last executing test programs: 10m20.897076388s ago: executing program 32 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003740)={0x18, 0x11, 0xa, 0x101, 0x70bd2d, 0x25dfdbfb, {0x5, 0x0, 0x8}, [@generic='H']}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20044810) syz_usb_ep_write(0xffffffffffffffff, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x0, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x7fffffff}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r4, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r4, 0x5) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/4096, 0x1000, 0xfffffffffffffffd) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000001000)=0x7ff, &(0x7f0000001040)=0x2) 10m6.009881062s ago: executing program 33 (id=309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xe, 0xfffffffffffffffe, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004600002c00020000020690780a210104ac1414aa94020000000000002585e7805da1e3014018590135ad17521e8ab3b3cb1841fa420a4d80b583c729a9caaa321a728e9e60290879919a96e3848be7f32bf5ae776fa552706dece88abdc2e39f6e0a2d7bc2272178fd", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYRES32], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x440003, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d0f, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRES64], 0x0, 0xfffffffffffffd7a, 0x0, 0x41}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() r6 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x8000) ioctl$BLKGETDISKSEQ(r6, 0x80081280, &(0x7f0000000480)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000300)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newtaction={0x14, 0x32, 0x1, 0x80, 0x25dfdbfe}, 0x14}}, 0x0) mknodat$null(r1, &(0x7f00000000c0)='./file0\x00', 0x4, 0x103) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r8, &(0x7f00000004c0)={0xa, 0x8, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc3d) 9m58.191153879s ago: executing program 34 (id=350): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="656e633d6f61657020686173683d626c616b6532732d3232344aa22d67656e657269630000000000000000000000000000000000000000000000000000ca0e0000000000000000000000000000004373f563b7956df4135bc5b069cf9a2b07d294de0e98927920cfb2c0683abdbc5cd161041237114ad03bb165e65839eb6ee1fb09eb7e65426dc5"], 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800) recvfrom$inet(r0, 0x0, 0x0, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4024e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x0, 0x4000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000f80)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801b, &(0x7f0000000240), 0xff, 0x523, &(0x7f00000006c0)="$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") r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/177, 0x39) epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) 9m46.075270565s ago: executing program 35 (id=454): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) rename(0x0, 0x0) kexec_load(0x3, 0x4, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x3e0000000000}], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3c, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r3, 0x1}, 0x20) r4 = getpgid(0x0) r5 = syz_clone(0x1850000, &(0x7f0000000580)="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", 0x1000, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600)="60f144962fcf078f958d6be4ee3cad83a134f6d5b440c1e3331f57838e6b8079ae361c7dc7b0c0f413bccc510a15ba27fde99123020f011e01a22cd18fb053a41f818a683734df76ff052642c9a2ed9ffee6624b00bbfae097d2d2c6266918733793c83514005f83976a66ec3376070329123a18e055813449ebb0102a59ae174388836a848cc5537d1a93") syz_clone3(&(0x7f0000001700)={0xb020000, &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000380), {0x7}, &(0x7f0000000480)=""/22, 0x16, &(0x7f00000004c0)=""/70, &(0x7f00000016c0)=[r4, r5], 0x2}, 0x58) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000140)={{0x7340}, 0x100, './file0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) preadv(r6, 0x0, 0x0, 0xef, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x8000, 0xd93f2a56146ae2e0, 0x3, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0xc, 0x2f, 0x0, @remote, @empty}}}}) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "e35d64c42d68a5ba856c632ba1e92dea8d6d5217"}, 0x15, 0x1) 8m54.432187917s ago: executing program 36 (id=908): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000280)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0xff8c) 8m34.441210939s ago: executing program 37 (id=1088): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x34, 0x54880}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000050}, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 8m12.543601002s ago: executing program 38 (id=1252): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r8, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x1, 0x1}}}], 0x18}, 0x24004800) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) 7m54.330391139s ago: executing program 39 (id=1444): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8d1c86dd0700100000004000000060ec97000fc82b00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 6m22.26391496s ago: executing program 40 (id=2230): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000ef0000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033"], 0x100}}, 0x0) 6m20.030613273s ago: executing program 41 (id=2245): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800001c", @ANYRES16=r1, @ANYBLOB="01022abd7000000000000f0000000c0099004a2dec075300000047000e00"], 0x68}, 0x1, 0x0, 0x0, 0x20000014}, 0x48000) 5m57.458429032s ago: executing program 42 (id=2445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280100001700010028bd7000fddbdf25fe800000000000000000000000000037000064e86c000000fc0000000000000000000000000000010a010102000000000000000000000000fc0000000000000000000000000000014e2300044e2300030a00a0a06c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000ac1e00010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="30c2ffffffffffff06000000000000005b5200000000000000000000010000007f000000000000000400000000000000040000000000000007000000000000000a00000000000000e80000000000000037000000000000002501000000000000ff7f"], 0x128}}, 0x10) 5m54.380148828s ago: executing program 43 (id=2455): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x8}, 0x0, 0x10000, 0xe4f, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b2266"], 0xfdef) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) set_mempolicy(0x4005, 0x0, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x4, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@mcast2, 0x4e24, 0x4, 0x4e22, 0xc1, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x6, 0xf, 0x2000000000000, 0x7fffffff, 0xfffffffffffffdfd, 0x50, 0x3}, {0x0, 0xd, 0x4, 0x3}, 0x80000006, 0x40000000, 0x0, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x20008100) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff"], 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e99905000000ffffff80fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 5m15.349095524s ago: executing program 44 (id=2764): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084) (fail_nth: 8) 4m48.652226055s ago: executing program 45 (id=2948): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf251a00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x2404c0c4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) select(0x40, &(0x7f0000000240)={0x3, 0x5, 0xb96, 0x1, 0x1, 0x9, 0x6, 0x400}, 0x0, &(0x7f0000000340)={0xa, 0x2536, 0xffffffffffff0001, 0x9, 0x1, 0x29e, 0x10000, 0x8}, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x150, 0x111, 0x4b4, 0x150, 0x700, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0x0, 0xff, 0xff000000], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0xf}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0xff], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x24, 0xca, 'pptp\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) syz_clone(0x1400, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r6, &(0x7f0000000300)}, 0x20) r7 = memfd_create(&(0x7f0000000b80)='v\xa6\xf5hj6,rR\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8b\x8e\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadh\x8f\x0f\xff\x02n\x9d\x85\xea\x1ao}\x12\x99\xbc{\x9c\x82Sp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\x02\x00\x00\x00q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5\t\xaag\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xecA+r\xc8HZtU\x1e\xcf\x050\xb9\x1a0\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f\n\xe1\x93f\xfe-tnjr\x1e\x1en*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98\xf0\xb8}P\x15\xcc\x05\xfb\xc1\xc3\xb7g\xa7\x90\x17|*Y+\xd7\xe9\xafx\r\xa57\x85\xe4\xb0e\xe6Rj\x19\x10\xd47\x94\xa2X \xea\x04\xb0\xb1\xe4\xae\x82f\xad\x99\xf7\xf8df\xd4\xe9\x84\x84\xa8\xbd\xaea\xcb\xd4\xdco\x95f_!\xe9\xa7\xaen\xa6I\xf1\xa1Y\xc1\x8b\x1b\xa1\x8aH&\x15\xb7\xf0\x83\x9dz}\x8a\x975P|\xb9\xe0|\xb1\xe7\x88\x7f\x00\xea0X:\xd3\x9f\x1c\xcbl\x87T)\xa2w\x81\x12\xd3\xcf\x13\xf9d\xb0E\x19\x1e\x836\xa2\x87\xbd\xfd\x14\xff\x92\xb4,S\xdbx\xaeZ\xc6\x93\xfff\x88\xa2\x06rdq=\"\xee2\xa11\\X\x0fY\xf0\xfahr\x9d@\xd3o\xf9\x87wL\xf9\xdaq1\r\xba-\xe5\xe4\xa4\xef\xf3\x05\xcd\xe5\x89%', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r7, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r12, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xd, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) ptrace(0x10, r0) ioctl$NILFS_IOCTL_GET_SUSTAT(r5, 0x80306e85, &(0x7f0000000400)) 4m8.271561944s ago: executing program 46 (id=3255): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) (async) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 3m31.218786943s ago: executing program 47 (id=3590): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94", 0x1}], 0x1}, 0x20000001) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/193, 0xc1}], 0x1}, 0xffffffff}], 0x1, 0x10000, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x0, 0x20e}}], 0x30}], 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./dbg\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dbg/bluetooth/l2cap\x00', 0x0, 0x0) read(r7, &(0x7f0000000700)=""/1024, 0x400) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, @perf_config_ext={0x7, 0x1}, 0x986, 0xfc, 0x4, 0x3, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_ublk_setup_io_uring(0x26, &(0x7f0000000040)={0x0, 0xfffffffc, 0xc000, 0x800, 0xb4}, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="5005"], 0x7) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 3m27.373565864s ago: executing program 48 (id=3637): bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, @perf_bp={0x0, 0x9}, 0x4a98, 0x7, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x800, 0x4) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010002100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000010004000000000004000000000000000300000000000000000000002000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x14c}}, 0x4810) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802002000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='PU', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20004810) socket(0x2, 0x80805, 0x10000000) 2m59.190030696s ago: executing program 49 (id=3917): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) syz_open_pts(r0, 0x141601) close(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x771e, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf41dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0}, 0x204, 0xf1fc, 0xa, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') openat(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) shutdown(r5, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20040401, &(0x7f0000000340)={0xa, 0x2, 0x3000, @empty}, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) kexec_load(0x323, 0x0, 0x0, 0x2a0000) 2m51.12216632s ago: executing program 50 (id=3827): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) prlimit64(r1, 0xe, &(0x7f0000000000)={0x1000000000000a, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r9, &(0x7f0000001ec0)=""/4101, 0xc54) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) io_setup(0x10000, &(0x7f0000002400)) mount$9p_fd(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) 2m29.734925654s ago: executing program 51 (id=4100): unshare(0x22020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 2m28.63958209s ago: executing program 52 (id=4113): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x88, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x3, 0x0, 0x0, 0xa0, 0x21, r2, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x4000000, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {0x0, 0x3000000}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r3, 0xc17a) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x8690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm(0x7, 0x81, 0xfffffffffffffffe) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f0000000180)=""/117, 0x75) 2m13.548229032s ago: executing program 53 (id=4269): bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) io_uring_setup(0x5909, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8820) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x80086601, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000310df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 2m2.477775705s ago: executing program 54 (id=4352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a380000001c0a17d50100000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x80}}, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x50016, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x4800, 0xff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000540)=0x4) sendmmsg$inet(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ac0), 0x0, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x70, 0x0, 0x7, {[@end, @rr={0x7, 0x1b, 0x65, [@private=0xa010102, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @generic={0x82, 0xc, "ab157f7b5fc2f3c969b3"}, @end, @timestamp_prespec={0x44, 0x1c, 0xaa, 0x3, 0x4, [{@local, 0x953c60d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xded}, {@loopback}]}, @ssrr={0x89, 0x13, 0x22, [@initdev={0xac, 0x1e, 0x4, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2]}, @timestamp={0x44, 0x8, 0x1f, 0x0, 0x6, [0x101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@noop, @cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "f34965c4e57600319d4785c5a1cd"}]}, @end, @rr={0x7, 0x7, 0xd3, [@multicast1]}, @timestamp_addr={0x44, 0x34, 0xad, 0x1, 0x2, [{@multicast2, 0x9}, {@remote, 0x2}, {@private=0xa010102, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9470}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x92b8}, {@private=0xa010102, 0xfffffffb}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x44, 0x2, [{0x5, 0x12, "896337506780ebe961a8ad86582ac415"}, {0x2, 0x9, "fd02894dc71dfc"}, {0x7, 0x11, "d302c354c220553b0e9b4b3a63e937"}, {0x5, 0x12, "c13be09f2a3d700f9fb8dee55023f5a6"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}], 0x188}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002d80)="3659c71fd1535a1f75960f3e72d73dd8336b916edbf7993926305ad0d3f1b1f7dc5217be775374e50174346e6840f9513b33e6c75cd317eeefa95b22b3e77e7dea4ae60562a6eb6a34d3352e66f02ce5528262f8e859b76911c0f1a3d2bdd85bf310bc441267d51a62f49f36e854ec8da076294bccd376adf57f2f9d69de2ed3b32944dcf697071a41b0bff95426c4c9497536dd86eaba5fd46504d09d424113560992f2744312d13a9ccb9a9a1b8512cbfba79fbe", 0xb5}], 0x1, &(0x7f0000002e80)=ANY=[@ANYBLOB="000000000000000000000000020000000500000000000000e9020000ff00000000000000070000009400000000"]}}], 0x3, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000a00}]}, 0x60) socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x9e0, @empty, 0x1}}, 0x7dd3, 0xffff, 0x400, 0x7, 0x3a0, 0x81, 0x6}, 0x9c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/113, 0x71}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/73, 0x49}, {&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/181, 0xb5}], 0x9) 1m47.193534279s ago: executing program 9 (id=4497): r0 = memfd_create(&(0x7f0000000240)='\x94\xc3+\x8fb\r\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) ftruncate(r0, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x10, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xbc0c5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000540)={[{@journal_dev={'journal_dev', 0x3d, 0xe}}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x107, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x4}, 0x10edc0, 0x1224, 0x0, 0x5, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000529400000000000000000000000000000000000000007b87992086e3f60a00860186ef511ec6a4e51fd92e37ffb0c8f017c48c61a154a13288dbc2c49b86cf460f1ff162909b28ea96603d0b31b510b369a149dcbcaad50032ea592c3ac5ba8790d66c"], 0x50) 1m46.610947955s ago: executing program 9 (id=4502): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x3, 0x2, @scatter={0x0, 0xdd, &(0x7f0000000040)}, &(0x7f0000000300)="eded50", 0x0, 0x840802, 0x10030, 0x1000, 0x0}) 1m46.472026455s ago: executing program 9 (id=4505): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x10000, 0x5, 0x1, 'queue1\x00', 0x5}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x1}, 0xffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x3, &(0x7f0000000000)=0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@newsa={0xf0, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0xa0}, {@in6=@remote, 0x0, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x7fffffff, 0x0, 0xc0, 0x4000, 0x0, 0x100000, 0x8}, {0x0, 0x0, 0x200000000, 0x5}, {0x0, 0x0, 0x7ff}, 0x70bd29, 0x3507, 0xa, 0x5}}, 0xf0}}, 0x200080d4) 1m44.914557032s ago: executing program 9 (id=4525): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x3, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x0, 0x4eb, &(0x7f0000000a00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000140)={0x0, 0xfffffddc}) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgsnd(0x0, 0x0, 0x8, 0x0) 1m43.683682368s ago: executing program 9 (id=4535): r0 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x200, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendfile(r0, r0, &(0x7f0000000040)=0xb, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8000, &(0x7f0000000240)={[{@resuid}, {}]}, 0x21, 0x4d2, &(0x7f0000000e40)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawrQdoCGscKMxhMRIXLmA2g5N05lO006RVhLL/2AiiSv9E1yYuDBh5d6d7tzgwgR95L1HX/IW83LvTEtfmaF9ocz0dT6f5OTec84w33PuzT1nOG3nBNCzzkfEZkQMRsT9iBhrlifNFLcaKXvdq5ePZ7dePp5Nol6/+/8kr8/KYte/yZxsvudwRPz8JxG/St6Mu7q+sThTLpdWmvmJWmV5YnV948pCZWa+NF9aKhanp6Ynb1y9Xjy0vp6r/PnFjxdu/+Jvf/3W839s/vA3WbNGm3W7+3GYGl0f2ImTFfRHxO33EawL+qLRn8E95S1uOUdQGhFfiYgL+fM/Fn353QQAjrN6fSzqY7vzAMBxl+ZrYElaaK4FjEaaFgqNNbyzMZKWq6u1yw+qa0tzjbWy8RhIHyyUS5PNtcLxGEiy/FR+/jpf3JO/GhFnIuJ3QyfyfGG2Wp7r5gcfAOhhJ/fM/x8NNeZ/AOCYG+52AwCAjjP/A0DvMf8DQO8x/wNA7zH/A0DvMf8DQO8x/wNAT/nZnTtZqm81v/967uH62mL14ZW50upiobI2W5itriwX5qvV+fw7eyr7vV+5Wl2euhZrjyZqpdXaxOr6xr1KdW2pdi//Xu97pYGO9AoAeJsz5579K4mIzZsn8hS79nIwV8Pxlna7AUDX9HW7AUDX2O0Lepf/4wP77dfa9leEnh5+W4DOuPR16//Qq6z/Q++y/g+9y/o/9K56PbHnPwD0GGv8gJ//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBc3mqckLTT3Ah+NNC0UIk5FxHgMJA8WyqXJiDgdEf8cGhjK8lPdbjQA8I7S/ybxcXMbwIuje2sHk0+G8mNE/PoPd3//aKZWW5nKyj/YKa89bZYXO954AOAAtufp7Xl826uXj2e3Uyfb8+JHjc1Fs7hbzdSo6Y/+/Dgc2YeTkQ+TZr4hiYi+Q4i/+SQivtaq/0m+NjLe3Pl0b/ws9qmOxk8/Fz/N6xrH7Fp89RDaAr3mWTb+3Gr1/KVxPj+2fv6H8xHq3W2Pf1t7x7+kfydSX5vx7/xBY1z7+08H29U9ifhGf4v4keyMv0mb+BcPGP/f3/z2hXZ19T9GXIrW8XfHmqhVlmN4fePKQmVmvjRfWioWp6emJ29cvV6cyNeoJ7ZXqt/0v5uXT7eLn/V/pE38/M7fGW3b/+8dsP9/+vT+L7/zlvg/+G6r+GmczY+tr382J37/gPFnRv7SdvvuLP5cm/7vd/8vHzD+8/9szB3wpQBAB6yubyzOlMulleN3sv2Z56i0Z/+TJJI4As1Y3+j/0ly6+lijpV2IXv9txNG4CO/lpFsjEtAprx/6brcEAAAAAAAAAAAAAABopxN/TtTtPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8fRYAAP//51jOjw==") (async) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) creat(&(0x7f0000000380)='./bus\x00', 