last executing test programs: 5m4.891322149s ago: executing program 32 (id=2386): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x48, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, r0, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f00000000c0), &(0x7f0000000000)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) close_range(r2, r3, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0xc004) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="3b839a75"]) 3m32.163267348s ago: executing program 33 (id=3665): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008040) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000000100)={0x77359400}) r3 = socket(0x10, 0x2, 0x0) connect$phonet_pipe(r3, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x99}, 0x10) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) write(r3, &(0x7f0000000000)="240000001e005f8000400000000000000a000000000000000000080008000100000000ff", 0x24) 3m26.840814856s ago: executing program 34 (id=3725): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r1 = socket$kcm(0x11, 0xefb282dea6011576, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000680)='so\x7frce\x02\x97\x15', &(0x7f0000000300)='127.0.0.1:/export\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) acct(&(0x7f0000000100)='./file1\x00') fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=@newtaction={0x18, 0x30, 0x800, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x1) r4 = socket(0x10, 0x1, 0x0) read(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='ntp\a\x0f\x8cS\x00\x00\x00\x00', &(0x7f0000000200)='udp\x10', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 2m28.602926483s ago: executing program 35 (id=4527): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xb}, 0x1400, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x38, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) mkdir(0x0, 0x44) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xe}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) keyctl$link(0x8, r4, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76eab85a570d82f1b6ca4c2043000000000000000000", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xfffffffffffffeb0) socket$packet(0x11, 0x3, 0x300) 2m13.496849647s ago: executing program 36 (id=4767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x80, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0xffffff81, 0x0, 0x4004840}, 0x40000) 2m10.48912959s ago: executing program 6 (id=4805): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) bind$can_raw(r0, &(0x7f0000000080), 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x8, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x4040814) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20625}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @initdev}, &(0x7f0000000140)=0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) 2m10.430281621s ago: executing program 6 (id=4807): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000007, 0x180010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4044050}, 0x20048090) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 2m10.279213645s ago: executing program 6 (id=4810): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000290007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 2m10.226881466s ago: executing program 6 (id=4812): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x5fcd794855e11cda, 0x0) getdents(r1, &(0x7f0000000100)=""/70, 0x46) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x4, 0x0, 0x80000000}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1210888, &(0x7f00000005c0)=ANY=[], 0x4a, 0x2e4, &(0x7f0000000340)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045740030ffff000000019078ac1e0001ff1414aa0b01907803000000450000d4006800080304000000000000ac1414bb"], 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000009c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = socket$inet(0x2, 0x80001, 0x84) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x71d7, 0x16, 0x0, 0x0) 2m10.07572379s ago: executing program 6 (id=4813): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x8004, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xa2fab000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x10ec48, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r4) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m9.503593774s ago: executing program 6 (id=4822): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x100) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 2m9.503311594s ago: executing program 37 (id=4822): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x100) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 1m24.123341499s ago: executing program 9 (id=5408): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x382, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f00000002c0)) syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4072, &(0x7f0000000400)="$eJzszz1KK2EUBuA3yZ3rKIEgaCWIwcJOxs5qdpFesgYrCxVnJ5biAtyHe7DUJYwMMtFBLQNBnqc4nPO9fH9hs731TblaGiV5Wj7uJjmap6mqj/Bfn29/7q7OUuyU40yTXH4/fPGw1rcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbZutLPx4kN0ma56uTfi678r8ry4M013XOp0m5P0vuJinqw1H2kvnpD3dMkpckoySvSRaz9X0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhLLobj7XAc/xZ07o/T1MUqbdv2nd05JgAABoEY+GMN1iQmwQLsdwaSXmdf8uv6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDmQAAAAAhPlb59F+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmwIAAP//k10WsQ==") r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x24, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) dup(r2) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x80c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r5, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="10000000020000000902000007dd3d007f00000002000000"], &(0x7f00000002c0), 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(r6, 0xa, 0x12) dup2(r6, r7) fcntl$setown(r7, 0x8, r4) 1m23.164611602s ago: executing program 9 (id=5417): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800010070"], 0x40}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000000000007af791950000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4010004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000050) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x4, 0x9, 0xa, 0x3, 0x0, 0x2, 0x600, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x80000001, 0x6}, 0xea, 0x5, 0x6, 0x1, 0x8, 0xb2, 0xfffc, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x1) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m22.00690634s ago: executing program 9 (id=5427): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d6, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0/file0\x00', 0x242, 0x1ff) ftruncate(r0, 0x1000) write(r0, &(0x7f0000000900)='hello world\x00', 0xc) lseek(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) read(r0, &(0x7f0000000000), 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = memfd_secret(0x0) ftruncate(r3, 0x51a9497) finit_module(r3, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='0123:ebcd4', 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000020000b7050000080000001c00000000004000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000044) 1m21.877390644s ago: executing program 9 (id=5428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3000000000000000010000000c"], 0x30}, 0x4000010) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000026c0)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES8, @ANYRES64, @ANYBLOB="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", @ANYBLOB="bc2ed72ea1d9a8a47c98b7d3e9d2fce7400aec1e2ff767e0be6717d58ef590876280427f86028425d1c779fc10c1a67c439c9b3d1cfdb03de8d7dfb13d22e7522b9afdd919a026545afedcd67f51e2fc1b04203c997fd7499521a5002afbd8360a8c10", @ANYRES32, @ANYRES16=0x0], 0x1, 0x1f7, &(0x7f00000002c0)="$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") r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000140)='./file2\x00', 0x92000375) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x189800, 0x131) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x40047211, &(0x7f0000000100)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000400000008500000017000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x100000f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRESHEX, @ANYRES8=r8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r11, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)=r10}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r12, &(0x7f0000000340), 0x0}, 0x20) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r13, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r14 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r14, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r14, 0x80e85411, 0x0) 1m21.519408372s ago: executing program 9 (id=5430): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r2, 0x540a, 0x0) (async) ioctl$TCXONC(r2, 0x540a, 0x2) (async) ppoll(&(0x7f00000000c0)=[{r2, 0x4}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0xc343}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206010800000000000000000500000005000100070000000900020073797a30000000000ce06b8008001240fffffffe050004000000000011000300686173683a6e65744f6e657400000000050001000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) (async) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x22e9, 0x4) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r4, 0x1, 0x6, &(0x7f0000000080)=""/158, &(0x7f00000001c0)=0x9e) (async) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200402, 0x0) getsockname(r5, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80) 1m21.490764033s ago: executing program 9 (id=5433): sendto$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xc5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ec, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xc0, 0x0, 0x8, 0x201, 0x0, 0x0, {0xc4e393829c402e63, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffeff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf967}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x43}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000184}, 0x4048805) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) 1m21.488909683s ago: executing program 38 (id=5433): sendto$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xc5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ec, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xc0, 0x0, 0x8, 0x201, 0x0, 0x0, {0xc4e393829c402e63, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffeff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf967}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x43}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000184}, 0x4048805) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) 1m5.590940657s ago: executing program 1 (id=5625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0xfff5, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x24000840) 1m5.566997737s ago: executing program 1 (id=5627): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000200000711029000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0x7, &(0x7f0000000200)={0x8, 0x18}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) 1m5.497815699s ago: executing program 1 (id=5629): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) (async) r1 = socket(0xa, 0x1, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES32], 0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 1m5.323652613s ago: executing program 1 (id=5631): syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7800, 0x8028, 0xe, 0x7, {{0x3b, 0x4, 0x0, 0x23, 0xec, 0x68, 0x0, 0xe3, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@noop, @cipso={0x86, 0x57, 0x0, [{0x5, 0x7, "382d9d98f9"}, {0x6, 0xe, "a7ee645d0931d8e32d70eed6"}, {0x5, 0xd, "166d6a65f94f7d488ffc01"}, {0x0, 0x11, "25b994bb83cef9f9e3559ea4f74f7e"}, {0x5, 0x8, "d620d2cbca44"}, {0x0, 0xd, "c7d451168d11f8d2d03ff4"}, {0xff26e8fedb9deeed, 0x9, "4045ec5985f4f8"}]}, @lsrr={0x83, 0x17, 0xdc, [@multicast1, @remote, @multicast1, @rand_addr=0x64010102, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0xe7, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x6}, {@broadcast, 0x7464}, {@multicast1, 0x79}, {@local, 0x2}, {@remote, 0x1}, {@private=0xa010100, 0xf6}]}, @timestamp={0x44, 0x1c, 0x11, 0x0, 0x6, [0x400, 0x4804, 0x5, 0x2, 0x4a, 0x3]}, @rr={0x7, 0x13, 0xfc, [@empty, @remote, @empty, @private=0x7ff]}, @ra={0x94, 0x4}]}}}}}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000500)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x10) process_mrelease(r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8480, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") remap_file_pages(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, 0x7ad0, 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100003"], 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 1m5.231128426s ago: executing program 1 (id=5635): mmap$IORING_OFF_SQES(0x0, 0x11000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0xffff, {{0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}, 0x88) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000002fc0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) 1m2.245272287s ago: executing program 1 (id=5637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001"], 0x34}}, 0x4040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80400, 0x0) ioctl$TIOCEXCL(r2, 0x540c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r4, 0x0) r5 = msgget$private(0x0, 0x42) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x40000000080004, 0x10, 0x3, 0x5, 0x472a, 0x0, 0x3}) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x24c, 0xffffffff, 0x8009}, 0x10) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe02000000020000", 0x1c) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffb, 0x80000}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m2.164000519s ago: executing program 39 (id=5637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001"], 0x34}}, 0x4040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80400, 0x0) ioctl$TIOCEXCL(r2, 0x540c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r4, 0x0) r5 = msgget$private(0x0, 0x42) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x40000000080004, 0x10, 0x3, 0x5, 0x472a, 0x0, 0x3}) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x24c, 0xffffffff, 0x8009}, 0x10) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe02000000020000", 0x1c) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffb, 0x80000}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 51.439133328s ago: executing program 3 (id=5817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000eb810908883ba40e5429d00533c0d586e485e2901879e73c0ae5f3943ac7cfe4f7c8fbfdad43c2dde288705c4212c884849258cf529ef07f249805facaae56e520cec167462f9119f34fea927740b7c3e9e3680344c878918e7e27582cc6cf21349e2efbd634e9cb1d70d24715f39f398b3c44628451055e01d6d78ad6f580906e550abb1f", @ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x844) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x40, 0x0, 0x20000000, 0x3, 0x4, 0x1b9, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffd}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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") syz_open_procfs(r1, &(0x7f0000000080)='task\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r7, 0x10c, 0x2, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 48.368006872s ago: executing program 3 (id=5829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r1 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, r3, 0x2) fcntl$getown(r3, 0x9) r4 = dup3(r2, r3, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4009a040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4011) sendfile(r4, r4, &(0x7f0000000480)=0x8, 0x2ca8) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}, @TCA_NETEM_DELAY_DIST={0xd, 0x2, "ce2b7239806574fd65"}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl0\x00', r9, 0x4, 0x46, 0x5f, 0x81, 0x47, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x10, 0x200, 0x3}}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x50, r5, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44f}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x80}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040811}, 0x801) bind$inet(r1, 0x0, 0x0) r10 = socket(0x15, 0x5, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) bind$inet(r11, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000000140)=""/6, &(0x7f0000000000)=0x6) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r12, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202005000300000028000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) getsockopt$MRT6(r10, 0x29, 0xcf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 47.518525863s ago: executing program 3 (id=5835): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x3f) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000fd390007012cbd7000fedbdf25037c00000c00018008000100185d5ca0830df44dd8b1f177a09bb6d474c4da89e2976b3812ebfc5448e16d244e3e75ee91825a7b128994a213f3c016242841dc3bed5b6248a5b82e5cdec8019b899656af803904a9094f72accf24853f647fe730b7fd2f3bfa575a4fecddfd8c0483fdef405a4cdbe2ebfddd5ee2a85ed52f2dd880419a96b0e0cc39a8f46a860675d89574aee183ceb3ec499ef9eb8416dc3b1bf3461cd511f9be3a331251292e7af6f60e63b22baa4c66b2d146b64956a329f8fbfcb53f2b581c7cbaebd39abcfd09b0910e9d4b148e6f8e0f797a9237", @ANYRES32=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'bond_slave_0\x00', {0x2}, 0x8000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, r7, 0x115, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xa14145407ea3b112) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x86000801}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close(r9) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000330a9dc406b4aedcb2cc495e6c45d0d096192377c31baf759fb772ff4388f715bf9f278e97913073f05dd7e185af506418f3a63c0aa7dad8dc91b88b921b456d5ce810a0aadb0cfa8d6e1697e8546e0acf73ebc2b77e23c544058fd80c6727f6c7afaba27a75ffef00530005293f575ea44a8adb5dd51970f040ee7501ff54940272d87ff8c61d25143e807892e0ac7c07269f97908789eb3ae27aa6c41fe2c0fb3c4c376fe8c3bff5e104d11a0c6d3b079f402177180e3533120436618ce1dcbc", @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf250f0000000800050004000000080004000000000008000500ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x240400d0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r10, &(0x7f0000000100)='autogroup\x00') ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000023c0)={0x0, 'wlan1\x00', {0x1}, 0x5}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000100001000000000000000000ac141400000000000000000000000000fc0200000000000000000000000000000c000000000000000200000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c617465"], 