.844936][ T4760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1150.861353][ T4760] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.233801][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1151.257299][ T4770] wireguard0: entered promiscuous mode [ 1151.263601][ T4770] wireguard0: entered allmulticast mode [ 1151.391431][ T4784] netlink: 'syz.4.7422': attribute type 9 has an invalid length. [ 1151.415827][ T4784] netlink: 'syz.4.7422': attribute type 2 has an invalid length. [ 1151.555677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1151.560123][T32553] hid-generic 0000:0000:0000.00AD: unknown main item tag 0x0 [ 1151.616966][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7424'. [ 1151.647924][T32553] hid-generic 0000:0000:0000.00AD: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1151.763263][ T4793] fido_id[4793]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1151.935393][ T4798] lo speed is unknown, defaulting to 1000 [ 1155.252175][ T4824] xt_hashlimit: size too large, truncated to 1048576 [ 1155.427288][ T4833] wireguard0: entered promiscuous mode [ 1155.460022][ T4833] wireguard0: entered allmulticast mode [ 1155.714672][ T3405] hid-generic 0000:0000:0000.00AE: unknown main item tag 0x0 [ 1155.723134][ T3405] hid-generic 0000:0000:0000.00AE: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1155.764600][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7437'. [ 1155.778870][ T4843] fido_id[4843]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1155.817353][ T4844] loop7: detected capacity change from 0 to 128 [ 1155.822021][ T4846] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7439'. [ 1155.973505][ T4853] syzkaller0: entered promiscuous mode [ 1155.983171][ T4844] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1155.995316][ T4853] syzkaller0: entered allmulticast mode [ 1156.002617][ T4844] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.014014][ T4844] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1156.210978][ T4853] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1156.210978][ T4853] program syz.0.7441 not setting count and/or reply_len properly [ 1156.904656][ T4867] sz1: rxe_newlink: already configured on lo [ 1157.099548][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.356490][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.996976][ T4871] syzkaller0: entered promiscuous mode [ 1158.071980][ T4871] syzkaller0: entered allmulticast mode [ 1158.117627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.563684][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.729654][T32552] hid-generic 0000:0000:0000.00AF: unknown main item tag 0x0 [ 1158.751780][T32552] hid-generic 0000:0000:0000.00AF: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1158.813427][ T4886] loop7: detected capacity change from 0 to 512 [ 1158.864811][ T4886] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1158.921943][ T4886] EXT4-fs (loop7): 1 truncate cleaned up [ 1158.944154][ T4886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1158.996202][ T28] audit: type=1400 audit(1782511951.880:3261): avc: denied { write } for pid=4885 comm="syz.7.7450" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1159.026239][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7450'. [ 1159.093242][ T28] audit: type=1400 audit(1782511951.900:3262): avc: denied { write } for pid=4885 comm="syz.7.7450" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1159.130822][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.332639][ T4890] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7452'. [ 1159.380634][ T4890] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7452'. [ 1159.928795][ T4866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.985964][ T4909] wireguard0: entered promiscuous mode [ 1160.002169][ T4909] wireguard0: entered allmulticast mode [ 1160.059634][ T4866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.837256][ T4923] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7459'. [ 1161.292209][ T4928] xt_hashlimit: size too large, truncated to 1048576 [ 1161.339964][ T4932] wireguard0: entered promiscuous mode [ 1161.375653][ T4932] wireguard0: entered allmulticast mode [ 1161.959407][ T4947] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7467'. [ 1162.004123][ T4941] wireguard0: entered promiscuous mode [ 1162.013372][ T4941] wireguard0: entered allmulticast mode [ 1162.063752][ T4925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.072228][ T4925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.231517][ T4949] netlink: 'syz.4.7466': attribute type 5 has an invalid length. [ 1163.062165][ T4974] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7473'. [ 1163.155676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1163.438484][ T4963] wireguard0: entered promiscuous mode [ 1163.444631][ T4963] wireguard0: entered allmulticast mode [ 1163.461216][ T4979] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7474'. [ 1163.510438][ T4964] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1164.195629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.426716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.579988][ T4987] wireguard0: entered promiscuous mode [ 1164.585565][ T4987] wireguard0: entered allmulticast mode [ 1165.255560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1165.373917][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7478'. [ 1165.662132][ T5001] xt_hashlimit: size too large, truncated to 1048576 [ 1165.716168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1166.930736][ T5026] netlink: 'syz.4.7481': attribute type 21 has an invalid length. [ 1167.046083][ T5026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7481'. [ 1167.485936][ T5040] rdma_rxe: rxe_newlink: failed to add lo [ 1167.671512][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.730723][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.951544][ T5050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7491'. [ 1167.969756][ T5050] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7491'. [ 1168.039831][ T5056] netlink: 'syz.4.7494': attribute type 9 has an invalid length. [ 1168.048418][ T5056] netlink: 'syz.4.7494': attribute type 2 has an invalid length. [ 1168.267599][ T5053] wireguard0: entered promiscuous mode [ 1168.280680][ T5053] wireguard0: entered allmulticast mode [ 1168.434772][ T5071] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1168.434772][ T5071] program syz.0.7496 not setting count and/or reply_len properly [ 1169.485653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1170.231846][ T5087] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7502'. [ 1170.515642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1171.023986][ T5099] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7505'. [ 1171.548506][ T5111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7508'. [ 1171.555824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1171.584191][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7508'. [ 1171.603917][ T5113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7509'. [ 1171.622637][ T5111] netlink: 'syz.9.7508': attribute type 7 has an invalid length. [ 1171.632551][ T28] audit: type=1400 audit(1782511964.500:3263): avc: denied { mounton } for pid=5110 comm="syz.9.7508" path="/" dev="tmpfs" ino=2761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 1171.696167][ T5114] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7508'. [ 1171.807968][ T5123] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7511'. [ 1172.073023][ T5130] wireguard0: entered promiscuous mode [ 1172.078774][ T5130] wireguard0: entered allmulticast mode [ 1172.099337][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.119826][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.130751][ T5118] wireguard0: entered promiscuous mode [ 1172.136271][ T5118] wireguard0: entered allmulticast mode [ 1172.198671][ T5139] xt_hashlimit: size too large, truncated to 1048576 [ 1172.240100][ T5134] lo speed is unknown, defaulting to 1000 [ 1172.476999][ T5152] __nla_validate_parse: 1 callbacks suppressed [ 1172.477023][ T5152] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7517'. [ 1172.870551][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.878070][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.885389][ T5134] bridge_slave_0: entered allmulticast mode [ 1172.892284][ T5134] bridge_slave_0: entered promiscuous mode [ 1172.899503][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.906626][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.913818][ T5134] bridge_slave_1: entered allmulticast mode [ 1173.842308][ T5134] bridge_slave_1: entered promiscuous mode [ 1173.961944][ T5134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.984393][ T5134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.045179][ T5134] team0: Port device team_slave_0 added [ 1174.052117][ T5177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.065301][ T5177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.075956][ T5134] team0: Port device team_slave_1 added [ 1174.092228][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.099255][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.125202][ T5134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.136572][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.143543][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.169549][ T5134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.236593][ T5134] hsr_slave_0: entered promiscuous mode [ 1174.249379][ T5175] xt_hashlimit: size too large, truncated to 1048576 [ 1174.333868][ T5134] hsr_slave_1: entered promiscuous mode [ 1174.339795][ T5134] debugfs: 'hsr0' already exists in 'hsr' [ 1174.365329][ T5134] Cannot create hsr debugfs directory [ 1174.661242][ T5134] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.671718][ T5134] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.745721][ T5134] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.758459][ T5134] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.873303][ T5134] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.890103][ T5134] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.929388][ T3361] hid-generic 0000:0000:0000.00B0: unknown main item tag 0x0 [ 1174.941242][ T3361] hid-generic 0000:0000:0000.00B0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1175.090425][ T5192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.105569][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7530'. [ 1175.117999][ T5192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.368889][ T5134] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.379567][ T5134] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.891244][ T5134] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1176.949963][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1177.009775][ T5134] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1177.060389][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1177.294422][ T5134] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1177.345060][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1177.376605][ T5217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.398183][ T5134] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1177.429569][ T5217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.448385][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1177.839730][ T5134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.899985][ T5134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.928740][T23200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.935881][T23200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.960527][T23198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.967686][T23198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.502510][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.511026][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.524484][ T5226] xt_hashlimit: size too large, truncated to 1048576 [ 1178.672459][ T5134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.839947][ T5134] veth0_vlan: entered promiscuous mode [ 1178.848022][ T5134] veth1_vlan: entered promiscuous mode [ 1178.895616][ T5134] veth0_macvtap: entered promiscuous mode [ 1178.926160][ T5134] veth1_macvtap: entered promiscuous mode [ 1178.945049][ T5256] FAULT_INJECTION: forcing a failure. [ 1178.945049][ T5256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1178.965549][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.988498][ T5256] CPU: 1 UID: 0 PID: 5256 Comm: syz.4.7540 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1178.988532][ T5256] Tainted: [W]=WARN [ 1178.988588][ T5256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1178.988611][ T5256] Call Trace: [ 1178.988619][ T5256] [ 1178.988629][ T5256] __dump_stack+0x1d/0x30 [ 1178.988661][ T5256] dump_stack_lvl+0x95/0xd0 [ 1178.988686][ T5256] dump_stack+0x15/0x1b [ 1178.988782][ T5256] should_fail_ex+0x25e/0x270 [ 1178.988810][ T5256] should_fail+0xb/0x20 [ 1178.988837][ T5256] should_fail_usercopy+0x1a/0x20 [ 1178.988877][ T5256] strncpy_from_user+0x27/0x250 [ 1178.988908][ T5256] do_getname+0x59/0x1c0 [ 1178.988936][ T5256] user_path_at+0x28/0x100 [ 1178.988969][ T5256] __se_sys_mount+0x25b/0x2e0 [ 1178.989006][ T5256] ? fput+0x8f/0xc0 [ 1178.989041][ T5256] __x64_sys_mount+0x67/0x80 [ 1178.989068][ T5256] x64_sys_call+0x2d61/0x3020 [ 1178.989107][ T5256] do_syscall_64+0x136/0x3c0 [ 1178.989163][ T5256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.989188][ T5256] RIP: 0033:0x7ff2a87dce59 [ 1178.989272][ T5256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.989295][ T5256] RSP: 002b:00007ff2a722f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1178.989326][ T5256] RAX: ffffffffffffffda RBX: 00007ff2a8a55fa0 RCX: 00007ff2a87dce59 [ 1178.989340][ T5256] RDX: 000020000015bffc RSI: 0000200000000240 RDI: 0000000000000000 [ 1178.989356][ T5256] RBP: 00007ff2a722f090 R08: 0000200000000000 R09: 0000000000000000 [ 1178.989374][ T5256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.989391][ T5256] R13: 00007ff2a8a56038 R14: 00007ff2a8a55fa0 R15: 00007ffe41f0c788 [ 1178.989498][ T5256] [ 1178.990767][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.269914][ T5261] wireguard0: entered promiscuous mode [ 1179.275439][ T5261] wireguard0: entered allmulticast mode [ 1179.301718][ T5263] xt_hashlimit: size too large, truncated to 1048576 [ 1179.386369][T23194] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.403271][T23194] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.416400][ T5266] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7543'. [ 1179.431796][T23194] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.449020][ T8462] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.497128][ T5266] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7543'. [ 1179.839301][ T5277] xt_hashlimit: size too large, truncated to 1048576 [ 1179.865363][ T5279] netlink: 'syz.0.7546': attribute type 9 has an invalid length. [ 1179.873646][ T5279] netlink: 'syz.0.7546': attribute type 2 has an invalid length. [ 1180.170794][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7550'. [ 1180.179918][ T5281] wireguard0: entered promiscuous mode [ 1180.185639][ T5281] wireguard0: entered allmulticast mode [ 1180.213231][ T5286] tipc: Started in network mode [ 1180.218399][ T5286] tipc: Node identity ac14140f, cluster identity 4711 [ 1180.225503][ T5286] tipc: New replicast peer: 255.255.255.255 [ 1180.231562][ T5286] tipc: Enabled bearer , priority 10 [ 1180.280493][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.293432][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.324419][ T5296] FAULT_INJECTION: forcing a failure. [ 1180.324419][ T5296] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.337170][ T5296] CPU: 1 UID: 0 PID: 5296 Comm: syz.7.7552 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1180.337210][ T5296] Tainted: [W]=WARN [ 1180.337218][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1180.337231][ T5296] Call Trace: [ 1180.337238][ T5296] [ 1180.337260][ T5296] __dump_stack+0x1d/0x30 [ 1180.337289][ T5296] dump_stack_lvl+0x95/0xd0 [ 1180.337316][ T5296] dump_stack+0x15/0x1b [ 1180.337354][ T5296] should_fail_ex+0x25e/0x270 [ 1180.337390][ T5296] should_failslab+0x8c/0xb0 [ 1180.337415][ T5296] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 1180.337474][ T5296] ? __alloc_skb+0x2db/0x6f0 [ 1180.337504][ T5296] ? __alloc_skb+0x2db/0x6f0 [ 1180.337535][ T5296] ? security_inode_alloc+0x37/0x100 [ 1180.337568][ T5296] __alloc_skb+0x2db/0x6f0 [ 1180.337656][ T5296] ? __alloc_skb+0x205/0x6f0 [ 1180.337688][ T5296] alloc_skb_with_frags+0x7e/0x3d0 [ 1180.337725][ T5296] ? should_fail_ex+0xd9/0x270 [ 1180.337833][ T5296] sock_alloc_send_pskb+0x44d/0x500 [ 1180.337876][ T5296] tun_get_user+0x96c/0x2820 [ 1180.337924][ T5296] ? _parse_integer_limit+0x177/0x1a0 [ 1180.337977][ T5296] ? _parse_integer+0x27/0x40 [ 1180.338047][ T5296] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1180.338090][ T5296] tun_chr_write_iter+0x15a/0x210 [ 1180.338126][ T5296] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1180.338202][ T5296] vfs_write+0x57d/0x990 [ 1180.338324][ T5296] ksys_write+0xdc/0x1a0 [ 1180.338351][ T5296] __x64_sys_write+0x40/0x50 [ 1180.338377][ T5296] x64_sys_call+0x27e1/0x3020 [ 1180.338405][ T5296] do_syscall_64+0x136/0x3c0 [ 1180.338521][ T5296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.338552][ T5296] RIP: 0033:0x7fb8e7b1ce59 [ 1180.338574][ T5296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.338600][ T5296] RSP: 002b:00007fb8e6577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1180.338625][ T5296] RAX: ffffffffffffffda RBX: 00007fb8e7d95fa0 RCX: 00007fb8e7b1ce59 [ 1180.338642][ T5296] RDX: 000000000000ffdd RSI: 0000200000001980 RDI: 0000000000000003 [ 1180.338715][ T5296] RBP: 00007fb8e6577090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.338728][ T5296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.338744][ T5296] R13: 00007fb8e7d96038 R14: 00007fb8e7d95fa0 R15: 00007ffc64719408 [ 1180.338771][ T5296] [ 1180.704083][ T5306] netlink: 'syz.9.7557': attribute type 9 has an invalid length. [ 1180.712237][ T5306] netlink: 'syz.9.7557': attribute type 2 has an invalid length. [ 1181.335547][ T35] tipc: Node number set to 2886997007 [ 1183.403481][ T5317] xt_hashlimit: size too large, truncated to 1048576 [ 1183.718825][ T5327] tipc: Enabling of bearer rejected, failed to enable media [ 1183.733253][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7561'. [ 1183.961489][ T5352] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7571'. [ 1184.062627][ T5352] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7571'. [ 1185.191043][ T5372] loop7: detected capacity change from 0 to 512 [ 1185.300458][ T5372] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1185.344251][ T5372] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.7574: corrupted in-inode xattr: e_value size too large [ 1185.408849][ T5372] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1185.410135][ T5372] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.7574: couldn't read orphan inode 15 (err -117) [ 1185.419655][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1185.419776][ C0] EXT4-fs (loop7): initial error at time 1782511978: ext4_iget_extra_inode:5180: inode 15 [ 1185.419966][ C0] EXT4-fs (loop7): last error at time 1782511978: ext4_iget_extra_inode:5180: inode 15 [ 1185.623769][ T5372] loop7: lost filesystem error report for type 5 error -117 [ 1185.659836][ T5372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.756002][ T5377] wireguard0: entered promiscuous mode [ 1185.770591][ T5377] wireguard0: entered allmulticast mode [ 1185.850939][ T28] audit: type=1400 audit(1782511978.730:3264): avc: denied { read } for pid=5379 comm="syz.4.7576" lport=32839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1186.051099][ T28] audit: type=1400 audit(1782511978.930:3265): avc: denied { ioctl } for pid=5386 comm="syz.9.7577" path="ipc:[4026533173]" dev="nsfs" ino=4026533173 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1186.211033][ T28] audit: type=1400 audit(1782511979.090:3266): avc: denied { write } for pid=5371 comm="syz.7.7574" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1186.240280][ T5372] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.7574: corrupted in-inode xattr: e_value size too large [ 1186.291004][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.292834][ T5395] xt_hashlimit: size too large, truncated to 1048576 [ 1186.343031][ T5397] macvlan2: entered promiscuous mode [ 1186.448114][ T5402] can0: slcan on ptm1. [ 1186.460735][ T5340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.471370][ T5340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.545732][ T5401] can0 (unregistered): slcan off ptm1. [ 1186.592988][ T5407] wireguard0: entered promiscuous mode [ 1186.598859][ T5407] wireguard0: entered allmulticast mode [ 1187.360048][ T5421] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7587'. [ 1188.711416][ T5446] wireguard0: entered promiscuous mode [ 1188.718183][ T5446] wireguard0: entered allmulticast mode [ 1188.843085][ T5380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1188.899305][ T5452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7594'. [ 1188.940978][ T5452] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7594'. [ 1189.077425][ T5459] loop7: detected capacity change from 0 to 512 [ 1189.085882][ T5459] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1189.123594][ T5459] rdma_rxe: rxe_newlink: failed to add lo [ 1189.133377][ T5459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.142229][ T5459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.167252][ T5453] wireguard0: entered promiscuous mode [ 1189.180061][ T5453] wireguard0: entered allmulticast mode [ 1189.224026][ T5470] rdma_rxe: rxe_newlink: failed to add lo [ 1189.235807][ T5470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.244766][ T5470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.281858][ T28] audit: type=1400 audit(1782511982.160:3267): avc: denied { write } for pid=5458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.321742][ T5473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5473 comm=syz.9.7597 [ 1189.335758][ T5473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=5473 comm=syz.9.7597 [ 1189.349072][ T5473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=5473 comm=syz.9.7597 [ 1189.393183][ T5479] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7599'. [ 1189.441926][ T28] audit: type=1400 audit(1782511982.320:3268): avc: denied { write } for pid=5477 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.687684][ T28] audit: type=1400 audit(1782511982.530:3269): avc: denied { write } for pid=5481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.735238][ T28] audit: type=1400 audit(1782511982.610:3270): avc: denied { write } for pid=5500 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.763160][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7601'. [ 1190.723435][ T5513] FAULT_INJECTION: forcing a failure. [ 1190.723435][ T5513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.772525][ T5513] CPU: 1 UID: 0 PID: 5513 Comm: syz.9.7605 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1190.772609][ T5513] Tainted: [W]=WARN [ 1190.772618][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1190.772632][ T5513] Call Trace: [ 1190.772639][ T5513] [ 1190.772650][ T5513] __dump_stack+0x1d/0x30 [ 1190.772674][ T5513] dump_stack_lvl+0x95/0xd0 [ 1190.772700][ T5513] dump_stack+0x15/0x1b [ 1190.772748][ T5513] should_fail_ex+0x25e/0x270 [ 1190.772785][ T5513] should_fail+0xb/0x20 [ 1190.772930][ T5513] should_fail_usercopy+0x1a/0x20 [ 1190.772967][ T5513] _copy_from_user+0x1c/0xb0 [ 1190.773015][ T5513] vmemdup_user+0x5e/0xd0 [ 1190.773056][ T5513] map_get_next_key+0x140/0x330 [ 1190.773094][ T5513] ? __sys_bpf+0xa23/0xc30 [ 1190.773162][ T5513] __sys_bpf+0xa30/0xc30 [ 1190.773203][ T5513] ? vfs_write+0x7a0/0x990 [ 1190.773228][ T5513] __x64_sys_bpf+0x69/0x80 [ 1190.773330][ T5513] x64_sys_call+0x10cb/0x3020 [ 1190.773354][ T5513] do_syscall_64+0x136/0x3c0 [ 1190.773388][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.773462][ T5513] RIP: 0033:0x7f8529b8ce59 [ 1190.773481][ T5513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.773581][ T5513] RSP: 002b:00007f85285df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1190.773607][ T5513] RAX: ffffffffffffffda RBX: 00007f8529e05fa0 RCX: 00007f8529b8ce59 [ 1190.773690][ T5513] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 1190.773707][ T5513] RBP: 00007f85285df090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.773724][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.773740][ T5513] R13: 00007f8529e06038 R14: 00007f8529e05fa0 R15: 00007fff8d41ccb8 [ 1190.773763][ T5513] [ 1192.202815][ T5522] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7609'. [ 1192.257560][ T5528] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7609'. [ 1192.425262][ T5538] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7613'. [ 1192.656371][ T5536] lo speed is unknown, defaulting to 1000 [ 1192.906674][ T5524] netlink: 'syz.0.7608': attribute type 5 has an invalid length. [ 1194.294504][ T5571] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1194.483058][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7626'. [ 1194.661439][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7627'. [ 1194.683139][ T5599] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7630'. [ 1194.699938][ T5599] netlink: 'syz.4.7630': attribute type 7 has an invalid length. [ 1194.758742][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7629'. [ 1194.769322][ T5600] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7630'. [ 1194.778832][ T5600] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7630'. [ 1194.948716][ T5578] loop7: detected capacity change from 0 to 128 [ 1195.082989][ T5578] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1195.139676][ T5578] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1195.214130][ T5616] netlink: 'syz.8.7636': attribute type 2 has an invalid length. [ 1195.334893][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7638'. [ 1195.428902][T29031] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1195.491643][ T5626] loop7: detected capacity change from 0 to 512 [ 1195.512195][ T5626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1195.543826][ T5626] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1195.560762][ T5626] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.7641: iget: bad i_size value: 2533274857506816 [ 1195.570810][ T28] audit: type=1400 audit(1782511988.440:3271): avc: denied { write } for pid=5625 comm="syz.7.7641" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1195.598795][ T5636] netlink: 'syz.8.7637': attribute type 5 has an invalid length. [ 1195.727594][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7642'. [ 1195.775969][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.784504][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.818035][ T5645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7645'. [ 1196.039416][ T5652] netlink: 'syz.9.7647': attribute type 2 has an invalid length. [ 1196.585773][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.851327][ T5663] wireguard0: entered promiscuous mode [ 1196.866375][ T5663] wireguard0: entered allmulticast mode [ 1196.900517][ T5662] lo speed is unknown, defaulting to 1000 [ 1196.999653][ T5671] wireguard0: entered promiscuous mode [ 1197.006149][ T5671] wireguard0: entered allmulticast mode [ 1197.497468][ T5687] lo speed is unknown, defaulting to 1000 [ 1197.937317][ T5699] wireguard0: entered promiscuous mode [ 1197.942866][ T5699] wireguard0: entered allmulticast mode [ 1198.734673][ T5703] wireguard0: entered promiscuous mode [ 1198.745807][ T5703] wireguard0: entered allmulticast mode [ 1199.254904][ T5714] wireguard0: entered promiscuous mode [ 1199.265245][ T5714] wireguard0: entered allmulticast mode [ 1199.406532][ T5723] lo speed is unknown, defaulting to 1000 [ 1199.408010][ T5719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.465393][ T5719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.570455][ T5727] __nla_validate_parse: 1 callbacks suppressed [ 1199.570482][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7669'. [ 1199.769285][T32553] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1199.785798][T32553] hid-generic 0000:0000:0000.00B1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1199.788253][ T5731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7670'. [ 1199.822466][ T5733] loop7: detected capacity change from 0 to 512 [ 1199.872852][ T5733] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1199.906305][ T5733] EXT4-fs (loop7): 1 truncate cleaned up [ 1199.921037][ T5733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1199.965233][ T28] audit: type=1400 audit(1782511992.840:3272): avc: denied { write } for pid=5732 comm="syz.7.7671" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1200.013656][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7671'. [ 1200.036184][ T28] audit: type=1400 audit(1782511992.880:3273): avc: denied { write } for pid=5732 comm="syz.7.7671" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1200.100573][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.180189][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7674'. [ 1200.248672][ T5749] FAULT_INJECTION: forcing a failure. [ 1200.248672][ T5749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.269775][ T5752] netlink: 'syz.4.7674': attribute type 10 has an invalid length. [ 1200.289943][ T5752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7674'. [ 1200.315678][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: syz.7.7676 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1200.315707][ T5749] Tainted: [W]=WARN [ 1200.315713][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1200.315727][ T5749] Call Trace: [ 1200.315736][ T5749] [ 1200.315745][ T5749] __dump_stack+0x1d/0x30 [ 1200.315838][ T5749] dump_stack_lvl+0x95/0xd0 [ 1200.315876][ T5749] dump_stack+0x15/0x1b [ 1200.315900][ T5749] should_fail_ex+0x25e/0x270 [ 1200.315997][ T5749] should_fail+0xb/0x20 [ 1200.316023][ T5749] should_fail_usercopy+0x1a/0x20 [ 1200.316061][ T5749] _copy_from_iter+0xcc/0xe70 [ 1200.316113][ T5749] ? netlink_sendmsg+0x443/0x6f0 [ 1200.316169][ T5749] netlink_sendmsg+0x4a4/0x6f0 [ 1200.316207][ T5749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.316236][ T5749] ____sys_sendmsg+0x532/0x580 [ 1200.316337][ T5749] ___sys_sendmsg+0x195/0x1e0 [ 1200.316378][ T5749] __x64_sys_sendmsg+0xd4/0x160 [ 1200.316427][ T5749] x64_sys_call+0x194c/0x3020 [ 1200.316459][ T5749] do_syscall_64+0x136/0x3c0 [ 1200.316509][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.316535][ T5749] RIP: 0033:0x7fb8e7b1ce59 [ 1200.316561][ T5749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.316585][ T5749] RSP: 002b:00007fb8e6577028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.316651][ T5749] RAX: ffffffffffffffda RBX: 00007fb8e7d95fa0 RCX: 00007fb8e7b1ce59 [ 1200.316688][ T5749] RDX: 0000000020000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 1200.316701][ T5749] RBP: 00007fb8e6577090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.316718][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.316799][ T5749] R13: 00007fb8e7d96038 R14: 00007fb8e7d95fa0 R15: 00007ffc64719408 [ 1200.316837][ T5749] [ 1200.622070][ T5758] netlink: 'syz.7.7680': attribute type 2 has an invalid length. [ 1200.985631][ T5134] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1201.035849][ T5134] CPU: 0 UID: 0 PID: 5134 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1201.035891][ T5134] Tainted: [W]=WARN [ 1201.035900][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1201.035916][ T5134] Call Trace: [ 1201.035924][ T5134] [ 1201.035934][ T5134] __dump_stack+0x1d/0x30 [ 1201.036030][ T5134] dump_stack_lvl+0x95/0xd0 [ 1201.036058][ T5134] dump_stack+0x15/0x1b [ 1201.036081][ T5134] dump_header+0x80/0x240 [ 1201.036104][ T5134] oom_kill_process+0x295/0x350 [ 1201.036225][ T5134] out_of_memory+0x981/0xbc0 [ 1201.036268][ T5134] try_charge_memcg+0x621/0xa00 [ 1201.036323][ T5134] charge_memcg+0x6d/0x120 [ 1201.036358][ T5134] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 1201.036464][ T5134] swap_cache_alloc_folio+0x47b/0x5e0 [ 1201.036566][ T5134] swap_cluster_readahead+0x2b1/0x460 [ 1201.036609][ T5134] swapin_readahead+0xd8/0x8a0 [ 1201.036639][ T5134] ? tick_program_event+0x79/0xc0 [ 1201.036679][ T5134] ? _raw_spin_unlock+0x9/0x30 [ 1201.036780][ T5134] ? __rcu_read_unlock+0x4e/0x70 [ 1201.036804][ T5134] ? swap_cache_get_folio+0x1f7/0x200 [ 1201.036832][ T5134] do_swap_page+0x2a2/0x1ec0 [ 1201.036939][ T5134] ? __schedule+0x799/0xd10 [ 1201.036964][ T5134] ? __rcu_read_lock+0x36/0x50 [ 1201.036993][ T5134] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1201.037072][ T5134] handle_mm_fault+0xb3c/0x2da0 [ 1201.037118][ T5134] do_user_addr_fault+0x634/0x1060 [ 1201.037224][ T5134] ? trace_page_fault_user+0x1f/0xa0 [ 1201.037262][ T5134] exc_page_fault+0x62/0xa0 [ 1201.037291][ T5134] asm_exc_page_fault+0x26/0x30 [ 1201.037312][ T5134] RIP: 0033:0x7f1a6aae7fd7 [ 1201.037332][ T5134] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1201.037412][ T5134] RSP: 002b:00007ffd7ba62460 EFLAGS: 00010202 [ 1201.037428][ T5134] RAX: 0000000000000000 RBX: 000055558f0ae500 RCX: 00007f1a6aae7fd7 [ 1201.037441][ T5134] RDX: 00007ffd7ba624a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1201.037454][ T5134] RBP: 00007ffd7ba6250c R08: 0000000000000000 R09: 0000000000000000 [ 1201.037471][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1201.037488][ T5134] R13: 00000000000927c0 R14: 000000000012506f R15: 00007ffd7ba62560 [ 1201.037533][ T5134] [ 1201.037906][ T5764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7682'. [ 1201.042048][ T5134] memory: usage 307200kB, limit 307200kB, failcnt 11789 [ 1201.355562][ T5134] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 1201.368591][ T5134] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1201.383138][ T5134] Memory cgroup stats for /syz8: [ 1201.383407][ T5134] cache 0 [ 1201.409648][ T5134] rss 0 [ 1201.415645][ T5134] shmem 0 [ 1201.429024][ T5134] mapped_file 0 [ 1201.441505][ T5134] dirty 0 [ 1201.447734][ T5134] writeback 0 [ 1201.455678][ T5134] workingset_refault_anon 659 [ 1201.465648][ T5134] workingset_refault_file 0 [ 1201.473043][ T5134] swap 192512 [ 1201.483159][ T5134] swapcached 230940672 [ 1201.488845][ T5134] pgpgin 1201111 [ 1201.509407][ T5134] pgpgout 1201111 [ 1201.519099][ T5134] pgfault 1163675 [ 1201.525684][ T5134] pgmajfault 127 [ 1201.586708][ T5134] inactive_anon 0 [ 1201.591089][ T5134] active_anon 0 [ 1201.594608][ T5134] inactive_file 0 [ 1201.600950][ T5134] active_file 0 [ 1201.648423][ T5134] unevictable 0 [ 1201.657160][ T5134] hierarchical_memory_limit 314572800 [ 1201.668259][ T5134] hierarchical_memsw_limit 9223372036854771712 [ 1201.685558][ T5134] total_cache 0 [ 1201.694061][ T5134] total_rss 0 [ 1201.712714][ T5134] total_shmem 0 [ 1201.753446][ T5134] total_mapped_file 0 [ 1201.757617][ T5134] total_dirty 0 [ 1201.762733][ T5134] total_writeback 0 [ 1201.769736][ T5134] total_workingset_refault_anon 659 [ 1201.780801][ T5134] total_workingset_refault_file 0 [ 1201.791851][ T5134] total_swap 192512 [ 1201.800058][ T5134] total_swapcached 230940672 [ 1201.840628][ T5134] total_pgpgin 1201111 [ 1201.844889][ T5134] total_pgpgout 1201111 [ 1201.849133][ T5134] total_pgfault 1163675 [ 1201.853306][ T5134] total_pgmajfault 127 [ 1201.857387][ T5134] total_inactive_anon 0 [ 1201.861555][ T5134] total_active_anon 0 [ 1201.865551][ T5134] total_inactive_file 0 [ 1201.869722][ T5134] total_active_file 0 [ 1201.873712][ T5134] total_unevictable 0 [ 1201.905520][ T5134] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7675,pid=5742,uid=0 [ 1201.945782][ T5134] Memory cgroup out of memory: Killed process 5742 (syz.8.7675) total-vm:94096kB, anon-rss:1228kB, file-rss:22160kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1202.024944][ T5794] netlink: 388 bytes leftover after parsing attributes in process `syz.8.7693'. [ 1202.248863][ T5792] wireguard0: entered promiscuous mode [ 1202.254530][ T5792] wireguard0: entered allmulticast mode [ 1202.364774][ T5807] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7698'. [ 1202.513335][ T5807] netlink: 'syz.9.7698': attribute type 7 has an invalid length. [ 1202.567291][ T5816] xt_hashlimit: size too large, truncated to 1048576 [ 1202.589259][ T5817] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7698'. [ 1202.598814][ T5817] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7698'. [ 1202.622097][ T5819] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1202.847659][ T5831] loop7: detected capacity change from 0 to 1024 [ 1202.855258][ T5831] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 1203.227003][ T5852] netlink: 'syz.7.7718': attribute type 1 has an invalid length. [ 1203.244322][ T5852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1203.264105][ T5852] macvlan2: entered promiscuous mode [ 1203.269456][ T5852] macvlan2: entered allmulticast mode [ 1203.275865][ T5852] bond1: entered promiscuous mode [ 1203.281227][ T5852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1203.289481][ T5852] bond1: left promiscuous mode [ 1203.310440][ T5860] netlink: 'syz.4.7721': attribute type 7 has an invalid length. [ 1203.313342][ T5861] xt_hashlimit: size too large, truncated to 1048576 [ 1203.489355][ T5870] loop7: detected capacity change from 0 to 1024 [ 1203.572610][ T5870] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 1204.021931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1204.666666][ T5892] wireguard0: entered promiscuous mode [ 1204.682463][ T5892] wireguard0: entered allmulticast mode [ 1204.988501][ T5905] loop7: detected capacity change from 0 to 512 [ 1205.012031][ T5905] EXT4-fs: Ignoring removed bh option [ 1205.090119][ T5905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.111619][ T5913] syzkaller1: entered promiscuous mode [ 1205.128254][ T5913] syzkaller1: entered allmulticast mode [ 1205.146346][ T5905] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1205.202994][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.239916][ T5919] __nla_validate_parse: 8 callbacks suppressed [ 1205.239934][ T5919] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7735'. [ 1205.473195][ T5923] netlink: 'syz.4.7738': attribute type 16 has an invalid length. [ 1205.507087][ T5923] netlink: 'syz.4.7738': attribute