0x0) (async) syz_emit_ethernet(0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaabb000000000400884800000000"], 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x8, 0x9, 0x1, 0x4, 0x6}, 0x0) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000000000a002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000000000000000000000000001000000000010000000000000000000000000010000000000000000000000000000000000000002000000000000300000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002e5340000000000000014000e"], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\f'], 0x10c}}, 0x8000) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x580, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x4008700e, 0x0) 1m42.545013154s ago: executing program 9 (id=4540): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r1) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r4, 0x81b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c31800004000000071001a000000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x19, 0x0, 0x0) close(0x3) 1m42.341144728s ago: executing program 55 (id=4540): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r1) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r4, 0x81b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c31800004000000071001a000000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x19, 0x0, 0x0) close(0x3) 1m41.659327886s ago: executing program 7 (id=4546): r0 = open(&(0x7f0000000000)='./file0\x00', 0x500, 0x78e22799f4a46fca) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000829bd70fec7ca20d54e108be7fb8a22c9", @ANYRES32=r2, @ANYBLOB="0c0099000100000068000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040110}, 0x20000010) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) name_to_handle_at(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1400000005000000566100005e000000080000000008000052000000"], &(0x7f0000000380), 0x0) read$watch_queue(r3, &(0x7f00000001c0)=""/178, 0xb2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000000)=0xc, 0xff0a) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000100)={0x0, 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100), 0xda4917b22985da93, 0x400c885, &(0x7f00000003c0)={0x11, 0x11, r7, 0x1, 0xe8, 0x6, @random="c0f424a1f50d"}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r7, 0x25, 0x5, @void}, 0x10) (async) dup(r4) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103d41, 0x0) 1m41.487898963s ago: executing program 7 (id=4547): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000580)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) setns(0xffffffffffffffff, 0x20000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c000180050001"], 0xbc}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) setresuid(r1, 0xee00, 0x0) setpriority(0x1, 0x0, 0x31e9) 1m41.437420543s ago: executing program 7 (id=4548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8a}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe1c}}, 0x0) 1m41.318839189s ago: executing program 7 (id=4549): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000480)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@noinit_itable}, {@nodiscard}, {@noload}, {@noinit_itable}, {@mblk_io_submit}, {@user_xattr}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2000009}}, {@init_itable_val={'init_itable', 0x3d, 0x1002}}, {@nolazytime}, {@user_xattr}, {}, {@noacl}, {@lazytime}], [{@subj_type={'subj_type', 0x3d, ':{\'^'}}]}, 0xfa, 0x481, &(0x7f00000010c0)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4}, 0x8084, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x6, 0x1e, 0xfffffffffffffffd, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x9, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x4e22, 0x0, @empty, 0xfffffff7}}}, 0x108) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffc1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, r1, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f00000003c0)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m40.933819323s ago: executing program 7 (id=4554): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000800)={0xe3, 0x16, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_dev$vcsu(0x0, 0x6, 0x50000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)=0x200004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_setup(0x34ac, &(0x7f0000000540)={0x0, 0x1784, 0x0, 0x3}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000100)={0x0, 0x0, 0x1, '\x00', 0x64}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0) io_uring_enter(r5, 0x0, 0x1, 0x9, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x54}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) fsetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', 'ECN\x00'}, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m40.731649176s ago: executing program 7 (id=4555): syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007fe000/0x800000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x18102) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000080)=[0xe1, 0x8]) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) pipe2$watch_queue(&(0x7f0000004380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004440)={0x11, 0xc, &(0x7f0000004200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ce}}, @ldst={0x0, 0x3, 0x7, 0x3, 0x9, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f0000004280)='GPL\x00', 0x0, 0x29, &(0x7f00000042c0)=""/41, 0x41000, 0x44, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004300)={0x401, 0x4}, 0x8, 0x10, &(0x7f0000004340)={0x3, 0x8, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000043c0)=[r7], &(0x7f0000004400)=[{0x0, 0x2, 0x3, 0x5}], 0x10, 0x80000000}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x87, 0x5, 0x2, 0x0, 0x0, 0x7, 0x3, 0x8000000000000001, 0x6, 0x18c}, 0x0) syz_open_pts(r0, 0xc0000) 1m40.671303439s ago: executing program 56 (id=4555): syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007fe000/0x800000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x18102) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000080)=[0xe1, 0x8]) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) pipe2$watch_queue(&(0x7f0000004380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004440)={0x11, 0xc, &(0x7f0000004200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ce}}, @ldst={0x0, 0x3, 0x7, 0x3, 0x9, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f0000004280)='GPL\x00', 0x0, 0x29, &(0x7f00000042c0)=""/41, 0x41000, 0x44, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004300)={0x401, 0x4}, 0x8, 0x10, &(0x7f0000004340)={0x3, 0x8, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000043c0)=[r7], &(0x7f0000004400)=[{0x0, 0x2, 0x3, 0x5}], 0x10, 0x80000000}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x87, 0x5, 0x2, 0x0, 0x0, 0x7, 0x3, 0x8000000000000001, 0x6, 0x18c}, 0x0) syz_open_pts(r0, 0xc0000) 1m10.103375756s ago: executing program 3 (id=4876): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"0500000000000000f94a856194c8817f", 0x0, r0, {0x6, 0x3}, {0x0, 0x400}, 0x3, [0x3, 0x2, 0x4, 0x200003, 0x2, 0x2, 0x7ffffffffffffffd, 0x6, 0x7fffffffffffffff, 0x3, 0xa7, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x200000000000008]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x86d, 0x1, @perf_bp={0x0, 0x1}, 0xe0e8, 0x0, 0x2b, 0x0, 0x6, 0x8001, 0x101, 0x0, 0x0, 0x0, 0x6f8eb1a1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x280000) keyctl$describe(0x6, r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) close(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="a78727bd7000010000000b1a0000"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000f00000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c"], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 1m9.872953056s ago: executing program 3 (id=4880): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd000000}, 0x48) 1m9.610035963s ago: executing program 3 (id=4885): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000010000000000000000800000085000000500000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000000)={[{@errors_remount}, {@i_version}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@quota}, {@jqfmt_vfsv0}]}, 0x80, 0x640, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') unlinkat(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@remote, @broadcast, 0xffffffffffffffff, "88744a7dd63f36f64d31e8d4ab09127a6fd603d4b367fe82aaa7b3d7ebb7ab2e", 0x5, 0xfffffffa, 0x1, 0x2f}, 0x3c) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = fsopen(&(0x7f0000000240)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x21, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f00000005c0), 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffbf7fc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xf, @private2, 0x8}, 0x1c) write$cgroup_subtree(r2, 0x0, 0xfe33) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xc16, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x50, 0xb, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x80, 0x3, 0x1, {0x22, 0x4d}}, {{{0x9, 0x5, 0x81, 0x3, 0x680, 0x1e, 0x8, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2e, 0x9, 0x75}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xffffffffffffffd8, 0x6, 0x200, 0x2e, 0x3, 0x9b, 0x20, 0xff}, 0x3b, &(0x7f0000000180)={0x5, 0xf, 0x3b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0xe, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0x3, 0xa7, 0x10d8, 0x79}, @ssp_cap={0x14, 0x10, 0xa, 0xf9, 0x2, 0x6, 0xf0f, 0x1, [0xff3fc0, 0x30]}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x88, 0x0, 0x290e, [0xff000f]}]}, 0x4}) syz_usb_control_io$hid(r3, &(0x7f0000000cc0)={0x24, &(0x7f0000000a40)={0x20, 0x10, 0xbd, {0xbd, 0x7, "d38781043187bd41b2d82aa79d90e420a90021a9fa68b4b3881a0a10259d80ab556daacc3814ecc640489449ab775e0a554e170970fb70e2da8b6062287309335791de07c563d0d671f79daf3c1677317b3e55dc8f97f861139b4b051de90451163e12cc389b6d3b87d8ff07a38a062cf8d38a43e7608d845a80c8df4ff7b74bb1b2a63b94cfd67609c1d4181a0e79db3ba603d08c660cec74cf6b5087661170413cc6007ada641837f8535e9db341e0edae70023f6d7773c13881"}}, &(0x7f0000000b40)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "39adf62ca2429e1e46ccae91ea8dec006f4ca73936b6ebebb097bc68cf653fa9c6cfff0acc13c6273ca9c4bf4c51160835561160eb5f9345d9da0ee6eddbbe4587830d35b5532689e77b017d8e3b82f9e1e7ee50725da0f4db1291705bed0955c307a9167b00ae51f5ddf8a68f9c4ecd155247881ca42b1f29fab9c4a0f37c5bedf7d391428c4a69c1ce8982c5f163572862cc7dd697cc6a9a6072f7a7df6b1e81f6027b4830df3b5306e462cf2d024fd428e0c4b279485ab58d31c64300bd3dbd"}}, &(0x7f00000001c0)={0x0, 0x22, 0x17, {[@main=@item_012={0x2, 0x0, 0x9, "d8d7"}, @main=@item_4={0x3, 0x0, 0xc, "23839acc"}, @local=@item_012={0x1, 0x2, 0x2, "99"}, @global=@item_012={0x1, 0x1, 0x5, "1b"}, @local=@item_012={0x0, 0x2, 0x9}, @local=@item_4={0x3, 0x2, 0x2, "5e6fb6b9"}, @local=@item_4={0x3, 0x2, 0x1, "b9311482"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x513}}}}, &(0x7f0000001000)={0x2c, &(0x7f0000000d00)={0x20, 0x16, 0xc8, "29502d49658a89d1746678bf2ac0ea7f3a55e227aa68f5154e42f1a95d9436c424a7d515488e3db03bbff24ab3c6ab87e14bbb571bd73791a553abed2d7474a25865b16ee6ac533d7af3fca47f768e6fd501e8a4cabee3aaa870e4658dcc29a9a112afeb7e5e46ee1abfbd82c1ce62cee8e674af94a4a86540158164caaa6c5c51ff6e6dbfd0842ca89a886579f935c064da36bdb057b41fff366becaa039e0bc955948497b8696628ef47ae158fcd512855e0e337dfa966fd0593d87f43c50710888bff141ea29f"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000e80)={0x20, 0x1, 0xff, "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"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x3}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 1m8.307173815s ago: executing program 3 (id=4899): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0301000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x14040}, 0x4008840) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000200)=""/104) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2b, 0x6, 0x6, 0x408001, 0x7fff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) close(r1) fsopen(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 51.945016812s ago: executing program 57 (id=4899): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0301000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x14040}, 0x4008840) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000200)=""/104) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2b, 0x6, 0x6, 0x408001, 0x7fff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) close(r1) fsopen(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 41.484656853s ago: executing program 6 (id=5110): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 41.117441653s ago: executing program 6 (id=5114): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x7, 0x98, 0x0, 0x2, 0xfffff270, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8801, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000017c5b019851000000300000018110000c2b2c4c307d2dc560b07f412be7d409d2588c524f0d6c7bb1f040af4011446d17d14dc6289b1c2303fd6945343c4c8f215137af6b82541dadd251734a8afc68d2d98699f", @ANYRES32=r1, @ANYBLOB="00000000000000009500007b0000000085000000130000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) (async) socket$inet_icmp(0x2, 0x2, 0x1) 40.80165089s ago: executing program 6 (id=5117): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r1, &(0x7f0000000240)="278ca568de16719bd16a70089ff4d88404e0bc494e2e850343db4533edc4ffdff00d83c7ccf60b62a3766956a85857e3f5d3dabfe9f404ae168daad5bae1db5023470e3a21152bc03df18b2b285d09e94e0c36832cb77b0a454672f7836a80d95b02b9196a45fda7a1470a", 0x0}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x5}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x8000040f, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x18, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) socket(0x2, 0x80805, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r7, &(0x7f00000004c0)="b7336c6f", &(0x7f0000003100)=""/245}, 0x20) 39.669775385s ago: executing program 6 (id=5123): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000100)={[{@usrquota}, {@jqfmt_vfsv1}, {@errors_remount}, {@nodiscard}]}, 0xfe, 0x7c6, &(0x7f0000001740)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8) setsockopt(r0, 0x1e20, 0x8, &(0x7f0000000980)="99f9d12e741c5c61a41f55c107b08a4a37a26a4b75466681b948ceac87f9dd1de394c63125999a45229c22b2de46e152c8bea1960eaee3de9a7d9e517399794e287fda86dde8bf1e70c09a8d6043b72dfdc27b95789981eaa281e92d6fe17ed27e7d155d673759b51332288b0712b1b44ec44fb94f0f31e652881e40e6c651f4bbed254e723221ca6e82", 0x8a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket(0x10, 0x803, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d01, &(0x7f0000000180)="000002f2ffff") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x2cf2) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x0) 39.164866034s ago: executing program 6 (id=5127): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db800000100000000000000000eff0e"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073257a3100000000ac000000030a01030000000000000000010000001400048008000240000000fffbffff40000000050900030073797a30000000000900010073797a860000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c0001"], 0x92fc}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1200, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffc, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) brk(0x5d555ede6000) 38.756048272s ago: executing program 6 (id=5133): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r1, &(0x7f0000000240)="278ca568de16719bd16a70089ff4d88404e0bc494e2e850343db4533edc4ffdff00d83c7ccf60b62a3766956a85857e3f5d3dabfe9f404ae168daad5bae1db5023470e3a21152bc03df18b2b285d09e94e0c36832cb77b0a454672f7836a80d95b02b9196a45fda7a1470a", 0x0}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x5}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x8000040f, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x18, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r7, &(0x7f00000004c0)="b7336c6f", &(0x7f0000003100)=""/245}, 0x20) 38.646273116s ago: executing program 58 (id=5133): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r1, &(0x7f0000000240)="278ca568de16719bd16a70089ff4d88404e0bc494e2e850343db4533edc4ffdff00d83c7ccf60b62a3766956a85857e3f5d3dabfe9f404ae168daad5bae1db5023470e3a21152bc03df18b2b285d09e94e0c36832cb77b0a454672f7836a80d95b02b9196a45fda7a1470a", 0x0}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x5}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x8000040f, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x18, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r7, &(0x7f00000004c0)="b7336c6f", &(0x7f0000003100)=""/245}, 0x20) 25.872613748s ago: executing program 0 (id=5243): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@norecovery}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@orlov}]}, 0x1, 0x611, &(0x7f00000022c0)="$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") r0 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000200010000001c000880040007881400078008"], 0x44}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000000000000000000000000000001000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xd1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000740), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068f000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'team0\x00', 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x4000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000300)=""/70, 0xdc17}) 24.886243961s ago: executing program 0 (id=5259): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x66) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x8d40) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 21.395498405s ago: executing program 0 (id=5280): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x109141, 0xd6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$SIOCSIFMTU(r0, 0x8923, 0x0) 21.255097236s ago: executing program 0 (id=5281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/error_log\x00', 0x2, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="ab", 0x1}, {0x0}], 0x2) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000000bc0)=ANY=[@ANYBLOB="73686f776173736f632c6d61703d61636f726e006d61703d61636f726e2c6e6f636f6d70726573732c6d61703d876f726d616c2c6d6f64653d3078376666666666666666666666666666664173686f776173736f632c6d61703d6e6f726d616c2c00"], 0xfd, 0x645, &(0x7f0000001000)="$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") r1 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r2, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000003c0)={&(0x7f0000000140)="c945b950a733209ceb6a3f6d", 0xc}) ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x0, 0x5001) getdents64(r3, &(0x7f00000001c0)=""/224, 0xe0) 21.191766679s ago: executing program 0 (id=5282): setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000004000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.964060158s ago: executing program 0 (id=5283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x3}]}}}]}, 