last executing test programs: 3m26.772473189s ago: executing program 2 (id=321): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$l2tp6(0xa, 0x2, 0x73) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r8}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000000740)=0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) timer_settime(r9, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000280)) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3180009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 3m26.56366216s ago: executing program 2 (id=328): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x42a240, 0x0) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 3m26.205316915s ago: executing program 2 (id=340): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) 3m25.977358558s ago: executing program 2 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x1e0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 3m25.930714413s ago: executing program 2 (id=350): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) r8 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r11, {0x0, 0x7}, {0xfff2, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000300)={0x0, "e38fb88460d773a00dc12747b70018bb"}) ioctl$BTRFS_IOC_DEV_REPLACE(r8, 0xca289435, &(0x7f0000001300)={0x1, 0x3, @start={r12, 0x0, "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", "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"}, [0x9, 0x8, 0x5, 0x1, 0x476, 0x0, 0x151, 0x41a, 0x5, 0x3, 0x1, 0x200, 0x0, 0x5, 0x7, 0x7f, 0x8, 0x7eaf, 0x6, 0x80000000, 0x8, 0x8000000000000000, 0x5, 0x10001, 0x2de8, 0x426, 0x1, 0xd, 0x5, 0x37, 0x9, 0x139, 0x3b61, 0x80, 0x3, 0x8000, 0x80, 0x4, 0x2518, 0xb76, 0x3fb9e1e9, 0x7b8, 0x36ad, 0x0, 0x7f, 0x2, 0xab8, 0x3, 0x3ddc, 0x96b, 0x5, 0x2, 0x10001, 0x7fffffffffffffff, 0xd, 0x7, 0x4, 0x7, 0x1, 0x55, 0x100000000, 0x401, 0x4, 0x401]}) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r13, &(0x7f0000000000)={0x1f, @none}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) r14 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r14) 3m25.664993419s ago: executing program 2 (id=353): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$l2tp6(0xa, 0x2, 0x73) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r8}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000000740)=0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) timer_settime(r9, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000280)) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3180009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 3m25.621003793s ago: executing program 32 (id=353): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$l2tp6(0xa, 0x2, 0x73) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r8}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000000740)=0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) timer_settime(r9, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000280)) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3180009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 2m31.555253717s ago: executing program 5 (id=1388): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000f96000/0x2000)=nil], 0x0, &(0x7f0000000540), 0x0) 2m31.495250563s ago: executing program 5 (id=1389): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sync() 2m31.42295793s ago: executing program 5 (id=1392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x4, 0x2}, @enum={0xd, 0x7, 0x0, 0x6, 0x4, [{0xd, 0xffff}, {0xd}, {0x3, 0xc03}, {0xa, 0x9}, {0xa, 0x8}, {0xc, 0x2a7}, {0xf, 0x8}]}, @fwd={0x6}, @enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x5, 0x2, 0x35e9}]}, @enum64={0xe, 0x1, 0x0, 0x13, 0x0, 0x1b, [{0xa, 0x0, 0x80000000}]}]}, {0x0, [0x61]}}, &(0x7f0000000b40)=""/176, 0xab, 0xb0, 0x0, 0xbf4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0x2, 0x4, 0x28007, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 2m31.371199885s ago: executing program 5 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind(r1, &(0x7f0000000040)=@llc={0x1a, 0x30d, 0x87, 0x2, 0x80, 0x9, @multicast}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='sys_enter\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x80000000000f36, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r7, r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x1e0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) socket$can_bcm(0x1d, 0x2, 0x2) 2m28.352023586s ago: executing program 5 (id=1441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000840)=""/73, 0x49) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 2m27.767317093s ago: executing program 5 (id=1445): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) shutdown(r0, 0x1) 2m27.731306427s ago: executing program 33 (id=1445): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) shutdown(r0, 0x1) 2m16.589327854s ago: executing program 6 (id=1618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d37a6d95c19185020000010000000000000001410001001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010014) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) close(r0) 2m16.515099202s ago: executing program 6 (id=1619): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES64=0x0, @ANYRES8=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x23, 0x2, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1a8, 0xffffff7a, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x0, 0x41}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x10000000, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") socket(0x400000000010, 0x3, 0x0) 2m16.299571213s ago: executing program 6 (id=1625): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r2}, 0x10) close(r0) 2m16.297548933s ago: executing program 6 (id=1627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind(r1, &(0x7f0000000040)=@llc={0x1a, 0x30d, 0x87, 0x2, 0x80, 0x9, @multicast}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='sys_enter\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x80000000000f36, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_pidfd_open(r6, 0x0) setns(0xffffffffffffffff, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x1e0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) socket$can_bcm(0x1d, 0x2, 0x2) 2m13.239992937s ago: executing program 6 (id=1664): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2m12.966173314s ago: executing program 6 (id=1668): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0xfff2, 0xfff1}}}, 0x24}}, 0x40004) 2m12.663498815s ago: executing program 34 (id=1668): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0xfff2, 0xfff1}}}, 0x24}}, 0x40004) 3.135372688s ago: executing program 4 (id=3531): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) (fail_nth: 1) 2.995171502s ago: executing program 4 (id=3534): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x18}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$inet(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.984886952s ago: executing program 3 (id=3535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 2.891093332s ago: executing program 3 (id=3536): pipe2$watch_queue(&(0x7f0000000040), 0x80) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24000000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) brk(0x20ffc004) 2.702849651s ago: executing program 3 (id=3537): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty=0x91}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r4, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 2.31442258s ago: executing program 7 (id=3540): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(0x0, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100"], 0x18}}, 0x2000) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="2e2e014010ff"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 2.101824521s ago: executing program 4 (id=3541): r0 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004a2"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) ptrace(0x10, r0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '2'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x68, 0x24, 0xf0b, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x38, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x6}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2ca43948}]}}]}, 0x68}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/67, 0x43}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/124, 0x7c}], 0x5, 0x4, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d80c}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1.973510963s ago: executing program 4 (id=3542): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e671ab4912f9f6a31854ec98e950cf8caa52dd8d39af14c31ed56a13d900"}, 0x48, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x39, 0x31, 0x33, 0x38, 0x66, 0x36, 0x5c, 0x33, 0x30, 0x61, 0x65, 0x61]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018f2f56514fbfd8f39438f02110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x10007ffffffff}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = gettid() r8 = socket(0x40000000015, 0x5, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) recvmmsg(r8, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000300)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400a287", @ANYRES16=r10, @ANYBLOB="070226bd7000fedbdf25010000000c00048005000300010000000400088008000100030000000800020001000000"], 0x34}}, 0x4008080) 1.494695951s ago: executing program 3 (id=3546): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@noinit_itable}, {@noinit_itable}, {@debug}, {@nodiscard}, {@quota}]}, 0x1, 0x43d, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000b40)={{0x3, 0x200, 0x9, 0x6, 0xc, 0x7ff}, 0x313, [0x8, 0x4, 0x5, 0x6d0912a5, 0x0, 0x1, 0x1, 0x5, 0x4, 0x0, 0x6, 0x7, 0x7, 0x8001, 0xfffffffd, 0x1ff, 0x8001, 0xffff, 0x80, 0x1886, 0x0, 0x0, 0xf, 0xc0, 0x8, 0x5, 0x5, 0xf6, 0x1, 0x3, 0x3, 0x3ff, 0x2, 0x10, 0x7, 0x3ff, 0x4, 0x4, 0x5, 0x0, 0x100, 0x9, 0x10, 0x5c, 0x5, 0x9, 0x3, 0xfffffff4, 0x5, 0xfffffff2, 0xffffff01, 0x2, 0x9, 0x9, 0x3, 0x1, 0x8001, 0x5, 0x2, 0x3, 0x2, 0x6, 0x80000001, 0x4, 0x3, 0x7, 0x3, 0x5, 0x9c3a, 0x400000, 0xe25, 0x9, 0x0, 0x7, 0x3, 0x6a18, 0x3, 0x6, 0xc8e0, 0x7, 0x1, 0x8, 0x1, 0xffff, 0x3, 0x1, 0x4, 0x7f, 0x2, 0x80000001, 0x0, 0xfff, 0x1ff, 0x4, 0x2, 0x7, 0xfffffff9, 0x0, 0x977d, 0x43d37b7d, 0x7, 0x0, 0xb41a, 0xf, 0x9a, 0x80, 0x737, 0x8, 0xf, 0xd, 0xfffffff5, 0x0, 0x5, 0x4, 0x2, 0x1, 0x7f, 0x6, 0x7, 0x7fffffff, 0x2, 0x1, 0x5, 0x1728, 0x14, 0x2482, 0xe, 0x8, 0xc6, 0xc1, 0x8, 0x40, 0xe, 0x7f3f81bc, 0x2, 0xfff, 0x0, 0xf, 0x8, 0xffffffc0, 0x6, 0x800, 0x9, 0x6, 0x681c, 0x4, 0x0, 0x1, 0x4, 0x1, 0xc77, 0x5405, 0xff, 0x1, 0x94c1, 0x2, 0x7, 0x4, 0xfb, 0x2, 0xfffffff7, 0xffffffff, 0xc8d, 0xfff, 0x4, 0x8, 0x6, 0x4ed5, 0x2, 0xfffffff7, 0x2, 0x2193, 0x0, 0xfffffff9, 0x9, 0x9, 0x2, 0x1, 0x8, 0xd, 0x5, 0x1, 0x8, 0x2, 0x1, 0x8, 0x5, 0x4, 0x100, 0x4, 0x0, 0x9, 0x2, 0x61, 0x80000000, 0x829a, 0x3, 0x10000, 0x30740000, 0x9, 0x5f5, 0xc0, 0x8, 0x0, 0x400, 0x8, 0xfffffff8, 0x5b, 0x8, 0x8, 0x3, 0x7fff, 0x1, 0x3, 0x9, 0x4, 0x80000001, 0x0, 0x1, 0x9, 0x0, 0x1, 0xc, 0x10001, 0x7, 0xfac7, 0x6, 0x1ff, 0x7, 0x4, 0x7fffffff, 0x0, 0xd, 0x9, 0x8609, 0x4, 0x4, 0x3ff, 0x1, 0x6, 0x3, 0x4, 0x80000000, 0xab9, 0x0, 0x8, 0x6, 0x7, 0xda4a, 0x91, 0x400, 0x100, 0x7, 0x7, 0x9, 0x8, 0x7, 0xffffffff, 0x3, 0x7, 0x0, 0x9d, 0x6, 0x2, 0x8001, 0x8001, 0x3, 0x2, 0x8, 0x80000001, 0x400, 0x8, 0x4, 0x2, 0x8, 0x3c97, 0x10, 0x3, 0x1, 0x2, 0x6, 0xfffffffd, 0x800, 0x40, 0x600000, 0x2, 0x3bd3, 0x7, 0x4, 0x0, 0xc, 0x6, 0xc, 0x7fff, 0x8, 0x5, 0x4c, 0xb6cf, 0x1, 0x3, 0xfffffff8, 0x10000, 0x8ec, 0x6, 0x5, 0x7, 0x9, 0x86, 0x6, 0x0, 0x6, 0x4, 0xfffffffd, 0x2, 0x0, 0x99, 0x8, 0xc, 0x9, 0x1, 0x6fa, 0x7d, 0x18be, 0x5b76, 0x3, 0x2, 0x675, 0xd, 0x6, 0x8, 0x0, 0x4, 0x1000, 0x8, 0x9, 0xc, 0x9, 0x5, 0x101, 0x10000, 0x5, 0x8001, 0x74fa8f68, 0x5, 0x10001, 0x2, 0x4d, 0x3, 0x83, 0x8d79, 0x8001, 0x0, 0x8, 0x4, 0x4, 0x11ca, 0x7fffffff, 0x1, 0xe, 0x4, 0x7, 0x1, 0xf, 0x8, 0x8, 0xc, 0x5, 0x6, 0x5, 0x5, 0x1, 0x6, 0x6, 0xae5, 0x5, 0x1ff, 0x7f, 0x8, 0x5, 0xfffffffb, 0x4, 0x5, 0x81, 0xf, 0xdbae, 0x8, 0x800, 0xf, 0x1, 0x3, 0x1, 0x556, 0x9, 0x6fe, 0xfffffffe, 0x7fffffff, 0x4, 0x9, 0xfffffffa, 0x1, 0x80, 0xfffffffd, 0xb4e1, 0x10, 0x4, 0x4, 0x6, 0x5, 0x401, 0x81, 0x9, 0xfffffffe, 0x101, 0x0, 0x3ec8, 0x851f, 0x1, 0x0, 0x3, 0xfff, 0x3, 0x6, 0x80000001, 0x0, 0xffffffff, 0x1, 0x4, 0x9, 0xfffffe00, 0x1, 0x7, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x1, 0xfffffff9, 0x6, 0x6, 0xfffff284, 0xc6b, 0x3840000, 0x6, 0x9, 0x7, 0x34, 0x8e0, 0x4, 0x3, 0x9, 0x537eac85, 0xb, 0x2, 0x5, 0x5442, 0x4, 0x35a6042d, 0x9, 0xe, 0xb04, 0x40, 0x5, 0xd, 0xfffffff8, 0x80, 0x21d5da47, 0x6, 0xff, 0x9, 0x9, 0x2, 0x1, 0xc, 0x1, 0x3, 0x3, 0xff, 0x7, 0xc0d, 0x2, 0x1ff, 0x1, 0xff, 0x2, 0x0, 0xed00, 0x7, 0xfffffff7, 0x1, 0x9, 0xffffff7f, 0xb, 0x3, 0x80, 0x1, 0x9, 0x2, 0x2, 0x9, 0x5, 0x9, 0x2067, 0x7fffffff, 0x9, 0x3, 0xe, 0x9, 0x1, 0x6, 0x2, 0x54, 0x7, 0xa, 0x8000, 0x7, 0x1, 0xfffffffa, 0xa7, 0x9, 0x2, 0x23a002e7, 0xfffffffd, 0x6, 0xc4, 0x80000000, 0x4, 0xa0, 0x10001, 0x9, 0x3, 0x0, 0x656, 0x1, 0x4, 0xb, 0x7, 0x9, 0x5ed, 0xb369, 0x6, 0x9, 0x800, 0x6, 0xdd, 0x7, 0x0, 0x1, 0x8, 0x2, 0xe8, 0x1, 0x10001, 0xa5, 0x1, 0x5, 0x10000, 0xc, 0x3ff, 0x7fffffff, 0x9, 0x3, 0x8, 0x3b5aed67, 0x188, 0x8, 0x600, 0x4, 0x2, 0xffff, 0x5, 0x3ff, 0x8, 0x2, 0xc5b, 0x0, 0x9, 0x4, 0x8, 0x83, 0xe2, 0x200, 0xd3d, 0x8000, 0x554, 0xff, 0x7f, 0x2, 0x3, 0x1, 0x2, 0x9, 0x71789c27, 0x6, 0x4, 0x1fb, 0x5, 0x2fe, 0x81, 0xfffffffe, 0x7fff, 0x2, 0x1, 0x3, 0x4, 0x8, 0x6, 0x231, 0x6, 0xff, 0x17e, 0x4, 0x2, 0xddcc, 0x0, 0x8000, 0x5, 0x4, 0x9, 0x8000, 0x80, 0x1, 0x0, 0xc, 0xfffffff9, 0x80, 0x8000000, 0x1, 0xde, 0x0, 0x4, 0x1, 0xa, 0x7, 0x81, 0xa, 0x80, 0x7fc, 0x0, 0xc993, 0x80000000, 0x3, 0x3, 0x2, 0x81, 0x0, 0xe, 0xeee, 0x1, 0xad, 0x0, 0x0, 0x7, 0x1, 0x5, 0x4, 0x6, 0x8, 0x2, 0x0, 0x2, 0x4, 0xba, 0x32, 0x3, 