0x138}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x76, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x10000}, &(0x7f0000000280)=0xfccc) 43.782174964s ago: executing program 3 (id=5851): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) keyctl$set_timeout(0xf, r4, 0x101fffffe) write$binfmt_elf64(r0, &(0x7f00000013c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x7, 0x5, 0x2, 0x6f60da2f, 0x2, 0x3e, 0x4, 0x1a1, 0x40, 0x244, 0x67cd, 0xe1f1, 0x38, 0x1, 0xffff, 0x10, 0x6}, [{0x4, 0x7f, 0x6, 0x1, 0x9126, 0x25b, 0x9, 0x3}], "", ['\x00', '\x00']}, 0x278) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='0 \n\x00', 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r7], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) lseek(r0, 0x1ff, 0x3) 42.499594575s ago: executing program 3 (id=5857): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000540001002abd700002000000070086dd", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="5e160f87a9"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080d0) 41.263217044s ago: executing program 3 (id=5866): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0x7, &(0x7f0000000200)={0x8, 0x18}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) 41.262857974s ago: executing program 40 (id=5866): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0x7, &(0x7f0000000200)={0x8, 0x18}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) 21.367085894s ago: executing program 4 (id=6238): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000100)=0x7fff, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x14c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffe00, 0x5, 0x3, 0x18, 0x1, 0x15, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "f6eb204502df6c859036ad76f54baefc82a2287e7621ba34d3bd39d874a892c7e428fd28bea2e237cd8baa6d7e8d2a9f1cfcdabff22832b6c877a3879f23cd02c111eee9e61b4992eb6541ad8b90dc83e9013bfd9287123199db3c90f03cedfc8a0e213663cb7f5d208d27f923854c814b36ae41a1f2e448b5c91f79e4d2ac870a036ca35232782ba88c89e06533164f1fec0badc68a8610793819d925f0f30a1169eb4a5a3d24a33021d33b8cb7223a08ebfa032d92763c5b2c20bee897d2b37917b739ac3c29a6dc3be73de7fe22d62189a98307052392ee5d363731089bc9d46727f9be041ec59528ddb1248f264894bd79061c7d65ea2f1f1f193bfdb43a"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) writev(r2, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x7fffffff, 0x0, 0x698f}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r7, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xc11, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 20.446807496s ago: executing program 4 (id=6240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000200000711029000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0x7, &(0x7f0000000200)={0x8, 0x18}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000005c0), &(0x7f0000000600)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xa6, 0x7, 0x2b, 0xe, 0x0, 0x8, 0x20a00, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7877, 0x1, @perf_config_ext={0x2, 0x8000}, 0x108822, 0x12495d3b, 0x7fff, 0x6, 0x3ff, 0x4, 0x1, 0x0, 0x1, 0x0, 0xe}, r3, 0xd, r2, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 20.358761079s ago: executing program 4 (id=6243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000eb810908883ba40e5429d00533c0d586e485e2901879e73c0ae5f3943ac7cfe4f7c8fbfdad43c2dde288705c4212c884849258cf529ef07f249805facaae56e520cec167462f9119f34fea927740b7c3e9e3680344c878918e7e27582cc6cf21349e2efbd634e9cb1d70d24715f39f398b3c44628451055e01d6d78ad6f580906e550abb1f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b000000000000edcb0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x844) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x40, 0x0, 0x20000000, 0x3, 0x4, 0x1b9, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffd}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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") syz_open_procfs(r1, &(0x7f0000000080)='task\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r7, 0x10c, 0x2, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) 18.380852817s ago: executing program 4 (id=6249): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x100007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0xffffffffffffff48, 0x2, [@TCA_FW_ACT={0x3c, 0x4, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0xffffffbe, 0x3, 0x6a64}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x2, 0x5, 0x8754, 0xf6}, &(0x7f0000000040)=0x20) r4 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x203, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r5}, 0x38) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdcd, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x23, 0x2, {{0x0, 0x0, 0x4}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x74}}, 0x0) setreuid(0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000140)=0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000440), 0x4) sendmsg$BATADV_CMD_SET_MESH(r6, 0x0, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r6) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) 17.589866156s ago: executing program 4 (id=6256): msgrcv(0x0, &(0x7f0000000040)={0x0, ""/7}, 0xf, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x24, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) msgget$private(0x0, 0x20) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = syz_clone3(&(0x7f0000000500)={0x41000200, 0x0, &(0x7f0000000040), &(0x7f00000000c0), {0x14}, 0x0, 0x0, &(0x7f0000000200)=""/146, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002500010322bd700000000800a4800400a580000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008800}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x0, 0x1, 0x0, 0x3, 0x5, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20048800) io_setup(0x9, &(0x7f0000000080)=0x0) io_pgetevents(r4, 0x8000000000000001, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000400)={0x0}) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x20000010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000001000010426bd7000a100000000000000", @ANYRES32=0x0, @ANYBLOB="7b8b0100000000005c0012800b00010062726964676500004c00028005002500010000000c001f00fcfffffbffffffff05001800010000000500260001000000050029000100000008001c000500000005001600010000000c002e"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xb31d, 0x40, 0x1, 0x20002f7}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x448c4) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, &(0x7f0000000440)={0x10001, 0x3}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15.731400051s ago: executing program 4 (id=6265): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000010c0)=0x14, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e21, 0x7ff, @remote, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES8], 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/43, 0x2b}, 0x3}], 0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x102, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x6, 0x9, "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", 0x95, 0x3, 0xf0, 0x2, 0x40, 0x7f, 0x6}}}, 0x120) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x48, 0x1, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 15.596760084s ago: executing program 41 (id=6265): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000010c0)=0x14, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e21, 0x7ff, @remote, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES8], 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/43, 0x2b}, 0x3}], 0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x102, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x6, 0x9, "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", 0x95, 0x3, 0xf0, 0x2, 0x40, 0x7f, 0x6}}}, 0x120) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x48, 0x1, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.024466167s ago: executing program 8 (id=6413): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x9, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x32, 0x0, @private=0x1000000, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote}]}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) 2.967577219s ago: executing program 8 (id=6414): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x202) (fail_nth: 3) 2.967443699s ago: executing program 8 (id=6415): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000640)={0x6, 0x0, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81ffffff}]}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.319113434s ago: executing program 7 (id=6424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 2.300405975s ago: executing program 7 (id=6426): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x20b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xfff3, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3b, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0xda8d) accept4$inet(r3, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000440)="37bd74848cc872361ca6df60d7ccb9b7817a1449f226e2b5dfa97e14dc78539a9dd5b4f9d5f62c3a675a3124c5a130af56e317d97e7bb27d46e2a88d74d74a98520fe9e31342405b68d84749af904a42343f610cc84ce5d102f85d671be3245d92732f1a4def74a5987c7fcd9e278721fbbdd77d588f83cd805f03d55994b18b440fcd07d67c", 0x86}, {&(0x7f0000000340)="49f3a6f37351a42b6026bc4d437ea0ced09b2b1f289bfd68bec4e59d04d516a822b68914350f8f2aceba3437f0ead44e599477dc70ffd7bd4a859c37241d1c009293252d0e7a32d0be4216b7e8fa08e51d03973a355f43f83bc8e251eef5f6f6a8d8a177670a2176be8255c13394fd81059d7c55fa3b4ed66f959ff27a812525c9de5dac918c6865f26dd7ca371df215f0bec603f71fc7dfb4c2da0177e3d28f65c105ec8e2a4ea48042d5a2679cd3856cf5703895a57c7431571f679cf3cb7e4295f2e2", 0xc4}], 0x3, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x60cd894) unshare(0x40200) r5 = semget(0x1, 0x4, 0x39c) semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r5, &(0x7f0000000000)=[{0x3, 0xbbdd}, {0x2, 0x100, 0x3000}], 0x2) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x8]) socket$nl_netfilter(0x10, 0x3, 0xc) 1.919463844s ago: executing program 8 (id=6437): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffffd70af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x4, 0x4a, 0x2, 0x7, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x44, 0x914fa, 0xf, 0x8000008, 0xfffff000, 0x6, 0x1000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000080)={0x800100, 0x1007, 0xfffffffe, 0x10000, 0xc, 0x5}) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x4000, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r4, &(0x7f0000000040)={&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x1, @empty, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x400}}], 0x18}, 0x8001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x50) 1.845668856s ago: executing program 8 (id=6439): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000f7ffffffffffff0180c200000e88a8000081000000080045000014000040000011907864010101e0000001000017c100100100000000006c990000"], 0x3e) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ftruncate(0xffffffffffffffff, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x8, 0xb}, 0x50) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x28, 0x1, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1d6def9d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20040815) setresuid(0x0, 0xee00, 0x0) 1.440104475s ago: executing program 7 (id=6447): ioctl$BLKFRAGET(0xffffffffffffffff, 0x1265, &(0x7f0000000000)) r0 = eventfd2(0x8, 0x81000) read$eventfd(r0, &(0x7f0000000040), 0x8) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) shutdown(r1, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000140)) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4101, 0x20) getdents(r2, &(0x7f0000000200)=""/224, 0xe0) r3 = openat$incfs(r2, &(0x7f0000000300)='.pending_reads\x00', 0x101402, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7, 0x80, 0x2, 0x100, {{0x3b, 0x4, 0x3, 0x0, 0xec, 0x66, 0x0, 0xb4, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@noop, @noop, @lsrr={0x83, 0x23, 0xea, [@broadcast, @local, @multicast2, @loopback, @multicast1, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @lsrr={0x83, 0x17, 0xcd, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @loopback, @multicast1]}, @ssrr={0x89, 0x7, 0x50, [@empty]}, @lsrr={0x83, 0x23, 0x4f, [@private=0xa010100, @broadcast, @broadcast, @multicast1, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2]}, @cipso={0x86, 0x64, 0x3, [{0x2, 0xd, "52d84fd51cb172c65076f7"}, {0x6, 0x6, "8db5e451"}, {0x5, 0x6, "ca773c8e"}, {0x6, 0x10, "ebef0917e2768be114e9afe8e7ad"}, {0x0, 0x10, "062cfdd5c88c8a35afd557c09e87"}, {0x7, 0xa, "9a113961c9915853"}, {0x7, 0xd, "64047e150f7db3f9c7763b"}, {0x2, 0x5, "907aa5"}, {0x5, 0x9, "54a9dbfd66e9d9"}]}, @generic={0x7, 0xc, "5e70c32c51073c1b5ab7"}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1f, 0x1000, 0x9, 0x80000000, 0x2002, r3, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000016c0)={&(0x7f0000000540)="b81669b7ff8bb744af0b288c0c98a0f1530c01a9be2c4f97bc6cae510f10bc9c83e886349590206285c2dd38c6a429ac30a3471d9e64b30f840be8383b99f28b7854bca554bc519828330461146bc3d5243d508cba3be3fb7c3487dac4c8ae33070bbb2229fb917dff4e86adc668b9d105f2b0f05b8bb52443cb49c69897c3e17426e0b50496e6c79bfc8cc1dbd0de90d04e1dcbff32ed4722bc10bf5c7f3bef6f586d7b459c", &(0x7f0000000600)=""/31, &(0x7f0000000640)="14745b7569a755ba1feea5024b4bb54e762c3f4d050c113beaf601efb16eefc0490cf68e5c0f533275664008e0aaee42be1fd6772220b1bd8ea0bf546c021ab14a208574acb7766d598b333caf24c67e265ab0a3dbf024440e6bb76e39f0ba8ba23374b6ec860b09f8376a7018c01a1d", &(0x7f00000006c0)="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", 0x6, r3}, 0x38) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001700)=r3, 0x4) syz_open_dev$mouse(&(0x7f0000001740), 0x8000, 0x80000) r6 = socket$inet(0x2, 0x3, 0xd) mount_setattr(r3, &(0x7f0000001780)='./file0\x00', 0x100, &(0x7f00000017c0)={0x4, 0x70, 0x80000, {r3}}, 0x20) r7 = perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x6, 0x82, 0x2, 0x0, 0x0, 0xcd, 0x8200, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0x9}, 0x100800, 0xffff, 0x9, 0x8, 0x9, 0x2, 0x100, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0xa) fstat(r6, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000018c0)='./file0\x00', 0xffffffffffffffff, r8) bpf$ENABLE_STATS(0x20, &(0x7f0000001980), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={&(0x7f00000019c0)="ab00ee29915d033963ffafbdacd72a9812485d3bcd7b5d8da366c038924b72f7557bc67835548b79dc6eb60b8b5ce8e51e3b819e6ad5c788354fe5efd61d8ffa1875f732b8892c8322caac8db1b35d39b5f38edf3d82be6b0d733383ec0e3b860f15795dca6a40647f3aba328d7e54e2a69fe58d9013fe8ed523c620c63da9a2f7c8f7e6", &(0x7f0000001a80)=""/91, &(0x7f0000001b00)="b464303a6422ad78ed8d500ef7b6624b3a5cdc5241c51f55297a017ce85e82c2b45fcefe7aac0f91d9476ce960b55dc26742da033809344fd0bdc3ff1f4ae30459ee9f5905a37b0a696be26a94d14b55b8abb7ec9e48e48d25dd85d17671d9f233e3bb8def6673e147e9e04d2eb05d3b44e85942addbe467eb287fe7900c926fec752bb35db12b2a87b721ff756c83e94108c6e96201b9c7af0f94", &(0x7f0000001bc0)="6bfa3d654d71617af2f415356383914b9ee7385f144f71cd0bb32c05985b244c7bbd5d3e35e2d8b6b0ada0d5", 0x6, r5}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c40)='./cgroup.net/syz0\x00', 0x1ff) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x4) ioctl$OCFS2_IOC_GROUP_EXTEND(r7, 0x40046f01, &(0x7f0000001c80)=0xe) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) 1.416253246s ago: executing program 7 (id=6449): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xb6, 0x8, 0x0, 0x100, 0x18088, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xffff}, 0x4000, 0x4, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x10, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x800) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[], 0xff2e) read(r1, &(0x7f0000000100), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0xfdfd) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 1.333392828s ago: executing program 0 (id=6452): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.333142468s ago: executing program 0 (id=6453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0x7, &(0x7f0000000200)={0x8, 0x18}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000005c0), &(0x7f0000000600)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xa6, 0x7, 0x2b, 0xe, 0x0, 0x8, 0x20a00, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7877, 0x1, @perf_config_ext={0x2, 0x8000}, 0x108822, 0x12495d3b, 0x7fff, 0x6, 0x3ff, 0x4, 0x1, 0x0, 0x1, 0x0, 0xe}, r3, 0xd, r2, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.332831528s ago: executing program 0 (id=6454): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x200003) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100080000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100090000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001000f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100100000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100110000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100120000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100130000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100140000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100150000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100160000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100170000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100180000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100190000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001001f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100200000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100210000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100220000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100230000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100240000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100250000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100260000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100270000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100280000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100290000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001002f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100300000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100310000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100320000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100330000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100340000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100350000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100360000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100370000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100380000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100390000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001003f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100400000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100410000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100420000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100430000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100440000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100450000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100460000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100470000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100480000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100490000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001004f0000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100500000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100510000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100520000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100530000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100540000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100550000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100560000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100570000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100580000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100590000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005a0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005b0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005c0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005d0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005e0000000c000500000000000a000000300000001800050000000000000000002d0000000000000100000000050001005f0000000c0005"], 