type 17 has an invalid length. [ 1205.539926][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.800439][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.497331][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.510932][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.182213][ T5935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7741'. [ 1208.228420][ T5939] netlink: 'syz.4.7741': attribute type 2 has an invalid length. [ 1208.245150][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7743'. [ 1208.299595][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7747'. [ 1208.349377][ T5953] wireguard0: entered promiscuous mode [ 1208.354911][ T5953] wireguard0: entered allmulticast mode [ 1208.437546][ T5520] IPVS: starting estimator thread 0... [ 1208.455102][ T5950] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1208.526674][ T5958] IPVS: using max 2256 ests per chain, 112800 per kthread [ 1209.075697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1210.115677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1211.155812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1211.377052][ T5975] netlink: 'syz.4.7756': attribute type 9 has an invalid length. [ 1211.618681][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7757'. [ 1211.630857][ T5982] netlink: 'syz.8.7757': attribute type 2 has an invalid length. [ 1211.748915][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7758'. [ 1211.840759][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7761'. [ 1211.870736][ T5996] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7762'. [ 1211.896736][ T5996] netlink: 'syz.9.7762': attribute type 2 has an invalid length. [ 1211.940773][ T5998] rdma_rxe: rxe_newlink: failed to add lo [ 1211.949891][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.958931][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.996146][ T6000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7764'. [ 1212.024958][ T6000] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7764'. [ 1212.164918][ T6005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6005 comm=syz.0.7766 [ 1212.257526][ T6008] wireguard0: entered promiscuous mode [ 1212.264703][ T6008] wireguard0: entered allmulticast mode [ 1212.458540][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7767'. [ 1212.937482][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7768'. [ 1212.963042][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7769'. [ 1212.973535][ T6016] netlink: 'syz.4.7769': attribute type 2 has an invalid length. [ 1213.064494][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7771'. [ 1214.349788][ T5972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1214.414028][ T6036] netlink: 'syz.0.7776': attribute type 7 has an invalid length. [ 1214.469760][ T6038] loop7: detected capacity change from 0 to 512 [ 1214.478427][ T6038] EXT4-fs: Mount option(s) incompatible with ext2 [ 1214.498128][ T28] audit: type=1400 audit(1782512007.370:3274): avc: denied { append } for pid=6037 comm="syz.7.7777" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1214.590968][ T6045] netlink: 'syz.8.7780': attribute type 2 has an invalid length. [ 1214.689800][ T6054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1214.697241][ T6054] IPv6: NLM_F_CREATE should be set when creating new route [ 1214.726868][ T6054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1214.964079][ T6067] lo speed is unknown, defaulting to 1000 [ 1215.244623][ T6087] netlink: 'syz.8.7795': attribute type 2 has an invalid length. [ 1215.332055][ T6089] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1215.361241][ T6085] lo speed is unknown, defaulting to 1000 [ 1215.814634][ T6112] netlink: 'syz.8.7806': attribute type 2 has an invalid length. [ 1215.915813][ T6117] rdma_rxe: rxe_newlink: failed to add lo [ 1215.925821][ T6117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.935086][ T6117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.460375][ T6125] netlink: 'syz.4.7809': attribute type 10 has an invalid length. [ 1217.267020][ T6127] __nla_validate_parse: 21 callbacks suppressed [ 1217.267034][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7810'. [ 1217.723351][ T6059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1218.018483][ T6145] loop7: detected capacity change from 0 to 1024 [ 1218.025355][ T6145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1218.049478][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1218.058907][ T6154] netlink: 'syz.4.7818': attribute type 2 has an invalid length. [ 1218.175745][ T6145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.188007][ T6145] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.198660][ T6156] wireguard0: entered promiscuous mode [ 1218.204248][ T6156] wireguard0: entered allmulticast mode [ 1218.223105][T29031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1218.260733][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7821'. [ 1218.379212][ T6167] wireguard0: entered promiscuous mode [ 1218.385359][ T6167] wireguard0: entered allmulticast mode [ 1218.445302][ T6171] netlink: 'syz.8.7824': attribute type 1 has an invalid length. [ 1218.622048][ T6184] bond1: option ad_actor_sys_prio: invalid value (0) [ 1218.628938][ T6184] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1218.637620][ T6184] bond1 (unregistering): Released all slaves [ 1218.668941][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7829'. [ 1218.695055][ T6186] syzkaller1: entered promiscuous mode [ 1218.700631][ T6186] syzkaller1: entered allmulticast mode [ 1218.714068][ T6192] Invalid argument reading file caps for ./file0 [ 1218.717496][ T28] audit: type=1400 audit(1782512011.590:3275): avc: denied { execute_no_trans } for pid=6191 comm="syz.7.7831" path="/552/file0" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1218.745522][ T6188] netlink: 'syz.0.7829': attribute type 2 has an invalid length. [ 1218.873564][ T6199] wireguard0: entered promiscuous mode [ 1218.879234][ T6199] wireguard0: entered allmulticast mode [ 1218.934832][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7834'. [ 1218.988953][ T6204] wireguard0: entered promiscuous mode [ 1218.994682][ T6204] wireguard0: entered allmulticast mode [ 1219.570300][ T6213] loop7: detected capacity change from 0 to 1024 [ 1219.581704][ T6213] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 1220.176429][ T6229] vhci_hcd vhci_hcd.1: invalid port number 254 [ 1220.182785][ T6229] vhci_hcd vhci_hcd.1: default hub control req: a317 v0004 i00fe l0 [ 1220.816885][ T6238] netlink: 'syz.0.7844': attribute type 2 has an invalid length. [ 1220.847682][ T6240] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1220.847682][ T6240] program syz.0.7845 not setting count and/or reply_len properly [ 1220.903620][ T6242] wireguard0: entered promiscuous mode [ 1220.909470][ T6242] wireguard0: entered allmulticast mode [ 1221.223017][ T6245] lo speed is unknown, defaulting to 1000 [ 1221.414260][ T6173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1221.510750][ T6252] rdma_rxe: rxe_newlink: failed to add lo [ 1221.522581][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.531703][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.549771][ T6251] loop7: detected capacity change from 0 to 128 [ 1221.621246][ T6251] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1221.637971][ T6251] ext4 filesystem being mounted at /556/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.758754][T29031] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1221.836797][ T6268] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1221.836797][ T6268] program syz.7.7856 not setting count and/or reply_len properly [ 1221.859188][ T6266] netlink: 'syz.4.7855': attribute type 2 has