0x0, 0x7, 0x7, 0x10000, 0x6, 0x5, 0xa, 0x3cee, 0x8000, 0x7fffffff, 0x1, 0x5eb, 0x7, 0x3, 0x2, 0x73, 0x10000, 0x5, 0x1, 0xf1b, 0x1, 0x80, 0x7, 0x2, 0x5, 0x2, 0x6, 0x3, 0x2, 0x649, 0x7fffffff, 0x6, 0x4, 0x9, 0x4e, 0x0, 0x7fff, 0x101, 0x5, 0xfffffffe, 0x9, 0xfffffffa, 0x9, 0x6d, 0x80000000, 0xffff0000, 0x1, 0x5, 0x3, 0x7, 0x5, 0x10001, 0x8001, 0xc000, 0x7ff, 0x8a, 0x200, 0x1ce9ed95, 0x1, 0x4, 0x8, 0x6, 0x200, 0x6, 0x43, 0x7, 0x50, 0x1, 0x4, 0x9, 0x7cf, 0x9, 0x10, 0x8001, 0x10001, 0x2, 0x8000, 0xa, 0xd1c, 0xfff, 0xfffffffc, 0x4, 0x5, 0x9, 0x5, 0x7ff, 0x7f, 0x2, 0x3, 0x800, 0x9, 0xe88, 0x4e, 0x401, 0x9, 0x3, 0x0, 0x6, 0x7, 0x7, 0x10001, 0x400, 0x8000, 0x7, 0x0, 0x6, 0x10000, 0x800, 0x4, 0x5, 0x4, 0xffff, 0x3, 0x5, 0x8, 0x7fff, 0x3, 0xf, 0x461d, 0xfffffff9, 0x401, 0x8, 0x4, 0x9, 0x0, 0x7, 0x5, 0xbc, 0xa, 0x3, 0x3, 0x7fffffff, 0xd, 0x9, 0x0, 0x6, 0x7, 0x9, 0x400, 0x1, 0x0, 0x2, 0x4, 0x0, 0x9, 0x2c02, 0x2, 0x4, 0x5, 0x3, 0x4, 0x200, 0xfffffffa, 0x9, 0x58, 0x7, 0xf39, 0xad85, 0x100, 0x2363, 0x480000, 0x401, 0x717, 0x7, 0x2, 0xc822, 0x4, 0x0, 0x10001, 0x9, 0x85, 0x8, 0x101, 0x7f80000, 0x9, 0x0, 0x5, 0xffff3faf, 0x69, 0xcaac, 0x5, 0xffff, 0x6, 0x2, 0x2, 0x6, 0x8, 0x2, 0x6030, 0x7, 0x0, 0x9298, 0x5, 0x8, 0x1e, 0x3, 0x1, 0x3, 0xb468, 0x3, 0x2, 0xe9, 0x40, 0x4, 0x3ff, 0x4, 0x400, 0x81, 0x0, 0x7, 0x7d5, 0x10, 0x4, 0x4, 0x5, 0x8001, 0x72, 0x0, 0xf, 0x0, 0x3ff, 0x73fbed41, 0x0, 0xa, 0xfffffff7, 0xf881, 0x401, 0x6, 0x0, 0x4, 0xfffffffb, 0x9, 0x6, 0x3, 0xfffffffb, 0x1, 0xd, 0x8, 0x7, 0xffffffff, 0x5f6, 0x7, 0x6, 0x6, 0xfa, 0xfff, 0x4, 0x1, 0x4, 0xb, 0x1000, 0x3, 0x6, 0x8001, 0xa, 0x6, 0x5000000, 0x9, 0x8, 0x800, 0xe, 0x40, 0x10, 0x100, 0x8, 0x1ff, 0x8, 0x5, 0x64, 0x3, 0x281, 0x6, 0xa, 0x4, 0xd59, 0x63c, 0x2, 0x4, 0x0, 0x99, 0x8, 0x101, 0xeaf3bc02, 0x3, 0x9, 0x5, 0xd7b, 0x6, 0x775, 0x7, 0x6, 0xf1, 0x85ba, 0x2, 0x5, 0x6, 0x1, 0x40, 0x4, 0xee75, 0xd, 0xe97, 0x4, 0x0, 0x1, 0x8001, 0xfffffff9, 0x7fff, 0x4, 0x7, 0x8, 0x4, 0x6d6, 0x39b271d8, 0x8, 0x2, 0x2, 0x0, 0x9, 0x7, 0xfffffffc, 0x6, 0x8, 0x2, 0x0, 0x6, 0x6d1, 0x3, 0x8c7, 0x6a, 0x5, 0xfffffffb, 0x9, 0x8001, 0x100, 0x7f, 0x3, 0x37e, 0x4, 0xc7e2, 0x2, 0x2, 0x5, 0x3, 0x4, 0x8, 0x1, 0xfffffffb, 0x9, 0x0, 0x8, 0x0, 0xad2, 0x708b, 0x6, 0x0, 0x1, 0x4]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) stat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "2af3"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.082798892s ago: executing program 7 (id=3551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 1.066997963s ago: executing program 7 (id=3553): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) (async) set_robust_list(0x0, 0x0) inotify_init() (async) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) chmod(&(0x7f0000000180)='./file0\x00', 0x257) (async) syz_emit_ethernet(0xfc2, &(0x7f0000002900)=ANY=[], 0x0) (async, rerun: 64) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000780)) recvmmsg(r6, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000200)=""/6, 0x6}, {0x0}], 0x5}}, {{&(0x7f0000000600)=@generic, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000840)=""/89, 0x59}, {&(0x7f00000008c0)=""/136, 0x88}, {&(0x7f0000000980)=""/237, 0xed}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000a80)=""/149, 0x95}], 0x7, &(0x7f0000000580)=""/15, 0xf}, 0x9}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000bc0)=""/35, 0x23}], 0x1, &(0x7f0000003d80)=""/4096, 0x1000}, 0x8}], 0x3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "3df2d116e4d6bd15", "0f2faa4bd33aa8c00f77dacc9716f49f", "42efa598", "4d0b32c1e009b623"}, 0x28) (async, rerun: 64) write(r6, 0x0, 0x0) (rerun: 64) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 1.039142646s ago: executing program 0 (id=3554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x42, 0x131}) arch_prctl$ARCH_GET_CPUID(0x1011) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) 1.028235467s ago: executing program 4 (id=3556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000340)="8f52eb24cc808000", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 963.243203ms ago: executing program 7 (id=3557): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) iopl(0x3) 796.07447ms ago: executing program 0 (id=3558): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 775.438212ms ago: executing program 7 (id=3559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000140), &(0x7f0000000240)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x40000) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000380)="7cce13eb59508632dc0e86aeb67b32a787266ea70b5464dbacef0b224af4a5bf0b6350d46d0504b175b4b156d0a7c6af141e9cae60edf341c1ce1ea7e45eb80443f5cf229cc678258a3e86b45ec74fd6ec50d3e97c725aa8de33e58daf2da30cc4232cfa835899e422b2b90945378f1e0662de90ec0ac31646670e4083e803757fc1728491e18dc4ae6efca5ccbf9e8662e137048e91ec89530fec3fb12cafba54c95d26c7", 0xa5) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r9, r9, 0x0, 0x40000f63c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r10, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) ioctl$RTC_AIE_ON(r4, 0x7001) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 764.617813ms ago: executing program 0 (id=3560): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x8}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "ff0100", 0x4d, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x4e23, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x1, 0x1, 0x75, 0x0, @val=0x80}, "00718c601c4b2710f0b4f03d707ec8d06e0a85d2d6f7e078582820c8a06d675b5d5c73a468d969b269ef4465d109a1c150141c1aee65f3f9e2c24db6d7"}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xc}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x40000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x1}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) vmsplice(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000004c0)="10017996c44bea7b581e49b27055421c47b4b606d4d8dd900a4df00c1eef", 0x1e}], 0x1, 0xd) 764.054843ms ago: executing program 4 (id=3561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=0x1, 0x37, 0x0, 0xab1, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup=r4, r1, 0xb, 0x10, 0x0, @void, @value=r0, @void, @void, r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x4, 0x0, 0x6, 0x80500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xa60b, 0x15dd}, 0x10810, 0x3, 0x0, 0x0, 0x8, 0x20009, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (fail_nth: 1) 634.973506ms ago: executing program 7 (id=3563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='rpm_return_int\x00', r0, 0x0, 0x3}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x3}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) capget(&(0x7f0000000600)={0x20071026}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0xe649, 0x410000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4ff2, &(0x7f0000000040)={0x0, 0x2cb5, 0x8, 0xd, 0xe1, 0x0, r4}) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r5, r6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd6c}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 610.826029ms ago: executing program 0 (id=3564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 286.594491ms ago: executing program 0 (id=3566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) 261.211413ms ago: executing program 0 (id=3568): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff000a}]}) r3 = memfd_secret(0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESDEC=r1, @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x17, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='fscache_active\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b0000000000011907800000000ffffffff00004e20009c907801000000000000007b4b00040000fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c67852e4451b57d037ad3c0459428ea251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r8}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r10 = dup2(r9, r9) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r10, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) fchownat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r11 = socket(0x10, 0x803, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000380)={0x0, 0x0, 0x6c, 0x4c, ""/76}, &(0x7f0000000400)=0x6c, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x42}, 0x0) 104.141369ms ago: executing program 1 (id=3572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 85.062631ms ago: executing program 3 (id=3573): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 68.940703ms ago: executing program 1 (id=3574): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) lsm_get_self_attr(0x66, &(0x7f0000000d40)={0x0, 0x0, 0x33, 0x13, ""/19}, &(0x7f0000000d80)=0x33, 0x0) 68.258903ms ago: executing program 3 (id=3575): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0xa0100) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000500)={0xe000200c}) creat(&(0x7f0000000040)='./bus\x00', 0x182) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(r3) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0x10f9d, @private2, 0x3}}}, 0x32) open(&(0x7f0000000340)='./bus\x00', 0x4c27e, 0x153) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000c40)={0x0, 0x0, 0xfffffffe}) ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x13, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11.190228ms ago: executing program 1 (id=3576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2521}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (fail_nth: 12) 10.607378ms ago: executing program 1 (id=3577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) write$nci(r1, 0x0, 0xfffffeea) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) syz_open_dev$vcsu(&(0x7f0000000040), 0x45fd5977, 0x80000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000000c0)) 10.387018ms ago: executing program 1 (id=3578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) 0s ago: executing program 1 (id=3579): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) kernel console output (not intermixed with test programs): z.3.2348'. [ 180.491261][T10320] netlink: 'syz.4.2352': attribute type 7 has an invalid length. [ 180.499079][T10320] netlink: 'syz.4.2352': attribute type 8 has an invalid length. [ 181.056275][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 181.056319][ T29] audit: type=1326 audit(181.033:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10331 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 181.091572][T10332] sctp: [Deprecated]: syz.0.2357 (pid 10332) Use of int in max_burst socket option. [ 181.091572][T10332] Use struct sctp_assoc_value instead [ 181.126607][ T29] audit: type=1326 audit(181.073:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10331 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 181.149538][ T29] audit: type=1326 audit(181.073:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10331 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 181.172442][ T29] audit: type=1326 audit(181.073:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10331 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 181.195376][ T29] audit: type=1326 audit(181.073:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10331 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 181.218312][ T29] audit: type=1326 audit(181.073:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10331 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 181.241281][ T29] audit: type=1326 audit(181.073:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10331 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 181.264232][ T29] audit: type=1326 audit(181.073:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10331 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 181.287018][ T29] audit: type=1326 audit(181.093:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10331 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 181.309882][ T29] audit: type=1326 audit(181.093:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10331 comm="syz.0.