0x44}}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x3}]}}}]}, 0x44}}, 0x20040040) (async) 20.933359065s ago: executing program 59 (id=5283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x3}]}}}]}, 0x44}}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x3}]}}}]}, 0x44}}, 0x20040040) (async) 5.140790929s ago: executing program 8 (id=5421): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setns(0xc9, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000280)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000a00)=r3, 0x4) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x10c, 0x28, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x0, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x0, 0x32}, @in=@empty, {}, {0x0, 0xfffffffffffff800}, {}, 0x0, 0x3501, 0x2}, [@coaddr={0x14, 0xe, @in6=@empty}, @extra_flags={0x8, 0x18, 0x6}]}, 0x10c}}, 0x0) fchdir(r2) r5 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x14, 0x2, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 4.566416163s ago: executing program 8 (id=5427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008041) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002abd7000ffdbdf25130000000e0001006e657464657673696d0000000f0002006e5c0564657673696d300000080003000200000008000b00050000000600110003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040011}, 0x804) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x108081, 0x400003, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x3ff, 0x0, 0xc7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') getdents64(r3, 0x0, 0x0) setfsgid(0xee01) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') setfsgid(0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r5 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000240)='io\x00') pread64(r6, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, r3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x100f, 0x8041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc159, 0x0, 0x7, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r8, &(0x7f0000000180)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) preadv(r7, &(0x7f00000014c0), 0x0, 0x8, 0xfffffffe) socket$kcm(0x10, 0x3, 0x10) 4.485511251s ago: executing program 2 (id=5429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006021c0024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 4.424053634s ago: executing program 1 (id=5430): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3f, 0x5}, 0x1040, 0x7, 0x0, 0x1, 0xe, 0xd3e, 0xca6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000023280012000c00010076657468"], 0x48}}, 0x0) 4.368439256s ago: executing program 2 (id=5431): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) r3 = socket$inet(0x2, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b60a0000000000006111a40000000000180000000000000000000000000000009500000000004c3d842ca54f0000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000001c0)={0x6, @loopback, 0x1500, 0x0, 'fo\x00', 0x3d, 0x0, 0x36}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x1500, 0x0, 'rr\x00', 0x19}, {@loopback, 0x4908, 0x1, 0x1}}, 0x44) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x20002, 0x0, 0x32}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4048050) connect(r4, &(0x7f0000000200)=@in={0x2, 0x1500, @loopback}, 0x10) 4.361342117s ago: executing program 8 (id=5432): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x107, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x4}, 0x10edc0, 0x1224, 0x0, 0x5, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) 4.248121932s ago: executing program 1 (id=5433): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x0, 0xe4e9, 0xa4d}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x2) r2 = getpgid(0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x9d) read(r1, 0x0, 0x500) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000140)={0x3, 0x1, 0x81, 0x3ff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000000180)={0x43, 0x5}) sendmsg$inet(r3, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 4.188710345s ago: executing program 8 (id=5435): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x242, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @random="ed272f08deb0", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket(0xa, 0x5, 0x0) r6 = semget$private(0x0, 0x2, 0x7c4) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf9ae}, 0x1, 0x3dc, 0x0, 0x0, 0x0, 0x0, 0x7}) semtimedop(r6, &(0x7f00000002c0)=[{0x2, 0x3, 0x1000}, {0x3, 0xaf6, 0x400}], 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000200)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "1c7566580558d4966b91cbb9495ad04d3f19fd7fae92c4da4b76106436e50fad", 0xc, 0x200000, 0x5, 0xe}, 0x3c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) ioctl(r7, 0x8, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) 3.698803641s ago: executing program 4 (id=5438): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b80, 0x2, @perf_bp={0x0, 0x2}, 0xb093, 0x800000, 0x2, 0x6, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) 3.525707938s ago: executing program 5 (id=5441): socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x109141, 0xd6) pwrite64(r0, 0x0, 0x0, 0x7ff) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 3.489639036s ago: executing program 4 (id=5442): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x2}, 0x0, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x300}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 3.443995826s ago: executing program 5 (id=5443): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000040000000000001202000000100000000000001204000000070000000000001201000000000000000000000700000000002e305f5f612e2e"], 0x0, 0x51, 0x0, 0x1}, 0x28) 3.435788687s ago: executing program 5 (id=5444): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x50ae, &(0x7f0000000200)={0x0, 0x3089, 0x1000, 0x3, 0x375}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) (async) r1 = syz_io_uring_setup(0x50ae, &(0x7f0000000200)={0x0, 0x3089, 0x1000, 0x3, 0x375}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_setup(0x43ad, &(0x7f0000000340)={0x0, 0x79dd, 0x20, 0x2, 0x2ec, 0x0, r1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x810, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x810, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 3.366163502s ago: executing program 2 (id=5445): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="98010000100001002bbd7000fbdbdf25e000000100feffffffffffffff000000ff0100000000000000000000000000010000ecdf000001fe000000c033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ff010000000000000000000000000001feffffffffffffff0000000000000000000000000000000000004000000000000010000000000000fcffffffffffffff00000000000000200000000000000000080000000000000004000000000000000000000000000000000400000000000000000000000000000100000000000000073500000a0004007100000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x198}}, 0x4050) 3.296883538s ago: executing program 5 (id=5446): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20000000) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000020000000000000000000000000000000000000000000074") 3.296715868s ago: executing program 1 (id=5447): unshare(0x6a060000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8, @ANYRES16=r3], 0x14) setns(0xc9, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x10, 0x3, 0xfd, 0x0, 0x0, 0x6, 0x20002200}, [@RTA_TABLE={0x8, 0xf, 0x7fe}]}, 0x24}, 0x1, 0x0, 0x0, 0x46044}, 0x4010) 3.222579313s ago: executing program 4 (id=5448): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x2000000002, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r4, @ANYBLOB="100001800400", @ANYRES64=r0], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.188620411s ago: executing program 2 (id=5449): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x30000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={0x0, 0x3}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_bp={0x0, 0x3}, 0x400, 0x0, 0x11000, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/27, 0x1b, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r1, 0x1) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1700000078009106000000000000004a07"], 0xfe33) 3.133807483s ago: executing program 5 (id=5450): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000219000/0x3000)=nil, 0x3000, 0xb635773f04ebbeee, 0x1010, 0xffffffffffffffff, 0x3ed44000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r5 = syz_open_procfs(r2, &(0x7f00000003c0)='net/rfcomm\x00') openat2(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000340), 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xe, &(0x7f0000001980)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) 2.354299951s ago: executing program 8 (id=5451): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/cpu/cpu1/online\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x10, 0x2}, 0x88010, 0x10000, 0xfffffffe, 0x0, 0x5, 0x2, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000380)={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)=0x68) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, r2) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3ce57dcc}) wait4(r0, &(0x7f0000000140), 0x40000000, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0', 0x1) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c00000051000000fa000000"], 0x880) write(0xffffffffffffffff, 0x0, 0x0) 2.296334164s ago: executing program 4 (id=5452): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b80, 0x2, @perf_bp={0x0, 0x2}, 0xb093, 0x800000, 0x2, 0x6, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) 2.296166344s ago: executing program 2 (id=5453): sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x3, 0x0, 0x1, 0x7}, 0x4, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0xffffffff, 0xe, 0x258a, 0x5}) 2.244054285s ago: executing program 1 (id=5454): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) socket(0x10, 0x803, 0x0) r0 = getpid() r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000000100e0ff000000017c"], 0x30, 0x4000000}], 0x1, 0x0) getsockopt$bt_hci(r4, 0x84, 0x84, &(0x7f0000000840)=""/4127, 0x0) socket$inet6(0xa, 0x2, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.243869765s ago: executing program 2 (id=5455): unshare(0x6a060000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r5 = syz_open_dev$sg(0x0, 0x8e, 0x20402) r6 = mq_open(0x0, 0x42, 0x0, 0x0) mq_getsetattr(r6, 0x0, &(0x7f0000000180)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0xd8c4000, @empty, 0x7fff}, 0x1c) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.115376983s ago: executing program 5 (id=5456): unshare(0x6a060000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r5 = syz_open_dev$sg(0x0, 0x8e, 0x20402) r6 = mq_open(0x0, 0x42, 0x0, 0x0) mq_getsetattr(r6, 0x0, &(0x7f0000000180)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0xd8c4000, @empty, 0x7fff}, 0x1c) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.801014771s ago: executing program 8 (id=5457): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") creat(&(0x7f0000000000)='./file1\x00', 0x4) (async) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x10000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x10000000}, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000057aeee3560e528862fa54fb9821ff95c48bf"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000057aeee3560e528862fa54fb9821ff95c48bf"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000100000000008000000018000000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000700008802800008024000100d1732899f611cd8994034d7e413dc957630e5493c285aca4006b44000080140004"], 0x98}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) (async) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) 948.210905ms ago: executing program 4 (id=5458): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="5a5d1904", 0x4, 0x20009015, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) 212.886924ms ago: executing program 1 (id=5459): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="64000000100001060000000000000000000000007fff00000000000000020000100003007665746830000000000000002400120008000100766574681800020014000100000000007fff0000feffff7f0000000010000300766574685900000000000000", 0x64}], 0x1}, 0x400400c) 104.821798ms ago: executing program 1 (id=5460): getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x101, 0xa6, 0x9, 0x9941, 0xb6, 0x95a, 0x5, 0x4930, 0x7, 0xb, 0xfffffffffffffffe, 0x3, 0x9, 0x7, 0x18e40d87]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r0, 0x100}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x73}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = timerfd_create(0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bind$unix(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_gettime(0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x3}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x2, 0x16e, [0x0, 0x200000000680, 0x2000000006b0, 0x2000000006e0], 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/366]}, 0x1e6) 0s ago: executing program 4 (id=5461): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@abort}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@dax_never}]}, 0x9, 0x624, &(0x7f0000001340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r4, 0x2, 0x2) sendmsg$nl_route(r4, 0x0, 0x440088c4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2004, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x13, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000280)={0xc, 0xfffffff4}, 0x8) kernel console output (not intermixed with test programs): T [ 596.153737][T25243] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4820'. [ 596.154177][T25243] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.154332][T25243] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.176568][T25239] loop0: detected capacity change from 0 to 2048 [ 596.183880][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 596.214114][T21188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.224772][T25243] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4820'. [ 596.245391][T25239] Alternate GPT is invalid, using primary GPT. [ 596.245571][T25239] loop0: p2 p3 p7 [ 596.258844][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 596.262872][T16572] udevd[16572]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 596.264992][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 596.278250][T16572] udevd[16572]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 596.336850][T25254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=25254 comm=syz.2.4825 [ 596.341649][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4825'. [ 596.466968][T25272] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4833'. [ 596.526596][T25275] wg1 speed is unknown, defaulting to 1000 [ 596.656961][T25284] loop6: detected capacity change from 0 to 164 [ 596.666273][T25284] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 596.732949][T25287] loop4: detected capacity change from 0 to 128 [ 596.749076][T25287] msdos filesystem being mounted at /175/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 596.847396][T25304] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.847521][T25304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.847821][T25304] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.847917][T25304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.908983][T25307] loop0: detected capacity change from 0 to 1024 [ 596.909457][T25307] EXT4-fs: Ignoring removed bh option [ 596.911745][T25304] 8021q: adding VLAN 0 to HW filter on device eth0 [ 596.914680][T25304] 8021q: adding VLAN 0 to HW filter on device eth1 [ 596.917867][T25304] 8021q: adding VLAN 0 to HW filter on device eth2 [ 596.920538][T25304] 8021q: adding VLAN 0 to HW filter on device eth3 [ 596.950269][T11927] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.950340][T11927] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.950430][T11927] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.950471][T11927] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.006043][T25307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.045118][T25304] smpboot: CPU 1 is now offline [ 597.065705][T25304] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 597.279542][T25324] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 597.279796][T25324] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.388124][T20730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.435188][T25336] ip_tables: iptables: counters copy to user failed while replacing table [ 600.457575][T25338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.457753][T25338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.484309][T24118] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 600.503078][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 600.503105][ T29] audit: type=1400 audit(3581273329.947:22587): avc: denied { lock } for pid=25337 comm="syz.0.4847" path="socket:[77741]" dev="sockfs" ino=77741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 600.558315][T25347] set_capacity_and_notify: 1 callbacks suppressed [ 600.558332][T25347] loop3: detected capacity change from 0 to 512 [ 600.560496][T25347] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 600.562266][T25347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 600.562306][T25347] System zones: 1-12 [ 600.562641][T25347] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.4854: bad orphan inode 131072 [ 600.562680][T25347] loop3: lost filesystem error report for type 5 error -117 [ 600.563484][T25347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.606059][T23176] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.652849][T25351] xt_hashlimit: size too large, truncated to 1048576 [ 600.694614][T25356] loop2: detected capacity change from 0 to 512 [ 600.714409][T25356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.714475][T25356] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 600.766833][T25354] loop6: detected capacity change from 0 to 8192 [ 600.772345][T25354] vfat filesystem being mounted at /66/bus supports timestamps until 2107-12-31 (0x10391447e) [ 600.781950][T25346] macvlan0: entered promiscuous mode [ 600.786660][T25346] netlink: 'syz.6.4855': attribute type 1 has an invalid length. [ 600.786712][T25346] netlink: 'syz.6.4855': attribute type 2 has an invalid length. [ 600.837244][T24032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.266783][T25388] loop6: detected capacity change from 0 to 8192 [ 601.267951][T25388] vfat filesystem being mounted at /70/bus supports timestamps until 2107-12-31 (0x10391447e) [ 601.271040][T25388] netlink: 'syz.6.4871': attribute type 1 has an invalid length. [ 601.271082][T25388] netlink: 'syz.6.4871': attribute type 2 has an invalid length. [ 601.278851][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 601.444436][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 601.457893][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 601.726172][T25413] loop0: detected capacity change from 0 to 512 [ 601.729491][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 601.733561][T25413] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 601.757454][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 601.774117][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 601.798539][T25419] loop0: detected capacity change from 0 to 4096 [ 601.800106][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 