0x1bb0}}, 0x0) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCMSET(r4, 0x5418, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x1) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r7, 0x1, 0x0) getdents(r7, 0x0, 0x58) r8 = socket$inet6(0xa, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0xffffff08) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000d80)="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"}, 0x80) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f0004000000080004000200000006000200ff01000004001200060002"], 0x70}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) 1.318106908s ago: executing program 7 (id=6456): r0 = socket$inet(0x2, 0xa, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 1.24747914s ago: executing program 7 (id=6457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000eb810908883ba40e5429d00533c0d586e485e2901879e73c0ae5f3943ac7cfe4f7c8fbfdad43c2dde288705c4212c884849258cf529ef07f249805facaae56e520cec167462f9119f34fea927740b7c3e9e3680344c878918e7e27582cc6cf21349e2efbd634e9cb1d70d24715f39f398b3c44628451055e01d6d78ad6f580906e550abb1f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b000000000000edcb0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e000000053500"], 0x140}}, 0x844) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x40, 0x0, 0x20000000, 0x3, 0x4, 0x1b9, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffd}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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") syz_open_procfs(r1, &(0x7f0000000080)='task\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r7, 0x10c, 0x2, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.217968601s ago: executing program 2 (id=6458): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000050a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 1.199955251s ago: executing program 5 (id=6459): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000dc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000dd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x844) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.178631392s ago: executing program 2 (id=6460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614f5ff00110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 1.137877663s ago: executing program 2 (id=6461): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) getuid() (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4020040}, 0x8021) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) 1.137596133s ago: executing program 2 (id=6462): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.137266663s ago: executing program 0 (id=6463): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3300}, 0x48) 1.137141153s ago: executing program 5 (id=6464): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0xd000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 1.067582264s ago: executing program 5 (id=6465): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.067320404s ago: executing program 5 (id=6466): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xb6, 0x8, 0x0, 0x100, 0x18088, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xffff}, 0x4000, 0x4, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x10, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x800) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[], 0xff2e) read(r1, &(0x7f0000000100), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0xfdfd) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 57.533649ms ago: executing program 0 (id=6467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0x7, &(0x7f0000000200)={0x8, 0x18}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000005c0), &(0x7f0000000600)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xa6, 0x7, 0x2b, 0xe, 0x0, 0x8, 0x20a00, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7877, 0x1, @perf_config_ext={0x2, 0x8000}, 0x108822, 0x12495d3b, 0x7fff, 0x6, 0x3ff, 0x4, 0x1, 0x0, 0x1, 0x0, 0xe}, r3, 0xd, r2, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 57.119319ms ago: executing program 5 (id=6468): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 56.669069ms ago: executing program 8 (id=6469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 53.601329ms ago: executing program 2 (id=6470): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) 457.57µs ago: executing program 5 (id=6471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x207}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) 325.78µs ago: executing program 2 (id=6472): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000023000000611108000000000085000000cf00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000056cb2f020000000000000c02000000000000000000000d0000000000"], 0x0, 0x34}, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000023000000611108000000000085000000cf00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000056cb2f020000000000000c02000000000000000000000d0000000000"], 0x0, 0x34}, 0x28) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) (async) 0s ago: executing program 0 (id=6473): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x7, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x7ffffc, 0x5, 0x2, 0x400000009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x480, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x0, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') kernel console output (not intermixed with test programs): ][ T28] audit: type=1326 audit(2000000000.020:59137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24337 comm="syz.8.5828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 544.594462][T24335] CPU: 0 UID: 0 PID: 24335 Comm: syz.5.5827 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 544.594489][T24335] Tainted: [W]=WARN [ 544.594495][T24335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.594528][T24335] Call Trace: [ 544.594535][T24335] [ 544.594544][T24335] __dump_stack+0x1d/0x30 [ 544.594567][T24335] dump_stack_lvl+0x95/0xd0 [ 544.594588][T24335] dump_stack+0x15/0x1b [ 544.594653][T24335] dump_header+0x80/0x240 [ 544.594672][T24335] oom_kill_process+0x295/0x350 [ 544.594698][T24335] out_of_memory+0x981/0xbc0 [ 544.594749][T24335] try_charge_memcg+0x621/0xa00 [ 544.594770][T24335] ? __rcu_read_unlock+0x4e/0x70 [ 544.594800][T24335] __memcg_kmem_charge_page+0x199/0x3a0 [ 544.594892][T24335] __alloc_frozen_pages_noprof+0x18a/0x350 [ 544.594978][T24335] alloc_pages_mpol+0xa9/0x1d0 [ 544.595003][T24335] alloc_pages_noprof+0x8f/0x140 [ 544.595043][T24335] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 544.595107][T24335] __kvmalloc_node_noprof+0x3a0/0x590 [ 544.595138][T24335] ? futex_hash_allocate+0x192/0x920 [ 544.595157][T24335] ? futex_hash_allocate+0x192/0x920 [ 544.595226][T24335] ? futex_hash_allocate+0x192/0x920 [ 544.595379][T24335] futex_hash_allocate+0x192/0x920 [ 544.595397][T24335] ? cap_task_prctl+0x13f/0x6b0 [ 544.595428][T24335] futex_hash_prctl+0xd8/0xf0 [ 544.595449][T24335] __se_sys_prctl+0x4f4/0x13b0 [ 544.595488][T24335] __x64_sys_prctl+0x67/0x80 [ 544.595567][T24335] x64_sys_call+0x2533/0x3020 [ 544.595586][T24335] do_syscall_64+0x136/0x3c0 [ 544.595607][T24335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.595664][T24335] RIP: 0033:0x7f7ac28fe019 [ 544.595771][T24335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.595786][T24335] RSP: 002b:00007f7ac1357028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 544.595806][T24335] RAX: ffffffffffffffda RBX: 00007f7ac2b85fa0 RCX: 00007f7ac28fe019 [ 544.595821][T24335] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 544.595902][T24335] RBP: 00007f7ac299500c R08: 0000000000000000 R09: 0000000000000000 [ 544.595913][T24335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.595926][T24335] R13: 00007f7ac2b86038 R14: 00007f7ac2b85fa0 R15: 00007ffdf14d46b8 [ 544.595947][T24335] [ 544.595966][T24335] memory: usage 307068kB, limit 307200kB, failcnt 57 [ 544.835907][T24335] memory+swap: usage 166556kB, limit 9007199254740988kB, failcnt 0 [ 544.843949][T24335] kmem: usage 166312kB, limit 9007199254740988kB, failcnt 0 [ 544.854359][T24335] Memory cgroup stats for /syz5: [ 544.854586][T24335] cache 0 [ 544.862640][T24335] rss 57344 [ 544.864411][T19340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.865818][T24335] shmem 0 [ 544.865826][T24335] mapped_file 0 [ 544.882783][T24335] dirty 0 [ 544.885752][T24335] writeback 0 [ 544.943776][T24335] workingset_refault_anon 1888 [ 544.959026][T24335] workingset_refault_file 0 [ 544.972366][T24335] swap 135168 [ 544.979392][T24335] swapcached 8036352 [ 544.983513][T24362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5836'. [ 544.998054][T24335] pgpgin 146416 [ 545.026669][T19340] bridge_slave_1: left allmulticast mode [ 545.032427][T19340] bridge_slave_1: left promiscuous mode [ 545.035769][T24335] pgpgout 146401 [ 545.038160][T19340] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.050181][T24335] pgfault 120371 [ 545.053743][T24335] pgmajfault 305 [ 545.057283][T24335] inactive_anon 0 [ 545.060908][T24335] active_anon 61440 [ 545.064700][T24335] inactive_file 0 [ 545.068320][T24335] active_file 0 [ 545.071764][T24335] unevictable 0 [ 545.075212][T24335] hierarchical_memory_limit 314572800 [ 545.080565][T24335] hierarchical_memsw_limit 9223372036854771712 [ 545.086777][T24335] total_cache 0 [ 545.090297][T24335] total_rss 57344 [ 545.093916][T24335] total_shmem 0 [ 545.097360][T24335] total_mapped_file 0 [ 545.101320][T24335] total_dirty 0 [ 545.104801][T24335] total_writeback 0 [ 545.108642][T24335] total_workingset_refault_anon 1888 [ 545.113907][T24335] total_workingset_refault_file 0 [ 545.118909][T24335] total_swap 135168 [ 545.122696][T24335] total_swapcached 8036352 [ 545.132635][T19340] bridge_slave_0: left allmulticast mode [ 545.138531][T19340] bridge_slave_0: left promiscuous mode [ 545.144321][T19340] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.152375][T24335] total_pgpgin 146416 [ 545.157202][T24335] total_pgpgout 146401 [ 545.161323][T24335] total_pgfault 120371 [ 545.168974][T24335] total_pgmajfault 305 [ 545.173665][T24335] total_inactive_anon 0 [ 545.237862][T24335] total_active_anon 61440 [ 545.247854][T24335] total_inactive_file 0 [ 545.256313][T24335] total_active_file 0 [ 545.287040][T24335] total_unevictable 0 [ 545.299544][T24370] FAULT_INJECTION: forcing a failure. [ 545.299544][T24370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.312853][T24335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5827,pid=24333,uid=0 [ 545.334223][T24370] CPU: 0 UID: 0 PID: 24370 Comm: syz.8.5838 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 545.334265][T24370] Tainted: [W]=WARN [ 545.334271][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.334281][T24370] Call Trace: [ 545.334287][T24370] [ 545.334294][T24370] __dump_stack+0x1d/0x30 [ 545.334363][T24370] dump_stack_lvl+0x95/0xd0 [ 545.334379][T24370] dump_stack+0x15/0x1b [ 545.334394][T24370] should_fail_ex+0x25e/0x270 [ 545.334458][T24370] should_fail+0xb/0x20 [ 545.334478][T24370] should_fail_usercopy+0x1a/0x20 [ 545.334505][T24370] _copy_from_user+0x1c/0xb0 [ 545.334526][T24370] ___sys_sendmsg+0xc1/0x1e0 [ 545.334607][T24370] __x64_sys_sendmsg+0xd4/0x160 [ 545.334639][T24370] x64_sys_call+0x194c/0x3020 [ 545.334695][T24370] do_syscall_64+0x136/0x3c0 [ 545.334717][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.334735][T24370] RIP: 0033:0x7ff9a12be019 [ 545.334753][T24370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.334772][T24370] RSP: 002b:00007ff99fd17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.334801][T24370] RAX: ffffffffffffffda RBX: 00007ff9a1545fa0 RCX: 00007ff9a12be019 [ 545.334814][T24370] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 545.334825][T24370] RBP: 00007ff99fd17090 R08: 0000000000000000 R09: 0000000000000000 [ 545.334899][T24370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.334910][T24370] R13: 00007ff9a1546038 R14: 00007ff9a1545fa0 R15: 00007ffc705c2228 [ 545.334929][T24370] [ 545.498960][T24371] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5837'. [ 545.534356][T24335] Memory cgroup out of memory: Killed process 24335 (syz.5.5827) total-vm:94188kB, anon-rss:1356kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 545.770377][T24376] loop8: detected capacity change from 0 to 512 [ 545.815598][T24376] EXT4-fs: test_dummy_encryption option not supported [ 546.155206][T24385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5844'. [ 546.222421][T24385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5844'. [ 546.381718][T19340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.409270][T19340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.597342][T19340] bond0 (unregistering): Released all slaves [ 547.598637][T24392] loop8: detected capacity change from 0 to 512 [ 547.605181][T19340] bond1 (unregistering): Released all slaves [ 547.697186][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 547.697202][ T28] audit: type=1400 audit(2000000003.360:59158): avc: denied { mount } for pid=24393 comm="syz.5.5847" name="/" dev="rpc_pipefs" ino=77295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 547.865194][T24392] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5846: invalid indirect mapped block 11 (level 0) [ 547.882532][T24392] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 547.884528][T24392] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.5846: attempt to clear invalid blocks 1024 len 1 [ 547.893931][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 547.893971][ C1] EXT4-fs (loop8): initial error at time 2000000003: ext4_free_branches:1023: inode 13 [ 547.894071][ C1] EXT4-fs (loop8): last error at time 2000000003: ext4_free_branches:1023: inode 13 [ 547.941069][T24392] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 547.943113][T24392] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 547.971532][T24392] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5846: invalid indirect mapped block 1819239214 (level 0) [ 547.985697][T24392] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 547.989090][T24392] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5846: invalid indirect mapped block 33554432 (level 2) [ 548.016234][T24392] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 548.018868][T24392] EXT4-fs (loop8): 1 truncate cleaned up [ 548.041581][T24392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.406652][ T28] audit: type=1400 audit(2000000003.610:59159): avc: denied { create } for pid=24395 comm="syz.7.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 548.426466][ T28] audit: type=1400 audit(2000000003.620:59160): avc: denied { bind } for pid=24395 comm="syz.7.