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 181.581084][T10339] lo speed is unknown, defaulting to 1000 [ 181.596586][T10339] lo speed is unknown, defaulting to 1000 [ 181.992344][T10368] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2372'. [ 182.073679][T10375] syz.7.2374 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 182.188072][T10378] TCP: TCP_TX_DELAY enabled [ 182.195479][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2374'. [ 183.103345][ T3322] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 183.114359][ T3322] CPU: 0 UID: 0 PID: 3322 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 183.114454][ T3322] Tainted: [W]=WARN [ 183.114460][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.114477][ T3322] Call Trace: [ 183.114516][ T3322] [ 183.114524][ T3322] __dump_stack+0x1d/0x30 [ 183.114548][ T3322] dump_stack_lvl+0xe8/0x140 [ 183.114566][ T3322] dump_stack+0x15/0x1b [ 183.114582][ T3322] dump_header+0x81/0x220 [ 183.114597][ T3322] oom_kill_process+0x342/0x400 [ 183.114641][ T3322] out_of_memory+0x979/0xb80 [ 183.114674][ T3322] try_charge_memcg+0x610/0xa10 [ 183.114761][ T3322] charge_memcg+0x51/0xc0 [ 183.114784][ T3322] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 183.114807][ T3322] __read_swap_cache_async+0x17b/0x2d0 [ 183.114869][ T3322] swap_cluster_readahead+0x262/0x3c0 [ 183.114897][ T3322] swapin_readahead+0xde/0x6f0 [ 183.114919][ T3322] ? queue_stack_map_push_elem+0x310/0x450 [ 183.114950][ T3322] ? __rcu_read_unlock+0x4f/0x70 [ 183.114975][ T3322] ? __rcu_read_unlock+0x4f/0x70 [ 183.114996][ T3322] ? swap_cache_get_folio+0x277/0x280 [ 183.115069][ T3322] do_swap_page+0x2ae/0x2370 [ 183.115093][ T3322] ? _raw_spin_unlock+0x26/0x50 [ 183.115120][ T3322] ? finish_task_switch+0xad/0x2b0 [ 183.115145][ T3322] ? __pfx_default_wake_function+0x10/0x10 [ 183.115252][ T3322] handle_mm_fault+0x9a5/0x2be0 [ 183.115279][ T3322] ? vma_start_read+0x141/0x1f0 [ 183.115393][ T3322] do_user_addr_fault+0x630/0x1080 [ 183.115417][ T3322] ? fpregs_restore_userregs+0xe2/0x1d0 [ 183.115445][ T3322] ? switch_fpu_return+0xe/0x20 [ 183.115481][ T3322] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 183.115505][ T3322] exc_page_fault+0x62/0xa0 [ 183.115535][ T3322] asm_exc_page_fault+0x26/0x30 [ 183.115632][ T3322] RIP: 0033:0x7fc41ce61f45 [ 183.115647][ T3322] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 66 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 183.115667][ T3322] RSP: 002b:00007ffd86492878 EFLAGS: 00010246 [ 183.115684][ T3322] RAX: 0000000000000000 RBX: 0000000000000503 RCX: 00007fc41ce61f43 [ 183.115751][ T3322] RDX: 00007ffd86492890 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.115765][ T3322] RBP: 00007ffd864928fc R08: 000000000353ecf5 R09: 0000000000000000 [ 183.115817][ T3322] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 183.115830][ T3322] R13: 00000000000927c0 R14: 000000000002c892 R15: 00007ffd86492950 [ 183.115846][ T3322] [ 183.115855][ T3322] memory: usage 307200kB, limit 307200kB, failcnt 263 [ 183.366615][ T3322] memory+swap: usage 307588kB, limit 9007199254740988kB, failcnt 0 [ 183.374553][ T3322] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 183.381933][ T3322] Memory cgroup stats for /syz4: [ 183.384270][ T3322] cache 0 [ 183.392206][ T3322] rss 0 [ 183.394957][ T3322] shmem 0 [ 183.397877][ T3322] mapped_file 0 [ 183.401355][ T3322] dirty 0 [ 183.404342][ T3322] writeback 4096 [ 183.407874][ T3322] workingset_refault_anon 1546 [ 183.412673][ T3322] workingset_refault_file 128 [ 183.417377][ T3322] swap 397312 [ 183.420664][ T3322] swapcached 4096 [ 183.424336][ T3322] pgpgin 200851 [ 183.427775][ T3322] pgpgout 200850 [ 183.431330][ T3322] pgfault 208586 [ 183.434859][ T3322] pgmajfault 205 [ 183.438418][ T3322] inactive_anon 4096 [ 183.442347][ T3322] active_anon 0 [ 183.445795][ T3322] inactive_file 0 [ 183.449450][ T3322] active_file 0 [ 183.452891][ T3322] unevictable 0 [ 183.456352][ T3322] hierarchical_memory_limit 314572800 [ 183.461850][ T3322] hierarchical_memsw_limit 9223372036854771712 [ 183.467991][ T3322] total_cache 0 [ 183.471477][ T3322] total_rss 0 [ 183.474819][ T3322] total_shmem 0 [ 183.478270][ T3322] total_mapped_file 0 [ 183.482262][ T3322] total_dirty 0 [ 183.485709][ T3322] total_writeback 4096 [ 183.489829][ T3322] total_workingset_refault_anon 1546 [ 183.495098][ T3322] total_workingset_refault_file 128 [ 183.500306][ T3322] total_swap 397312 [ 183.504095][ T3322] total_swapcached 4096 [ 183.508231][ T3322] total_pgpgin 200851 [ 183.512220][ T3322] total_pgpgout 200850 [ 183.516334][ T3322] total_pgfault 208586 [ 183.520390][ T3322] total_pgmajfault 205 [ 183.524463][ T3322] total_inactive_anon 4096 [ 183.528886][ T3322] total_active_anon 0 [ 183.532854][ T3322] total_inactive_file 0 [ 183.537008][ T3322] total_active_file 0 [ 183.541061][ T3322] total_unevictable 0 [ 183.545027][ T3322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2378,pid=10384,uid=0 [ 183.559758][ T3322] Memory cgroup out of memory: Killed process 10384 (syz.4.2378) total-vm:96004kB, anon-rss:1136kB, file-rss:22480kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 183.651346][T10433] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2397'. [ 183.782826][T10385] syz.4.2378 (10385) used greatest stack depth: 6376 bytes left [ 184.752903][T10525] Set syz1 is full, maxelem 65536 reached [ 184.990544][T10545] lo speed is unknown, defaulting to 1000 [ 185.006858][T10545] lo speed is unknown, defaulting to 1000 [ 185.383661][T10572] lo speed is unknown, defaulting to 1000 [ 185.410186][T10572] lo speed is unknown, defaulting to 1000 [ 186.247832][T10590] siw: device registration error -23 [ 186.730876][T10608] lo speed is unknown, defaulting to 1000 [ 186.737288][T10608] lo speed is unknown, defaulting to 1000 [ 187.078564][T10621] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2465'. [ 187.109836][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 187.109849][ T29] audit: type=1326 audit(187.093:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505c68f6c9 code=0x7ffc0000 [ 187.139735][ T29] audit: type=1326 audit(187.093:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505c68f6c9 code=0x7ffc0000 [ 187.162739][ T29] audit: type=1326 audit(187.093:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505c68f6c9 code=0x7ffc0000 [ 187.185687][ T29] audit: type=1326 audit(187.093:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505c68f6c9 code=0x7ffc0000 [ 187.208604][ T29] audit: type=1326 audit(187.093:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f505c68f6c9 code=0x7ffc0000 [ 187.231388][ T29] audit: type=1326 audit(187.093:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505c68f6c9 code=0x7ffc0000 [ 187.254283][ T29] audit: type=1326 audit(187.093:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f505c68f6c9 code=0x7ffc0000 [ 187.277117][ T29] audit: type=1326 audit(187.093:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505c68f6c9 code=0x7ffc0000 [ 187.299997][ T29] audit: type=1326 audit(187.093:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505c68f6c9 code=0x7ffc0000 [ 187.322883][ T29] audit: type=1326 audit(187.093:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505c68f6c9 code=0x7ffc0000 [ 187.488518][T10637] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2472'. [ 187.498224][T10637] 9pnet_fd: Insufficient options for proto=fd [ 187.926915][T10649] bridge_slave_0: left allmulticast mode [ 187.932624][T10649] bridge_slave_0: left promiscuous mode [ 187.938394][T10649] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.965407][T10649] bridge_slave_1: left allmulticast mode [ 187.971313][T10649] bridge_slave_1: left promiscuous mode [ 187.976937][T10649] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.040075][T10649] bond0: (slave bond_slave_0): Releasing backup interface [ 188.050553][T10649] bond0: (slave bond_slave_1): Releasing backup interface [ 188.073405][T10649] team0: Port device team_slave_1 removed [ 188.095632][T10649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.103186][T10649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.150274][T10649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.157679][T10649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.280176][T10649] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.694566][T10696] blktrace: Concurrent blktraces are not allowed on loop1 [ 189.090015][T10724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2503'. [ 189.348426][T10729] blktrace: Concurrent blktraces are not allowed on loop3 [ 190.081836][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2513'. [ 190.109100][T10747] netem: change failed [ 190.117039][T10747] netlink: 'syz.4.2513': attribute type 10 has an invalid length. [ 190.151582][T10747] team0: Port device dummy0 added [ 190.197350][T10749] lo speed is unknown, defaulting to 1000 [ 190.203621][T10749] lo speed is unknown, defaulting to 1000 [ 190.343863][T10747] netlink: 'syz.4.2513': attribute type 10 has an invalid length. [ 190.392725][T10747] team0: Port device dummy0 removed [ 190.462015][T10747] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.709520][T10773] netlink: 'syz.4.2522': attribute type 1 has an invalid length. [ 190.723147][T10773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.732294][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2522'. [ 190.795921][T10776] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2523'. [ 190.805418][T10776] 9pnet_fd: Insufficient options for proto=fd [ 190.916331][T10786] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.387590][T10807] cgroup: none used incorrectly [ 191.500585][T10812] lo speed is unknown, defaulting to 1000 [ 191.506844][T10812] lo speed is unknown, defaulting to 1000 [ 193.057370][T10868] lo speed is unknown, defaulting to 1000 [ 193.063550][T10868] lo speed is unknown, defaulting to 1000 [ 193.460456][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2563'. [ 193.718299][T10884] netlink: 'syz.4.2566': attribute type 4 has an invalid length. [ 193.829003][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 193.838072][T10886] netlink: 'syz.4.2567': attribute type 5 has an invalid length. [ 193.845904][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2567'. [ 193.940259][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 194.207484][T10894] blktrace: Concurrent blktraces are not allowed on loop1 [ 194.394383][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2574'. [ 194.578506][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 194.578519][ T29] audit: type=1326 audit(194.553:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41ce2f6c9 code=0x7ffc0000 [ 194.608635][ T29] audit: type=1326 audit(194.563:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc41ce2df10 code=0x7ffc0000 [ 194.631583][ T29] audit: type=1326 audit(194.563:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41ce2f6c9 code=0x7ffc0000 [ 194.654516][ T29] audit: type=1326 audit(194.563:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41ce2f6c9 code=0x7ffc0000 [ 194.677468][ T29] audit: type=1326 audit(194.563:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc41ce315e7 code=0x7ffc0000 [ 194.700252][ T29] audit: type=1326 audit(194.563:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc41ce3155c code=0x7ffc0000 [ 194.723143][ T29] audit: type=1326 audit(194.563:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc41ce31494 code=0x7ffc0000 [ 194.745935][ T29] audit: type=1326 audit(194.563:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc41ce2e32a code=0x7ffc0000 [ 194.768604][ T29] audit: type=1326 audit(194.563:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41ce2f6c9 code=0x7ffc0000 [ 194.791555][ T29] audit: type=1326 audit(194.563:8260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10928 comm="syz.4.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc41ce2f6c9 code=0x7ffc0000 [ 194.956040][T10952] ip6t_srh: unknown srh match flags 4000 [ 195.164984][T10959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2596'. [ 195.183079][T10935] Set syz1 is full, maxelem 65536 reached [ 195.461100][T10987] bridge0: port 4(gretap0) entered blocking state [ 195.467576][T10987] bridge0: port 4(gretap0) entered disabled state [ 195.492967][T10987] gretap0: entered allmulticast mode [ 195.513851][T10987] gretap0: entered promiscuous mode [ 195.731289][T11015] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2618'. [ 195.798828][T11017] blktrace: Concurrent blktraces are not allowed on loop9 [ 195.853239][T11025] netlink: 'syz.3.2623': attribute type 4 has an invalid length. [ 195.995408][T11037] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 196.216469][T11047] blktrace: Concurrent blktraces are not allowed on loop3 [ 196.236045][T11049] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2633'. [ 196.296097][T11049] 9pnet_fd: Insufficient options for proto=fd [ 196.416891][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2636'. [ 196.454062][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2636'. [ 196.805983][T11072] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11072 comm=syz.3.2642 [ 196.818647][T11072] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11072 comm=syz.3.2642 [ 197.281502][T11084] lo speed is unknown, defaulting to 1000 [ 197.287778][T11084] lo speed is unknown, defaulting to 1000 [ 198.072390][ T3371] IPVS: starting estimator thread 0... [ 198.158423][T11112] IPVS: using max 4416 ests per chain, 220800 per kthread [ 198.606100][T11132] __nla_validate_parse: 3 callbacks suppressed [ 198.606112][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2667'. [ 198.626574][T11132] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2667'. [ 198.640764][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2666'. [ 198.661417][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2666'. [ 198.714689][T11135] 9pnet_fd: Insufficient options for proto=fd [ 198.721014][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2666'. [ 198.730608][T11138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11138 comm=syz.7.2666 [ 198.743188][T11135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11135 comm=syz.7.2666 [ 198.871347][T11149] ip6t_srh: unknown srh match flags 4000 [ 198.930909][T11157] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.475586][T11167] Set syz1 is full, maxelem 65536 reached [ 199.721898][T11191] siw: device registration error -23 [ 199.830398][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 199.830413][ T29] audit: type=1400 audit(199.816:8611): avc: denied { create } for pid=11190 comm="syz.7.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.860928][ T29] audit: type=1400 audit(199.836:8612): avc: denied { write } for pid=11190 comm="syz.7.2690" path="socket:[29084]" dev="sockfs" ino=29084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 200.062778][ T29] audit: type=1326 audit(200.046:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddeddef6c9 code=0x7ffc0000 [ 200.086663][ T29] audit: type=1326 audit(200.066:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddeddef6c9 code=0x7ffc0000 [ 200.109572][ T29] audit: type=1326 audit(200.066:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddeddef6c9 code=0x7ffc0000 [ 200.132447][ T29] audit: type=1326 audit(200.066:8616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fddeddef6c9 code=0x7ffc0000 [ 200.155252][ T29] audit: type=1326 audit(200.066:8617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddeddef6c9 code=0x7ffc0000 [ 200.178264][ T29] audit: type=1326 audit(200.066:8618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.3.