601.823858][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 601.843093][T25413] loop0: detected capacity change from 0 to 511 [ 601.843364][T25413] ext3: Unknown parameter ' [ 601.843364][T25413] ' [ 601.852691][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 601.871225][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 601.871830][T25413] loop0: detected capacity change from 0 to 511 [ 601.872070][T25413] ext3: Unknown parameter ' [ 601.872070][T25413] ' [ 601.877431][T25413] loop0: detected capacity change from 0 to 602 [ 601.960252][T25413] loop0: detected capacity change from 0 to 602 [ 602.212493][T25444] EXT4-fs: Ignoring removed i_version option [ 602.212856][T25444] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 602.212880][T25444] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 602.235471][T25448] EXT4-fs: journaled quota format not specified [ 602.312064][T25451] EXT4-fs (loop2): invalid journal inode [ 602.312176][T25451] EXT4-fs (loop2): can't get journal size [ 602.333843][T25451] EXT4-fs (loop2): 1 truncate cleaned up [ 602.334490][T25451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.335847][T25451] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.403642][T25459] EXT4-fs (loop6): unsupported inode size: 143 [ 602.403682][T25459] EXT4-fs (loop6): blocksize: 1024 [ 602.506999][T25462] netlink: 'syz.3.4888': attribute type 30 has an invalid length. [ 602.629399][T25462] netlink: 'syz.3.4888': attribute type 30 has an invalid length. [ 602.846706][T25473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.846891][T25473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.873920][T25473] SET target dimension over the limit! [ 603.030102][T25476] FAULT_INJECTION: forcing a failure. [ 603.030102][T25476] name failslab, interval 1, probability 0, space 0, times 0 [ 603.030228][T25476] CPU: 1 UID: 0 PID: 25476 Comm: syz.0.4893 Not tainted syzkaller #0 PREEMPT(lazy) [ 603.030257][T25476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.030275][T25476] Call Trace: [ 603.030304][T25476] [ 603.030315][T25476] __dump_stack+0x1d/0x30 [ 603.030346][T25476] dump_stack_lvl+0x95/0xd0 [ 603.030375][T25476] dump_stack+0x15/0x1b [ 603.030402][T25476] should_fail_ex+0x262/0x280 [ 603.030574][T25476] ? _kzalloc_noprof+0x52/0xa0 [ 603.030597][T25476] should_failslab+0x8c/0xb0 [ 603.030639][T25476] __kmalloc_cache_noprof+0x7a/0x400 [ 603.030683][T25476] ? _kzalloc_noprof+0x52/0xa0 [ 603.030764][T25476] _kzalloc_noprof+0x52/0xa0 [ 603.030790][T25476] ip6_setup_cork+0x400/0x700 [ 603.030906][T25476] ip6_make_skb+0x107/0x370 [ 603.030932][T25476] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 603.030984][T25476] udpv6_sendmsg+0x15f9/0x1700 [ 603.031034][T25476] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 603.031067][T25476] ? __pfx_inet6_sendmsg+0x10/0x10 [ 603.031118][T25476] inet6_sendmsg+0xac/0xd0 [ 603.031145][T25476] __sys_sendto+0x308/0x470 [ 603.031188][T25476] __x64_sys_sendto+0x76/0x90 [ 603.031241][T25476] x64_sys_call+0x200c/0x2550 [ 603.031271][T25476] do_syscall_64+0x112/0x360 [ 603.031296][T25476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.031367][T25476] RIP: 0033:0x7f56e8e0e159 [ 603.031454][T25476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.031482][T25476] RSP: 002b:00007f56e7867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 603.031504][T25476] RAX: ffffffffffffffda RBX: 00007f56e9095fa0 RCX: 00007f56e8e0e159 [ 603.031524][T25476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 603.031541][T25476] RBP: 00007f56e7867090 R08: 0000200000000500 R09: 000000000000001c [ 603.031619][T25476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.031695][T25476] R13: 00007f56e9096038 R14: 00007f56e9095fa0 R15: 00007ffe2cd9a178 [ 603.031730][T25476] [ 603.781396][T11927] Bluetooth: hci0: Frame reassembly failed (-84) [ 604.022391][T25498] wg1 speed is unknown, defaulting to 1000 [ 604.189961][T25505] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.4902: bg 0: block 385: padding at end of block bitmap is not set [ 604.189995][T25505] loop0: lost filesystem error report for type 5 error -117 [ 604.190275][T25505] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 604.190293][T25505] loop0: lost filesystem error report for type 5 error -117 [ 604.190959][T25505] EXT4-fs (loop0): 2 truncates cleaned up [ 604.191423][T25505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.196548][T25505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.460007][T25516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.460084][T25516] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.522752][T20730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.628596][T25522] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 605.603853][T25530] EXT4-fs (loop0): Invalid log block size: 8388607 [ 605.721425][T25532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.790769][ T29] audit: type=1400 audit(3581273334.839:22588): avc: denied { map } for pid=25531 comm="syz.4.4909" path="socket:[78383]" dev="sockfs" ino=78383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 605.790810][ T29] audit: type=1400 audit(3581273334.839:22589): avc: denied { accept } for pid=25531 comm="syz.4.4909" path="socket:[78383]" dev="sockfs" ino=78383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 605.792821][ T29] audit: type=1400 audit(3581273334.839:22590): avc: denied { getopt } for pid=25531 comm="syz.4.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 605.894277][T21188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.989800][ T4243] Bluetooth: hci0: command 0x1003 tx timeout [ 605.989897][T18704] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 606.432318][T25561] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 606.985452][T25497] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 607.078411][T25565] set_capacity_and_notify: 18 callbacks suppressed [ 607.078442][T25565] loop4: detected capacity change from 0 to 1024 [ 607.080809][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 607.083677][T25565] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 607.083723][T25565] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 607.083785][T25565] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (240!=20869) [ 607.083854][T25565] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 607.085176][T25565] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: inode #3: comm syz.4.4920: iget: bad extra_isize 65535 (inode size 1024) [ 607.085258][T25565] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 607.086195][T25565] EXT4-fs (loop4): no journal found [ 607.086214][T25565] EXT4-fs (loop4): can't get journal size [ 607.086868][T25565] EXT4-fs error (device loop4): __ext4_fill_super:5621: inode #2: comm syz.4.4920: iget: bad extra_isize 65535 (inode size 1024) [ 607.086969][T25565] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 607.087139][T25565] EXT4-fs (loop4): get root inode failed [ 607.087156][T25565] EXT4-fs (loop4): mount failed [ 607.117023][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 607.136408][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 607.453376][T25572] wg1 speed is unknown, defaulting to 1000 [ 607.850509][T25595] loop2: detected capacity change from 0 to 4096 [ 607.853157][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 607.887422][T25595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.970602][T24032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.017027][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 608.035952][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 608.066879][T25607] loop4: detected capacity change from 0 to 512 [ 608.070823][T25607] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 608.070902][T25607] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 608.070946][T25607] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4933: Corrupt directory, running e2fsck is recommended [ 608.080141][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 608.165198][T25607] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 608.167071][T25607] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.4933: corrupted in-inode xattr: invalid ea_ino [ 608.167108][T25607] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 608.167434][T25607] EXT4-fs (loop4): Remounting filesystem read-only [ 608.168315][T25607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.170435][T25607] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 608.170804][T25607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.188805][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 608.207283][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 608.430585][T25627] loop4: detected capacity change from 0 to 1024 [ 608.439662][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 608.471748][T25621] wg1 speed is unknown, defaulting to 1000 [ 608.780874][T25644] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.4128768.0), cmd(3) [ 609.472146][ T29] audit: type=1326 audit(3581273338.217:22591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="syz.4.4948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7f8ae145ef31 code=0x0 [ 609.998126][T25675] wg1 speed is unknown, defaulting to 1000 [ 610.153354][ T29] audit: type=1400 audit(3581273338.854:22592): avc: denied { write } for pid=25682 comm="syz.4.4954" lport=41033 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 610.214635][T25688] netlink: 'syz.0.4949': attribute type 10 has an invalid length. [ 610.214836][T25688] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.214996][T25688] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.234532][T25688] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.234646][T25688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.235017][T25688] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.235118][T25688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.249705][T25688] bridge0: entered allmulticast mode [ 610.255057][T25688] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 610.285020][T25688] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4949'. [ 610.291948][T25670] loop0: detected capacity change from 0 to 32768 [ 610.306951][T25688] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4949'. [ 610.317852][T25670] loop0: p1 p3 < > [ 610.325463][T25670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25670 comm=syz.0.4949 [ 610.924903][T25693] xt_MASQUERADE: bad MAP_IPS. [ 610.976089][T25695] loop0: detected capacity change from 0 to 512 [ 610.988879][T25695] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.4959: iget: bad i_size value: 38620345925642 [ 610.988918][T25695] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 610.989242][T25695] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.4959: couldn't read orphan inode 15 (err -117) [ 610.989338][T25695] loop0: lost filesystem error report for type 5 error -117 [ 610.990128][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 610.990181][ C0] EXT4-fs (loop0): initial error at time 3581273339: ext4_orphan_get:1403: inode 15 [ 610.990300][ C0] EXT4-fs (loop0): last error at time 3581273339: ext4_orphan_get:1408 [ 610.994818][T25695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.014475][ T29] audit: type=1400 audit(3581273339.648:22593): avc: denied { execute_no_trans } for pid=25694 comm="syz.0.4959" path="/226/file0/mnt" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 611.015424][ T29] audit: type=1400 audit(3581273339.657:22594): avc: denied { write } for pid=25694 comm="syz.0.4959" name="proc" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 611.126608][T11926] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:40: bg 0: block 5: invalid block bitmap [ 611.127705][T11926] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 611.127742][T11926] EXT4-fs (loop0): This should not happen!! Data will be lost [ 611.127742][T11926] [ 611.127760][T11926] EXT4-fs (loop0): Total free blocks count 0 [ 611.127783][T11926] EXT4-fs (loop0): Free/Dirty block details [ 611.127795][T11926] EXT4-fs (loop0): free_blocks=0 [ 611.127807][T11926] EXT4-fs (loop0): dirty_blocks=1 [ 611.127871][T11926] EXT4-fs (loop0): Block reservation details [ 611.127883][T11926] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 611.131464][T20730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.089114][T25714] loop2: detected capacity change from 0 to 1024 [ 613.097245][T25714] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 613.097846][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 613.098150][T25714] JBD2: no valid journal superblock found [ 613.098165][T25714] EXT4-fs (loop2): Could not load journal inode [ 613.108142][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 613.118932][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 613.230937][T25676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.909721][T16569] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:107: comm udevd: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 613.935702][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 613.984861][T25727] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4969'. [ 613.998454][T25728] sctp: [Deprecated]: syz.6.4968 (pid 25728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.998454][T25728] Use struct sctp_sack_info instead [ 614.034032][T25730] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 614.190188][T25735] loop0: detected capacity change from 0 to 512 [ 614.192344][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 614.193395][T25735] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 614.198505][T25735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0082] [ 614.225562][T25735] EXT4-fs (loop0): 1 truncate cleaned up [ 614.226453][T25735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.293822][T20730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.301976][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 614.317930][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 614.534222][T25750] netlink: 'syz.4.4977': attribute type 10 has an invalid length. [ 614.684468][T25752] wg1 speed is unknown, defaulting to 1000 [ 615.427563][T25774] loop0: detected capacity change from 0 to 1024 [ 615.428080][T25774] ext4: Bad value for 'resuid' [ 615.428107][T25774] ext4: Bad value for 'resuid' [ 615.450468][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 615.456764][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 615.470946][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 615.515422][T25780] wg1 speed is unknown, defaulting to 1000 [ 615.519313][T25783] netlink: 'syz.4.4986': attribute type 9 has an invalid length. [ 616.599628][ T29] audit: type=1326 audit(3581273344.771:22595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.0.4992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f56e9bd7f31 code=0x7ffc0000 [ 616.599665][ T29] audit: type=1326 audit(3581273344.771:22596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.0.4992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e8e0e159 code=0x7ffc0000 [ 616.599763][ T29] audit: type=1326 audit(3581273344.771:22597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.0.4992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e8e0e159 code=0x7ffc0000 [ 616.599868][ T29] audit: type=1326 audit(3581273344.790:22598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.0.4992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e8e0e159 code=0x7ffc0000 [ 616.599907][ T29] audit: type=1326 audit(3581273344.790:22599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.0.4992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f56e9bd7f31 code=0x7ffc0000 [ 616.600013][ T29] audit: type=1326 audit(3581273344.790:22600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.0.4992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e8e0e159 code=0x7ffc0000 [ 616.600054][ T29] audit: type=1326 audit(3581273344.790:22601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.0.4992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f56e9bd7f31 code=0x7ffc0000 [ 616.600145][ T29] audit: type=1326 audit(3581273344.790:22602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.0.4992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f56e8e0e159 code=0x7ffc0000 [ 616.600184][ T29] audit: type=1326 audit(3581273344.790:22603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.0.4992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f56e9bd7f31 code=0x7ffc0000 [ 616.600220][ T29] audit: type=1326 audit(3581273344.790:22604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.0.4992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e8e0e159 code=0x7ffc0000 [ 617.356569][T25813] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4996'. [ 617.462139][T25811] FAULT_INJECTION: forcing a failure. [ 617.462139][T25811] name failslab, interval 1, probability 0, space 0, times 0 [ 617.462169][T25811] CPU: 1 UID: 0 PID: 25811 Comm: syz.4.4995 Not tainted syzkaller #0 PREEMPT(lazy) [ 617.462196][T25811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 617.462210][T25811] Call Trace: [ 617.462218][T25811] [ 617.462227][T25811] __dump_stack+0x1d/0x30 [ 617.462260][T25811] dump_stack_lvl+0x95/0xd0 [ 617.462339][T25811] dump_stack+0x15/0x1b [ 617.462436][T25811] should_fail_ex+0x262/0x280 [ 617.462491][T25811] ? audit_log_start+0x34c/0x730 [ 617.462523][T25811] should_failslab+0x8c/0xb0 [ 617.462570][T25811] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 617.462634][T25811] ? audit_log_start+0x34c/0x730 [ 617.462743][T25811] ? perf_cgroup_set_timestamp+0xfe/0x120 [ 617.462771][T25811] audit_log_start+0x34c/0x730 [ 617.462800][T25811] audit_seccomp+0x49/0x110 [ 617.462829][T25811] __seccomp_filter+0x909/0x1360 [ 617.462920][T25811] ? _raw_spin_unlock+0x9/0x30 [ 617.462953][T25811] ? finish_task_switch+0x121/0x340 [ 617.462989][T25811] ? __schedule+0x79e/0xd20 [ 617.463024][T25811] ? xfd_validate_state+0x45/0xf0 [ 617.463075][T25811] __seccomp_permit_syscall+0x7d/0x150 [ 617.463115][T25811] do_syscall_64+0xca/0x360 [ 617.463233][T25811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.463256][T25811] RIP: 0033:0x7f8ae11fe159 [ 617.463273][T25811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.463293][T25811] RSP: 002b:00007f8adfc57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 617.463318][T25811] RAX: ffffffffffffffda RBX: 00007f8ae1485fa0 RCX: 00007f8ae11fe159 [ 617.463338][T25811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 617.463418][T25811] RBP: 00007f8adfc57090 R08: 0000200000000340 R09: 000000000000001c [ 617.463567][T25811] R10: 0000000020040401 R11: 0000000000000246 R12: 0000000000000001 [ 617.463581][T25811] R13: 00007f8ae1486038 R14: 00007f8ae1485fa0 R15: 00007ffe08bba208 [ 617.463604][T25811] [ 617.645439][T25818] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4997'. [ 617.645606][T25818] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4997'. [ 617.645806][T25818] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4997'. [ 617.650405][T25818] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4997'. [ 617.650547][T25818] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4997'. [ 617.653191][T25818] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4997'. [ 617.653326][T25818] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4997'. [ 617.653531][T25818] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4997'. [ 