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 548.479771][ T28] audit: type=1400 audit(2000000003.890:59161): avc: denied { unmount } for pid=23544 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 548.500921][ T28] audit: type=1400 audit(2000000003.940:59162): avc: denied { ioctl } for pid=24395 comm="syz.7.5848" path="socket:[78222]" dev="sockfs" ino=78222 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 548.639614][T24410] loop3: detected capacity change from 0 to 128 [ 548.652036][T19340] hsr_slave_0: left promiscuous mode [ 548.674557][T24410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 548.683292][T24410] System zones: 1-3, 19-19, 35-36 [ 548.689321][T24410] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 548.704221][T24410] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 548.738500][ T28] audit: type=1400 audit(2000000004.510:59163): avc: denied { write } for pid=24408 comm="syz.3.5851" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 548.791404][T19340] hsr_slave_1: left promiscuous mode [ 548.808847][T19340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.816233][T19340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.988410][ T28] audit: type=1326 audit(2000000004.740:59164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24417 comm="syz.7.5852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda354e019 code=0x7ffc0000 [ 549.048900][ T28] audit: type=1326 audit(2000000004.740:59165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24417 comm="syz.7.5852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda354e019 code=0x7ffc0000 [ 549.110173][T19340] veth1_macvtap: left promiscuous mode [ 549.119992][T19114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.144787][T19340] veth0_macvtap: left promiscuous mode [ 549.168107][T19340] veth1_vlan: left promiscuous mode [ 549.200233][T19340] veth0_vlan: left promiscuous mode [ 549.318820][T24403] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.328250][ T28] audit: type=1326 audit(2000000004.740:59166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24417 comm="syz.7.5852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda354e019 code=0x7ffc0000 [ 549.412664][T24423] netlink: 'syz.3.5851': attribute type 1 has an invalid length. [ 549.526605][T19340] team0 (unregistering): Port device team_slave_1 removed [ 549.546685][T19340] team0 (unregistering): Port device team_slave_0 removed [ 549.653145][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 549.750616][T24442] loop8: detected capacity change from 0 to 512 [ 549.764178][T24436] loop5: detected capacity change from 0 to 4096 [ 549.800664][T24442] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 549.819755][T22545] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 549.840421][T24446] FAULT_INJECTION: forcing a failure. [ 549.840421][T24446] name failslab, interval 1, probability 1, space 0, times 0 [ 549.871956][T24442] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.5855: bad orphan inode 15 [ 549.911388][T22545] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 549.926309][T24446] CPU: 0 UID: 0 PID: 24446 Comm: syz.7.5856 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 549.926380][T24446] Tainted: [W]=WARN [ 549.926387][T24446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.926399][T24446] Call Trace: [ 549.926406][T24446] [ 549.926414][T24446] __dump_stack+0x1d/0x30 [ 549.926436][T24446] dump_stack_lvl+0x95/0xd0 [ 549.926452][T24446] dump_stack+0x15/0x1b [ 549.926534][T24446] should_fail_ex+0x25e/0x270 [ 549.926561][T24446] should_failslab+0x8c/0xb0 [ 549.926583][T24446] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 549.926604][T24446] ? task_exec_state_copy+0x5b/0x180 [ 549.926630][T24446] ? task_exec_state_copy+0x5b/0x180 [ 549.926711][T24446] ? mod_lruvec_state+0x10c/0x120 [ 549.926734][T24446] task_exec_state_copy+0x5b/0x180 [ 549.926797][T24446] copy_exec_state+0x36/0xd0 [ 549.926843][T24446] copy_process+0x5b4/0x2310 [ 549.926870][T24446] ? kstrtouint_from_user+0xa8/0xf0 [ 549.926895][T24446] ? __rcu_read_unlock+0x4e/0x70 [ 549.926942][T24446] kernel_clone+0x1c0/0x5f0 [ 549.926964][T24446] __x64_sys_clone+0x143/0x180 [ 549.926991][T24446] x64_sys_call+0x1222/0x3020 [ 549.927012][T24446] do_syscall_64+0x136/0x3c0 [ 549.927115][T24446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.927156][T24446] RIP: 0033:0x7fdda354e019 [ 549.927247][T24446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.927266][T24446] RSP: 002b:00007fdda1fa6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 549.927287][T24446] RAX: ffffffffffffffda RBX: 00007fdda37d5fa0 RCX: 00007fdda354e019 [ 549.927302][T24446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 549.927316][T24446] RBP: 00007fdda1fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 549.927393][T24446] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 549.927406][T24446] R13: 00007fdda37d6038 R14: 00007fdda37d5fa0 R15: 00007ffe343eef28 [ 549.927432][T24446] [ 549.927571][T24436] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 550.137631][T24442] loop8: lost filesystem error report for type 5 error -117 [ 550.146307][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 550.160044][ C0] EXT4-fs (loop8): initial error at time 2000000000: ext4_orphan_get:1425 [ 550.168572][ C0] EXT4-fs (loop8): last error at time 2000000000: ext4_orphan_get:1425 [ 550.195705][T24442] ext4_test_bit(bit=14, block=18) = 1 [ 550.204392][T24442] is_bad_inode(inode)=0 [ 550.210707][T22545] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 550.229418][T19340] IPVS: stop unused estimator thread 0... [ 550.238045][T24442] NEXT_ORPHAN(inode)=1023 [ 550.242611][T24442] max_ino=32 [ 550.245820][T24442] i_nlink=0 [ 550.254705][T24442] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5855: bg 0: block 161: padding at end of block bitmap is not set [ 550.277924][T24459] syzkaller0: entered promiscuous mode [ 550.291599][T24459] syzkaller0: entered allmulticast mode [ 550.297819][T24442] loop8: lost filesystem error report for type 5 error -117 [ 550.299935][T24459] tipc: Started in network mode [ 550.312341][T22545] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 550.331062][T24459] tipc: Node identity d68c1f48dd91, cluster identity 4711 [ 550.340303][T24459] tipc: Enabled bearer , priority 0 [ 550.347080][T24442] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 550.355942][T24442] loop8: lost filesystem error report for type 5 error -117 [ 550.356856][T24442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.356967][T22545] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 550.364568][T24442] ext2 filesystem being mounted at /275/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 550.393487][T22545] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 550.416191][T24458] tipc: Resetting bearer [ 550.435554][T24442] EXT4-fs warning (device loop8): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 550.468583][T24458] tipc: Disabling bearer [ 550.496862][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 550.518922][T22545] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 550.524733][T24466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5860'. [ 550.547955][T22545] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 550.571596][T22545] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 550.611065][T22545] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 550.752794][T19114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.818120][T24485] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5862'. [ 550.842307][T24485] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5862'. [ 550.877583][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 550.927525][T24492] loop8: detected capacity change from 0 to 128 [ 550.955975][T24492] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 550.959500][T22545] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 550.974300][T24492] ext4 filesystem being mounted at /277/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 551.018608][T19340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.052183][T19114] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 551.149534][T19340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.234201][T19340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.246119][T24513] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5868'. [ 551.302816][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 551.311521][T24513] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5868'. [ 551.362407][T19340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.446215][T24544] loop8: detected capacity change from 0 to 128 [ 551.496801][T24544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8225 sclass=netlink_route_socket pid=24544 comm=syz.8.5875 [ 551.514278][T19340] bridge_slave_1: left allmulticast mode [ 551.524413][T19340] bridge_slave_1: left promiscuous mode [ 551.539600][T19340] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.561269][T19340] bridge_slave_0: left allmulticast mode [ 551.567547][T19340] bridge_slave_0: left promiscuous mode [ 551.573522][T19340] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.659638][T19340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.673976][T19340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.690959][T19340] bond0 (unregistering): Released all slaves [ 551.811077][T19340] hsr_slave_0: left promiscuous mode [ 551.817717][T19340] hsr_slave_1: left promiscuous mode [ 551.827444][T19340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.840278][T19340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.852677][T19340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.861901][T19340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.884246][T19340] veth1_macvtap: left promiscuous mode [ 551.897548][T19340] veth0_macvtap: left promiscuous mode [ 551.903160][T19340] veth1_vlan: left promiscuous mode [ 551.909415][T19340] veth0_vlan: left promiscuous mode [ 551.973946][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5881'. [ 551.983275][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5881'. [ 552.028461][T19340] team0 (unregistering): Port device team_slave_1 removed [ 552.041608][T19340] team0 (unregistering): Port device team_slave_0 removed [ 552.077932][T24581] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5880'. [ 552.091946][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 552.167989][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5885'. [ 552.181771][T24596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5885'. [ 552.198016][T24597] vxcan3: entered promiscuous mode [ 552.204291][T24597] team0: Device vxcan3 is of different type [ 552.233012][T24515] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.241153][T24515] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.248962][T24515] bridge_slave_0: entered allmulticast mode [ 552.255801][T24515] bridge_slave_0: entered promiscuous mode [ 552.263344][T24515] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.271155][T24515] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.278703][T24515] bridge_slave_1: entered allmulticast mode [ 552.288039][T24515] bridge_slave_1: entered promiscuous mode [ 552.308168][T24515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.318943][T24515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.328864][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 552.367422][T24515] team0: Port device team_slave_0 added [ 552.374027][T24515] team0: Port device team_slave_1 added [ 552.391802][T24515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.391915][T24619] loop8: detected capacity change from 0 to 128 [ 552.398970][T24515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.431760][T24515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.458752][T24515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.472809][T24515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.516293][T24515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.562606][T24515] hsr_slave_0: entered promiscuous mode [ 552.568703][T24515] hsr_slave_1: entered promiscuous mode [ 552.626617][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 552.786489][ T28] kauditd_printk_skb: 693 callbacks suppressed [ 552.786517][ T28] audit: type=1326 audit(2000000000.220:59858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24641 comm="syz.8.5891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 552.865958][ T28] audit: type=1400 audit(2000000000.280:59859): avc: denied { write } for pid=24650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.902964][ T3017] 8021q: adding VLAN 0 to HW filter on device eth12 [ 552.915998][T24671] loop7: detected capacity change from 0 to 1164 [ 552.923275][ T28] audit: type=1400 audit(2000000000.300:59860): avc: denied { write } for pid=24668 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.949822][T24671] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 553.012320][T24515] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 553.042021][T24515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.059385][T24515] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 553.081928][ T28] audit: type=1400 audit(2000000000.520:59861): avc: denied { write } for pid=24675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.082907][T24515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.125792][T24690] loop8: detected capacity change from 0 to 128 [ 553.158994][ T28] audit: type=1400 audit(2000000000.590:59862): avc: denied { write } for pid=24691 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.168184][T24515] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 553.216498][T24515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.231270][T24515] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 553.249740][T24515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.330496][T24515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.338609][ T28] audit: type=1400 audit(2000000000.780:59863): avc: denied { write } for pid=24695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.379825][T24515] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.389399][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.391136][ T28] audit: type=1400 audit(2000000000.810:59864): avc: denied { write } for pid=24715 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.396474][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.441657][T19340] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.448804][T19340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.484253][T24719] sctp: [Deprecated]: syz.7.5901 (pid 24719) Use of int in max_burst socket option deprecated. [ 553.484253][T24719] Use struct sctp_assoc_value instead [ 553.567149][ T28] audit: type=1400 audit(2000000001.000:59865): avc: denied { write } for pid=24717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.609859][ T28] audit: type=1400 audit(2000000001.050:59866): avc: denied { write } for pid=24737 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.620155][T24739] loop7: detected capacity change from 0 to 512 [ 553.676178][T24739] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 553.687972][T24515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.755049][ T28] audit: type=1400 audit(2000000001.190:59867): avc: denied { write } for pid=24745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.847572][T24757] sctp: [Deprecated]: syz.7.5902 (pid 24757) Use of int in max_burst socket option. [ 553.847572][T24757] Use struct sctp_assoc_value instead [ 553.862770][T24757] IPVS: lc: FWM 3 0x00000003 - no destination available [ 553.965952][T24515] veth0_vlan: entered promiscuous mode [ 553.979092][T24515] veth1_vlan: entered promiscuous mode [ 554.209104][T24515] veth0_macvtap: entered promiscuous mode [ 554.216303][T24515] veth1_macvtap: entered promiscuous mode [ 554.241411][T24515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.252746][T24515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.296490][T13721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.307523][T13721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.336358][T19341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.356054][T24843] loop8: detected capacity change from 0 to 128 [ 554.362091][T24848] loop4: detected capacity change from 0 to 128 [ 554.365119][T19341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.413094][T24848] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 554.435242][T24848] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 554.514158][T24861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16144 sclass=netlink_route_socket pid=24861 comm=syz.5.5913 [ 554.547572][T24515] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 554.611389][T24870] FAULT_INJECTION: forcing a failure. [ 554.611389][T24870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 554.641971][T24870] CPU: 0 UID: 0 PID: 24870 Comm: syz.0.5917 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 554.642049][T24870] Tainted: [W]=WARN [ 554.642055][T24870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.642064][T24870] Call Trace: [ 554.642071][T24870] [ 554.642078][T24870] __dump_stack+0x1d/0x30 [ 554.642098][T24870] dump_stack_lvl+0x95/0xd0 [ 554.642114][T24870] dump_stack+0x15/0x1b [ 554.642132][T24870] should_fail_ex+0x25e/0x270 [ 554.642186][T24870] should_fail_alloc_page+0xf2/0x100 [ 554.642205][T24870] __alloc_frozen_pages_noprof+0x108/0x350 [ 554.642261][T24870] alloc_pages_mpol+0xa9/0x1d0 [ 554.642287][T24870] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 554.642514][T24870] do_wp_page+0x6f6/0x2030 [ 554.642541][T24870] ? __rcu_read_unlock+0x4e/0x70 [ 554.642566][T24870] ? _raw_spin_lock+0x52/0xa0 [ 554.642589][T24870] ? __css_rstat_updated+0xbb/0x280 [ 554.642638][T24870] ? __rcu_read_lock+0x36/0x50 [ 554.642664][T24870] handle_mm_fault+0x8bc/0x2da0 [ 554.642717][T24870] do_user_addr_fault+0x634/0x1060 [ 554.642743][T24870] ? ksys_mmap_pgoff+0xc1/0x310 [ 554.642830][T24870] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 554.642853][T24870] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 554.642878][T24870] ? trace_page_fault_user+0x1f/0xa0 [ 554.642934][T24870] exc_page_fault+0x62/0xa0 [ 554.642953][T24870] asm_exc_page_fault+0x26/0x30 [ 554.642973][T24870] RIP: 0033:0x7f2dc04451a3 [ 554.643056][T24870] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 554.643073][T24870] RSP: 002b:00007f2dbefe6470 EFLAGS: 00010202 [ 554.643090][T24870] RAX: 0000000000000400 RBX: 00007f2dbefe6530 RCX: 00007f2db6bc7000 [ 554.643104][T24870] RDX: 00007f2dbefe66d0 RSI: 0000000000000001 RDI: 00007f2dbefe65d0 [ 554.643124][T24870] RBP: 00000000000000f9 R08: 000000000000000a R09: 00000000000003ae [ 554.643135][T24870] R10: 00000000000003c6 R11: 00007f2dbefe6530 R12: 0000000000000001 [ 554.643146][T24870] R13: 00007f2dc0644fa0 R14: 0000000000000020 R15: 00007f2dbefe65d0 [ 554.643162][T24870] [ 554.643170][T24870] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 554.898518][T24904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.909717][T24904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.974634][T24916] loop4: detected capacity change from 0 to 256 [ 555.011734][T24921] IPv6: NLM_F_REPLACE set, but no existing node found! [ 555.018741][T24916] IPv6: NLM_F_REPLACE set, but no existing node found! [ 555.307392][T24961] tmpfs: Bad value for 'mpol' [ 555.339837][T24971] lo: entered allmulticast mode [ 555.355039][T24970] lo: left allmulticast mode [ 555.567777][T24980] team0: Device wg0 is of different type [ 555.602986][T24980] netlink: 'syz.7.5942': attribute type 10 has an invalid length. [ 555.613632][T24980] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 555.666904][T24991] loop4: detected capacity change from 0 to 1024 [ 555.703878][T24999] __nla_validate_parse: 11 callbacks suppressed [ 555.703891][T24999] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5950'. [ 555.725873][T25001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5952'. [ 555.742308][T24991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.824950][T25015] 9p: Bad value for 'wfdno' [ 555.831089][T24515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.847340][T25015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5949'. [ 556.212671][T25024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5956'. [ 556.361481][T25048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5966'. [ 556.376150][T25048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5966'. [ 556.484598][T25060] loop4: detected capacity change from 0 to 512 [ 556.502212][T25060] EXT4-fs: inline encryption not supported [ 556.529643][T25060] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 556.547899][T25060] EXT4-fs (loop4): 1 truncate cleaned up [ 556.556065][T25060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.669360][T25070] syz.5.5973: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 556.687874][T25070] CPU: 1 UID: 0 PID: 25070 Comm: syz.5.5973 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 556.687907][T25070] Tainted: [W]=WARN [ 556.687917][T25070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.687929][T25070] Call Trace: [ 556.687934][T25070] [ 556.687940][T25070] __dump_stack+0x1d/0x30 [ 556.688021][T25070] dump_stack_lvl+0x95/0xd0 [ 556.688041][T25070] dump_stack+0x15/0x1b [ 556.688060][T25070] warn_alloc+0x145/0x1c0 [ 556.688082][T25070] ? rb_next+0x5c/0x80 [ 556.688146][T25070] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 556.688172][T25070] ? ctx_sched_in+0x3e9/0x410 [ 556.688259][T25070] ? __rcu_read_unlock+0x4e/0x70 [ 556.688329][T25070] ? hrtimer_start_range_ns_common+0x585/0x860 [ 556.688422][T25070] ? should_fail_ex+0x74/0x270 [ 556.688493][T25070] ? xskq_create+0x36/0xe0 [ 556.688633][T25070] ? should_failslab+0x8c/0xb0 [ 556.688652][T25070] vmalloc_user_noprof+0x7d/0xb0 [ 556.688671][T25070] ? xskq_create+0x80/0xe0 [ 556.688701][T25070] xskq_create+0x80/0xe0 [ 556.688761][T25070] xsk_init_queue+0x70/0xb0 [ 556.688804][T25070] xsk_setsockopt+0x3ef/0x640 [ 556.688827][T25070] ? __pfx_xsk_setsockopt+0x10/0x10 [ 556.688846][T25070] __sys_setsockopt+0x184/0x200 [ 556.688875][T25070] __x64_sys_setsockopt+0x64/0x80 [ 556.688981][T25070] x64_sys_call+0x2327/0x3020 [ 556.689004][T25070] do_syscall_64+0x136/0x3c0 [ 556.689028][T25070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.689059][T25070] RIP: 0033:0x7f7ac28fe019 [ 556.689072][T25070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.689089][T25070] RSP: 002b:00007f7ac1357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 556.689110][T25070] RAX: ffffffffffffffda RBX: 00007f7ac2b85fa0 RCX: 00007f7ac28fe019 [ 556.689124][T25070] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 556.689198][T25070] RBP: 00007f7ac299500c R08: 0000000000000004 R09: 0000000000000000 [ 556.689212][T25070] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.689226][T25070] R13: 00007f7ac2b86038 R14: 00007f7ac2b85fa0 R15: 00007ffdf14d46b8 [ 556.689321][T25070] [ 556.689396][T25070] Mem-Info: [ 556.741699][T24515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.752948][T25070] active_anon:50567 inactive_anon:16393 isolated_anon:0 [ 556.752948][T25070] active_file:35 inactive_file:28779 isolated_file:0 [ 556.752948][T25070] unevictable:0 dirty:229 writeback:0 [ 556.752948][T25070] slab_reclaimable:4264 slab_unreclaimable:24822 [ 556.752948][T25070] mapped:32868 shmem:53321 pagetables:5993 [ 556.752948][T25070] sec_pagetables:0 bounce:0 [ 556.752948][T25070] kernel_misc_reclaimable:0 [ 556.752948][T25070] free:1801269 free_pcp:4676 free_cma:0 [ 556.866131][T25078] loop7: detected capacity change from 0 to 512 [ 556.875090][T25070] Node 0 active_anon:191248kB inactive_anon:65572kB active_file:140kB inactive_file:115116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119988kB dirty:916kB writeback:0kB shmem:202032kB kernel_stack:5040kB pagetables:23740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 556.920583][T25078] EXT4-fs: test_dummy_encryption option not supported [ 556.929227][T25070] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.063171][T25070] lowmem_reserve[]: 0 2878 7857 7857 [ 557.070179][T25070] Node 0 DMA32 free:2944008kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947636kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 557.073615][T25087] loop8: detected capacity change from 0 to 512 [ 557.135319][T25070] lowmem_reserve[]: 0 0 4978 4978 [ 557.144791][T25070] Node 0 Normal free:4245708kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:190900kB inactive_anon:65572kB active_file:140kB inactive_file:115116kB unevictable:0kB writepending:916kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:26712kB local_pcp:10064kB free_cma:0kB [ 557.195498][T25087] EXT4-fs: inline encryption not supported [ 557.220277][T25070] lowmem_reserve[]: 0 0 0 0 [ 557.223848][T25087] EXT4-fs: journaled quota format not specified [ 557.235544][T25070] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 557.248237][T25070] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944008kB [ 557.277752][T25070] Node 0 Normal: 939*4kB (UM) 910*8kB (UME) 241*16kB (UME) 385*32kB (UME) 260*64kB (UME) 253*128kB (UME) 133*256kB (UME) 61*512kB (UME) 22*1024kB (UME) 19*2048kB (UME) 987*4096kB (UM) = 4245708kB [ 557.317873][T25070] Node 0 hugepages_total=10 hugepages_free=10 hugepages_surp=0 hugepages_size=2048kB [ 557.359858][T25070] 79407 total pagecache pages [ 557.368910][T25070] 226 pages in swap cache [ 557.384799][T25070] Free swap = 123184kB [ 557.389084][T25070] Total swap = 124996kB [ 557.394040][T25070] 2097051 pages RAM [ 557.398048][T25070] 0 pages HighMem/MovableOnly [ 557.404451][T25107] netlink: 'syz.0.5982': attribute type 2 has an invalid length. [ 557.412367][T25070] 81743 pages reserved [ 557.494526][T25114] loop5: detected capacity change from 0 to 512 [ 557.501179][T25114] EXT4-fs: test_dummy_encryption option not supported [ 557.672122][T25124] xt_NFQUEUE: number of total queues is 0 [ 557.728406][T25127] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5992'. [ 557.843330][T25117] loop7: detected capacity change from 0 to 32768 [ 557.899450][T25117] loop7: p1 p3 < > [ 557.918535][T25141] xt_hashlimit: size too large, truncated to 1048576 [ 558.011444][T25124] loop8: detected capacity change from 0 to 32768 [ 558.122930][T25149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5998'. [ 558.153718][T25153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.162882][T25153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.203183][T10570] IPVS: starting estimator thread 0... [ 558.287310][ T28] kauditd_printk_skb: 427 callbacks suppressed [ 558.287326][ T28] audit: type=1326 audit(2000000000.010:60295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25177 comm="syz.0.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc058e019 code=0x7ffc0000 [ 558.319870][T25164] IPVS: using max 2448 ests per chain, 122400 per kthread [ 558.328555][ T28] audit: type=1326 audit(2000000000.010:60296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25177 comm="syz.0.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc058e019 code=0x7ffc0000 [ 558.354966][ T28] audit: type=1326 audit(2000000000.010:60297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25177 comm="syz.0.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc058e019 code=0x7ffc0000 [ 558.381844][ T28] audit: type=1326 audit(2000000000.010:60298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25177 comm="syz.0.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc058e019 code=0x7ffc0000 [ 558.437050][ T28] audit: type=1326 audit(2000000000.010:60299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25177 comm="syz.0.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2dc058e019 code=0x7ffc0000 [ 558.479101][ T28] audit: type=1326 audit(2000000000.000:60300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25177 comm="syz.0.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc058e019 code=0x7ffc0000 [ 558.516541][T25183] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 558.544393][ T28] audit: type=1326 audit(2000000000.000:60301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25177 comm="syz.0.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc058e019 code=0x7ffc0000 [ 558.559121][T25192] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6014'. [ 558.610894][ T28] audit: type=1326 audit(2000000000.000:60302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25177 comm="syz.0.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc058e019 code=0x7ffc0000 [ 558.624030][T25200] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6015'. [ 558.637340][ T28] audit: type=1326 audit(2000000000.000:60303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25177 comm="syz.0.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc058e019 code=0x7ffc0000 [ 558.673805][ T28] audit: type=1326 audit(2000000000.000:60304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25177 comm="syz.0.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2dc058e019 code=0x7ffc0000 [ 558.673840][T25183] EXT4-fs (loop4): 1 truncate cleaned up [ 558.706048][T25206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.708054][T25207] FAULT_INJECTION: forcing a failure. [ 558.708054][T25207] name failslab, interval 1, probability 1, space 0, times 0 [ 558.715504][T25206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.753724][T25183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.780736][T25207] CPU: 0 UID: 0 PID: 25207 Comm: syz.5.6017 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 558.780835][T25207] Tainted: [W]=WARN [ 558.780841][T25207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 558.780851][T25207] Call Trace: [ 558.780857][T25207] [ 558.780865][T25207] __dump_stack+0x1d/0x30 [ 558.780887][T25207] dump_stack_lvl+0x95/0xd0 [ 558.780912][T25207] dump_stack+0x15/0x1b [ 558.780982][T25207] should_fail_ex+0x25e/0x270 [ 558.781007][T25207] should_failslab+0x8c/0xb0 [ 558.781024][T25207] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 558.781095][T25207] ? __alloc_skb+0x2db/0x6f0 [ 558.781118][T25207] ? __alloc_skb+0x2db/0x6f0 [ 558.781221][T25207] __alloc_skb+0x2db/0x6f0 [ 558.781289][T25207] ? __alloc_skb+0x205/0x6f0 [ 558.781312][T25207] netlink_ack+0xfd/0x530 [ 558.781337][T25207] netlink_rcv_skb+0x18d/0x220 [ 558.781354][T25207] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 558.781481][T25207] rtnetlink_rcv+0x1c/0x30 [ 558.781500][T25207] netlink_unicast+0x5a7/0x680 [ 558.781518][T25207] netlink_sendmsg+0x5be/0x6f0 [ 558.781540][T25207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.781583][T25207] ____sys_sendmsg+0x532/0x580 [ 558.781684][T25207] ___sys_sendmsg+0x195/0x1e0 [ 558.781786][T25207] __x64_sys_sendmsg+0xd4/0x160 [ 558.781822][T25207] x64_sys_call+0x194c/0x3020 [ 558.781841][T25207] do_syscall_64+0x136/0x3c0 [ 558.781952][T25207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.782014][T25207] RIP: 0033:0x7f7ac28fe019 [ 558.782029][T25207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.782043][T25207] RSP: 002b:00007f7ac1357028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.782060][T25207] RAX: ffffffffffffffda RBX: 00007f7ac2b85fa0 RCX: 00007f7ac28fe019 [ 558.782075][T25207] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 558.782088][T25207] RBP: 00007f7ac1357090 R08: 0000000000000000 R09: 0000000000000000 [ 558.782124][T25207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.782137][T25207] R13: 00007f7ac2b86038 R14: 00007f7ac2b85fa0 R15: 00007ffdf14d46b8 [ 558.782156][T25207] [ 559.054970][T25211] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 559.069275][T25211] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.6020: invalid indirect mapped block 4294967295 (level 0) [ 559.083192][T25211] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 559.083543][T25211] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.6020: invalid indirect mapped block 4294967295 (level 1) [ 559.106630][T25211] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 559.122828][T25211] EXT4-fs (loop7): 1 orphan inode deleted [ 559.128654][T25211] EXT4-fs (loop7): 1 truncate cleaned up [ 559.134345][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 559.134362][ C1] EXT4-fs (loop7): initial error at time 2000000000: ext4_free_branches:1023: inode 16 [ 559.134388][ C1] EXT4-fs (loop7): last error at time 2000000000: ext4_free_branches:1023: inode 16 [ 559.170506][T25211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.192127][T16276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.424146][T25226] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.6021: invalid indirect mapped block 11 (level 0) [ 559.438028][T25226] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 559.440008][T25226] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.6021: attempt to clear invalid blocks 1024 len 1 [ 559.449294][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 559.449333][ C0] EXT4-fs (loop5): initial error at time 2000000001: ext4_free_branches:1023: inode 13 [ 559.449525][ C0] EXT4-fs (loop5): last error at time 2000000001: ext4_free_branches:1023: inode 13 [ 559.489313][T25226] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 559.494168][T25226] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 559.518890][T25226] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.6021: invalid indirect mapped block 1819239214 (level 0) [ 559.533103][T25226] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 559.534089][T25226] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.6021: invalid indirect mapped block 33554432 (level 2) [ 559.557488][T25226] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 559.560098][T25226] EXT4-fs (loop5): 1 truncate cleaned up [ 559.581033][T25226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.753566][T24515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.209410][T25254] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 560.298001][T25265] netlink: 'syz.8.6036': attribute type 63 has an invalid length. [ 560.331666][T25265] lo: entered promiscuous mode [ 560.347764][T25265] lo: entered allmulticast mode [ 560.565466][T25279] set_capacity_and_notify: 4 callbacks suppressed [ 560.565482][T25279] loop4: detected capacity change from 0 to 512 [ 560.632511][T25279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.674508][T25279] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.710344][T23544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.207647][T25330] loop5: detected capacity change from 0 to 256 [ 561.240879][T25334] FAULT_INJECTION: forcing a failure. [ 561.240879][T25334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.257259][T25334] CPU: 1 UID: 0 PID: 25334 Comm: syz.0.6060 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 561.257317][T25334] Tainted: [W]=WARN [ 561.257323][T25334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.257332][T25334] Call Trace: [ 561.257337][T25334] [ 561.257345][T25334] __dump_stack+0x1d/0x30 [ 561.257417][T25334] dump_stack_lvl+0x95/0xd0 [ 561.257432][T25334] dump_stack+0x15/0x1b [ 561.257450][T25334] should_fail_ex+0x25e/0x270 [ 561.257477][T25334] should_fail+0xb/0x20 [ 561.257570][T25334] should_fail_usercopy+0x1a/0x20 [ 561.257592][T25334] _copy_from_user+0x1c/0xb0 [ 561.257674][T25334] ___sys_sendmsg+0xc1/0x1e0 [ 561.257715][T25334] __x64_sys_sendmsg+0xd4/0x160 [ 561.257820][T25334] x64_sys_call+0x194c/0x3020 [ 561.257842][T25334] do_syscall_64+0x136/0x3c0 [ 561.257880][T25334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.257898][T25334] RIP: 0033:0x7f2dc058e019 [ 561.257911][T25334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.257980][T25334] RSP: 002b:00007f2dbefe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.258057][T25334] RAX: ffffffffffffffda RBX: 00007f2dc0815fa0 RCX: 00007f2dc058e019 [ 561.258237][T25334] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 561.258248][T25334] RBP: 00007f2dbefe7090 R08: 0000000000000000 R09: 0000000000000000 [ 561.258259][T25334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.258271][T25334] R13: 00007f2dc0816038 R14: 00007f2dc0815fa0 R15: 00007ffc92679248 [ 561.258294][T25334] [ 561.450744][T24515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.566048][T25352] netlink: 'syz.4.6068': attribute type 10 has an invalid length. [ 561.574726][T25352] team0: Device nlmon0 is up. Set it down before adding it as a team port [ 561.849623][T25360] __nla_validate_parse: 3 callbacks suppressed [ 561.849639][T25360] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6071'. [ 561.908626][T25365] lo speed is unknown, defaulting to 1000 [ 561.915506][T25365] lo speed is unknown, defaulting to 1000 [ 561.921925][T25365] lo speed is unknown, defaulting to 1000 [ 561.992636][T25365] infiniband sz1: set active [ 561.997401][T25365] infiniband sz1: added lo [ 562.002755][ T3387] lo speed is unknown, defaulting to 1000 [ 562.047579][T25365] RDS/IB: sz1: added [ 562.051632][T25365] smc: adding ib device sz1 with port count 1 [ 562.057921][T25365] smc: ib device sz1 port 1 has no pnetid [ 562.064765][T25365] lo speed is unknown, defaulting to 1000 [ 562.082564][ T3387] lo speed is unknown, defaulting to 1000 [ 562.092737][T25384] loop4: detected capacity change from 0 to 128 [ 562.202020][T25384] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 562.205133][T25365] lo speed is unknown, defaulting to 1000 [ 562.242042][T25384] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 562.351906][T25384] netlink: 'syz.4.6081': attribute type 1 has an invalid length. [ 562.375184][T25365] lo speed is unknown, defaulting to 1000 [ 562.409638][T25365] lo speed is unknown, defaulting to 1000 [ 562.444134][T25365] lo speed is unknown, defaulting to 1000 [ 562.467403][T25401] loop8: detected capacity change from 0 to 8192 [ 562.497757][T25365] lo speed is unknown, defaulting to 1000 [ 562.511368][T24515] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 562.624021][T25429] 9p: Bad value for 'wfdno' [ 562.668698][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6089'. [ 562.983236][T25461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6087'. [ 563.002881][T25478] SELinux: syz.7.6100 (25478) wrote to user. This is no longer supported. [ 563.035197][T25485] 9p: Bad value for 'wfdno' [ 563.060104][T25489] SET target dimension over the limit! [ 563.069682][T25491] loop7: detected capacity change from 0 to 256 [ 563.098696][T25492] loop4: detected capacity change from 0 to 512 [ 563.109885][T25492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6098'. [ 563.118934][T25492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6098'. [ 563.147807][T25491] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 563.155752][T25491] FAT-fs (loop7): Filesystem has been set read-only [ 563.170221][T25491] 9p: Could not find request transport: xen [ 563.337415][T25518] xt_policy: neither incoming nor outgoing policy selected [ 563.396282][ T28] kauditd_printk_skb: 439 callbacks suppressed [ 563.396333][ T28] audit: type=1400 audit(2000000000.960:60744): avc: denied { write } for pid=25504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.449715][T25526] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6106'. [ 563.466719][T25526] loop5: detected capacity change from 0 to 512 [ 563.492142][T25526] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.6106: invalid indirect mapped block 11 (level 0) [ 563.505438][T25526] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 563.506324][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 563.521895][ C1] EXT4-fs (loop5): initial error at time 2000000001: ext4_free_branches:1023: inode 13 [ 563.531562][ C1] EXT4-fs (loop5): last error at time 2000000001: ext4_free_branches:1023: inode 13 [ 563.542394][T25526] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.6106: attempt to clear invalid blocks 1024 len 1 [ 563.555536][T25526] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 563.561346][T25526] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 563.585633][T25526] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.6106: invalid indirect mapped block 1819239214 (level 0) [ 563.600129][T25526] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 