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddeddef6c9 code=0x7ffc0000 [ 200.254193][T11208] tipc: Enabling of bearer rejected, failed to enable media [ 200.860363][ T29] audit: type=1326 audit(200.843:8619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.7.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 200.883528][ T29] audit: type=1326 audit(200.843:8620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.7.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 200.885697][T11247] netlink: 'syz.7.2713': attribute type 1 has an invalid length. [ 201.076246][T11268] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2722'. [ 201.086007][T11268] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2722'. [ 201.336592][T11289] netlink: 'syz.3.2730': attribute type 4 has an invalid length. [ 201.492800][ T8710] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.503253][ T8710] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.541104][ T8710] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.551501][ T8710] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.661236][ T8710] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.671602][ T8710] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.763654][ T8710] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.773968][ T8710] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.874258][ T8710] bridge_slave_1: left promiscuous mode [ 201.879957][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.903279][ T8710] bridge_slave_0: left allmulticast mode [ 201.908965][ T8710] bridge_slave_0: left promiscuous mode [ 201.914564][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.044429][ T8710] dvmrp8 (unregistering): left allmulticast mode [ 202.131410][ T8710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.167583][ T8710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.197339][ T8710] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 202.211776][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 202.348734][ T8710] bond0 (unregistering): Released all slaves [ 202.365956][ T8710] bond1 (unregistering): Released all slaves [ 202.391243][ T3409] infiniband syb2: ib_query_port failed (-19) [ 202.407489][T11317] netlink: 'syz.4.2739': attribute type 4 has an invalid length. [ 202.418469][T11294] lo speed is unknown, defaulting to 1000 [ 202.424589][T11294] lo speed is unknown, defaulting to 1000 [ 202.424718][T11318] lo speed is unknown, defaulting to 1000 [ 202.467949][T11318] lo speed is unknown, defaulting to 1000 [ 202.479109][T11334] netlink: 'syz.1.2745': attribute type 5 has an invalid length. [ 202.486851][T11334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2745'. [ 202.512451][ T8710] hsr_slave_0: left promiscuous mode [ 202.698546][ T8710] hsr_slave_1: left promiscuous mode [ 202.706939][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.714348][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.738855][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.746261][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.767855][ T8710] veth1_macvtap: left promiscuous mode [ 202.804508][ T8710] veth0_macvtap: left promiscuous mode [ 202.810138][ T8710] veth1_vlan: left promiscuous mode [ 202.815463][ T8710] veth0_vlan: left promiscuous mode [ 202.917181][ T8710] team0 (unregistering): Port device team_slave_0 removed [ 202.957384][T11320] lo speed is unknown, defaulting to 1000 [ 202.966089][T11339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.976643][T11339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.990524][T11320] lo speed is unknown, defaulting to 1000 [ 203.000521][T11337] lo speed is unknown, defaulting to 1000 [ 203.018221][T11337] lo speed is unknown, defaulting to 1000 [ 203.050853][T11339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.061217][T11339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.080470][T11294] chnl_net:caif_netlink_parms(): no params data found [ 203.124838][T11294] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.132027][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.139961][T11294] bridge_slave_0: entered allmulticast mode [ 203.146145][T11294] bridge_slave_0: entered promiscuous mode [ 203.156330][T11339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.166618][T11339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.177822][T11294] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.185037][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.193305][T11294] bridge_slave_1: entered allmulticast mode [ 203.199800][T11294] bridge_slave_1: entered promiscuous mode [ 203.217838][T11294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.229837][T11339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.240206][T11339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.252427][T11294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.274175][ T8710] IPVS: stop unused estimator thread 0... [ 203.276607][T11294] team0: Port device team_slave_0 added [ 203.289275][T11294] team0: Port device team_slave_1 added [ 203.308026][T11294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.315157][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.341171][T11294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.375469][T11294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.382436][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.408380][T11294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.500735][T11294] hsr_slave_0: entered promiscuous mode [ 203.509211][T11294] hsr_slave_1: entered promiscuous mode [ 203.515855][T11294] debugfs: 'hsr0' already exists in 'hsr' [ 203.521646][T11294] Cannot create hsr debugfs directory [ 203.541993][ T8715] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.550261][ T8715] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.558756][ T8715] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.566965][ T8715] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.578407][ T8715] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.586583][ T8715] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.611250][ T8715] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.619471][ T8715] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.821776][T11371] lo speed is unknown, defaulting to 1000 [ 203.828023][T11371] lo speed is unknown, defaulting to 1000 [ 204.005159][T11294] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.017445][T11294] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.032463][T11294] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.046188][T11294] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.106257][T11294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.118621][T11294] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.127496][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.134607][ T8719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.167914][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.174987][ T8710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.252278][T11294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.262675][T11294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.358678][T11294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.482383][T11294] veth0_vlan: entered promiscuous mode [ 204.577462][T11405] blktrace: Concurrent blktraces are not allowed on loop9 [ 204.607346][T11410] x_tables: duplicate underflow at hook 2 [ 204.652521][T11294] veth1_vlan: entered promiscuous mode [ 204.676428][T11294] veth0_macvtap: entered promiscuous mode [ 204.696967][T11294] veth1_macvtap: entered promiscuous mode [ 204.716029][T11294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.731783][T11294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.742030][ T8719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.762615][ T8719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.774357][ T8719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.793864][ T8719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.863486][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 204.863499][ T29] audit: type=1326 audit(204.843:8895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 204.895305][T11422] netlink: 'syz.0.2764': attribute type 12 has an invalid length. [ 204.919201][ T29] audit: type=1326 audit(204.883:8896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 204.942107][ T29] audit: type=1326 audit(204.883:8897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 204.965071][ T29] audit: type=1326 audit(204.883:8898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 204.988193][ T29] audit: type=1326 audit(204.883:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 205.011212][ T29] audit: type=1326 audit(204.883:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 205.034091][ T29] audit: type=1326 audit(204.883:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 205.057043][ T29] audit: type=1326 audit(204.883:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 205.079974][ T29] audit: type=1326 audit(204.883:8903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 205.102850][ T29] audit: type=1326 audit(204.883:8904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1eb5cf6c9 code=0x7ffc0000 [ 205.145204][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2765'. [ 205.154259][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2765'. [ 205.198017][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2765'. [ 205.207018][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2765'. [ 205.267370][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2765'. [ 205.276487][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2765'. [ 205.778149][T11459] netlink: 'syz.3.2779': attribute type 31 has an invalid length. [ 205.839498][T11463] blktrace: Concurrent blktraces are not allowed on loop1 [ 205.860218][T11465] loop3: detected capacity change from 0 to 512 [ 205.888163][T11465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.925098][T11465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 205.934327][T11465] System zones: 1-12 [ 205.971216][T11465] EXT4-fs (loop3): 1 truncate cleaned up [ 205.977467][T11465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.236449][T11485] lo speed is unknown, defaulting to 1000 [ 206.250507][T11485] lo speed is unknown, defaulting to 1000 [ 206.671924][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2790'. [ 206.680908][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2790'. [ 206.816153][T11294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.925399][T11511] netlink: 'syz.7.2797': attribute type 4 has an invalid length. [ 207.038103][T11516] ip6t_srh: unknown srh match flags 4000 [ 207.675988][T11530] loop3: detected capacity change from 0 to 8192 [ 207.746282][T11536] 9pnet_fd: Insufficient options for proto=fd [ 207.942119][T11547] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 207.948660][T11547] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 207.956833][T11547] vhci_hcd vhci_hcd.0: Device attached [ 207.977634][T11547] vhci_hcd vhci_hcd.0: port 0 already used [ 208.143071][T11576] netlink: 'syz.0.2821': attribute type 4 has an invalid length. [ 208.205334][T11550] vhci_hcd: connection closed [ 208.205501][ T3620] vhci_hcd: stop threads [ 208.214515][ T3620] vhci_hcd: release socket [ 208.218969][ T3620] vhci_hcd: disconnect device [ 208.543168][T11639] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2845'. [ 208.558205][T11636] loop3: detected capacity change from 0 to 1024 [ 208.565218][T11636] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 208.578562][T11636] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #11: comm syz.3.2846: iget: bogus i_mode (1) [ 208.590105][T11636] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2846: couldn't read orphan inode 11 (err -117) [ 208.602605][T11636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.616779][T11635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.626898][T11635] netlink: 320 bytes leftover after parsing attributes in process `syz.3.2846'. [ 208.685686][T11653] ip6t_srh: unknown srh match flags 4000 [ 208.743511][T11659] loop3: detected capacity change from 0 to 136 [ 208.753833][T11659] rock: directory entry would overflow storage [ 208.760142][T11659] rock: sig=0x4f50, size=4, remaining=3 [ 208.765715][T11659] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 208.832864][T11667] lo speed is unknown, defaulting to 1000 [ 208.839278][T11667] lo speed is unknown, defaulting to 1000 [ 208.908571][T11671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11671 comm=syz.7.2858 [ 209.066882][T11686] ip6t_srh: unknown srh match flags 4000 [ 209.591023][T11707] 9pnet_fd: Insufficient options for proto=fd [ 209.753575][T11717] block device autoloading is deprecated and will be removed. [ 209.861875][T11724] bridge0: entered promiscuous mode [ 209.868894][T11724] bridge0: port 3(macsec1) entered blocking state [ 209.875400][T11724] bridge0: port 3(macsec1) entered disabled state [ 209.882339][T11724] macsec1: entered allmulticast mode [ 209.887757][T11724] bridge0: entered allmulticast mode [ 209.893684][T11724] macsec1: left allmulticast mode [ 209.898745][T11724] bridge0: left allmulticast mode [ 209.904410][T11724] bridge0: left promiscuous mode [ 209.991768][T11732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11732 comm=syz.3.2884 [ 210.135715][T11734] lo speed is unknown, defaulting to 1000 [ 210.174983][T11734] lo speed is unknown, defaulting to 1000 [ 210.313672][T11735] lo speed is unknown, defaulting to 1000 [ 210.332075][T11735] lo speed is unknown, defaulting to 1000 [ 210.456538][T11735] chnl_net:caif_netlink_parms(): no params data found [ 210.477774][ T8715] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.559877][T11735] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.567110][T11735] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.574593][T11735] bridge_slave_0: entered allmulticast mode [ 210.581050][T11735] bridge_slave_0: entered promiscuous mode [ 210.587956][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.595004][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.602638][T11735] bridge_slave_1: entered allmulticast mode [ 210.609185][T11735] bridge_slave_1: entered promiscuous mode [ 210.628212][T11735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.642967][T11753] __nla_validate_parse: 2 callbacks suppressed [ 210.643030][T11753] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2886'. [ 210.659628][ T8715] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.671871][T11735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.693072][T11735] team0: Port device team_slave_0 added [ 210.702538][T11735] team0: Port device team_slave_1 added [ 210.713494][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 210.713509][ T29] audit: type=1326 audit(466.684:9314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.3.