617.655045][T25818] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4997'. [ 617.969201][T25828] loop4: detected capacity change from 0 to 512 [ 617.976651][T25828] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 618.076753][T25837] loop4: detected capacity change from 0 to 1024 [ 618.100365][T25837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.657131][T25852] loop6: detected capacity change from 0 to 164 [ 618.666288][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 618.689533][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 618.703012][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 618.864114][T21188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.872463][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 618.877986][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 619.525437][T25861] wg1 speed is unknown, defaulting to 1000 [ 619.713551][T25871] loop6: detected capacity change from 0 to 128 [ 619.715331][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 619.715997][T25871] msdos: Unknown parameter '01777777777777777777777' [ 619.730593][T25861] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 619.747563][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 619.767481][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 619.797026][T25870] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.797189][T25870] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.837437][T25870] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.837505][T25870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.837595][T25870] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.837644][T25870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.887719][T25870] team0: Failed to send options change via netlink (err -105) [ 619.887774][T25870] team0: Port device bridge0 added [ 620.026130][T25871] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 620.137275][T25871] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.158547][T25871] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.200381][T25871] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 620.218429][T25871] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 620.290552][T25871] macvlan0: left promiscuous mode [ 620.516684][T25890] wg1 speed is unknown, defaulting to 1000 [ 620.568554][T11928] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.620679][T11928] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.622118][T25906] wg1 speed is unknown, defaulting to 1000 [ 620.676015][T25911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.676149][T25911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.682837][T11928] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.763219][T11928] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.871955][T11928] bridge_slave_1: left allmulticast mode [ 620.871979][T11928] bridge_slave_1: left promiscuous mode [ 620.872138][T11928] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.876541][T11928] bridge_slave_0: left allmulticast mode [ 620.876566][T11928] bridge_slave_0: left promiscuous mode [ 620.876674][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.028764][T11928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.041995][T11928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.045081][T11928] bond0 (unregistering): Released all slaves [ 621.118951][T11928] hsr_slave_0: left promiscuous mode [ 621.119739][T11928] hsr_slave_1: left promiscuous mode [ 621.120870][T11928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.120988][T11928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.123200][T11928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.123215][T11928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.174259][T11928] veth1_macvtap: left promiscuous mode [ 621.174330][T11928] veth0_macvtap: left promiscuous mode [ 621.174529][T11928] veth1_vlan: left promiscuous mode [ 621.174611][T11928] veth0_vlan: left promiscuous mode [ 621.333102][T25940] loop0: detected capacity change from 0 to 512 [ 621.346312][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 621.353759][T25940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.353885][T25940] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.430189][T20730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.456650][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 621.489407][T25890] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.489452][T25890] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.489528][T25890] bridge_slave_0: entered allmulticast mode [ 621.490238][T25890] bridge_slave_0: entered promiscuous mode [ 621.494512][T25890] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.494703][T25890] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.494900][T25890] bridge_slave_1: entered allmulticast mode [ 621.500887][T25890] bridge_slave_1: entered promiscuous mode [ 621.558030][T25954] wg1 speed is unknown, defaulting to 1000 [ 621.559344][T25890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.581316][T25890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.663379][T25890] team0: Port device team_slave_0 added [ 621.667671][T25890] team0: Port device team_slave_1 added [ 621.722457][T25890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.722491][T25890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.722578][T25890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.728932][T11928] IPVS: stop unused estimator thread 0... [ 621.775731][T25890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.775749][T25890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.775798][T25890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.860649][T25890] hsr_slave_0: entered promiscuous mode [ 621.870365][T25890] hsr_slave_1: entered promiscuous mode [ 621.870705][T25890] debugfs: 'hsr0' already exists in 'hsr' [ 621.870723][T25890] Cannot create hsr debugfs directory [ 621.914447][T25987] loop0: detected capacity change from 0 to 128 [ 621.932726][T25987] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 621.934920][T25987] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.036975][ T3025] 8021q: adding VLAN 0 to HW filter on device eth21 [ 622.123399][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 622.123441][ T29] audit: type=1400 audit(3581273349.904:22804): avc: denied { execute } for pid=26003 comm="syz.4.5044" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 622.123683][T26005] kernel read not supported for file /events/enable (pid: 26005 comm: syz.4.5044) [ 622.123699][ T29] audit: type=1400 audit(3581273349.904:22805): avc: denied { execute_no_trans } for pid=26003 comm="syz.4.5044" path="/224/tracing/events/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 622.367144][T26012] loop4: detected capacity change from 0 to 1024 [ 622.370591][T26012] EXT4-fs: Ignoring removed bh option [ 622.388150][T26012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.402443][T26012] netlink: 'syz.4.5046': attribute type 21 has an invalid length. [ 622.615317][T25890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 622.635143][T25890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.640531][T25890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 622.654240][T25890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.661063][T25890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 622.678283][T25890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 622.682203][T25890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 622.696809][T25890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 622.746038][ T29] audit: type=1400 audit(3581273350.485:22806): avc: denied { write } for pid=26016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.803387][T25890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.821789][T25890] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.827208][T11928] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.827246][T11928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.854733][T11912] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.854771][T11912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.890053][ T29] audit: type=1400 audit(3581273350.615:22807): avc: denied { write } for pid=26037 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.914202][T21188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.978587][ T3025] 8021q: adding VLAN 0 to HW filter on device eth22 [ 622.988436][T25890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 623.027181][T26041] loop4: detected capacity change from 0 to 512 [ 623.052001][T26041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.052154][T26041] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.151690][T21188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.258017][ T29] audit: type=1400 audit(3581273350.956:22808): avc: denied { map } for pid=26074 comm="syz.2.5053" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 623.258057][ T29] audit: type=1400 audit(3581273350.956:22809): avc: denied { execute } for pid=26074 comm="syz.2.5053" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 623.314507][ T29] audit: type=1400 audit(3581273351.002:22810): avc: denied { write } for pid=26049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.393421][T25890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.430693][ T29] audit: type=1400 audit(3581273351.113:22811): avc: denied { write } for pid=26086 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.522730][ T3025] 8021q: adding VLAN 0 to HW filter on device eth23 [ 623.802494][T25890] veth0_vlan: entered promiscuous mode [ 623.812586][T26084] loop6: detected capacity change from 0 to 32768 [ 623.814679][T25890] veth1_vlan: entered promiscuous mode [ 623.841487][T25890] veth0_macvtap: entered promiscuous mode [ 623.843956][T25890] veth1_macvtap: entered promiscuous mode [ 623.858505][T26084] loop6: p1 p3 < > [ 623.859502][ T29] audit: type=1400 audit(3581273351.501:22812): avc: denied { write } for pid=26097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.891192][T25890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.899986][T25890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.941123][ T29] audit: type=1400 audit(3581273351.584:22813): avc: denied { write } for pid=26114 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.946130][T11909] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.949235][T11909] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.949361][T11909] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.949500][T11909] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.016957][ T3025] 8021q: adding VLAN 0 to HW filter on device eth24 [ 624.067153][T26121] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 624.285830][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 624.301445][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 625.196162][T26149] loop6: detected capacity change from 0 to 512 [ 625.212144][T26149] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.5062: corrupted in-inode xattr: invalid ea_ino [ 625.212185][T26149] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 625.214334][T26149] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.5062: couldn't read orphan inode 15 (err -117) [ 625.214435][T26149] loop6: lost filesystem error report for type 5 error -117 [ 625.215163][T26149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.216081][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 625.430602][T24118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.433941][T20730] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 625.458931][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 625.472583][T16572] udevd[16572]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 625.478279][T16572] udevd[16572]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 625.491812][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 625.590125][T26182] wg1 speed is unknown, defaulting to 1000 [ 625.876930][T26214] __nla_validate_parse: 33 callbacks suppressed [ 625.876948][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5077'. [ 625.876998][T26214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5077'. [ 625.937259][ T3673] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.937301][ T3673] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.937383][ T3673] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.937426][ T3673] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.199381][T26225] loop2: detected capacity change from 0 to 4096 [ 626.218486][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 626.229495][T26225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.314241][T26225] netlink: 'syz.2.5079': attribute type 39 has an invalid length. [ 626.520961][T26252] hub 8-0:1.0: USB hub found [ 626.521188][T26252] hub 8-0:1.0: 8 ports detected [ 627.231902][T24032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.278257][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 627.297762][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 627.489476][T26262] wg1 speed is unknown, defaulting to 1000 [ 627.581360][T26258] loop2: detected capacity change from 0 to 8192 [ 627.596241][T26258] vfat filesystem being mounted at /94/bus supports timestamps until 2107-12-31 (0x10391447e) [ 627.886208][T26289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5094'. [ 627.887266][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 627.887279][ T29] audit: type=1400 audit(3581273355.221:22822): avc: denied { write } for pid=26268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.013043][T26285] wg1 speed is unknown, defaulting to 1000 [ 628.106810][ T29] audit: type=1400 audit(3581273355.433:22823): avc: denied { write } for pid=26296 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.160290][T26295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.160321][T26295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.190211][T26295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.190240][T26295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.586213][T26310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5100'. [ 628.609097][T26310] loop0: detected capacity change from 0 to 512 [ 628.621183][T26310] EXT4-fs (loop0): blocks per group (32) and clusters per group (8192) inconsistent [ 628.732640][ T29] audit: type=1400 audit(3581273356.015:22824): avc: denied { write } for pid=26303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.740008][T26325] Cannot find del_set index 0 as target [ 628.774564][T26322] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.5102'. [ 628.779984][T26319] wg1 speed is unknown, defaulting to 1000 [ 629.026255][ T29] audit: type=1400 audit(3581273356.282:22825): avc: denied { write } for pid=26335 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.991428][T26328] loop2: detected capacity change from 0 to 8192 [ 630.018205][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 630.023162][T26328] vfat filesystem being mounted at /97/bus supports timestamps until 2107-12-31 (0x10391447e) [ 630.375879][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 630.394617][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 630.395669][T26348] netlink: 'syz.5.5108': attribute type 1 has an invalid length. [ 630.602592][T26353] Invalid logical block size (-12) [ 630.689313][T26357] wg1 speed is unknown, defaulting to 1000 [ 630.750482][ T29] audit: type=1400 audit(3581273357.879:22826): avc: denied { write } for pid=26342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.949229][ T29] audit: type=1400 audit(3581273358.055:22827): avc: denied { write } for pid=26375 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.949575][T26374] loop2: detected capacity change from 0 to 764 [ 630.984441][T26374] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 630.994104][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 631.250031][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 631.272937][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 631.312859][T26382] wg1 speed is unknown, defaulting to 1000 [ 631.609285][T26387] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.5118'. [ 631.989001][T26391] loop2: detected capacity change from 0 to 512 [ 632.009547][T26391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.009622][T26391] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.011238][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 632.201735][T26399] loop4: detected capacity change from 0 to 8192 [ 632.206983][T26399] vfat filesystem being mounted at /243/bus supports timestamps until 2107-12-31 (0x10391447e) [ 632.224686][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 632.255834][T26405] loop6: detected capacity change from 0 to 2048 [ 632.267858][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 632.290424][T26405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.382193][T24032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.400498][T26405] mtrr: base(0xfffff2020000) is not aligned on a size(0x0000) boundary [ 632.420321][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 632.423052][T26405] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 632.452562][T26405] EXT4-fs (loop6): Remounting filesystem read-only [ 632.469545][ T29] audit: type=1400 audit(3581273359.467:22828): avc: denied { write } for pid=26380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.577043][ T29] audit: type=1400 audit(3581273359.559:22829): avc: denied { write } for pid=26422 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.730175][T25318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.831386][T26438] FAULT_INJECTION: forcing a failure. [ 632.831386][T26438] name failslab, interval 1, probability 0, space 0, times 0 [ 632.831465][T26438] CPU: 0 UID: 0 PID: 26438 Comm: syz.4.5131 Not tainted syzkaller #0 PREEMPT(lazy) [ 632.831501][T26438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.831519][T26438] Call Trace: [ 632.831528][T26438] [ 632.831538][T26438] __dump_stack+0x1d/0x30 [ 632.831566][T26438] dump_stack_lvl+0x95/0xd0 [ 632.831649][T26438] dump_stack+0x15/0x1b [ 632.831687][T26438] should_fail_ex+0x262/0x280 [ 632.831728][T26438] ? tracepoint_add_func+0x201/0x770 [ 632.831757][T26438] should_failslab+0x8c/0xb0 [ 632.831796][T26438] __kmalloc_noprof+0xd0/0x4d0 [ 632.831937][T26438] ? tracepoint_add_func+0x201/0x770 [ 632.831966][T26438] ? __pfx_perf_trace_kmalloc+0x10/0x10 [ 632.831992][T26438] tracepoint_add_func+0x201/0x770 [ 632.832016][T26438] ? pcpu_memcg_post_alloc_hook+0x5e/0x190 [ 632.832109][T26438] ? __pfx_perf_trace_kmalloc+0x10/0x10 [ 632.832143][T26438] tracepoint_probe_register+0x5b/0x90 [ 632.832177][T26438] ? __pfx_perf_trace_kmalloc+0x10/0x10 [ 632.832272][T26438] ? __pfx_perf_trace_kmalloc+0x10/0x10 [ 632.832378][T26438] trace_event_reg+0x15c/0x190 [ 632.832413][T26438] perf_trace_event_init+0x331/0x6d0 [ 632.832464][T26438] perf_trace_init+0x15f/0x1d0 [ 632.832524][T26438] perf_tp_event_init+0x68/0xc0 [ 632.832651][T26438] perf_try_init_event+0x254/0x6e0 [ 632.832728][T26438] perf_event_alloc+0xb13/0x19e0 [ 632.832762][T26438] __se_sys_perf_event_open+0x674/0x1280 [ 632.832885][T26438] ? do_futex+0x391/0x460 [ 632.832963][T26438] __x64_sys_perf_event_open+0x67/0x80 [ 632.833056][T26438] x64_sys_call+0x1f25/0x2550 [ 632.833109][T26438] do_syscall_64+0x112/0x360 [ 632.833191][T26438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.833216][T26438] RIP: 0033:0x7f8ae11fe159 [ 