563.608025][T25526] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.6106: invalid indirect mapped block 33554432 (level 2) [ 563.631730][T25526] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 563.643883][T25526] EXT4-fs (loop5): 1 truncate cleaned up [ 563.660258][T25526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.697980][T25524] loop4: detected capacity change from 0 to 512 [ 563.771900][ T28] audit: type=1400 audit(2000000001.380:60745): avc: denied { write } for pid=25525 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.800162][T25523] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 563.870996][T25524] EXT4-fs: inline encryption not supported [ 563.885217][T25523] bond1 (unregistering): Released all slaves [ 563.949438][T25524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 564.054836][T25524] EXT4-fs (loop4): 1 truncate cleaned up [ 564.104808][T25524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.240034][T25540] 9p: Bad value for 'wfdno' [ 564.289669][T24515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.310371][ T28] audit: type=1326 audit(2000000001.950:60746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25543 comm="syz.8.6117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 564.405283][ T28] audit: type=1326 audit(2000000001.950:60747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25543 comm="syz.8.6117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 564.554428][T25562] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6126'. [ 564.568174][ T28] audit: type=1326 audit(2000000001.950:60748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25543 comm="syz.8.6117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 564.625932][T25562] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6126'. [ 564.679225][ T28] audit: type=1326 audit(2000000001.950:60749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25543 comm="syz.8.6117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 564.803172][ T28] audit: type=1326 audit(2000000000.000:60750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25543 comm="syz.8.6117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 564.828956][ T28] audit: type=1326 audit(2000000000.000:60751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25543 comm="syz.8.6117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 564.829568][T23544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.857028][ T28] audit: type=1326 audit(2000000000.000:60752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25543 comm="syz.8.6117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 564.902543][ T28] audit: type=1326 audit(2000000000.000:60753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25543 comm="syz.8.6117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 564.964213][T25587] FAULT_INJECTION: forcing a failure. [ 564.964213][T25587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.967900][T25581] loop7: detected capacity change from 0 to 512 [ 564.998985][T25581] EXT4-fs (loop7): 1 truncate cleaned up [ 565.005021][T25581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.019500][T25587] CPU: 1 UID: 0 PID: 25587 Comm: syz.4.6136 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 565.019611][T25587] Tainted: [W]=WARN [ 565.019618][T25587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.019629][T25587] Call Trace: [ 565.019634][T25587] [ 565.019640][T25587] __dump_stack+0x1d/0x30 [ 565.019661][T25587] dump_stack_lvl+0x95/0xd0 [ 565.019676][T25587] dump_stack+0x15/0x1b [ 565.019759][T25587] should_fail_ex+0x25e/0x270 [ 565.019786][T25587] should_fail+0xb/0x20 [ 565.019824][T25587] should_fail_usercopy+0x1a/0x20 [ 565.019845][T25587] _copy_from_user+0x1c/0xb0 [ 565.019863][T25587] restore_altstack+0x4b/0x300 [ 565.019884][T25587] ? __set_current_blocked+0x284/0x2e0 [ 565.019986][T25587] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 565.020010][T25587] ? arch_do_signal_or_restart+0x2f3/0x480 [ 565.020083][T25587] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 565.020200][T25587] ? __rcu_read_unlock+0x4e/0x70 [ 565.020308][T25587] x64_sys_call+0x2823/0x3020 [ 565.020358][T25587] do_syscall_64+0x136/0x3c0 [ 565.020383][T25587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.020452][T25587] RIP: 0033:0x7f34c8b6f399 [ 565.020469][T25587] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 565.020487][T25587] RSP: 002b:00007f34c7626a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 565.020507][T25587] RAX: ffffffffffffffda RBX: 00007f34c8e55fa0 RCX: 00007f34c8b6f399 [ 565.020522][T25587] RDX: 00007f34c7626a80 RSI: 00007f34c7626bb0 RDI: 0000000000000021 [ 565.020536][T25587] RBP: 00007f34c7627090 R08: 0000000000000003 R09: 0000000000000000 [ 565.020587][T25587] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 565.020598][T25587] R13: 00007f34c8e56038 R14: 00007f34c8e55fa0 R15: 00007fff59dde128 [ 565.020614][T25587] [ 565.335166][T25605] loop4: detected capacity change from 0 to 512 [ 565.343180][T25589] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 565.364279][T25605] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.6142: Directory hole found for htree index block 0 [ 565.376716][T25605] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 565.396321][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 565.411790][ C0] EXT4-fs (loop4): initial error at time 2000000000: dx_probe:791: inode 2 [ 565.420419][ C0] EXT4-fs (loop4): last error at time 2000000000: dx_probe:791: inode 2 [ 565.435193][T25609] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.450821][T25609] netlink: 'syz.5.6139': attribute type 10 has an invalid length. [ 565.479980][T25605] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 565.497597][T25605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.521690][T25581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.572161][T25581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.673313][T25581] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6134: bg 0: block 465: padding at end of block bitmap is not set [ 565.822131][T24515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.832053][T25581] EXT4-fs (loop7): Remounting filesystem read-only [ 565.898121][T25581] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 566.459786][T25646] loop4: detected capacity change from 0 to 128 [ 566.514759][T16276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.945474][T25679] loop4: detected capacity change from 0 to 164 [ 566.969571][T25679] iso9660: Unknown parameter 'cess' [ 566.984164][T25684] netlink: 'syz.5.6160': attribute type 19 has an invalid length. [ 567.547289][T25732] loop4: detected capacity change from 0 to 4096 [ 567.575223][T25734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.585011][T25735] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6176'. [ 567.631481][T25734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.826199][T25732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.982524][T25755] bond7: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 567.991445][T25755] bond7: entered allmulticast mode [ 568.030580][T25763] syzkaller0: entered promiscuous mode [ 568.048447][T25763] syzkaller0: entered allmulticast mode [ 568.060528][T25755] ip6gretap1: entered promiscuous mode [ 568.071926][T25755] ip6gretap1: entered allmulticast mode [ 568.082441][T25755] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 568.093942][T25763] syzkaller0: mtu less than device minimum [ 568.117136][T24515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.163409][T25771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6188'. [ 568.174292][T25771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6188'. [ 568.186888][T25775] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6189'. [ 568.197557][T25775] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6189'. [ 568.214371][T25775] geneve2: entered promiscuous mode [ 568.256775][T25779] 8021q: adding VLAN 0 to HW filter on device bond8 [ 568.320046][T25789] FAULT_INJECTION: forcing a failure. [ 568.320046][T25789] name failslab, interval 1, probability 1, space 0, times 0 [ 568.360678][T25789] CPU: 0 UID: 0 PID: 25789 Comm: syz.5.6195 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 568.360711][T25789] Tainted: [W]=WARN [ 568.360717][T25789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.360726][T25789] Call Trace: [ 568.360731][T25789] [ 568.360741][T25789] __dump_stack+0x1d/0x30 [ 568.360763][T25789] dump_stack_lvl+0x95/0xd0 [ 568.360838][T25789] dump_stack+0x15/0x1b [ 568.360854][T25789] should_fail_ex+0x25e/0x270 [ 568.360933][T25789] ? rtnl_newlink+0x5c/0x1400 [ 568.360954][T25789] should_failslab+0x8c/0xb0 [ 568.360973][T25789] __kmalloc_cache_noprof+0x7b/0x3d0 [ 568.361018][T25789] ? rtnl_newlink+0x5c/0x1400 [ 568.361039][T25789] ? __rcu_read_unlock+0x33/0x70 [ 568.361063][T25789] ? __pfx_rtnl_newlink+0x10/0x10 [ 568.361085][T25789] rtnl_newlink+0x5c/0x1400 [ 568.361167][T25789] ? __rcu_read_unlock+0x33/0x70 [ 568.361223][T25789] ? trace_call_bpf+0x33c/0x420 [ 568.361247][T25789] ? perf_trace_kmem_cache_free+0x130/0x170 [ 568.361281][T25789] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 568.361307][T25789] ? perf_trace_kmem_cache_free+0x130/0x170 [ 568.361393][T25789] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 568.361417][T25789] ? __rcu_read_unlock+0x4e/0x70 [ 568.361441][T25789] ? avc_has_perm_noaudit+0xa3/0x120 [ 568.361469][T25789] ? cred_has_capability+0x224/0x2a0 [ 568.361550][T25789] ? selinux_capable+0x31/0x40 [ 568.361574][T25789] ? security_capable+0x7b/0x90 [ 568.361592][T25789] ? ns_capable+0x80/0xb0 [ 568.361617][T25789] ? __pfx_rtnl_newlink+0x10/0x10 [ 568.361702][T25789] rtnetlink_rcv_msg+0x64b/0x720 [ 568.361732][T25789] netlink_rcv_skb+0x11e/0x220 [ 568.361755][T25789] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 568.361823][T25789] rtnetlink_rcv+0x1c/0x30 [ 568.361840][T25789] netlink_unicast+0x5a7/0x680 [ 568.361863][T25789] netlink_sendmsg+0x5be/0x6f0 [ 568.361951][T25789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.361974][T25789] ____sys_sendmsg+0x532/0x580 [ 568.362059][T25789] ___sys_sendmsg+0x195/0x1e0 [ 568.362101][T25789] __x64_sys_sendmsg+0xd4/0x160 [ 568.362133][T25789] x64_sys_call+0x194c/0x3020 [ 568.362232][T25789] do_syscall_64+0x136/0x3c0 [ 568.362255][T25789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.362347][T25789] RIP: 0033:0x7f7ac28fe019 [ 568.362436][T25789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.362452][T25789] RSP: 002b:00007f7ac1357028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.362472][T25789] RAX: ffffffffffffffda RBX: 00007f7ac2b85fa0 RCX: 00007f7ac28fe019 [ 568.362487][T25789] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 568.362501][T25789] RBP: 00007f7ac1357090 R08: 0000000000000000 R09: 0000000000000000 [ 568.362527][T25789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.362538][T25789] R13: 00007f7ac2b86038 R14: 00007f7ac2b85fa0 R15: 00007ffdf14d46b8 [ 568.362558][T25789] [ 568.693765][T25797] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 568.710897][T25797] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6198'. [ 568.735372][T25797] netlink: 30 bytes leftover after parsing attributes in process `syz.5.6198'. [ 568.759751][T25797] netlink: 30 bytes leftover after parsing attributes in process `syz.5.6198'. [ 568.839751][T25814] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6207'. [ 568.895389][T25818] netlink: 'syz.0.6208': attribute type 1 has an invalid length. [ 568.911020][T25821] loop4: detected capacity change from 0 to 512 [ 568.961029][T25818] bond9: option mode: invalid value (134) [ 568.968216][T25818] bond9 (unregistering): Released all slaves [ 568.979619][T25821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.992756][T25821] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.058336][T25830] xt_ecn: cannot match TCP bits for non-tcp packets [ 569.070203][T25830] netlink: 'syz.7.6204': attribute type 10 has an invalid length. [ 569.097318][T25821] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.6209: iget: bad i_size value: 2533274857506816 [ 569.109850][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 569.109884][ T28] audit: type=1400 audit(2000000001.290:60870): avc: denied { write } for pid=25819 comm="syz.4.6209" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 569.186481][T25830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.197110][T25830] team0: Port device netdevsim2 added [ 569.301242][T24515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.615658][T25846] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6218'. [ 569.981348][T25858] netlink: 'syz.4.6214': attribute type 50 has an invalid length. [ 570.094469][T19338] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.204192][T19338] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.374644][T25885] loop4: detected capacity change from 0 to 256 [ 570.404664][T25859] lo speed is unknown, defaulting to 1000 [ 570.418369][T19338] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.441049][T25885] FAT-fs (loop4): data area starts beyond volume (32 > 0) [ 570.462873][T25885] FAT-fs (loop4): Can't find a valid FAT filesystem [ 570.646919][T19338] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.773797][ T28] audit: type=1400 audit(2000000002.970:60871): avc: denied { map } for pid=25901 comm="syz.4.6237" path="socket:[83169]" dev="sockfs" ino=83169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 570.799369][ T28] audit: type=1400 audit(2000000002.970:60872): avc: denied { read } for pid=25901 comm="syz.4.6237" path="socket:[83169]" dev="sockfs" ino=83169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 570.825745][T25902] loop4: detected capacity change from 0 to 136 [ 570.910633][T25906] loop7: detected capacity change from 0 to 512 [ 571.020748][T25906] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6235: invalid indirect mapped block 11 (level 0) [ 571.035130][T25906] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 571.037159][T25906] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.6235: attempt to clear invalid blocks 1024 len 1 [ 571.046412][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 571.046483][ C0] EXT4-fs (loop7): initial error at time 2000000003: ext4_free_branches:1023: inode 13 [ 571.046623][ C0] EXT4-fs (loop7): last error at time 2000000003: ext4_free_branches:1023: inode 13 [ 571.086358][T25906] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 571.091270][T25906] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 571.115922][T25906] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6235: invalid indirect mapped block 1819239214 (level 0) [ 571.130252][T25906] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 571.132463][T25906] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6235: invalid indirect mapped block 33554432 (level 2) [ 571.156000][T25906] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 571.158124][T25906] EXT4-fs (loop7): 1 truncate cleaned up [ 571.178037][T25906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.709810][ T28] audit: type=1326 audit(2000000003.910:60873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25909 comm="syz.4.6238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c8bce019 code=0x7ffc0000 [ 571.747160][T19338] bridge_slave_1: left allmulticast mode [ 571.771425][T19338] bridge_slave_1: left promiscuous mode [ 571.777136][T19338] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.794786][ T28] audit: type=1326 audit(2000000003.930:60874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25909 comm="syz.4.6238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c8bce019 code=0x7ffc0000 [ 571.820451][ T28] audit: type=1326 audit(2000000003.930:60875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25909 comm="syz.4.6238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c8bce019 code=0x7ffc0000 [ 571.845986][ T28] audit: type=1326 audit(2000000003.930:60876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25909 comm="syz.4.6238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f34c8bce019 code=0x7ffc0000 [ 572.137995][ T28] audit: type=1326 audit(2000000000.000:60877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25909 comm="syz.4.6238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c8bce019 code=0x7ffc0000 [ 572.163565][ T28] audit: type=1326 audit(2000000000.000:60878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25909 comm="syz.4.6238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c8bce019 code=0x7ffc0000 [ 572.189150][ T28] audit: type=1326 audit(2000000000.000:60879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25909 comm="syz.4.6238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c8bce019 code=0x7ffc0000 [ 572.430319][T25944] loop4: detected capacity change from 0 to 512 [ 572.451320][T25944] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.6243: invalid indirect mapped block 11 (level 0) [ 572.464670][T25944] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 572.465547][T25944] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.6243: attempt to clear invalid blocks 1024 len 1 [ 572.474696][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 572.474717][ C0] EXT4-fs (loop4): initial error at time 2000000000: ext4_free_branches:1023: inode 13 [ 572.474749][ C0] EXT4-fs (loop4): last error at time 2000000000: ext4_free_branches:1023: inode 13 [ 572.513384][T25944] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 572.517374][T25944] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 572.540919][T25944] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.6243: invalid indirect mapped block 1819239214 (level 0) [ 572.554870][T25944] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 572.555265][T25944] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.6243: invalid indirect mapped block 33554432 (level 2) [ 572.578262][T25944] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 572.579660][T25944] EXT4-fs (loop4): 1 truncate cleaned up [ 572.595150][T25944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.330100][T19338] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 573.341797][T16276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.351735][T19338] ip6gretap1 (unregistering): left allmulticast mode [ 573.460348][T19338] team0: Port device gretap1 removed [ 573.528509][T19338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.573044][T19338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.615678][T19338] bond0 (unregistering): Released all slaves [ 573.640003][T19338] bond1 (unregistering): Released all slaves [ 573.667895][T25958] __nla_validate_parse: 6 callbacks suppressed [ 573.667950][T25958] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6246'. [ 573.683629][T19338] bond2 (unregistering): Released all slaves [ 573.695629][T19338] bond3 (unregistering): Released all slaves [ 573.709047][T19338] bond4 (unregistering): Released all slaves [ 573.720833][T19338] bond5 (unregistering): Released all slaves [ 573.731541][T19338] bond6 (unregistering): Released all slaves [ 573.743550][T19338] bond7 (unregistering): Released all slaves [ 573.755018][T19338] bond8 (unregistering): Released all slaves [ 573.766047][T25859] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.778230][T25859] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.785816][T25859] bridge_slave_0: entered allmulticast mode [ 573.793866][T25859] bridge_slave_0: entered promiscuous mode [ 573.824515][ T3017] 8021q: adding VLAN 0 to HW filter on device eth13 [ 573.854735][T25859] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.871105][T25859] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.888369][T25859] bridge_slave_1: entered allmulticast mode [ 573.901421][T25859] bridge_slave_1: entered promiscuous mode [ 573.914491][T19338] tipc: Left network mode [ 573.973331][T24515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.039021][T25859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.053319][T25859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.073227][T19338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.083802][T19338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.103103][T19338] veth1_macvtap: left promiscuous mode [ 574.114415][T19338] veth0_macvtap: left promiscuous mode [ 574.124924][T19338] veth1_vlan: left promiscuous mode [ 574.134168][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 574.134183][ T28] audit: type=1400 audit(2000000002.380:60909): avc: denied { write } for pid=25968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.135661][T19338] veth0_vlan: left promiscuous mode [ 574.159840][ T28] audit: type=1400 audit(2000000002.410:60910): avc: denied { write } for pid=25982 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.197523][T25967] loop4: detected capacity change from 0 to 4096 [ 574.237896][T25967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.251983][ T28] audit: type=1326 audit(2000000002.500:60911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz.5.6250" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 574.252205][ T28] audit: type=1326 audit(2000000002.500:60912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz.5.6250" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 574.252364][ T28] audit: type=1326 audit(2000000002.500:60913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz.5.6250" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 574.252492][ T28] audit: type=1326 audit(2000000002.500:60914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz.5.6250" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 574.252624][ T28] audit: type=1326 audit(2000000000.000:60915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz.5.6250" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 574.252743][ T28] audit: type=1326 audit(2000000000.000:60916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz.5.6250" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 574.253007][ T28] audit: type=1326 audit(2000000000.000:60917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz.5.6250" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 574.253115][ T28] audit: type=1326 audit(2000000000.000:60918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz.5.6250" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 574.510215][T25989] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6251'. [ 574.519394][T19338] team0 (unregistering): Port device team_slave_1 removed [ 574.531673][T19338] team0 (unregistering): Port device team_slave_0 removed [ 574.575446][T19341] smc: removing ib device sz1 [ 574.597908][ T3017] 8021q: adding VLAN 0 to HW filter on device eth14 [ 574.604907][ T6960] lo speed is unknown, defaulting to 1000 [ 574.606524][T25967] netlink: 'syz.4.6249': attribute type 12 has an invalid length. [ 574.611484][ T6960] sz1: Port: 1 Link DOWN [ 574.634376][T25967] netlink: 'syz.4.6249': attribute type 29 has an invalid length. [ 574.642753][T25967] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6249'. [ 574.659049][T25967] netlink: 'syz.4.6249': attribute type 1 has an invalid length. [ 574.672039][T25967] netlink: 'syz.4.6249': attribute type 2 has an invalid length. [ 574.689846][T25990] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6249'. [ 574.701144][T25990] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6249'. [ 574.715441][T25859] team0: Port device team_slave_0 added [ 574.739194][T24515] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 574.765227][T24515] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 574.792441][T25859] team0: Port device team_slave_1 added [ 574.889953][T25859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.909823][T25859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.948724][T25859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.974759][T25859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.983474][T25859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.062489][T26026] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6258'. [ 575.119738][T26026] loop7: detected capacity change from 0 to 512 [ 575.192841][T26026] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6258: invalid indirect mapped block 11 (level 0) [ 575.206798][T26026] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 575.209180][T26026] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.6258: attempt to clear invalid blocks 1024 len 1 [ 575.218584][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 575.218675][ C1] EXT4-fs (loop7): initial error at time 2000000000: ext4_free_branches:1023: inode 13 [ 575.218834][ C1] EXT4-fs (loop7): last error at time 2000000000: ext4_free_branches:1023: inode 13 [ 575.267825][T26026] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 575.272356][T26026] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 575.300810][T26026] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6258: invalid indirect mapped block 1819239214 (level 0) [ 575.316125][T26026] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6258: invalid indirect mapped block 33554432 (level 2) [ 575.336534][T26026] EXT4-fs (loop7): 1 truncate cleaned up [ 575.346509][T26026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.441663][T25859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.478166][ T3017] 8021q: adding VLAN 0 to HW filter on device eth15 [ 575.628642][T25859] hsr_slave_0: entered promiscuous mode [ 575.690161][T25859] hsr_slave_1: entered promiscuous mode [ 575.735457][T25859] debugfs: 'hsr0' already exists in 'hsr' [ 575.756212][T25859] Cannot create hsr debugfs directory [ 575.766692][T19338] IPVS: stop unused estimator thread 0... [ 576.066065][T26033] loop5: detected capacity change from 0 to 1024 [ 576.101235][T26033] EXT4-fs: Ignoring removed mblk_io_submit option [ 576.172609][T26033] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 576.187877][T24515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.197082][T26033] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 576.208492][T26033] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 576.233893][T26033] EXT4-fs (loop5): journal inode is deleted [ 576.494983][T19343] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.528636][T16276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.547263][T26062] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6263'. [ 576.631179][T19343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.805769][T25859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 577.779010][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.786962][T25859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 577.795592][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.809439][T19343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.828908][T25859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 577.880129][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.920038][T19343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.980865][T25859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 578.011241][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.138615][T19343] bridge_slave_1: left allmulticast mode [ 578.161243][T19343] bridge_slave_1: left promiscuous mode [ 578.187279][T19343] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.219205][T19343] bridge_slave_0: left allmulticast mode [ 578.243028][T19343] bridge_slave_0: left promiscuous mode [ 578.266598][T19343] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.496426][T19343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.508588][T19343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.519192][T19343] bond0 (unregistering): Released all slaves [ 578.621217][T26137] loop7: detected capacity change from 0 to 1024 [ 578.633054][T25859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.669268][T25859] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.680341][T26137] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 578.724410][T19341] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.726154][T26137] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.731557][T19341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.786152][T19338] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.793240][T19338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.897717][T19343] hsr_slave_0: left promiscuous mode [ 578.903943][T19343] hsr_slave_1: left promiscuous mode [ 578.918013][T19343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.935153][T19343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.957173][T19343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.964647][T19343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.985731][T19343] veth1_macvtap: left promiscuous mode [ 578.991950][T19343] veth0_macvtap: left promiscuous mode [ 579.002053][T19343] veth1_vlan: left promiscuous mode [ 579.014813][T19343] veth0_vlan: left promiscuous mode [ 579.082783][T26137] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.6272: lblock 0 mapped to illegal pblock 0 (length 6) [ 579.117759][T26137] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 579.131726][T19343] team0 (unregistering): Port device team_slave_1 removed [ 579.143875][T26137] EXT4-fs (loop7): This should not happen!! Data will be lost [ 579.143875][T26137] [ 579.153733][T19343] team0 (unregistering): Port device team_slave_0 removed [ 579.178261][T26172] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.6272: lblock 0 mapped to illegal pblock 0 (length 1) [ 579.192011][T26172] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.6272: lblock 0 mapped to illegal pblock 0 (length 1) [ 579.206833][T26172] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.6272: lblock 0 mapped to illegal pblock 0 (length 1) [ 579.219039][T25859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.225433][ T28] kauditd_printk_skb: 277 callbacks suppressed [ 579.225446][ T28] audit: type=1400 audit(2000000004.530:61196): avc: denied { append } for pid=26136 comm="syz.7.6272" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 579.242038][T25859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.261562][T26172] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.6272: lblock 0 mapped to illegal pblock 0 (length 1) [ 579.283660][T26172] EXT4-fs error (device loop7): ext4_ext_remove_space:2969: inode #15: comm syz.7.6272: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 579.318820][T26137] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.6272: lblock 3 mapped to illegal pblock 3 (length 2) [ 579.441563][T26180] loop5: detected capacity change from 0 to 128 [ 579.487142][T26085] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.506700][T26085] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.514032][T26085] bridge_slave_0: entered allmulticast mode [ 579.514289][T26198] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 579.520847][T26085] bridge_slave_0: entered promiscuous mode [ 579.543694][T26085] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.550822][T26085] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.558237][T26085] bridge_slave_1: entered allmulticast mode [ 579.564903][T26085] bridge_slave_1: entered promiscuous mode [ 579.582112][T26085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.597104][T26085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.610922][ T28] audit: type=1400 audit(2000000004.920:61197): avc: denied { write } for pid=26184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.672729][T26085] team0: Port device team_slave_0 added [ 579.681915][ T28] audit: type=1400 audit(2000000004.990:61198): avc: denied { write } for pid=26210 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.696052][T26085] team0: Port device team_slave_1 added [ 579.728908][T26214] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6280'. [ 579.758523][T26085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.766583][T26085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.793396][T26085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.804787][ T3017] 8021q: adding VLAN 0 to HW filter on device eth13 [ 579.821386][T26085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.832389][T26085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.858764][T26085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.861733][T19341] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:23: lblock 8 mapped to illegal pblock 8 (length 8) [ 579.870737][T25859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.885506][T19341] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 579.912337][T19341] EXT4-fs (loop7): This should not happen!! Data will be lost [ 579.912337][T19341] [ 579.928818][T26085] hsr_slave_0: entered promiscuous mode [ 579.934853][T26085] hsr_slave_1: entered promiscuous mode [ 579.993242][T19341] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:23: bg 0: block 112: padding at end of block bitmap is not set [ 580.011212][T19341] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 580.030269][T25859] veth0_vlan: entered promiscuous mode [ 580.040097][T19341] EXT4-fs (loop7): This should not happen!! Data will be lost [ 580.040097][T19341] [ 580.046522][T25859] veth1_vlan: entered promiscuous mode [ 580.057724][T19341] EXT4-fs (loop7): Total free blocks count 0 [ 580.068935][T19341] EXT4-fs (loop7): Free/Dirty block details [ 580.077049][T19341] EXT4-fs (loop7): free_blocks=0 [ 580.105480][T25859] veth0_macvtap: entered promiscuous mode [ 580.115557][ T28] audit: type=1400 audit(2000000005.420:61199): avc: denied { write } for pid=26228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.153155][T16276] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 580.173034][T25859] veth1_macvtap: entered promiscuous mode [ 580.187219][ T28] audit: type=1400 audit(2000000005.500:61200): avc: denied { write } for pid=26248 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.193176][T25859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.246829][ T3017] 8021q: adding VLAN 0 to HW filter on device eth14 [ 580.257589][T25859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.306113][T26256] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 580.346682][T19343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.367073][ T28] audit: type=1400 audit(2000000005.680:61201): avc: denied { append } for pid=26257 comm="syz.8.6286" name="pfkey" dev="proc" ino=4026532716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 580.368724][T19343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.485100][T26262] loop7: detected capacity change from 0 to 8192 [ 580.526311][T19341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.546581][T19341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.562848][ T28] audit: type=1400 audit(2000000005.870:61202): avc: denied { write } for pid=26261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.603738][T26279] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 580.656712][ T28] audit: type=1400 audit(2000000005.920:61203): avc: denied { write } for pid=26282 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.663183][T26085] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 580.693974][T26289] 9p: Bad value for 'rfdno' [ 580.737235][T26085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.745555][ T3017] 8021q: adding VLAN 0 to HW filter on device eth15 [ 580.756156][T26287] ipip0: entered promiscuous mode [ 580.762506][T26287] ipip0: entered allmulticast mode [ 580.788724][T26085] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 580.797427][T26085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.810719][T26085] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 580.821356][T26085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.829066][T26085] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 580.837557][T26085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 580.954446][T26307] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6293'. [ 580.997053][T26085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.025190][ T28] audit: type=1400 audit(2000000006.330:61204): avc: denied { write } for pid=26303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.029557][T26085] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.083939][ T3017] 8021q: adding VLAN 0 to HW filter on device eth16 [ 581.108640][T26330] loop7: detected capacity change from 0 to 256 [ 581.113154][T13717] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.118015][ T28] audit: type=1400 audit(2000000006.380:61205): avc: denied { write } for pid=26327 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.121946][T13717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.180783][T19338] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.187878][T19338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.244496][T26341] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 581.441979][T26085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.585058][T26085] veth0_vlan: entered promiscuous mode [ 581.600778][T26085] veth1_vlan: entered promiscuous mode [ 581.633217][T26085] veth0_macvtap: entered promiscuous mode [ 581.652124][T26085] veth1_macvtap: entered promiscuous mode [ 581.683333][T26085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.692334][T26396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6304'. [ 581.708870][T26085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.716198][T26396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6304'. [ 581.734250][T26396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6304'. [ 