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 210.742642][ T29] audit: type=1326 audit(466.684:9315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.3.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 210.765576][ T29] audit: type=1326 audit(466.684:9316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.3.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 210.788485][ T29] audit: type=1326 audit(466.684:9317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.3.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 210.811412][ T29] audit: type=1326 audit(466.684:9318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.3.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 210.834380][ T29] audit: type=1326 audit(466.684:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.3.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 210.857262][ T29] audit: type=1326 audit(466.684:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.3.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 210.880176][ T29] audit: type=1326 audit(466.684:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.3.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 210.902943][ T29] audit: type=1326 audit(466.684:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.3.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 210.925794][ T29] audit: type=1326 audit(466.684:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.3.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 210.955964][ T8715] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.975957][T11735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.982954][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.008943][T11735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.020744][T11735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.027714][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.053629][T11735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.069176][ T8715] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.121914][T11735] hsr_slave_0: entered promiscuous mode [ 211.128028][T11735] hsr_slave_1: entered promiscuous mode [ 211.133876][T11735] debugfs: 'hsr0' already exists in 'hsr' [ 211.139751][T11735] Cannot create hsr debugfs directory [ 211.173368][ T8715] gretap0: left allmulticast mode [ 211.178557][ T8715] gretap0: left promiscuous mode [ 211.183688][ T8715] bridge0: port 4(gretap0) entered disabled state [ 211.190915][ T8715] batadv1: left allmulticast mode [ 211.195944][ T8715] batadv1: left promiscuous mode [ 211.201130][ T8715] bridge0: port 3(batadv1) entered disabled state [ 211.208073][ T8715] bridge_slave_1: left allmulticast mode [ 211.213711][ T8715] bridge_slave_1: left promiscuous mode [ 211.219383][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.226844][ T8715] bridge_slave_0: left allmulticast mode [ 211.232544][ T8715] bridge_slave_0: left promiscuous mode [ 211.238175][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.379809][ T8715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.389221][ T8715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.398513][ T8715] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 211.407247][ T8715] bond0 (unregistering): Released all slaves [ 211.415168][ T8715] bond1 (unregistering): Released all slaves [ 211.423384][ T8715] bond2 (unregistering): Released all slaves [ 211.490750][ T8715] tipc: Left network mode [ 211.495939][ T8715] IPVS: stopping backup sync thread 4377 ... [ 211.503210][ T8715] hsr_slave_0: left promiscuous mode [ 211.508853][ T8715] hsr_slave_1: left promiscuous mode [ 211.514391][ T8715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.521845][ T8715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.529084][ T3620] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 211.539815][ T8715] pim6reg (unregistering): left allmulticast mode [ 211.559712][ T8715] team0 (unregistering): Port device team_slave_1 removed [ 211.569177][ T8715] team0 (unregistering): Port device team_slave_0 removed [ 211.823398][T11735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.832002][T11735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.840397][T11735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.848682][T11735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.879278][T11735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.891252][T11735] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.906478][T11735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.916864][T11735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.930334][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.937415][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.945932][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.953025][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.983076][ T8715] IPVS: stop unused estimator thread 0... [ 211.989155][T11788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48400 sclass=netlink_route_socket pid=11788 comm=syz.3.2897 [ 212.047927][T11735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.176920][T11735] veth0_vlan: entered promiscuous mode [ 212.184447][T11735] veth1_vlan: entered promiscuous mode [ 212.197619][T11735] veth0_macvtap: entered promiscuous mode [ 212.205915][T11735] veth1_macvtap: entered promiscuous mode [ 212.216076][T11735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.226389][T11735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.236765][ T8702] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.245777][ T8702] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.254679][ T8702] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.264699][ T8702] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.857898][T11825] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2904'. [ 212.867539][T11825] 9pnet_fd: Insufficient options for proto=fd [ 212.891318][T11827] netlink: 'wÞ£ÿ': attribute type 29 has an invalid length. [ 212.898838][T11827] netlink: 'wÞ£ÿ': attribute type 3 has an invalid length. [ 212.906210][T11827] netlink: 132 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 213.111283][T11846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2911'. [ 213.288570][T11860] netlink: 'syz.3.2916': attribute type 4 has an invalid length. [ 213.888922][T11863] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2917'. [ 214.195712][T11893] loop4: detected capacity change from 0 to 1024 [ 214.455511][T11893] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2926: Failed to acquire dquot type 0 [ 214.467491][T11893] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 214.499416][T11893] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2926: corrupted inode contents [ 214.543262][T11893] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.2926: mark_inode_dirty error [ 214.563864][T11893] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2926: corrupted inode contents [ 214.628990][T11893] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2926: mark_inode_dirty error [ 214.648553][T11893] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2926: corrupted inode contents [ 214.704852][T11893] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 214.747849][T11893] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2926: corrupted inode contents [ 214.769060][T11893] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.2926: mark_inode_dirty error [ 214.803030][T11893] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 214.856966][T11893] EXT4-fs (loop4): 1 truncate cleaned up [ 214.866840][T11893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.999844][T11893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.059634][T11891] Set syz1 is full, maxelem 65536 reached [ 215.193374][T11918] netlink: 'syz.1.2934': attribute type 4 has an invalid length. [ 215.239706][T11925] netlink: 'syz.4.2933': attribute type 4 has an invalid length. [ 215.557486][T11936] lo speed is unknown, defaulting to 1000 [ 216.003114][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 216.003128][ T29] audit: type=1326 audit(471.984:9593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 216.098436][ T29] audit: type=1326 audit(472.024:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 216.121412][ T29] audit: type=1326 audit(472.024:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 216.144568][ T29] audit: type=1326 audit(472.024:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 216.167670][ T29] audit: type=1326 audit(472.024:9597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 216.190925][ T29] audit: type=1326 audit(472.024:9598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 216.213947][ T29] audit: type=1326 audit(472.024:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 216.280004][T11952] netlink: 'syz.4.2947': attribute type 4 has an invalid length. [ 216.358625][ T29] audit: type=1326 audit(472.324:9600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff766b3f6c9 code=0x7ffc0000 [ 216.381584][ T29] audit: type=1326 audit(472.324:9601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff766b3f6c9 code=0x7ffc0000 [ 216.404366][ T29] audit: type=1326 audit(472.324:9602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.4.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff766b3f6c9 code=0x7ffc0000 [ 216.621065][T11982] tipc: Enabled bearer , priority 10 [ 216.650180][T11972] loop4: detected capacity change from 0 to 32768 [ 216.679172][T11972] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 216.684471][T11972] loop4: p1 start 460800 is beyond EOD, truncated [ 216.690933][T11972] loop4: p2 size 83886080 extends beyond EOD, truncated [ 216.704335][T11972] loop4: p5 start 460800 is beyond EOD, truncated [ 216.710790][T11972] loop4: p6 size 83886080 extends beyond EOD, truncated [ 217.618380][ T3371] tipc: Node number set to 3051365214 [ 218.109925][T12016] Set syz1 is full, maxelem 65536 reached [ 218.774384][T12049] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2982'. [ 218.783444][T12049] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2982'. [ 218.788777][T12048] loop4: detected capacity change from 0 to 512 [ 218.792452][T12049] netlink: 'syz.0.2982': attribute type 5 has an invalid length. [ 218.806372][T12049] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2982'. [ 218.807823][T12048] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.857685][T12048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 218.880227][T12048] System zones: 1-12 [ 218.893238][T12048] EXT4-fs (loop4): 1 truncate cleaned up [ 218.899336][T12048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.133884][T12063] lo speed is unknown, defaulting to 1000 [ 219.647455][T11735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.710776][T12077] netlink: 'syz.1.2992': attribute type 1 has an invalid length. [ 219.718867][T12078] netlink: 'syz.1.2992': attribute type 1 has an invalid length. [ 219.735013][T12077] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.750609][T12080] FAULT_INJECTION: forcing a failure. [ 219.750609][T12080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.763738][T12080] CPU: 0 UID: 0 PID: 12080 Comm: syz.4.2993 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.763827][T12080] Tainted: [W]=WARN [ 219.763832][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.763844][T12080] Call Trace: [ 219.763850][T12080] [ 219.763857][T12080] __dump_stack+0x1d/0x30 [ 219.763879][T12080] dump_stack_lvl+0xe8/0x140 [ 219.763964][T12080] dump_stack+0x15/0x1b [ 219.763980][T12080] should_fail_ex+0x265/0x280 [ 219.763999][T12080] should_fail+0xb/0x20 [ 219.764036][T12080] should_fail_usercopy+0x1a/0x20 [ 219.764053][T12080] _copy_from_user+0x1c/0xb0 [ 219.764075][T12080] addrconf_add_ifaddr+0x93/0x270 [ 219.764107][T12080] inet6_ioctl+0xb0/0x190 [ 219.764211][T12080] ? ioctl_has_perm+0x257/0x2a0 [ 219.764238][T12080] sock_do_ioctl+0x73/0x220 [ 219.764260][T12080] sock_ioctl+0x41b/0x610 [ 219.764291][T12080] ? __pfx_sock_ioctl+0x10/0x10 [ 219.764312][T12080] __se_sys_ioctl+0xce/0x140 [ 219.764408][T12080] __x64_sys_ioctl+0x43/0x50 [ 219.764429][T12080] x64_sys_call+0x1816/0x3000 [ 219.764451][T12080] do_syscall_64+0xd2/0x200 [ 219.764472][T12080] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 219.764514][T12080] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 219.764542][T12080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.764583][T12080] RIP: 0033:0x7ff766b3f6c9 [ 219.764598][T12080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.764615][T12080] RSP: 002b:00007ff7655a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.764631][T12080] RAX: ffffffffffffffda RBX: 00007ff766d95fa0 RCX: 00007ff766b3f6c9 [ 219.764642][T12080] RDX: 0000200000005b80 RSI: 0000000000008916 RDI: 0000000000000006 [ 219.764653][T12080] RBP: 00007ff7655a7090 R08: 0000000000000000 R09: 0000000000000000 [ 219.764691][T12080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.764720][T12080] R13: 00007ff766d96038 R14: 00007ff766d95fa0 R15: 00007fff6c384af8 [ 219.764736][T12080] [ 219.971495][T12077] veth5: entered promiscuous mode [ 219.978586][T12077] bond2: (slave veth5): Enslaving as an active interface with a down link [ 219.996222][T12078] veth7: entered promiscuous mode [ 220.010090][T12078] bond2: (slave veth7): Enslaving as an active interface with a down link [ 220.023266][T12085] bond2: entered allmulticast mode [ 220.062132][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2997'. [ 220.072953][T12093] hsr_slave_1 (unregistering): left promiscuous mode [ 220.466650][T12127] lo speed is unknown, defaulting to 1000 [ 221.327314][T12118] Set syz1 is full, maxelem 65536 reached [ 221.346527][T12139] bridge2: entered promiscuous mode [ 221.363107][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 221.363123][ T29] audit: type=1326 audit(477.344:9660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 221.457581][ T29] audit: type=1326 audit(477.344:9661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 221.480574][ T29] audit: type=1326 audit(477.344:9662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 221.503492][ T29] audit: type=1326 audit(477.344:9663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 221.526439][ T29] audit: type=1326 audit(477.344:9664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 221.549320][ T29] audit: type=1326 audit(477.344:9665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 221.572300][ T29] audit: type=1326 audit(477.344:9666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 221.595184][ T29] audit: type=1326 audit(477.344:9667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 221.618054][ T29] audit: type=1326 audit(477.344:9668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 221.641013][ T29] audit: type=1326 audit(477.344:9669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 221.834761][T12164] loop4: detected capacity change from 0 to 512 [ 221.851667][T12166] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 221.898881][T12176] netlink: 452 bytes leftover after parsing attributes in process `syz.1.3025'. [ 221.908259][T12164] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 221.919812][T12164] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 221.929881][T12164] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3022: Corrupt directory, running e2fsck is recommended [ 221.948423][T12164] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 221.956836][T12164] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.3022: corrupted in-inode xattr: invalid ea_ino [ 221.977278][T12164] EXT4-fs (loop4): Remounting filesystem read-only [ 221.984270][T12164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.072515][T12185] netlink: 'syz.1.3028': attribute type 10 has an invalid length. [ 222.083155][T12185] team0: Port device dummy0 added [ 222.088584][T11735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.089816][T12185] netlink: 'syz.1.3028': attribute type 10 has an invalid length. [ 222.138758][T12185] team0: Port device dummy0 removed [ 222.145647][T12188] loop4: detected capacity change from 0 to 164 [ 222.159465][T12185] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 222.181120][T12190] Cannot find add_set index 0 as target [ 222.383138][T12205] rtc_cmos 00:00: Alarms can be up to one day in the future [ 222.398032][T12205] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 222.404621][T12205] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 222.412473][T12205] vhci_hcd vhci_hcd.0: Device attached [ 222.430096][T12206] vhci_hcd: connection closed [ 222.430304][ T8702] vhci_hcd: stop threads [ 222.439304][ T8702] vhci_hcd: release socket [ 222.443777][ T8702] vhci_hcd: disconnect device [ 222.844987][T12179] Set syz1 is full, maxelem 65536 reached [ 222.888891][T12230] netlink: 'syz.1.3042': attribute type 25 has an invalid length. [ 223.243134][T12245] lo speed is unknown, defaulting to 1000 [ 223.344926][T12249] loop4: detected capacity change from 0 to 512 [ 223.675003][T12224] blktrace: Concurrent blktraces are not allowed on loop7 [ 224.060857][T12268] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3055'. [ 224.070417][T12268] 9pnet_fd: Insufficient options for proto=fd [ 224.286943][T12261] Set syz1 is full, maxelem 65536 reached [ 224.502927][T12281] lo speed is unknown, defaulting to 1000 [ 224.809465][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3066'. [ 224.818483][T12300] netlink: 'syz.1.3066': attribute type 7 has an invalid length. [ 224.826258][T12300] netlink: 'syz.1.3066': attribute type 8 has an invalid length. [ 224.833994][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 224.844095][T12302] lo speed is unknown, defaulting to 1000 [ 224.850809][T12300] erspan0: entered promiscuous mode [ 224.862763][T12300] gretap0: entered promiscuous mode [ 224.888912][T12300] debugfs: 'hsr0' already exists in 'hsr' [ 224.894676][T12300] Cannot create hsr debugfs directory [ 224.941136][T12302] lo speed is unknown, defaulting to 1000 [ 224.948745][T12302] lo speed is unknown, defaulting to 1000 [ 224.955865][T12302] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 224.985683][T12302] lo speed is unknown, defaulting to 1000 [ 225.003690][T12302] lo speed is unknown, defaulting to 1000 [ 225.013061][T12302] lo speed is unknown, defaulting to 1000 [ 225.023424][T12302] lo speed is unknown, defaulting to 1000 [ 225.034247][T12302] lo speed is unknown, defaulting to 1000 [ 225.106314][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3073'. [ 225.925584][ T8719] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.935435][ T8719] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.087504][ T8719] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.097306][ T8719] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.172088][ T8719] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.181924][ T8719] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.265175][T12350] lo speed is unknown, defaulting to 1000 [ 226.272211][ T8719] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.282026][ T8719] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.303299][T12350] lo speed is unknown, defaulting to 1000 [ 226.395296][ T8719] bridge_slave_1: left allmulticast mode [ 226.400995][ T8719] bridge_slave_1: left promiscuous mode [ 226.406686][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.424563][ T8719] bridge_slave_0: left allmulticast mode [ 226.430243][ T8719] bridge_slave_0: left promiscuous mode [ 226.435929][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.501275][ T8719] erspan0 (unregistering): left promiscuous mode [ 226.527532][ T8719] gretap0 (unregistering): left promiscuous mode [ 226.554255][ T8719] tipc: Disabling bearer [ 226.611043][ T8719] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 226.646275][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 226.646290][ T29] audit: type=1326 audit(482.624:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.7.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 226.695737][ T29] audit: type=1326 audit(482.664:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.7.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 226.718661][ T29] audit: type=1326 audit(482.664:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.7.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 226.741631][ T29] audit: type=1326 audit(482.664:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.7.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 226.764525][ T29] audit: type=1326 audit(482.664:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.7.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 226.787464][ T29] audit: type=1326 audit(482.664:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.7.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 226.810368][ T29] audit: type=1326 audit(482.664:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.7.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 226.833235][ T29] audit: type=1326 audit(482.664:9927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.7.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 226.846189][ T8719] bridge1 (unregistering): left promiscuous mode [ 226.856420][ T29] audit: type=1326 audit(482.664:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.7.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 226.885834][ T29] audit: type=1326 audit(482.664:9929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.7.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 227.040952][ T8719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.066379][ T8719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.096121][ T8719] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 227.120649][ T8719] bond0 (unregistering): Released all slaves [ 227.147043][ T8719] bond1 (unregistering): Released all slaves [ 227.163844][ T8719] bond2 (unregistering): (slave veth5): Releasing active interface [ 227.183236][ T8719] bond2 (unregistering): (slave veth7): Releasing active interface [ 227.192603][T12375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12375 comm=syz.0.3092 [ 227.209163][ T8719] bond2 (unregistering): Released all slaves [ 227.221752][T12350] chnl_net:caif_netlink_parms(): no params data found [ 227.266045][ T8719] tipc: Left network mode [ 227.289144][ T8719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.296614][ T8719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.304621][ T8719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.312088][ T8719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.321814][ T8719] veth1_macvtap: left promiscuous mode [ 227.327353][ T8719] veth0_macvtap: left promiscuous mode [ 227.333068][ T8719] veth1_vlan: left promiscuous mode [ 227.338625][ T8719] veth0_vlan: left promiscuous mode [ 227.383216][ T8719] pim6reg (unregistering): left allmulticast mode [ 227.422728][ T8719] team0 (unregistering): Port device team_slave_1 removed [ 227.434052][ T8719] team0 (unregistering): Port device team_slave_0 removed [ 227.471632][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.478955][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.487859][T12350] bridge_slave_0: entered allmulticast mode [ 227.498081][T12350] bridge_slave_0: entered promiscuous mode [ 227.504453][ T3371] lo speed is unknown, defaulting to 1000 [ 227.510210][ T3371] infiniband syz0: ib_query_port failed (-19) [ 227.511083][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.523461][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.536244][T12350] bridge_slave_1: entered allmulticast mode [ 227.542846][T12350] bridge_slave_1: entered promiscuous mode [ 227.635132][T12350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.649705][T12350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.672955][T12350] team0: Port device team_slave_0 added [ 227.680805][T12350] team0: Port device team_slave_1 added [ 227.697856][T12436] lo speed is unknown, defaulting to 1000 [ 227.727693][T12439] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3114'. [ 227.737241][T12439] 9pnet_fd: Insufficient options for proto=fd [ 227.738165][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.750338][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.776253][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.790521][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.797500][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.823454][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.868764][T12350] hsr_slave_0: entered promiscuous mode [ 227.870114][T12444] loop4: detected capacity change from 0 to 512 [ 227.875470][T12350] hsr_slave_1: entered promiscuous mode [ 227.886666][T12350] debugfs: 'hsr0' already exists in 'hsr' [ 227.892421][T12350] Cannot create hsr debugfs directory [ 227.904975][ T8719] IPVS: stop unused estimator thread 0... [ 227.941183][T12444] blktrace: Concurrent blktraces are not allowed on loop1 [ 228.011215][T12454] lo speed is unknown, defaulting to 1000 [ 228.096530][T12472] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3125'. [ 228.114287][T12472] 9pnet_fd: Insufficient options for proto=fd [ 228.192708][T12477] netlink: 'syz.4.3122': attribute type 1 has an invalid length. [ 228.200523][T12477] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3122'. [ 228.254782][T12350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.271637][T12350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.295193][T12350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.314403][T12350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.391364][T12350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.401878][T12350] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.433343][T12476] lo speed is unknown, defaulting to 1000 [ 228.444218][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.451339][ T8719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.468947][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.476068][ T8719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.536964][T12499] rdma_op ffff888103140580 conn xmit_rdma 0000000000000000 [ 228.657481][T12350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.669714][T12506] loop4: detected capacity change from 0 to 8192 [ 228.785704][T12350] veth0_vlan: entered promiscuous mode [ 228.798288][T12350] veth1_vlan: entered promiscuous mode [ 228.823378][T12350] veth0_macvtap: entered