632.833234][T26438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.833268][T26438] RSP: 002b:00007f8adfc57028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 632.833293][T26438] RAX: ffffffffffffffda RBX: 00007f8ae1485fa0 RCX: 00007f8ae11fe159 [ 632.833324][T26438] RDX: 0000004000000000 RSI: 0000000000000000 RDI: 00002000000005c0 [ 632.833343][T26438] RBP: 00007f8ae129506b R08: 0000000000000003 R09: 0000000000000000 [ 632.833362][T26438] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 632.833381][T26438] R13: 00007f8ae1486038 R14: 00007f8ae1485fa0 R15: 00007ffe08bba208 [ 632.833467][T26438] [ 633.249693][T26446] wg1 speed is unknown, defaulting to 1000 [ 633.273791][T26458] loop4: detected capacity change from 0 to 128 [ 633.274420][T26458] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 633.299501][ T29] audit: type=1400 audit(3581273360.215:22830): avc: denied { write } for pid=26430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.306527][T26458] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 633.332316][T26458] vfat filesystem being mounted at /248/bus supports timestamps until 2107-12-31 (0x10391447e) [ 633.385117][T26448] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.5132'. [ 633.428792][ T29] audit: type=1400 audit(3581273360.344:22831): avc: denied { write } for pid=26463 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.522122][T11924] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 633.663914][T26472] loop4: detected capacity change from 0 to 128 [ 633.679743][T26472] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 633.680123][T26472] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.898897][T26462] wg1 speed is unknown, defaulting to 1000 [ 633.979978][ T29] audit: type=1400 audit(3581273360.852:22832): avc: denied { write } for pid=26477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.107900][ T29] audit: type=1400 audit(3581273360.972:22833): avc: denied { write } for pid=26509 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.406446][T21188] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 634.447419][T26462] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.447462][T26462] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.447533][T26462] bridge_slave_0: entered allmulticast mode [ 634.448239][T26462] bridge_slave_0: entered promiscuous mode [ 634.483938][T26462] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.483983][T26462] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.484258][T26462] bridge_slave_1: entered allmulticast mode [ 634.484762][T26462] bridge_slave_1: entered promiscuous mode [ 634.532916][T26462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.536693][T26462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.558413][T26528] FAULT_INJECTION: forcing a failure. [ 634.558413][T26528] name fail_futex, interval 1, probability 0, space 0, times 0 [ 634.558515][T26528] CPU: 1 UID: 0 PID: 26528 Comm: syz.2.5146 Not tainted syzkaller #0 PREEMPT(lazy) [ 634.558546][T26528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.558560][T26528] Call Trace: [ 634.558569][T26528] [ 634.558579][T26528] __dump_stack+0x1d/0x30 [ 634.558626][T26528] dump_stack_lvl+0x95/0xd0 [ 634.558652][T26528] dump_stack+0x15/0x1b [ 634.558677][T26528] should_fail_ex+0x262/0x280 [ 634.558786][T26528] should_fail+0xb/0x20 [ 634.558811][T26528] get_futex_key+0x12d/0xb10 [ 634.558848][T26528] futex_wait_setup+0x49/0x3e0 [ 634.558878][T26528] ? __rcu_read_unlock+0x4e/0x70 [ 634.558930][T26528] __futex_wait+0xa9/0x260 [ 634.558953][T26528] ? __pfx_futex_wake_mark+0x10/0x10 [ 634.559108][T26528] futex_wait+0x98/0x1c0 [ 634.559163][T26528] do_futex+0x391/0x460 [ 634.559195][T26528] ? should_fail_ex+0xdb/0x280 [ 634.559253][T26528] __se_sys_futex+0x2f6/0x370 [ 634.559328][T26528] __x64_sys_futex+0x78/0x90 [ 634.559370][T26528] x64_sys_call+0x22e2/0x2550 [ 634.559420][T26528] do_syscall_64+0x112/0x360 [ 634.559493][T26528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.559519][T26528] RIP: 0033:0x7f3b9fefe159 [ 634.559539][T26528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.559567][T26528] RSP: 002b:00007f3b9e9570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 634.559641][T26528] RAX: ffffffffffffffda RBX: 00007f3ba0185fa8 RCX: 00007f3b9fefe159 [ 634.559660][T26528] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3ba0185fa8 [ 634.559701][T26528] RBP: 00007f3ba0185fa0 R08: 0000000000000000 R09: 0000000000000000 [ 634.559753][T26528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.559791][T26528] R13: 00007f3ba0186038 R14: 00007ffed0dd3160 R15: 00007ffed0dd3248 [ 634.559864][T26528] [ 634.568762][T26528] loop2: detected capacity change from 0 to 512 [ 634.602647][T26528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.602894][T26528] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.820411][T26542] loop4: detected capacity change from 0 to 128 [ 634.841024][T26542] FAT-fs (loop4): bogus number of reserved sectors [ 634.841043][T26542] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 634.841067][T26542] FAT-fs (loop4): Can't find a valid FAT filesystem [ 634.841115][T26462] team0: Port device team_slave_0 added [ 634.844683][T26462] team0: Port device team_slave_1 added [ 634.896757][T26462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.896791][T26462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.896858][T26462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.897672][T26462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.897689][T26462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.897757][T26462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.899859][ T29] audit: type=1400 audit(3581273361.701:22834): avc: denied { write } for pid=26514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.020361][T24032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.077232][T26462] hsr_slave_0: entered promiscuous mode [ 635.079888][T26462] hsr_slave_1: entered promiscuous mode [ 635.080514][T26462] debugfs: 'hsr0' already exists in 'hsr' [ 635.080571][T26462] Cannot create hsr debugfs directory [ 635.151672][ T29] audit: type=1400 audit(3581273361.932:22835): avc: denied { write } for pid=26552 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.230960][T26556] 8021q: VLANs not supported on gre0 [ 635.333328][T26572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5155'. [ 635.386986][ T29] audit: type=1400 audit(3581273362.153:22836): avc: denied { write } for pid=26558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.456905][ T29] audit: type=1400 audit(3581273362.218:22837): avc: denied { write } for pid=26581 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.652354][T26596] loop0: detected capacity change from 0 to 512 [ 635.666267][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 635.702267][T26596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.702454][T26596] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.731879][T26596] GUP no longer grows the stack in syz.0.5159 (26596): 200000005000-200000008000 (200000004000) [ 635.731975][T26596] CPU: 1 UID: 0 PID: 26596 Comm: syz.0.5159 Not tainted syzkaller #0 PREEMPT(lazy) [ 635.732067][T26596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.732098][T26596] Call Trace: [ 635.732115][T26596] [ 635.732163][T26596] __dump_stack+0x1d/0x30 [ 635.732197][T26596] dump_stack_lvl+0x95/0xd0 [ 635.732226][T26596] dump_stack+0x15/0x1b [ 635.732249][T26596] fixup_user_fault+0x4fe/0x550 [ 635.732330][T26596] fault_in_user_writeable+0x5c/0xc0 [ 635.732449][T26596] futex_lock_pi+0x5ea/0x7c0 [ 635.732547][T26596] ? __pfx_futex_wake_mark+0x10/0x10 [ 635.732658][T26596] do_futex+0x2ea/0x460 [ 635.732830][T26596] __se_sys_futex+0x2f6/0x370 [ 635.732948][T26596] __x64_sys_futex+0x78/0x90 [ 635.733135][T26596] x64_sys_call+0x22e2/0x2550 [ 635.733299][T26596] do_syscall_64+0x112/0x360 [ 635.733393][T26596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.733529][T26596] RIP: 0033:0x7f56e8e0e159 [ 635.733582][T26596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.733645][T26596] RSP: 002b:00007f56e7867028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 635.733763][T26596] RAX: ffffffffffffffda RBX: 00007f56e9095fa0 RCX: 00007f56e8e0e159 [ 635.733823][T26596] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 635.733860][T26596] RBP: 00007f56e8ea506b R08: 0000000000000000 R09: 0000000000000001 [ 635.733874][T26596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.733888][T26596] R13: 00007f56e9096038 R14: 00007f56e9095fa0 R15: 00007ffe2cd9a178 [ 635.733911][T26596] [ 635.829480][T26605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.829839][T26605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.906098][T26596] tipc: Started in network mode [ 635.906191][T26596] tipc: Node identity 7f000001, cluster identity 4711 [ 635.906535][T26596] tipc: New replicast peer: 127.0.0.2 [ 635.907060][T26596] tipc: Enabled bearer , priority 10 [ 635.917014][T26596] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5159'. [ 636.023478][ T29] audit: type=1400 audit(3581273362.744:22838): avc: denied { write } for pid=26588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.024455][T26462] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 636.053804][T26462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 636.072713][T26462] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 636.089232][T26462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 636.097125][T26462] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 636.101581][T20730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.121838][T26462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 636.129515][T26462] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 636.129928][ T29] audit: type=1400 audit(3581273362.836:22839): avc: denied { write } for pid=26611 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.170084][T26462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 636.178345][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 636.197351][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 636.276562][T26618] device-mapper: dirty region log: invalid region size 1024 [ 636.276619][T26618] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL) [ 636.276648][T26618] device-mapper: ioctl: error adding target to table [ 636.317751][T26618] cgroup: Need name or subsystem set [ 636.376018][T26462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.388177][T26462] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.409645][T26462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 636.409669][T26462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.486918][T11912] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.486963][T11912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.520648][T11912] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.520712][T11912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.537520][T26632] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5162'. [ 636.628330][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5163'. [ 636.684210][ T29] audit: type=1400 audit(3581273363.353:22840): avc: denied { write } for pid=26623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.927057][T26462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.983241][T26666] wg1 speed is unknown, defaulting to 1000 [ 637.006713][T11663] tipc: Node number set to 2130706433 [ 637.124191][T26671] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5169'. [ 637.616930][T26462] veth0_vlan: entered promiscuous mode [ 637.632433][T26462] veth1_vlan: entered promiscuous mode [ 637.675789][T26462] veth0_macvtap: entered promiscuous mode [ 637.694866][T26462] veth1_macvtap: entered promiscuous mode [ 637.727912][T26462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.756733][T26462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.791226][T11909] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.791318][T11909] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.791417][T11909] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.832079][T11926] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.447737][T26760] FAULT_INJECTION: forcing a failure. [ 638.447737][T26760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.447797][T26760] CPU: 1 UID: 0 PID: 26760 Comm: syz.2.5186 Not tainted syzkaller #0 PREEMPT(lazy) [ 638.447855][T26760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.447879][T26760] Call Trace: [ 638.447895][T26760] [ 638.447919][T26760] __dump_stack+0x1d/0x30 [ 638.447966][T26760] dump_stack_lvl+0x95/0xd0 [ 638.448058][T26760] dump_stack+0x15/0x1b [ 638.448086][T26760] should_fail_ex+0x262/0x280 [ 638.448129][T26760] should_fail+0xb/0x20 [ 638.448172][T26760] should_fail_usercopy+0x1a/0x20 [ 638.448253][T26760] strncpy_from_user+0x27/0x250 [ 638.448306][T26760] keyctl_keyring_search+0x5b/0x2f0 [ 638.448343][T26760] ? proc_fail_nth_write+0x13b/0x160 [ 638.448391][T26760] __se_sys_keyctl+0x30f/0xb70 [ 638.448523][T26760] ? vfs_write+0x850/0x9a0 [ 638.448629][T26760] ? __fget_files+0x184/0x1c0 [ 638.448724][T26760] ? mutex_lock+0x57/0x90 [ 638.448776][T26760] ? mutex_unlock+0x4e/0x90 [ 638.448880][T26760] ? fput+0x91/0xc0 [ 638.448934][T26760] __x64_sys_keyctl+0x67/0x80 [ 638.449048][T26760] x64_sys_call+0x1fe0/0x2550 [ 638.449113][T26760] do_syscall_64+0x112/0x360 [ 638.449144][T26760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.449200][T26760] RIP: 0033:0x7f3b9fefe159 [ 638.449278][T26760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.449303][T26760] RSP: 002b:00007f3b9e957028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 638.449355][T26760] RAX: ffffffffffffffda RBX: 00007f3ba0185fa0 RCX: 00007f3b9fefe159 [ 638.449418][T26760] RDX: 0000200000000300 RSI: 00000000167b096a RDI: 000000000000000a [ 638.449436][T26760] RBP: 00007f3b9e957090 R08: 0000000000000000 R09: 0000000000000000 [ 638.449478][T26760] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.449504][T26760] R13: 00007f3ba0186038 R14: 00007f3ba0185fa0 R15: 00007ffed0dd3248 [ 638.449533][T26760] [ 638.973418][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 638.973453][ T29] audit: type=1400 audit(3581273365.467:22876): avc: denied { accept } for pid=26781 comm="syz.8.5192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 639.136047][ T29] audit: type=1400 audit(3581273365.615:22877): avc: denied { write } for pid=26776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.189465][ T29] audit: type=1400 audit(3581273365.661:22878): avc: denied { write } for pid=26800 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.491268][T26823] loop2: detected capacity change from 0 to 512 [ 639.505557][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 639.538353][T26828] netlink: 'syz.4.5198': attribute type 32 has an invalid length. [ 640.344467][T26823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.344671][T26823] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.380413][ T29] audit: type=1326 audit(3581273366.769:22879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26838 comm="syz.5.5202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f885124ef31 code=0x7ffc0000 [ 640.380466][ T29] audit: type=1326 audit(3581273366.769:22880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26838 comm="syz.5.5202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8850fee159 code=0x7ffc0000 [ 640.380627][ T29] audit: type=1326 audit(3581273366.769:22881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26838 comm="syz.5.5202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8850fee159 code=0x7ffc0000 [ 640.380773][ T29] audit: type=1326 audit(3581273366.769:22882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26838 comm="syz.5.5202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f885124ef31 code=0x7ffc0000 [ 640.380916][ T29] audit: type=1326 audit(3581273366.769:22883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26838 comm="syz.5.5202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8850fee159 code=0x7ffc0000 [ 640.380981][ T29] audit: type=1326 audit(3581273366.769:22884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26838 comm="syz.5.5202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8850fee159 code=0x7ffc0000 [ 640.381025][ T29] audit: type=1326 audit(3581273366.769:22885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26838 comm="syz.5.5202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f885124ef31 code=0x7ffc0000 [ 640.686881][T24032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.708365][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 640.725240][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 642.539875][T26921] netlink: 'syz.5.5217': attribute type 1 has an invalid length. [ 642.612955][T26921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5217'. [ 642.751524][T26935] FAULT_INJECTION: forcing a failure. [ 642.751524][T26935] name failslab, interval 1, probability 0, space 0, times 0 [ 642.751595][T26935] CPU: 1 UID: 0 PID: 26935 Comm: syz.5.5219 Not tainted syzkaller #0 PREEMPT(lazy) [ 642.751677][T26935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.751695][T26935] Call Trace: [ 642.751704][T26935] [ 642.751714][T26935] __dump_stack+0x1d/0x30 [ 642.751745][T26935] dump_stack_lvl+0x95/0xd0 [ 642.751777][T26935] dump_stack+0x15/0x1b [ 642.751898][T26935] should_fail_ex+0x262/0x280 [ 642.751933][T26935] should_failslab+0x8c/0xb0 [ 642.751988][T26935] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 642.752049][T26935] ? argv_split+0x2e/0x250 [ 642.752079][T26935] ? argv_split+0x2e/0x250 [ 642.752177][T26935] kstrndup+0x7e/0x120 [ 642.752209][T26935] argv_split+0x2e/0x250 [ 642.752238][T26935] ? __pfx___trace_uprobe_create+0x10/0x10 [ 642.752287][T26935] trace_probe_create+0x4b/0xd0 [ 642.752410][T26935] trace_uprobe_create+0x1c/0x30 [ 642.752443][T26935] dyn_event_create+0x3e/0x70 [ 642.752477][T26935] create_or_delete_trace_uprobe+0x54/0x80 [ 642.752516][T26935] trace_parse_run_command+0x198/0x2d0 [ 642.752596][T26935] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 642.752630][T26935] probes_write+0x34/0x50 [ 642.752663][T26935] ? __pfx_probes_write+0x10/0x10 [ 642.752684][T26935] vfs_write+0x254/0x9a0 [ 642.752778][T26935] ? __fget_files+0x184/0x1c0 [ 642.752816][T26935] ? mutex_lock+0x57/0x90 [ 642.752851][T26935] ksys_write+0xdc/0x1a0 [ 642.752892][T26935] __x64_sys_write+0x40/0x50 [ 642.753002][T26935] x64_sys_call+0x154e/0x2550 [ 642.753112][T26935] do_syscall_64+0x112/0x360 [ 642.753164][T26935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.753283][T26935] RIP: 0033:0x7f8850fee159 [ 642.753327][T26935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.753384][T26935] RSP: 002b:00007f884fa47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 642.753439][T26935] RAX: ffffffffffffffda RBX: 00007f8851275fa0 RCX: 00007f8850fee159 [ 642.753512][T26935] RDX: 000000000000000b RSI: 0000200000000540 RDI: 0000000000000004 [ 642.753544][T26935] RBP: 00007f884fa47090 R08: 0000000000000000 R09: 0000000000000000 [ 642.753589][T26935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.753615][T26935] R13: 00007f8851276038 R14: 00007f8851275fa0 R15: 00007ffd58db9998 [ 642.753674][T26935] [ 643.280278][T26945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29544 sclass=netlink_route_socket pid=26945 comm=syz.8.5221 [ 643.621021][T26959] loop0: detected capacity change from 0 to 512 [ 643.637343][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 643.654085][T26959] vfat