581.768440][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.788410][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.836313][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.866085][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.395721][T26431] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 582.492058][T26440] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6314'. [ 582.593309][T26446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6316'. [ 582.621892][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6319'. [ 582.631076][T26446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6316'. [ 582.651698][T26450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6315'. [ 582.679140][T26453] netlink: 'syz.0.6319': attribute type 11 has an invalid length. [ 582.767255][ T30] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.782419][T13717] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.809534][T13717] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.957126][ T30] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.055788][T26500] syzkaller0: entered promiscuous mode [ 583.180986][T26500] syzkaller0: entered allmulticast mode [ 583.265305][T26500] tipc: Started in network mode [ 583.265808][T26500] tipc: Node identity 12bd70c2a6a1, cluster identity 4711 [ 583.266075][T26500] tipc: Enabled bearer , priority 0 [ 583.301130][T26500] tipc: Resetting bearer [ 583.978920][T26498] tipc: Resetting bearer [ 584.038564][T26498] tipc: Disabling bearer [ 584.483511][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 584.483526][ T28] audit: type=1400 audit(2000000009.790:61220): avc: denied { write } for pid=26523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.552039][ T28] audit: type=1400 audit(2000000009.840:61221): avc: denied { write } for pid=26536 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.621350][T26546] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 584.657992][ T28] audit: type=1400 audit(2000000009.970:61222): avc: denied { write } for pid=26538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.687728][ T28] audit: type=1400 audit(2000000009.970:61223): avc: denied { write } for pid=26557 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.907815][ T28] audit: type=1400 audit(2000000010.210:61224): avc: denied { write } for pid=26568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.941761][ T28] audit: type=1400 audit(2000000010.250:61225): avc: denied { write } for pid=26585 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.020954][ T28] audit: type=1326 audit(2000000010.330:61226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.8.6341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 585.048164][T26586] __nla_validate_parse: 9 callbacks suppressed [ 585.048179][T26586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6339'. [ 585.052804][ T28] audit: type=1326 audit(2000000010.360:61227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.8.6341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 585.104372][ T28] audit: type=1326 audit(2000000010.360:61228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.8.6341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 585.130896][ T28] audit: type=1326 audit(2000000010.360:61229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26590 comm="syz.8.6341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff9a12be019 code=0x7ffc0000 [ 585.394690][T26622] netlink: 80 bytes leftover after parsing attributes in process `syz.8.6342'. [ 586.178913][T26633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6346'. [ 586.231801][T26636] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6347'. [ 586.284518][T26636] sit0: entered promiscuous mode [ 586.604633][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6353'. [ 587.589843][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6357'. [ 587.637410][T26676] 9p: Bad value for 'wfdno' [ 587.656937][T26669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6358'. [ 587.706402][T26669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6358'. [ 587.758927][T26686] mtrr: base(0x12000) is not aligned on a size(0x6000) boundary [ 587.771599][T26683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6363'. [ 587.801994][T26683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6363'. [ 588.076064][T26705] 9p: Bad value for 'wfdno' [ 588.204648][T26721] FAULT_INJECTION: forcing a failure. [ 588.204648][T26721] name failslab, interval 1, probability 1, space 0, times 0 [ 588.228768][T26717] program syz.5.6378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.242476][T26721] CPU: 0 UID: 0 PID: 26721 Comm: syz.8.6377 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 588.242507][T26721] Tainted: [W]=WARN [ 588.242512][T26721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.242545][T26721] Call Trace: [ 588.242555][T26721] [ 588.242596][T26721] __dump_stack+0x1d/0x30 [ 588.242619][T26721] dump_stack_lvl+0x95/0xd0 [ 588.242637][T26721] dump_stack+0x15/0x1b [ 588.242655][T26721] should_fail_ex+0x25e/0x270 [ 588.242709][T26721] should_failslab+0x8c/0xb0 [ 588.242726][T26721] __kmalloc_noprof+0xd4/0x4a0 [ 588.242746][T26721] ? iovec_from_user+0x84/0x200 [ 588.242802][T26721] ? iovec_from_user+0x84/0x200 [ 588.242849][T26721] iovec_from_user+0x84/0x200 [ 588.242866][T26721] __import_iovec+0xf3/0x530 [ 588.242911][T26721] ? should_fail_ex+0xd9/0x270 [ 588.242932][T26721] import_iovec+0x60/0x80 [ 588.242952][T26721] ___sys_sendmsg+0x160/0x1e0 [ 588.242998][T26721] __x64_sys_sendmsg+0xd4/0x160 [ 588.243085][T26721] x64_sys_call+0x194c/0x3020 [ 588.243105][T26721] do_syscall_64+0x136/0x3c0 [ 588.243129][T26721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.243152][T26721] RIP: 0033:0x7ff9a12be019 [ 588.243166][T26721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.243233][T26721] RSP: 002b:00007ff99fd17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.243251][T26721] RAX: ffffffffffffffda RBX: 00007ff9a1545fa0 RCX: 00007ff9a12be019 [ 588.243264][T26721] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 588.243275][T26721] RBP: 00007ff99fd17090 R08: 0000000000000000 R09: 0000000000000000 [ 588.243288][T26721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.243302][T26721] R13: 00007ff9a1546038 R14: 00007ff9a1545fa0 R15: 00007ffc705c2228 [ 588.243400][T26721] [ 588.583715][T26730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.591813][T26730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.617154][T26730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.624594][T26730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.644332][T26734] 9p: Bad value for 'wfdno' [ 588.710187][T26751] netlink: 'syz.8.6391': attribute type 4 has an invalid length. [ 588.710503][T26752] netlink: 'syz.8.6391': attribute type 4 has an invalid length. [ 588.892610][T26763] 9p: Bad value for 'rfdno' [ 588.943064][T26771] loop7: detected capacity change from 0 to 512 [ 589.081550][T26791] 9p: Bad value for 'rfdno' [ 589.344805][T26806] FAULT_INJECTION: forcing a failure. [ 589.344805][T26806] name failslab, interval 1, probability 1, space 0, times 0 [ 589.357634][T26806] CPU: 0 UID: 0 PID: 26806 Comm: syz.8.6414 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 589.357652][T26806] Tainted: [W]=WARN [ 589.357728][T26806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.357736][T26806] Call Trace: [ 589.357739][T26806] [ 589.357744][T26806] __dump_stack+0x1d/0x30 [ 589.357759][T26806] dump_stack_lvl+0x95/0xd0 [ 589.357808][T26806] dump_stack+0x15/0x1b [ 589.357886][T26806] should_fail_ex+0x25e/0x270 [ 589.357919][T26806] should_failslab+0x8c/0xb0 [ 589.357932][T26806] __kmalloc_noprof+0xd4/0x4a0 [ 589.357944][T26806] ? copy_splice_read+0xc2/0x6b0 [ 589.357956][T26806] ? copy_splice_read+0xc2/0x6b0 [ 589.358042][T26806] copy_splice_read+0xc2/0x6b0 [ 589.358140][T26806] ? __kmalloc_noprof+0x3e3/0x4a0 [ 589.358235][T26806] ? alloc_pipe_info+0x1c8/0x340 [ 589.358248][T26806] ? __pfx_copy_splice_read+0x10/0x10 [ 589.358286][T26806] splice_direct_to_actor+0x261/0x680 [ 589.358299][T26806] ? kstrtouint_from_user+0xa8/0xf0 [ 589.358322][T26806] ? __pfx_direct_splice_actor+0x10/0x10 [ 589.358337][T26806] do_splice_direct+0x119/0x1a0 [ 589.358350][T26806] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 589.358476][T26806] do_sendfile+0x37d/0x640 [ 589.358503][T26806] __x64_sys_sendfile64+0x105/0x150 [ 589.358517][T26806] x64_sys_call+0x2dc4/0x3020 [ 589.358532][T26806] do_syscall_64+0x136/0x3c0 [ 589.358612][T26806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.358626][T26806] RIP: 0033:0x7ff9a12be019 [ 589.358636][T26806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.358646][T26806] RSP: 002b:00007ff99fd17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 589.358658][T26806] RAX: ffffffffffffffda RBX: 00007ff9a1545fa0 RCX: 00007ff9a12be019 [ 589.358730][T26806] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 589.358737][T26806] RBP: 00007ff99fd17090 R08: 0000000000000000 R09: 0000000000000000 [ 589.358744][T26806] R10: 0000000000000202 R11: 0000000000000246 R12: 0000000000000001 [ 589.358751][T26806] R13: 00007ff9a1546038 R14: 00007ff9a1545fa0 R15: 00007ffc705c2228 [ 589.358776][T26806] [ 589.605191][T26809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.640883][T26809] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 589.699562][T26821] netlink: 'syz.2.6421': attribute type 5 has an invalid length. [ 589.743846][T26808] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 589.763992][ T28] kauditd_printk_skb: 198 callbacks suppressed [ 589.764002][ T28] audit: type=1400 audit(2000000000.820:61428): avc: denied { mount } for pid=26830 comm="syz.5.6433" name="/" dev="hugetlbfs" ino=84883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 589.764745][T26827] FAULT_INJECTION: forcing a failure. [ 589.764745][T26827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.810422][T26827] CPU: 0 UID: 0 PID: 26827 Comm: syz.2.6422 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 589.810495][T26827] Tainted: [W]=WARN [ 589.810502][T26827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.810514][T26827] Call Trace: [ 589.810521][T26827] [ 589.810528][T26827] __dump_stack+0x1d/0x30 [ 589.810605][T26827] dump_stack_lvl+0x95/0xd0 [ 589.810625][T26827] dump_stack+0x15/0x1b [ 589.810642][T26827] should_fail_ex+0x25e/0x270 [ 589.810666][T26827] should_fail+0xb/0x20 [ 589.810722][T26827] should_fail_usercopy+0x1a/0x20 [ 589.810746][T26827] _copy_to_user+0x20/0xa0 [ 589.810834][T26827] simple_read_from_buffer+0xb5/0x130 [ 589.810858][T26827] proc_fail_nth_read+0x10e/0x150 [ 589.810876][T26827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.810934][T26827] vfs_read+0x18e/0x7c0 [ 589.810951][T26827] ? __rcu_read_unlock+0x4e/0x70 [ 589.810976][T26827] ? __fget_files+0x184/0x1c0 [ 589.811047][T26827] ? mutex_lock+0x57/0x90 [ 589.811074][T26827] ksys_read+0xdc/0x1a0 [ 589.811092][T26827] __x64_sys_read+0x40/0x50 [ 589.811179][T26827] x64_sys_call+0x2886/0x3020 [ 589.811200][T26827] do_syscall_64+0x136/0x3c0 [ 589.811250][T26827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.811271][T26827] RIP: 0033:0x7f4f54b1e84e [ 589.811286][T26827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 589.811352][T26827] RSP: 002b:00007f4f535b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 589.811369][T26827] RAX: ffffffffffffffda RBX: 00007f4f535b76c0 RCX: 00007f4f54b1e84e [ 589.811422][T26827] RDX: 000000000000000f RSI: 00007f4f535b70a0 RDI: 0000000000000005 [ 589.811434][T26827] RBP: 00007f4f535b7090 R08: 0000000000000000 R09: 0000000000000000 [ 589.811492][T26827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.811502][T26827] R13: 00007f4f54de6038 R14: 00007f4f54de5fa0 R15: 00007fffb71a3c08 [ 589.811520][T26827] [ 590.139957][T26854] __nla_validate_parse: 9 callbacks suppressed [ 590.140003][T26854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6431'. [ 590.444941][ T28] audit: type=1400 audit(2000000001.510:61429): avc: denied { lock } for pid=26871 comm="syz.8.6437" path="socket:[84949]" dev="sockfs" ino=84949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 590.476505][T26868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6436'. [ 590.546129][ T28] audit: type=1326 audit(2000000001.610:61430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26877 comm="syz.5.6438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 590.572579][ T28] audit: type=1326 audit(2000000001.610:61431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26877 comm="syz.5.6438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 590.613653][ T28] audit: type=1326 audit(2000000001.610:61432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26877 comm="syz.5.6438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 590.646861][ T28] audit: type=1326 audit(2000000001.610:61433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26877 comm="syz.5.6438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 590.673427][ T28] audit: type=1326 audit(2000000001.610:61434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26877 comm="syz.5.6438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 590.699459][ T28] audit: type=1326 audit(2000000000.000:61435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26877 comm="syz.5.6438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 590.725123][ T28] audit: type=1326 audit(2000000000.000:61436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26877 comm="syz.5.6438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 590.751515][ T28] audit: type=1326 audit(2000000000.000:61437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26877 comm="syz.5.6438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac28fe019 code=0x7ffc0000 [ 590.790721][T26892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6444'. [ 590.842222][T26894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6445'. [ 590.880746][T26898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6446'. [ 590.890238][T26898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6446'. [ 590.899712][T26898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6446'. [ 590.941134][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6448'. [ 590.949995][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6448'. [ 590.952335][T26906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6450'. [ 591.219368][T26938] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.305467][T26947] loop7: detected capacity change from 0 to 512 [ 591.356132][T26947] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6457: invalid indirect mapped block 11 (level 0) [ 591.369495][T26947] fserror_report: 2 callbacks suppressed [ 591.369507][T26947] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 591.376086][T26947] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.6457: attempt to clear invalid blocks 1024 len 1 [ 591.385257][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 591.385272][ C0] EXT4-fs (loop7): initial error at time 2000000000: ext4_free_branches:1023: inode 13 [ 591.385315][ C0] EXT4-fs (loop7): last error at time 2000000000: ext4_free_branches:1023: inode 13 [ 591.423816][T26947] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 591.426491][T26947] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 591.450209][T26947] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6457: invalid indirect mapped block 1819239214 (level 0) [ 591.464193][T26947] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 591.467960][T26947] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6457: invalid indirect mapped block 33554432 (level 2) [ 591.490960][T26947] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 591.502020][T26947] EXT4-fs (loop7): 1 truncate cleaned up [ 591.518432][T26947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.363890][T26972] ================================================================== [ 592.371993][T26972] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 592.379708][T26972] [ 592.382019][T26972] write to 0xffff888104145b08 of 8 bytes by task 26966 on cpu 0: [ 592.389720][T26972] mas_wr_store_entry+0x33c0/0x5a90 [ 592.394911][T26972] mas_store_prealloc+0x421/0x670 [ 592.399923][T26972] commit_merge+0x69f/0x720 [ 592.404419][T26972] vma_expand+0x2ce/0x430 [ 592.408739][T26972] vma_merge_new_range+0x295/0x310 [ 592.413840][T26972] mmap_region+0x109c/0x20c0 [ 592.418415][T26972] do_mmap+0x970/0xbc0 [ 592.422477][T26972] vm_mmap_pgoff+0x183/0x2d0 [ 592.427051][T26972] ksys_mmap_pgoff+0xc1/0x310 [ 592.431713][T26972] x64_sys_call+0x14df/0x3020 [ 592.436375][T26972] do_syscall_64+0x136/0x3c0 [ 592.440950][T26972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.446827][T26972] [ 592.449133][T26972] read to 0xffff888104145b08 of 8 bytes by task 26972 on cpu 1: [ 592.456742][T26972] mtree_range_walk+0x1aa/0x480 [ 592.461586][T26972] mas_walk+0x1ac/0x340 [ 592.465727][T26972] lock_vma_under_rcu+0xc9/0x210 [ 592.470650][T26972] do_user_addr_fault+0x237/0x1060 [ 592.475756][T26972] exc_page_fault+0x62/0xa0 [ 592.480247][T26972] asm_exc_page_fault+0x26/0x30 [ 592.485121][T26972] [ 592.487428][T26972] value changed: 0x00007f4f53554fff -> 0x00007f4f53533fff [ 592.494519][T26972] [ 592.496823][T26972] Reported by Kernel Concurrency Sanitizer on: [ 592.502958][T26972] CPU: 1 UID: 0 PID: 26972 Comm: syz.2.6472 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 592.513878][T26972] Tainted: [W]=WARN [ 592.517663][T26972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 592.527704][T26972] ================================================================== [ 592.869583][T16276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.794392][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 596.794434][ T28] audit: type=1400 audit(2000000006.230:61468): avc: denied { write } for pid=26976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.827991][ T28] audit: type=1400 audit(2000000006.240:61469): avc: denied { write } for pid=26987 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.298383][ T28] audit: type=1400 audit(2000000006.740:61470): avc: denied { write } for pid=26990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.321565][ T28] audit: type=1400 audit(2000000006.760:61471): avc: denied { write } for pid=27001 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.839214][ T28] audit: type=1400 audit(2000000007.280:61472): avc: denied { write } for pid=27004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.862501][ T28] audit: type=1400 audit(2000000007.290:61473): avc: denied { write } for pid=27015 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.972226][ T28] audit: type=1400 audit(2000000007.410:61474): avc: denied { write } for pid=27018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.995574][ T28] audit: type=1400 audit(2000000007.430:61475): avc: denied { write } for pid=27029 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1