promiscuous mode [ 228.830923][T12350] veth1_macvtap: entered promiscuous mode [ 228.842059][T12350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.855892][T12350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.870768][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.888100][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.942345][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.958921][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.044570][T12543] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3145'. [ 229.115860][T12547] netlink: 'syz.1.3084': attribute type 4 has an invalid length. [ 229.354469][T12548] netlink: 'syz.4.3139': attribute type 1 has an invalid length. [ 229.362328][T12548] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3139'. [ 230.563266][T12565] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3152'. [ 230.587563][T12565] 9pnet_fd: Insufficient options for proto=fd [ 230.758150][T12575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3156'. [ 230.916427][T12579] netlink: 'syz.4.3158': attribute type 7 has an invalid length. [ 230.924222][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3158'. [ 230.983406][T12599] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3165'. [ 231.046615][T12582] lo speed is unknown, defaulting to 1000 [ 231.133452][T12610] netlink: 188 bytes leftover after parsing attributes in process `GPL'. [ 231.195636][T12582] chnl_net:caif_netlink_parms(): no params data found [ 231.254335][ T52] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.279124][T12622] batadv_slave_1: entered promiscuous mode [ 231.373657][T12621] batadv_slave_1: left promiscuous mode [ 231.409908][ T52] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.565845][T12582] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.573302][T12582] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.589072][T12582] bridge_slave_0: entered allmulticast mode [ 231.595961][T12582] bridge_slave_0: entered promiscuous mode [ 231.649019][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 231.649031][ T29] audit: type=1326 audit(487.634:10461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff766b71f85 code=0x7ffc0000 [ 231.770749][ T52] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.780683][ T29] audit: type=1326 audit(487.664:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff766b71f85 code=0x7ffc0000 [ 231.803975][ T29] audit: type=1326 audit(487.664:10463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff766b71f85 code=0x7ffc0000 [ 231.827063][ T29] audit: type=1326 audit(487.664:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff766b71f85 code=0x7ffc0000 [ 231.850315][ T29] audit: type=1326 audit(487.664:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff766b71f85 code=0x7ffc0000 [ 231.873435][ T29] audit: type=1326 audit(487.664:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff766b71f85 code=0x7ffc0000 [ 231.896490][ T29] audit: type=1326 audit(487.664:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff766b71f85 code=0x7ffc0000 [ 231.919507][ T29] audit: type=1326 audit(487.664:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff766b71f85 code=0x7ffc0000 [ 231.942463][ T29] audit: type=1326 audit(487.664:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff766b71f85 code=0x7ffc0000 [ 231.965980][ T29] audit: type=1326 audit(487.664:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.4.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff766b71f85 code=0x7ffc0000 [ 231.992901][T12637] wireguard0: entered promiscuous mode [ 231.998435][T12637] wireguard0: entered allmulticast mode [ 232.019657][T12582] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.026783][T12582] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.048147][T12582] bridge_slave_1: entered allmulticast mode [ 232.065501][T12582] bridge_slave_1: entered promiscuous mode [ 232.081517][ T52] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.173976][T12582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.342765][T12629] syz.3.3176 (12629) used greatest stack depth: 6328 bytes left [ 232.390219][ T52] bond0 (unregistering): Released all slaves [ 232.400375][T12582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.414878][T12656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3183'. [ 232.423982][T12656] netem: unknown loss type 13 [ 232.428688][T12656] netem: change failed [ 232.455454][T12654] lo speed is unknown, defaulting to 1000 [ 232.486392][ T52] tipc: Left network mode [ 232.488117][T12582] team0: Port device team_slave_0 added [ 232.509158][T12582] team0: Port device team_slave_1 added [ 232.516304][ T52] hsr_slave_0: left promiscuous mode [ 232.522071][ T52] hsr_slave_1: left promiscuous mode [ 232.532908][ T52] veth1_macvtap: left promiscuous mode [ 232.538481][ T52] veth0_macvtap: left promiscuous mode [ 232.544064][ T52] veth1_vlan: left promiscuous mode [ 232.549375][ T52] veth0_vlan: left promiscuous mode [ 232.658484][T12582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.665456][T12582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.691594][T12582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.706511][T12582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.713498][T12582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.739498][T12582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.770450][T12582] hsr_slave_0: entered promiscuous mode [ 232.776597][T12582] hsr_slave_1: entered promiscuous mode [ 232.794734][T12678] netlink: 'syz.3.3191': attribute type 4 has an invalid length. [ 232.874319][T12689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3196'. [ 232.898809][T12691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3197'. [ 233.404244][T12705] siw: device registration error -23 [ 233.655094][T12582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.671795][T12582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.691400][T12694] Set syz1 is full, maxelem 65536 reached [ 233.699309][T12582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.717730][T12582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.836723][T12582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.862195][T12582] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.879671][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.886732][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.909305][T12726] netlink: 'syz.1.3205': attribute type 4 has an invalid length. [ 233.925171][T12582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.935543][T12582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.996882][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.003970][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.193132][T12582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.271448][T12582] veth0_vlan: entered promiscuous mode [ 234.279775][T12582] veth1_vlan: entered promiscuous mode [ 234.297459][T12582] veth0_macvtap: entered promiscuous mode [ 234.307370][T12582] veth1_macvtap: entered promiscuous mode [ 234.318550][T12582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.340419][T12582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.351734][ T3620] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.388840][ T3620] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.397664][ T3620] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.416955][ T3620] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.613888][T12758] loop4: detected capacity change from 0 to 512 [ 234.640943][T12762] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3214'. [ 235.416727][ T3414] hid_parser_main: 20 callbacks suppressed [ 235.416771][ T3414] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 235.430354][ T3414] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 235.450708][ T3414] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 235.458480][ T3414] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 235.466143][ T3414] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 235.473821][ T3414] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 235.481530][ T3414] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 235.489197][ T3414] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 235.496836][ T3414] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 235.504502][ T3414] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 235.589881][ T3414] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 235.807301][ T3620] Bluetooth: hci0: Frame reassembly failed (-84) [ 235.829245][T12791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3223'. [ 235.845142][T12791] bond1: option ad_select: invalid value (183) [ 235.854677][T12791] bond1 (unregistering): Released all slaves [ 235.868513][T12794] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 235.882930][T12793] IPVS: stopping master sync thread 12794 ... [ 235.954003][T12801] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3226'. [ 236.061397][T12808] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 236.163116][T12812] lo speed is unknown, defaulting to 1000 [ 236.831149][T12851] netlink: 'syz.1.3240': attribute type 4 has an invalid length. [ 237.007388][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3244'. [ 237.036013][T12856] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.101896][T12856] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.173319][T12856] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.228076][T12856] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.293793][ T3620] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.304849][ T3620] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.314957][ T3620] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.326182][ T3620] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.403485][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 237.403498][ T29] audit: type=1326 audit(484.381:10681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.3.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 237.432820][ T29] audit: type=1326 audit(484.381:10682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.3.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 237.455992][ T29] audit: type=1326 audit(484.381:10683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.3.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 237.478876][ T29] audit: type=1326 audit(484.381:10684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.3.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 237.501839][ T29] audit: type=1326 audit(484.381:10685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.3.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 237.524632][ T29] audit: type=1326 audit(484.381:10686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.3.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 237.547632][ T29] audit: type=1326 audit(484.381:10687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.3.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 237.570549][ T29] audit: type=1326 audit(484.381:10688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.3.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 237.593493][ T29] audit: type=1326 audit(484.381:10689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.3.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 237.616398][ T29] audit: type=1326 audit(484.381:10690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.3.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 237.878584][ T3490] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.942908][T12871] netlink: 'syz.0.3249': attribute type 1 has an invalid length. [ 237.950679][T12871] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3249'. [ 238.237450][T12885] lo speed is unknown, defaulting to 1000 [ 238.638229][T12899] siw: device registration error -23 [ 238.803691][T12789] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 238.939979][T12905] siw: device registration error -23 [ 238.981965][T12910] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 239.568385][T12920] 9pnet_fd: Insufficient options for proto=fd [ 239.624062][T12922] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12922 comm=syz.3.3268 [ 239.793324][T12933] netlink: 'syz.3.3273': attribute type 4 has an invalid length. [ 239.867272][T12938] netlink: 'syz.3.3275': attribute type 13 has an invalid length. [ 239.916120][T12942] FAULT_INJECTION: forcing a failure. [ 239.916120][T12942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.929326][T12942] CPU: 1 UID: 0 PID: 12942 Comm: syz.0.3277 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 239.929355][T12942] Tainted: [W]=WARN [ 239.929361][T12942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.929396][T12942] Call Trace: [ 239.929402][T12942] [ 239.929410][T12942] __dump_stack+0x1d/0x30 [ 239.929434][T12942] dump_stack_lvl+0xe8/0x140 [ 239.929455][T12942] dump_stack+0x15/0x1b [ 239.929501][T12942] should_fail_ex+0x265/0x280 [ 239.929523][T12942] should_fail+0xb/0x20 [ 239.929563][T12942] should_fail_usercopy+0x1a/0x20 [ 239.929584][T12942] strncpy_from_user+0x25/0x230 [ 239.929615][T12942] path_setxattrat+0xeb/0x310 [ 239.929659][T12942] __x64_sys_lsetxattr+0x71/0x90 [ 239.929748][T12942] x64_sys_call+0x287b/0x3000 [ 239.929771][T12942] do_syscall_64+0xd2/0x200 [ 239.929793][T12942] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 239.929865][T12942] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 239.929892][T12942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.929954][T12942] RIP: 0033:0x7f01ebb3f6c9 [ 239.929969][T12942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.929985][T12942] RSP: 002b:00007f01ea59f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 239.930083][T12942] RAX: ffffffffffffffda RBX: 00007f01ebd95fa0 RCX: 