filesystem being mounted at /280/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 644.410626][T26995] loop4: detected capacity change from 0 to 512 [ 644.424004][T26995] EXT4-fs: Ignoring removed oldalloc option [ 644.434710][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 644.463077][T26995] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.5231: Parent and EA inode have the same ino 15 [ 644.463175][T26995] loop4: lost filesystem error report for type 5 error -117 [ 644.465901][T26995] EXT4-fs (loop4): Remounting filesystem read-only [ 644.465938][T26995] EXT4-fs (loop4): 1 orphan inode deleted [ 644.466372][T26995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.663344][T26995] wg1 speed is unknown, defaulting to 1000 [ 644.682664][T27004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5231'. [ 644.765577][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 644.773147][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 644.894737][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 644.894752][ T29] audit: type=1400 audit(3581273370.932:22948): avc: denied { write } for pid=26991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.037297][T27014] wg1 speed is unknown, defaulting to 1000 [ 645.128272][ T29] audit: type=1400 audit(3581273371.144:22949): avc: denied { write } for pid=27021 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.129706][T21188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.174463][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 645.208181][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 645.322588][T27031] loop4: detected capacity change from 0 to 128 [ 645.324666][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 645.348122][T27031] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 645.348568][T27031] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.604555][T27046] syzkaller0: entered promiscuous mode [ 645.604578][T27046] syzkaller0: entered allmulticast mode [ 645.943562][T27060] loop0: detected capacity change from 0 to 1024 [ 645.944264][T27060] EXT4-fs: Ignoring removed orlov option [ 645.947430][T27060] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 645.957772][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 645.981148][T27060] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 645.981374][T27060] EXT4-fs (loop0): orphan cleanup on readonly fs [ 645.981999][T27060] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.5243: Invalid inode table block 0 in block_group 0 [ 645.982038][T27060] loop0: lost filesystem error report for type 5 error -117 [ 645.982193][T27060] EXT4-fs (loop0): Remounting filesystem read-only [ 645.982214][T27060] Quota error (device loop0): write_blk: dquota write failed [ 645.982251][T27060] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 645.982309][T27060] EXT4-fs (loop0): 1 truncate cleaned up [ 645.983996][T27060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 646.325037][T21188] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 646.334706][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 646.340352][T27070] wg1 speed is unknown, defaulting to 1000 [ 646.353373][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 646.863219][T27102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5258'. [ 646.888567][T20730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.035973][T27106] loop0: detected capacity change from 0 to 128 [ 647.053405][T27106] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 647.054841][T27106] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.200732][ T29] audit: type=1400 audit(3581273373.036:22950): avc: denied { map } for pid=27099 comm="syz.5.5257" path="/41/dev/sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 648.134125][T27120] netlink: 'syz.4.5261': attribute type 21 has an invalid length. [ 648.134175][T27120] IPv6: NLM_F_CREATE should be specified when creating new route [ 648.272190][T27126] loop4: detected capacity change from 0 to 512 [ 648.288109][T27126] journal_path: Non-blockdev passed as './file2' [ 648.288135][T27126] EXT4-fs: error: could not find journal device path [ 648.355444][T27129] wg1 speed is unknown, defaulting to 1000 [ 649.181196][T27159] geneve2: entered promiscuous mode [ 649.181271][T27159] geneve2: entered allmulticast mode [ 649.193767][T11909] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.194761][T11909] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.194855][T11909] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.194926][T11909] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.778053][T27169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=27169 comm=syz.8.5276 [ 649.832186][T27169] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5276'. [ 650.382256][T20730] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 650.404417][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 650.410967][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 650.490210][T27181] loop0: detected capacity change from 0 to 164 [ 650.499924][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 650.509177][T27181] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 650.581119][T20730] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 650.583235][T20730] ISOFS: unable to read i-node block [ 650.583412][T20730] ISOFS: unable to read i-node block [ 651.075530][T27184] wg1 speed is unknown, defaulting to 1000 [ 651.224699][T27184] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.224747][T27184] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.224855][T27184] bridge_slave_0: entered allmulticast mode [ 651.225712][T27184] bridge_slave_0: entered promiscuous mode [ 651.228387][T27184] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.228538][T27184] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.228836][T27184] bridge_slave_1: entered allmulticast mode [ 651.231179][T27184] bridge_slave_1: entered promiscuous mode [ 651.259153][T27184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.261938][T27184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.286786][T27184] team0: Port device team_slave_0 added [ 651.289422][T27184] team0: Port device team_slave_1 added [ 651.315519][T27184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.315546][T27184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.315657][T27184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.317861][T27184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.317903][T27184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.317996][T27184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.361003][T27184] hsr_slave_0: entered promiscuous mode [ 651.361669][T27184] hsr_slave_1: entered promiscuous mode [ 651.362401][T27184] debugfs: 'hsr0' already exists in 'hsr' [ 651.362443][T27184] Cannot create hsr debugfs directory [ 651.393548][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 651.631428][ T29] audit: type=1400 audit(3581273377.153:22951): avc: denied { write } for pid=27202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.640976][T27132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 651.804191][ T29] audit: type=1400 audit(3581273377.301:22952): avc: denied { write } for pid=27213 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.939220][T27184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 651.968813][T27184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.989147][T27184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 652.008202][T27184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 652.009260][T27184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 652.027795][T27184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.185594][T27184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 652.189857][T27184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 653.000751][T27184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.015666][T27184] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.021330][T11927] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.021448][T11927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.030726][T11926] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.030823][T11926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.092670][T27242] loop2: detected capacity change from 0 to 128 [ 653.096106][T16569] udevd[16569]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 653.149403][T27242] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 653.153247][T27242] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.205116][T27252] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.5293'. [ 653.260702][T27252] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5293'. [ 653.260732][T27252] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 653.368664][T27264] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5293'. [ 653.368705][T27264] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 653.400388][ T29] audit: type=1400 audit(3581273378.778:22953): avc: denied { write } for pid=27223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.565284][ T29] audit: type=1400 audit(3581273378.935:22954): avc: denied { write } for pid=27277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.937051][T27184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.069555][T27306] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 654.118883][ T29] audit: type=1400 audit(3581273379.443:22955): avc: denied { write } for pid=27282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.283485][ T29] audit: type=1400 audit(3581273379.599:22956): avc: denied { write } for pid=27314 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.361076][T27313] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5301'. [ 654.537907][T27184] veth0_vlan: entered promiscuous mode [ 654.556933][T27184] veth1_vlan: entered promiscuous mode [ 654.619983][T27184] veth0_macvtap: entered promiscuous mode [ 654.634270][T27184] veth1_macvtap: entered promiscuous mode [ 654.668300][T27184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.700576][T27184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.806867][T11927] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.807634][T11927] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.807716][T11927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.807787][T11927] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.883640][T27333] FAULT_INJECTION: forcing a failure. [ 654.883640][T27333] name failslab, interval 1, probability 0, space 0, times 0 [ 654.883709][T27333] CPU: 0 UID: 0 PID: 27333 Comm: syz.5.5303 Not tainted syzkaller #0 PREEMPT(lazy) [ 654.883830][T27333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.883857][T27333] Call Trace: [ 654.883873][T27333] [ 654.883892][T27333] __dump_stack+0x1d/0x30 [ 654.884022][T27333] dump_stack_lvl+0x95/0xd0 [ 654.884070][T27333] dump_stack+0x15/0x1b [ 654.884115][T27333] should_fail_ex+0x262/0x280 [ 654.884182][T27333] ? nf_tables_newchain+0xad7/0x1610 [ 654.884238][T27333] should_failslab+0x8c/0xb0 [ 654.884349][T27333] __kmalloc_cache_noprof+0x7a/0x400 [ 654.884385][T27333] ? nf_tables_newchain+0xad7/0x1610 [ 654.884439][T27333] nf_tables_newchain+0xad7/0x1610 [ 654.884570][T27333] ? nft_trans_table_add+0x36/0x190 [ 654.884652][T27333] nfnetlink_rcv+0xbf7/0x1740 [ 654.884822][T27333] netlink_unicast+0x5a9/0x680 [ 654.884884][T27333] netlink_sendmsg+0x5be/0x6f0 [ 654.884943][T27333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.885038][T27333] ____sys_sendmsg+0x532/0x580 [ 654.885089][T27333] ___sys_sendmsg+0x195/0x1e0 [ 654.885176][T27333] __x64_sys_sendmsg+0xd4/0x160 [ 654.885236][T27333] x64_sys_call+0x22ab/0x2550 [ 654.885295][T27333] do_syscall_64+0x112/0x360 [ 654.885350][T27333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.885467][T27333] RIP: 0033:0x7f8850fee159 [ 654.885500][T27333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.885546][T27333] RSP: 002b:00007f884fa47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.885678][T27333] RAX: ffffffffffffffda RBX: 00007f8851275fa0 RCX: 00007f8850fee159 [ 654.885700][T27333] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 654.885804][T27333] RBP: 00007f885108506b R08: 0000000000000000 R09: 0000000000000000 [ 654.885831][T27333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.885857][T27333] R13: 00007f8851276038 R14: 00007f8851275fa0 R15: 00007ffd58db9998 [ 654.885878][T27333] [ 655.110305][ T29] audit: type=1400 audit(3581273380.356:22957): avc: denied { write } for pid=27321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.222780][T27343] FAULT_INJECTION: forcing a failure. [ 655.222780][T27343] name failslab, interval 1, probability 0, space 0, times 0 [ 655.222903][T27343] CPU: 0 UID: 0 PID: 27343 Comm: syz.1.5284 Not tainted syzkaller #0 PREEMPT(lazy) [ 655.222953][T27343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.222979][T27343] Call Trace: [ 655.223003][T27343] [ 655.223022][T27343] __dump_stack+0x1d/0x30 [ 655.223167][T27343] dump_stack_lvl+0x95/0xd0 [ 655.223214][T27343] dump_stack+0x15/0x1b [ 655.223272][T27343] should_fail_ex+0x262/0x280 [ 655.223348][T27343] should_failslab+0x8c/0xb0 [ 655.223473][T27343] __kvmalloc_node_noprof+0x168/0x5c0 [ 655.223556][T27343] ? dm_create+0xa3/0x850 [ 655.223639][T27343] ? dm_create+0xa3/0x850 [ 655.223672][T27343] dm_create+0xa3/0x850 [ 655.223705][T27343] dev_create+0x141/0x290 [ 655.223762][T27343] dm_ctl_ioctl+0x80b/0xad0 [ 655.223798][T27343] ? __pfx_dev_create+0x10/0x10 [ 655.223927][T27343] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 655.223986][T27343] __se_sys_ioctl+0xce/0x140 [ 655.224077][T27343] __x64_sys_ioctl+0x43/0x50 [ 655.224160][T27343] x64_sys_call+0x239d/0x2550 [ 655.224212][T27343] do_syscall_64+0x112/0x360 [ 655.224309][T27343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.224357][T27343] RIP: 0033:0x7fc4a1bbe159 [ 655.224408][T27343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.224449][T27343] RSP: 002b:00007fc4a0617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.224493][T27343] RAX: ffffffffffffffda RBX: 00007fc4a1e45fa0 RCX: 00007fc4a1bbe159 [ 655.224541][T27343] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 655.224568][T27343] RBP: 00007fc4a1c5506b R08: 0000000000000000 R09: 0000000000000000 [ 655.224669][T27343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.224701][T27343] R13: 00007fc4a1e46038 R14: 00007fc4a1e45fa0 R15: 00007ffd59b5f3f8 [ 655.224744][T27343] [ 655.234380][T27343] device-mapper: core: unable to allocate device, out of memory. [ 655.412416][ T29] audit: type=1400 audit(3581273380.633:22958): avc: denied { write } for pid=27348 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.544104][ T29] audit: type=1326 audit(3581273380.763:22959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27352 comm="syz.5.5308" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f885124ef31 code=0x7ffc0000 [ 655.544315][ T29] audit: type=1326 audit(3581273380.763:22960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27352 comm="syz.5.5308" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8850fee159 code=0x7ffc0000 [ 656.498167][T27380] hsr_slave_0: left promiscuous mode [ 656.512062][T27380] hsr_slave_1: left promiscuous mode [ 656.567140][T24032] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 656.637825][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 656.665914][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 657.099070][T27407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5319'. [ 657.099097][T27407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5319'. [ 657.100157][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 657.100176][ T29] audit: type=1400 audit(3581273382.193:23292): avc: denied { write } for pid=27392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.303867][ T29] audit: type=1400 audit(3581273382.387:23293): avc: denied { write } for pid=27416 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.469981][T27429] FAULT_INJECTION: forcing a failure. [ 657.469981][T27429] name failslab, interval 1, probability 0, space 0, times 0 [ 657.470063][T27429] CPU: 1 UID: 0 PID: 27429 Comm: syz.5.5325 Not tainted syzkaller #0 PREEMPT(lazy) [ 657.470090][T27429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 657.470104][T27429] Call Trace: [ 657.470111][T27429] [ 657.470122][T27429] __dump_stack+0x1d/0x30 [ 657.470166][T27429] dump_stack_lvl+0x95/0xd0 [ 657.470223][T27429] dump_stack+0x15/0x1b [ 657.470254][T27429] should_fail_ex+0x262/0x280 [ 657.470291][T27429] ? percpu_ref_init+0x9c/0x250 [ 657.470341][T27429] should_failslab+0x8c/0xb0 [ 657.470393][T27429] __kmalloc_cache_noprof+0x7a/0x400 [ 657.470444][T27429] ? percpu_ref_init+0x33/0x250 [ 657.470493][T27429] ? percpu_ref_init+0x9c/0x250 [ 657.470529][T27429] ? __pfx_blkg_release+0x10/0x10 [ 657.470569][T27429] percpu_ref_init+0x9c/0x250 [ 657.470605][T27429] blkg_alloc+0xad/0x600 [ 657.470634][T27429] ? __xa_cmpxchg_raw+0x29e/0x2f0 [ 657.470672][T27429] blkcg_init_disk+0xfd/0x230 [ 657.470713][T27429] __alloc_disk_node+0x1b4/0x340 [ 657.470878][T27429] __blk_alloc_disk+0x68/0xd0 [ 657.471065][T27429] dm_create+0x36d/0x850 [ 657.471095][T27429] dev_create+0x141/0x290 [ 657.471130][T27429] dm_ctl_ioctl+0x80b/0xad0 [ 657.471162][T27429] ? __pfx_dev_create+0x10/0x10 [ 657.471250][T27429] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 657.471324][T27429] __se_sys_ioctl+0xce/0x140 [ 657.471368][T27429] __x64_sys_ioctl+0x43/0x50 [ 657.471470][T27429] x64_sys_call+0x239d/0x2550 [ 657.471541][T27429] do_syscall_64+0x112/0x360 [ 657.471568][T27429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.471601][T27429] RIP: 0033:0x7f8850fee159 [ 657.471623][T27429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.471700][T27429] RSP: 002b:00007f884fa47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.471730][T27429] RAX: ffffffffffffffda RBX: 00007f8851275fa0 RCX: 00007f8850fee159 [ 657.471750][T27429] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 657.471768][T27429] RBP: 00007f885108506b R08: 0000000000000000 R09: 0000000000000000 [ 657.471787][T27429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.471805][T27429] R13: 00007f8851276038 R14: 00007f8851275fa0 R15: 00007ffd58db9998 [ 657.471847][T27429] [ 658.002322][ T29] audit: type=1400 audit(3581273383.033:23294): avc: denied { accept } for pid=27425 comm="syz.8.