an invalid length. [ 1222.202718][ T28] audit: type=1400 audit(1782512015.070:3276): avc: denied { read } for pid=6274 comm="syz.4.7859" lport=47274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1223.001490][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7868'. [ 1223.104844][ T6315] netlink: 'syz.4.7868': attribute type 10 has an invalid length. [ 1223.112752][ T6315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7868'. [ 1223.135886][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7869'. [ 1223.146930][ T6317] netlink: 'syz.8.7869': attribute type 2 has an invalid length. [ 1223.260993][ T6321] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1223.260993][ T6321] program syz.8.7871 not setting count and/or reply_len properly [ 1223.295349][ T6323] FAULT_INJECTION: forcing a failure. [ 1223.295349][ T6323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.308710][ T6323] CPU: 1 UID: 0 PID: 6323 Comm: syz.8.7872 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1223.308751][ T6323] Tainted: [W]=WARN [ 1223.308758][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1223.308770][ T6323] Call Trace: [ 1223.308863][ T6323] [ 1223.308873][ T6323] __dump_stack+0x1d/0x30 [ 1223.308957][ T6323] dump_stack_lvl+0x95/0xd0 [ 1223.308975][ T6323] dump_stack+0x15/0x1b [ 1223.308992][ T6323] should_fail_ex+0x25e/0x270 [ 1223.309036][ T6323] should_fail+0xb/0x20 [ 1223.309057][ T6323] should_fail_usercopy+0x1a/0x20 [ 1223.309083][ T6323] _copy_from_user+0x1c/0xb0 [ 1223.309140][ T6323] __sys_bpf+0x1e2/0xc30 [ 1223.309167][ T6323] ? get_pid_task+0x92/0xc0 [ 1223.309185][ T6323] ? vfs_write+0x7a0/0x990 [ 1223.309287][ T6323] __x64_sys_bpf+0x69/0x80 [ 1223.309349][ T6323] x64_sys_call+0x10cb/0x3020 [ 1223.309371][ T6323] do_syscall_64+0x136/0x3c0 [ 1223.309408][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.309455][ T6323] RIP: 0033:0x7f1a6ab2ce59 [ 1223.309468][ T6323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.309483][ T6323] RSP: 002b:00007f1a69587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1223.309500][ T6323] RAX: ffffffffffffffda RBX: 00007f1a6ada5fa0 RCX: 00007f1a6ab2ce59 [ 1223.309513][ T6323] RDX: 0000000000000094 RSI: 00002000000018c0 RDI: 0000000000000005 [ 1223.309525][ T6323] RBP: 00007f1a69587090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.309536][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.309547][ T6323] R13: 00007f1a6ada6038 R14: 00007f1a6ada5fa0 R15: 00007ffd7ba62168 [ 1223.309565][ T6323] [ 1223.561027][ T6327] wireguard0: entered promiscuous mode [ 1223.566828][ T6327] wireguard0: entered allmulticast mode [ 1224.686638][ T6337] lo speed is unknown, defaulting to 1000 [ 1224.705260][ T4638] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.727024][ T4638] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.795759][ T4638] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.806426][ T4638] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.873502][ T4638] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.884131][ T4638] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.909059][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.916852][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.924069][ T6337] bridge_slave_0: entered allmulticast mode [ 1224.930858][ T6337] bridge_slave_0: entered promiscuous mode [ 1224.938454][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.946200][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.953474][ T6337] bridge_slave_1: entered allmulticast mode [ 1224.959576][ T6280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1225.015236][ T6337] bridge_slave_1: entered promiscuous mode [ 1225.054155][ T6355] sz1: rxe_newlink: already configured on lo [ 1225.063763][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.072538][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.103229][ T4638] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.117760][ T4638] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.154079][ T6337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.164995][ T6337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.203954][ T6337] team0: Port device team_slave_0 added [ 1225.213903][ T6337] team0: Port device team_slave_1 added [ 1225.258355][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.266270][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.292514][ T6337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.304677][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.311869][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.339219][ T6337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.395529][ T4638] bridge_slave_1: left allmulticast mode [ 1225.413819][ T4638] bridge_slave_1: left promiscuous mode [ 1225.431227][ T6366] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1225.431227][ T6366] program syz.4.7882 not setting count and/or reply_len properly [ 1225.451394][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.472511][ T4638] bridge_slave_0: left allmulticast mode [ 1225.478476][ T4638] bridge_slave_0: left promiscuous mode [ 1225.489375][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.606725][ T28] audit: type=1400 audit(1782512018.490:3277): avc: denied { write } for pid=6369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1225.637280][ T6386] 9p: Bad value for 'rfdno' [ 1225.640925][ T28] audit: type=1400 audit(1782512018.520:3278): avc: denied { write } for pid=6372 comm="syz.4.7884" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1225.672211][ T4638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.702238][ T28] audit: type=1400 audit(1782512018.570:3279): avc: denied { write } for pid=6387 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1225.725978][ T4638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.734944][ T28] audit: type=1400 audit(1782512018.580:3280): avc: denied { bind } for pid=6372 comm="syz.4.7884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1225.767015][ T4638] bond0 (unregistering): Released all slaves [ 1225.821173][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1225.842924][ T6337] hsr_slave_0: entered promiscuous mode [ 1225.860262][ T6337] hsr_slave_1: entered promiscuous mode [ 1225.871529][ T6337] debugfs: 'hsr0' already exists in 'hsr' [ 1225.891392][ T6337] Cannot create hsr debugfs directory [ 1225.945738][ T6391] FAULT_INJECTION: forcing a failure. [ 1225.945738][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.958468][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.7.7885 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1225.958510][ T6391] Tainted: [W]=WARN [ 1225.958519][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1225.958536][ T6391] Call Trace: [ 1225.958543][ T6391] [ 1225.958595][ T6391] __dump_stack+0x1d/0x30 [ 1225.958624][ T6391] dump_stack_lvl+0x95/0xd0 [ 1225.958644][ T6391] dump_stack+0x15/0x1b [ 1225.958701][ T6391] should_fail_ex+0x25e/0x270 [ 1225.958738][ T6391] should_failslab+0x8c/0xb0 [ 1225.958761][ T6391] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 1225.958783][ T6391] ? do_getname+0x2e/0x1c0 [ 1225.958860][ T6391] ? do_getname+0x2e/0x1c0 [ 1225.958887][ T6391] ? vfs_write+0x848/0x990 [ 1225.958939][ T6391] do_getname+0x2e/0x1c0 [ 1225.958964][ T6391] getname_flags+0x1d/0x30 [ 1225.958995][ T6391] do_sys_openat2+0x6c/0x130 [ 1225.959053][ T6391] __x64_sys_openat+0xf2/0x120 [ 1225.959183][ T6391] x64_sys_call+0x1e39/0x3020 [ 1225.959215][ T6391] do_syscall_64+0x136/0x3c0 [ 1225.959260][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.959283][ T6391] RIP: 0033:0x7fb8e7add68e [ 1225.959308][ T6391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1225.959328][ T6391] RSP: 002b:00007fb8e6576f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1225.959351][ T6391] RAX: ffffffffffffffda RBX: 00007fb8e65776c0 RCX: 00007fb8e7add68e [ 1225.959371][ T6391] RDX: 0000000000000000 RSI: 00007fb8e7bb25aa RDI: ffffffffffffff9c [ 1225.959387][ T6391] RBP: 00007fb8e6577090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.959403][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.959479][ T6391] R13: 00007fb8e7d96038 R14: 00007fb8e7d95fa0 R15: 00007ffc64719408 [ 1225.959504][ T6391] [ 1226.252661][ T4638] hsr_slave_0: left promiscuous mode [ 1226.278062][ T4638] hsr_slave_1: left promiscuous mode [ 1226.291126][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.308591][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.315804][ T6399] loop7: detected capacity change from 0 to 128 [ 1226.316049][ T4638] ================================================================== [ 1226.330185][ T4638] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1226.337263][ T4638] [ 1226.339609][ T4638] write to 0xffffffff86cdb2f0 of 88 bytes by task 6399 on cpu 1: [ 1226.347355][ T4638] prb_reserve+0x6fb/0xaf0 [ 1226.351821][ T4638] vprintk_store+0x54a/0x910 [ 1226.356443][ T4638] vprintk_emit+0x1a4/0x600 [ 1226.361052][ T4638] vprintk_default+0x26/0x30 [ 1226.365690][ T4638] vprintk+0x1d/0x30 [ 1226.369624][ T4638] _printk+0x79/0xa0 [ 1226.373999][ T4638] set_capacity_and_notify+0x1d5/0x230 [ 1226.379519][ T4638] loop_set_size+0x2e/0x70 [ 1226.384043][ T4638] loop_configure+0x826/0x9c0 [ 1226.388748][ T4638] lo_ioctl+0x1e1/0x1390 [ 1226.393008][ T4638] blkdev_ioctl+0x387/0x460 [ 1226.397556][ T4638] __se_sys_ioctl+0xce/0x140 [ 1226.402165][ T4638] __x64_sys_ioctl+0x43/0x50 [ 1226.406796][ T4638] x64_sys_call+0x1563/0x3020 [ 1226.411548][ T4638] do_syscall_64+0x136/0x3c0 [ 1226.416174][ T4638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.422084][ T4638] [ 1226.424426][ T4638] read to 0xffffffff86cdb2f0 of 8 bytes by task 4638 on cpu 0: [ 1226.431979][ T4638] _prb_read_valid+0x18c/0x930 [ 1226.436762][ T4638] prb_read_valid+0x3c/0x60 [ 1226.441289][ T4638] console_unlock+0x146/0x280 [ 1226.445983][ T4638] vprintk_emit+0x3e4/0x600 [ 1226.450508][ T4638] vprintk_default+0x26/0x30 [ 1226.455118][ T4638] vprintk+0x1d/0x30 [ 1226.459032][ T4638] _printk+0x79/0xa0 [ 1226.462985][ T4638] batadv_hardif_disable_interface+0x195/0xa10 [ 1226.469163][ T4638] batadv_meshif_destroy_netlink+0x4b/0x1a0 [ 1226.475087][ T4638] default_device_exit_batch+0x44d/0x630 [ 1226.480739][ T4638] ops_undo_list+0x2ca/0x420 [ 1226.485347][ T4638] cleanup_net+0x37c/0x5b0 [ 1226.489785][ T4638] process_scheduled_works+0x4d4/0x9a0 [ 1226.495263][ T4638] worker_thread+0x569/0x750 [ 1226.499872][ T4638] kthread+0x221/0x270 [ 1226.503952][ T4638] ret_from_fork+0x146/0x330 [ 1226.508566][ T4638] ret_from_fork_asm+0x1a/0x30 [ 1226.513347][ T4638] [ 1226.515690][ T4638] value changed: 0x0000000000002ce4 -> 0x0000000000004ce4 [ 1226.522804][ T4638] [ 1226.525140][ T4638] Reported by Kernel Concurrency Sanitizer on: [ 1226.531301][ T4638] CPU: 0 UID: 0 PID: 4638 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1226.542427][ T4638] Tainted: [W]=WARN [ 1226.546262][ T4638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1226.556338][ T4638] Workqueue: netns cleanup_net [ 1226.561119][ T4638] ================================================================== [ 1226.586019][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.598061][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.619366][ T4638] veth1_macvtap: left promiscuous mode [ 1226.624997][ T4638] veth0_macvtap: left promiscuous mode [ 1226.681395][ T28] audit: type=1400 audit(1782512019.550:3281): avc: denied { write } for pid=6393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1226.743446][ T6399] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1226.757546][ T28] audit: type=1400 audit(1782512019.620:3282): avc: denied { write } for pid=6413 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1226.789901][ T6399] ext4 filesystem being mounted at /562/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.811491][ T4638] team0 (unregistering): Port device team_slave_1 removed [ 1226.821970][ T4638] team0 (unregistering): Port device team_slave_0 removed [ 1226.848928][T29031] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1226.883533][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1226.993245][ T28] audit: type=1400 audit(1782512019.870:3283): avc: denied { write } for pid=6417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.029031][ T28] audit: type=1400 audit(1782512019.910:3284): avc: denied { write } for pid=6428 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.163627][ T28] audit: type=1400 audit(1782512020.040:3285): avc: denied { write } for pid=6432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.213319][ T28] audit: type=1400 audit(1782512020.080:3286): avc: denied { write } for pid=6443 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.298203][ T28] audit: type=1400 audit(1782512020.180:3287): avc: denied { write } for pid=6445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.334944][ T28] audit: type=1400 audit(1782512020.210:3288): avc: denied { write } for pid=6456 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.417951][ T6337] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1227.427113][ T6337] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1227.435099][ T6337] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1227.445058][ T6337] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1227.453065][ T6337] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1227.462357][ T6337] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1227.470526][ T6337] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1227.482220][ T28] audit: type=1400 audit(1782512020.360:3289): avc: denied { write } for pid=6459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.505967][ T6337] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1227.521051][ T28] audit: type=1400 audit(1782512020.400:3290): avc: denied { write } for pid=6470 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.577804][ T6337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.596515][ T6337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.606804][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.613905][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.626936][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.634129][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.645097][ T28] audit: type=1400 audit(1782512020.520:3291): avc: denied { write } for pid=6478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.690126][ T28] audit: type=1400 audit(1782512020.570:3292): avc: denied { write } for pid=6489 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.811743][ T28] audit: type=1400 audit(1782512020.690:3293): avc: denied { write } for pid=6494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.820251][ T6337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.867170][ T28] audit: type=1400 audit(1782512020.750:3294): avc: denied { write } for pid=6514 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.988803][ T6337] veth0_vlan: entered promiscuous mode [ 1227.997909][ T6337] veth1_vlan: entered promiscuous mode [ 1228.015413][ T6337] veth0_macvtap: entered promiscuous mode [ 1228.023516][ T6337] veth1_macvtap: entered promiscuous mode [ 1228.036818][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.050997][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.065106][ T8462] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.074363][ T8462] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.086226][ T8462] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.095205][ T8462] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0