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 658.098701][T27460] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 658.253724][T27455] netlink: 'syz.2.5330': attribute type 10 has an invalid length. [ 658.359914][ T29] audit: type=1400 audit(3581273383.366:23295): avc: denied { write } for pid=27427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.520036][ T29] audit: type=1400 audit(3581273383.504:23296): avc: denied { write } for pid=27471 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.591292][T27457] bridge_slave_0: left allmulticast mode [ 658.591385][T27457] bridge_slave_0: left promiscuous mode [ 658.591583][T27457] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.632482][T27457] bridge_slave_1: left allmulticast mode [ 658.632536][T27457] bridge_slave_1: left promiscuous mode [ 658.632700][T27457] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.678174][T27457] bond0: (slave bond_slave_0): Releasing backup interface [ 658.698165][T27457] bond0: (slave bond_slave_1): Releasing backup interface [ 658.719485][T27457] team0: Port device team_slave_0 removed [ 658.777975][T27457] team0: Port device team_slave_1 removed [ 658.841839][T27457] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 658.899082][T27455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.914357][T27455] team0: Port device bond0 added [ 658.926035][T27467] tipc: Started in network mode [ 658.926074][T27467] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 658.926199][T27467] tipc: Enabled bearer , priority 0 [ 658.926995][T27467] tipc: Enabling of bearer rejected, already enabled [ 658.927165][T27467] tipc: Enabling of bearer rejected, already enabled [ 658.927310][T27467] tipc: Enabling of bearer rejected, already enabled [ 658.927458][T27467] tipc: Enabling of bearer rejected, already enabled [ 658.927592][T27467] tipc: Enabling of bearer rejected, already enabled [ 658.993566][T11926] tipc: Resetting bearer [ 659.004396][T27467] tipc: Enabling of bearer rejected, already enabled [ 659.199381][T27489] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 659.370394][T27499] syzkaller0: entered promiscuous mode [ 659.370416][T27499] syzkaller0: entered allmulticast mode [ 659.513177][ T29] audit: type=1400 audit(3581273384.427:23297): avc: denied { write } for pid=27484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.574315][T27510] No source specified [ 659.643969][T27518] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 659.656293][ T29] audit: type=1400 audit(3581273384.556:23298): avc: denied { getattr } for pid=27517 comm="syz.8.5347" path="/39/debug/tracing/trace_pipe" dev="tracefs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 659.683313][ T29] audit: type=1400 audit(3581273384.584:23299): avc: denied { write } for pid=27519 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.795431][T27480] loop4: detected capacity change from 0 to 512 [ 659.797453][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 659.846857][T27480] EXT4-fs (loop4): 1 orphan inode deleted [ 659.847553][T27480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.849598][T27480] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.871299][ T29] audit: type=1400 audit(3581273384.760:23300): avc: denied { read } for pid=27479 comm="syz.4.5337" name=2E02 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 659.871392][ T29] audit: type=1400 audit(3581273384.760:23301): avc: denied { write } for pid=27479 comm="syz.4.5337" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 660.040561][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5337'. [ 660.048579][T23236] tipc: Node number set to 11578026 [ 660.210680][T27553] loop2: detected capacity change from 0 to 1024 [ 660.211381][T27553] EXT4-fs: Ignoring removed orlov option [ 660.215550][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 660.216001][T27553] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 660.230489][T27553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.482766][T27572] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5355'. [ 660.635768][T24032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.656997][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 660.676738][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 660.934634][T27521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5337'. [ 661.081151][T27599] loop2: detected capacity change from 0 to 1024 [ 661.083386][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 661.094940][T27599] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 661.096728][T27599] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 661.097744][T27599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.192767][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 661.208701][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 661.288832][T24032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.310734][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 661.570222][T27616] netlink: 'syz.5.5368': attribute type 42 has an invalid length. [ 661.690685][T21188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.788857][T27628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5370'. [ 661.857089][T27628] lo: entered promiscuous mode [ 661.888296][T27628] tunl0: entered promiscuous mode [ 661.907563][T27628] gre0: entered promiscuous mode [ 661.996767][T27628] gretap0: entered promiscuous mode [ 662.048495][T27628] erspan0: entered promiscuous mode [ 662.067689][T27628] ip_vti0: entered promiscuous mode [ 662.128738][T27628] ip6_vti0: entered promiscuous mode [ 662.169297][T27628] sit0: entered promiscuous mode [ 662.221659][T27628] ip6tnl0: entered promiscuous mode [ 662.296234][T27628] ip6gre0: entered promiscuous mode [ 662.337293][T27628] syz_tun: entered promiscuous mode [ 662.407427][T27628] ip6gretap0: entered promiscuous mode [ 662.446915][T27628] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.447163][T27628] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.447596][T27628] bridge0: entered promiscuous mode [ 662.492178][T27642] tipc: Resetting bearer [ 662.546940][T27642] tipc: Disabling bearer [ 662.619806][T27642] team0 (unregistering): Port device bond0 removed [ 662.901878][T27657] wg1 speed is unknown, defaulting to 1000 [ 662.986338][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 662.986355][ T29] audit: type=1400 audit(3581273387.640:23408): avc: denied { write } for pid=27662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.171846][T27661] wg1 speed is unknown, defaulting to 1000 [ 663.175857][ T29] audit: type=1400 audit(3581273387.806:23409): avc: denied { write } for pid=27683 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.368549][T27682] wg1 speed is unknown, defaulting to 1000 [ 663.426977][T27685] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5379'. [ 663.748797][ T29] audit: type=1400 audit(3581273388.332:23410): avc: denied { mounton } for pid=27700 comm="syz.5.5382" path="/80/proc/211/task/212/fail-nth" dev="proc" ino=87233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 663.866110][ T29] audit: type=1400 audit(3581273388.443:23411): avc: denied { write } for pid=27696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.928377][T27714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5386'. [ 664.004436][T27718] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 664.050323][ T29] audit: type=1400 audit(3581273388.618:23412): avc: denied { write } for pid=27719 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.096829][T27714] loop4: detected capacity change from 0 to 512 [ 664.113505][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 664.117801][T27714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 664.154457][T27714] EXT4-fs (loop4): 1 truncate cleaned up [ 664.155250][T27714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.198693][ T29] audit: type=1326 audit(3581273388.756:23413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.1.5388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc4a2989f31 code=0x7ffc0000 [ 664.198740][ T29] audit: type=1326 audit(3581273388.756:23414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.1.5388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1bbe159 code=0x7ffc0000 [ 664.198809][ T29] audit: type=1326 audit(3581273388.756:23415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.1.5388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1bbe159 code=0x7ffc0000 [ 664.202089][ T29] audit: type=1326 audit(3581273388.756:23416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.1.5388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc4a2989f31 code=0x7ffc0000 [ 664.202202][ T29] audit: type=1326 audit(3581273388.756:23417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.1.5388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc4a1bbe159 code=0x7ffc0000 [ 664.518442][T21188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.520170][T27747] wg1 speed is unknown, defaulting to 1000 [ 664.529733][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 664.547637][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 665.081342][T27779] loop2: detected capacity change from 0 to 512 [ 665.097387][T27779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 665.099393][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 665.126300][T27779] EXT4-fs (loop2): too many log groups per flexible block group [ 665.126474][T27779] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 665.126550][T27779] EXT4-fs (loop2): mount failed [ 665.155083][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 665.190872][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 665.227270][T27788] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5402'. [ 665.492734][T27798] bond1: entered promiscuous mode [ 665.583053][T27798] FAULT_INJECTION: forcing a failure. [ 665.583053][T27798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.583118][T27798] CPU: 0 UID: 0 PID: 27798 Comm: syz.2.5404 Not tainted syzkaller #0 PREEMPT(lazy) [ 665.583209][T27798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 665.583240][T27798] Call Trace: [ 665.583250][T27798] [ 665.583268][T27798] __dump_stack+0x1d/0x30 [ 665.583402][T27798] dump_stack_lvl+0x95/0xd0 [ 665.583461][T27798] dump_stack+0x15/0x1b [ 665.583504][T27798] should_fail_ex+0x262/0x280 [ 665.583580][T27798] should_fail+0xb/0x20 [ 665.583631][T27798] should_fail_usercopy+0x1a/0x20 [ 665.583724][T27798] _copy_from_user+0x1c/0xb0 [ 665.583934][T27798] get_user_ifreq+0x52/0x110 [ 665.583987][T27798] inet_ioctl+0x2c6/0x3a0 [ 665.584087][T27798] sock_do_ioctl+0x73/0x230 [ 665.584190][T27798] sock_ioctl+0x439/0x610 [ 665.584241][T27798] ? mutex_lock+0x57/0x90 [ 665.584361][T27798] ? __pfx_sock_ioctl+0x10/0x10 [ 665.584399][T27798] __se_sys_ioctl+0xce/0x140 [ 665.584463][T27798] __x64_sys_ioctl+0x43/0x50 [ 665.584637][T27798] x64_sys_call+0x239d/0x2550 [ 665.584694][T27798] do_syscall_64+0x112/0x360 [ 665.584756][T27798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.584888][T27798] RIP: 0033:0x7f3b9fefe159 [ 665.584905][T27798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.584946][T27798] RSP: 002b:00007f3b9e957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.585049][T27798] RAX: ffffffffffffffda RBX: 00007f3ba0185fa0 RCX: 00007f3b9fefe159 [ 665.585084][T27798] RDX: 0000200000000540 RSI: 000000000000891c RDI: 000000000000000b [ 665.585116][T27798] RBP: 00007f3b9e957090 R08: 0000000000000000 R09: 0000000000000000 [ 665.585149][T27798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.585167][T27798] R13: 00007f3ba0186038 R14: 00007f3ba0185fa0 R15: 00007ffed0dd3248 [ 665.585205][T27798] [ 665.866209][T27820] bond1: entered promiscuous mode [ 665.912912][T27816] wg1 speed is unknown, defaulting to 1000 [ 666.592791][T27865] loop4: detected capacity change from 0 to 2048 [ 666.600466][T27791] udevd[27791]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 666.658461][T27865] GPT:first_usable_lbas don't match. [ 666.658478][T27865] GPT:34 != 290 [ 666.658508][T27865] GPT: Use GNU Parted to correct GPT errors. [ 666.658735][T27865] loop4: p1 p2 p3 [ 666.664561][T27791] udevd[27791]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 666.700470][T27389] udevd[27389]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 666.702852][T27791] udevd[27791]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 666.762069][T27872] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5421'. [ 666.842359][T27869] wg1 speed is unknown, defaulting to 1000 [ 667.032020][T27879] wg1 speed is unknown, defaulting to 1000 [ 667.199546][T27878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.199693][T27878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.365234][T27893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5430'. [ 667.472534][T27896] ip6erspan0: entered allmulticast mode [ 667.762612][T27909] wg1 speed is unknown, defaulting to 1000 [ 668.484614][T27942] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5445'. [ 668.509127][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 668.509174][ T29] audit: type=1326 audit(3581273392.735:23529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.4.5448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8ae145ef31 code=0x7ffc0000 [ 668.509501][T27944] FAULT_INJECTION: forcing a failure. [ 668.509501][T27944] name failslab, interval 1, probability 0, space 0, times 0 [ 668.509566][T27944] CPU: 0 UID: 0 PID: 27944 Comm: syz.5.5446 Not tainted syzkaller #0 PREEMPT(lazy) [ 668.509597][T27944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.509612][T27944] Call Trace: [ 668.509618][T27944] [ 668.509628][T27944] __dump_stack+0x1d/0x30 [ 668.509661][T27944] dump_stack_lvl+0x95/0xd0 [ 668.509697][T27944] dump_stack+0x15/0x1b [ 668.509720][T27944] should_fail_ex+0x262/0x280 [ 668.509754][T27944] ? bdi_alloc+0x31/0xb0 [ 668.509806][T27944] should_failslab+0x8c/0xb0 [ 668.509850][T27944] __kmalloc_cache_node_noprof+0x81/0x420 [ 668.510026][T27944] ? bdi_alloc+0x31/0xb0 [ 668.510059][T27944] bdi_alloc+0x31/0xb0 [ 668.510082][T27944] __alloc_disk_node+0x85/0x340 [ 668.510159][T27944] __blk_alloc_disk+0x68/0xd0 [ 668.510190][T27944] dm_create+0x36d/0x850 [ 668.510216][T27944] dev_create+0x141/0x290 [ 668.510288][T27944] dm_ctl_ioctl+0x80b/0xad0 [ 668.510322][T27944] ? __pfx_dev_create+0x10/0x10 [ 668.510361][T27944] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 668.510453][T27944] __se_sys_ioctl+0xce/0x140 [ 668.510561][T27944] __x64_sys_ioctl+0x43/0x50 [ 668.510673][T27944] x64_sys_call+0x239d/0x2550 [ 668.510701][T27944] do_syscall_64+0x112/0x360 [ 668.510733][T27944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.510776][T27944] RIP: 0033:0x7f8850fee159 [ 668.510815][T27944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.510954][T27944] RSP: 002b:00007f884fa47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.510976][T27944] RAX: ffffffffffffffda RBX: 00007f8851275fa0 RCX: 00007f8850fee159 [ 668.510994][T27944] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 668.511013][T27944] RBP: 00007f885108506b R08: 0000000000000000 R09: 0000000000000000 [ 668.511031][T27944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.511044][T27944] R13: 00007f8851276038 R14: 00007f8851275fa0 R15: 00007ffd58db9998 [ 668.511079][T27944] [ 668.511485][ T29] audit: type=1326 audit(3581273392.735:23530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.4.5448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae11fe159 code=0x7ffc0000 [ 668.511521][ T29] audit: type=1326 audit(3581273392.735:23531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.4.5448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae11fe159 code=0x7ffc0000 [ 668.516699][ T29] audit: type=1326 audit(3581273392.735:23532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.4.5448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae11fe159 code=0x7ffc0000 [ 668.516798][ T29] audit: type=1326 audit(3581273392.735:23533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.4.5448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8ae145ef31 code=0x7ffc0000 [ 668.516837][ T29] audit: type=1326 audit(3581273392.735:23534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.4.5448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae11fe159 code=0x7ffc0000 [ 668.517347][ T29] audit: type=1326 audit(3581273392.735:23535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.4.5448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8ae145ef31 code=0x7ffc0000 [ 668.517511][ T29] audit: type=1326 audit(3581273392.735:23536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.4.5448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8ae11fe159 code=0x7ffc0000 [ 668.517635][ T29] audit: type=1326 audit(3581273392.735:23537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.4.5448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8ae145ef31 code=0x7ffc0000 [ 668.517688][ T29] audit: type=1326 audit(3581273392.735:23538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz.4.5448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae11fe159 code=0x7ffc0000 [ 668.636471][T27946] wg1 speed is unknown, defaulting to 1000 [ 669.104469][T27958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=27958 comm=syz.4.5448 [ 669.752363][T27971] wg1 speed is unknown, defaulting to 1000 [ 669.823909][T27986] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5455'. [ 669.864672][T27988] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.5456'. [ 670.086311][T27983] wg1 speed is unknown, defaulting to 1000 [ 671.582495][T27997] veth4: entered promiscuous mode [ 671.582521][T27997] veth4: entered allmulticast mode [ 671.781930][T28001] loop4: detected capacity change from 0 to 1024 [ 671.782696][T28001] EXT4-fs: dax option not supported [ 671.786653][T27791] udevd[27791]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 671.821606][T27791] udevd[27791]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 671.838160][T27791] udevd[27791]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 672.125230][T11663] ================================================================== [ 672.125284][T11663] BUG: KCSAN: data-race in ktime_get_mono_fast_ns / update_fast_timekeeper [ 672.125331][T11663] [ 672.125336][T11663] write to 0xffffffff86f4fd48 of 56 bytes by interrupt on cpu 0: [ 672.125353][T11663] update_fast_timekeeper+0x38/0x70 [ 672.125388][T11663] timekeeping_update_from_shadow+0x3c0/0x480 [ 672.125422][T11663] __timekeeping_advance+0xb36/0xcf0 [ 672.125457][T11663] update_wall_time+0x21/0x50 [ 672.125489][T11663] tick_do_update_jiffies64+0x169/0x1c0 [ 672.125531][T11663] tick_nohz_handler+0x88/0x380 [ 672.125559][T11663] __hrtimer_run_queues+0x1f8/0x510 [ 672.125581][T11663] hrtimer_interrupt+0x27b/0x860 [ 672.125605][T11663] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 672.125640][T11663] sysvec_apic_timer_interrupt+0x6f/0x80 [ 672.125683][T11663] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 672.125709][T11663] kcsan_setup_watchpoint+0x42b/0x4a0 [ 672.125742][T11663] __unix_dgram_recvmsg+0x3c2/0x860 [ 672.125768][T11663] unix_dgram_recvmsg+0x7e/0x90 [ 672.125806][T11663] sock_recvmsg_nosec+0xc2/0xf0 [ 672.125845][T11663] ____sys_recvmsg+0x26f/0x280 [ 672.125871][T11663] ___sys_recvmsg+0x11f/0x3a0 [ 672.125894][T11663] do_recvmmsg+0x1e5/0x560 [ 672.125916][T11663] __x64_sys_recvmmsg+0xe5/0x170 [ 672.125947][T11663] x64_sys_call+0x77f/0x2550 [ 672.125981][T11663] do_syscall_64+0x112/0x360 [ 672.126008][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.126030][T11663] [ 672.126036][T11663] read to 0xffffffff86f4fd58 of 8 bytes by task 11663 on cpu 1: [ 672.126055][T11663] ktime_get_mono_fast_ns+0x92/0x1a0 [ 672.126089][T11663] usb_autopm_put_interface+0x29/0x60 [ 672.126118][T11663] hub_event+0x299e/0x2aa0 [ 672.126146][T11663] process_scheduled_works+0x56a/0xa50 [ 672.126182][T11663] worker_thread+0x569/0x750 [ 672.126212][T11663] kthread+0x223/0x270 [ 672.126234][T11663] ret_from_fork+0x146/0x330 [ 672.126278][T11663] ret_from_fork_asm+0x1a/0x30 [ 672.126312][T11663] [ 672.126318][T11663] value changed: 0x0000000014ab32b4 -> 0x0000000014abbe87 [ 672.126331][T11663] [ 672.126335][T11663] Reported by Kernel Concurrency Sanitizer on: [ 672.126346][T11663] CPU: 1 UID: 0 PID: 11663 Comm: kworker/1:18 Not tainted syzkaller #0 PREEMPT(lazy) [ 672.126373][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.126391][T11663] Workqueue: usb_hub_wq hub_event [ 672.126422][T11663] ================================================================== [ 672.769680][T27976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512