00007f01ebb3f6c9 [ 239.930097][T12942] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 00002000000001c0 [ 239.930110][T12942] RBP: 00007f01ea59f090 R08: 0000000000000000 R09: 0000000000000000 [ 239.930123][T12942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.930172][T12942] R13: 00007f01ebd96038 R14: 00007f01ebd95fa0 R15: 00007ffda0692158 [ 239.930188][T12942] [ 240.127855][T12938] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.135100][T12938] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.173168][T12946] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3278'. [ 240.361173][T12938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.394628][T12938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.504589][T12961] siw: device registration error -23 [ 240.547715][ T3409] lo speed is unknown, defaulting to 1000 [ 240.553649][ T3409] syz2: Port: 1 Link DOWN [ 240.561813][ T3620] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.599715][ T3620] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.608094][ T3620] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.822521][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3283'. [ 240.833880][T12954] hsr_slave_0: left promiscuous mode [ 240.839834][T12954] hsr_slave_1: left promiscuous mode [ 240.870221][T12973] netlink: 'syz.3.3285': attribute type 4 has an invalid length. [ 241.256203][T12977] netlink: 'syz.1.3286': attribute type 1 has an invalid length. [ 241.264102][T12977] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3286'. [ 241.311098][ T3620] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.599476][T12992] xt_time: unknown flags 0xc [ 241.864341][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3297'. [ 241.974134][T13007] lo speed is unknown, defaulting to 1000 [ 242.300876][T13018] siw: device registration error -23 [ 242.715853][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 242.715868][ T29] audit: type=1400 audit(489.691:11280): avc: denied { mount } for pid=13033 comm="syz.1.3308" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 242.748997][ T29] audit: type=1400 audit(489.691:11281): avc: denied { remount } for pid=13033 comm="syz.1.3308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 242.777028][ T29] audit: type=1400 audit(489.731:11282): avc: denied { read } for pid=13030 comm="syz.0.3307" path="socket:[37046]" dev="sockfs" ino=37046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.856801][ T29] audit: type=1400 audit(489.831:11283): avc: denied { unmount } for pid=12350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 242.980079][ T29] audit: type=1400 audit(489.961:11284): avc: denied { append } for pid=13048 comm="syz.0.3311" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.002835][ T29] audit: type=1400 audit(489.961:11285): avc: denied { lock } for pid=13048 comm="syz.0.3311" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.491993][T13064] lo speed is unknown, defaulting to 1000 [ 243.591332][T13076] netlink: 'syz.4.3317': attribute type 1 has an invalid length. [ 243.599144][T13076] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3317'. [ 244.094490][ T29] audit: type=1326 audit(491.071:11286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13077 comm="syz.3.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 244.178365][ T29] audit: type=1326 audit(491.111:11287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13077 comm="syz.3.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 244.201378][ T29] audit: type=1326 audit(491.111:11288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13077 comm="syz.3.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 244.224354][ T29] audit: type=1326 audit(491.111:11289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13077 comm="syz.3.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb316d7f6c9 code=0x7ffc0000 [ 244.484781][T13093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3324'. [ 244.588516][T13098] siw: device registration error -23 [ 245.763703][T13112] siw: device registration error -23 [ 245.909121][T13121] lo speed is unknown, defaulting to 1000 [ 246.707735][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3342'. [ 246.742937][T13145] hsr_slave_0: left promiscuous mode [ 246.770845][T13145] hsr_slave_1: left promiscuous mode [ 247.113290][T13157] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3347'. [ 247.186234][T13157] 9pnet_fd: Insufficient options for proto=fd [ 247.317006][T13160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3348'. [ 247.394290][T13168] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3352'. [ 247.403806][T13168] 9pnet_fd: Insufficient options for proto=fd [ 247.553494][T13184] netlink: 'syz.7.3360': attribute type 4 has an invalid length. [ 247.599607][T13188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3361'. [ 247.614518][T13186] bond1: entered allmulticast mode [ 247.699979][T13201] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3365'. [ 247.954107][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 247.954129][ T29] audit: type=1400 audit(494.931:11384): avc: denied { listen } for pid=13213 comm="syz.4.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 248.063745][T13204] lo speed is unknown, defaulting to 1000 [ 248.483678][T13233] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3375'. [ 248.735454][T13243] lo speed is unknown, defaulting to 1000 [ 249.098085][ T29] audit: type=1326 audit(496.071:11385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ebb3f6c9 code=0x7ffc0000 [ 249.121106][ T29] audit: type=1326 audit(496.071:11386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ebb3f6c9 code=0x7ffc0000 [ 249.148459][ T29] audit: type=1326 audit(496.131:11387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01ebb3f6c9 code=0x7ffc0000 [ 249.171437][ T29] audit: type=1326 audit(496.131:11388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ebb3f6c9 code=0x7ffc0000 [ 249.194472][ T29] audit: type=1326 audit(496.131:11389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ebb3f6c9 code=0x7ffc0000 [ 249.217486][ T29] audit: type=1326 audit(496.131:11390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01ebb3f6c9 code=0x7ffc0000 [ 249.240511][ T29] audit: type=1326 audit(496.131:11391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ebb3f6c9 code=0x7ffc0000 [ 249.263506][ T29] audit: type=1326 audit(496.131:11392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ebb3f6c9 code=0x7ffc0000 [ 249.286484][ T29] audit: type=1326 audit(496.131:11393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01ebb3f6c9 code=0x7ffc0000 [ 249.332477][T13256] netlink: 'syz.0.3383': attribute type 8 has an invalid length. [ 249.340268][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'. [ 249.352448][T13256] bond0: entered promiscuous mode [ 249.357502][T13256] bond_slave_0: entered promiscuous mode [ 249.363396][T13256] bond_slave_1: entered promiscuous mode [ 249.371306][T13256] gretap0: entered promiscuous mode [ 249.377349][T13256] bond0: left promiscuous mode [ 249.382163][T13256] bond_slave_0: left promiscuous mode [ 249.387624][T13256] bond_slave_1: left promiscuous mode [ 249.427896][T13256] gretap0: left promiscuous mode [ 249.534798][T13263] FAULT_INJECTION: forcing a failure. [ 249.534798][T13263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.547914][T13263] CPU: 0 UID: 0 PID: 13263 Comm: syz.0.3386 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.547948][T13263] Tainted: [W]=WARN [ 249.547955][T13263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.547968][T13263] Call Trace: [ 249.548011][T13263] [ 249.548092][T13263] __dump_stack+0x1d/0x30 [ 249.548115][T13263] dump_stack_lvl+0xe8/0x140 [ 249.548137][T13263] dump_stack+0x15/0x1b [ 249.548259][T13263] should_fail_ex+0x265/0x280 [ 249.548358][T13263] should_fail+0xb/0x20 [ 249.548379][T13263] should_fail_usercopy+0x1a/0x20 [ 249.548456][T13263] _copy_from_user+0x1c/0xb0 [ 249.548481][T13263] sock_do_ioctl+0xe6/0x220 [ 249.548506][T13263] sock_ioctl+0x41b/0x610 [ 249.548528][T13263] ? __pfx_sock_ioctl+0x10/0x10 [ 249.548564][T13263] __se_sys_ioctl+0xce/0x140 [ 249.548585][T13263] __x64_sys_ioctl+0x43/0x50 [ 249.548603][T13263] x64_sys_call+0x1816/0x3000 [ 249.548622][T13263] do_syscall_64+0xd2/0x200 [ 249.548640][T13263] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 249.548722][T13263] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 249.548782][T13263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.548801][T13263] RIP: 0033:0x7f01ebb3f6c9 [ 249.548813][T13263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.548831][T13263] RSP: 002b:00007f01ea59f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.548873][T13263] RAX: ffffffffffffffda RBX: 00007f01ebd95fa0 RCX: 00007f01ebb3f6c9 [ 249.548942][T13263] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 249.548954][T13263] RBP: 00007f01ea59f090 R08: 0000000000000000 R09: 0000000000000000 [ 249.548965][T13263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.548978][T13263] R13: 00007f01ebd96038 R14: 00007f01ebd95fa0 R15: 00007ffda0692158 [ 249.548994][T13263] [ 249.740525][T13265] smc: net device bond0 applied user defined pnetid SYZ2 [ 249.749157][T13265] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3387'. [ 249.759670][T13265] smc: removing net device bond0 with user defined pnetid SYZ2 [ 249.797421][T13271] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3391'. [ 249.806904][T13271] 9pnet_fd: Insufficient options for proto=fd [ 249.822425][T13269] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 249.831374][T13269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.841284][T13265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.916479][T13265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.959031][T13265] bond0 (unregistering): Released all slaves [ 250.207814][T13298] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 250.382859][T13305] netlink: 'syz.3.3400': attribute type 8 has an invalid length. [ 250.539751][T13318] netlink: 'syz.1.3402': attribute type 4 has an invalid length. [ 250.889555][T13343] hsr0: entered promiscuous mode [ 250.896740][T13343] hsr_slave_0: left promiscuous mode [ 250.903424][T13343] hsr0 (unregistering): left promiscuous mode [ 252.057013][T13396] __nla_validate_parse: 3 callbacks suppressed [ 252.057039][T13396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3433'. [ 252.124796][T13399] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3434'. [ 252.392350][T13408] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3437'. [ 252.858501][T13411] siw: device registration error -23 [ 252.934808][T13415] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 252.958468][ T29] kauditd_printk_skb: 914 callbacks suppressed [ 252.958482][ T29] audit: type=1326 audit(499.941:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd67c1f85 code=0x7ffc0000 [ 252.987664][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 252.987694][ T29] audit: type=1326 audit(499.941:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd67c1f85 code=0x7ffc0000 [ 253.019479][ T29] audit: type=1326 audit(499.941:12310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd67c1f85 code=0x7ffc0000 [ 253.042429][ T29] audit: type=1326 audit(499.941:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd67c1f85 code=0x7ffc0000 [ 253.065451][ T29] audit: type=1326 audit(499.941:12312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd67c1f85 code=0x7ffc0000 [ 253.088450][ T29] audit: type=1326 audit(499.941:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd67c1f85 code=0x7ffc0000 [ 253.111391][ T29] audit: type=1326 audit(499.941:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd67c1f85 code=0x7ffc0000 [ 253.152266][ T29] audit: type=1326 audit(499.981:12315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd67c1f85 code=0x7ffc0000 [ 253.175275][ T29] audit: type=1326 audit(500.021:12316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd67c1f85 code=0x7ffc0000 [ 253.198248][ T29] audit: type=1326 audit(500.021:12317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cd67c1f85 code=0x7ffc0000 [ 253.270654][T13430] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 253.378017][T13450] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3454'. [ 253.387052][T13446] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3454'. [ 253.436645][T13452] netlink: 'syz.4.3449': attribute type 4 has an invalid length. [ 253.555823][T13461] lo speed is unknown, defaulting to 1000 [ 253.885656][T13468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3458'. [ 254.154021][T13474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3459'. [ 254.209426][T13476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3460'. [ 254.218419][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3460'. [ 254.264486][T13483] 9pnet_fd: Insufficient options for proto=fd [ 254.389806][T13499] bridge_slave_0: left allmulticast mode [ 254.395533][T13499] bridge_slave_0: left promiscuous mode [ 254.401289][T13499] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.459802][T13499] bridge_slave_1: left allmulticast mode [ 254.465484][T13499] bridge_slave_1: left promiscuous mode [ 254.471157][T13499] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.480447][T13499] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 254.487777][T13499] bond_slave_0: left promiscuous mode [ 254.508459][T13499] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 254.522987][T13499] bond_slave_1: left promiscuous mode [ 254.542227][T13499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.587247][T13499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.763374][T13531] lo speed is unknown, defaulting to 1000 [ 255.198524][T13542] 9pnet_fd: Insufficient options for proto=fd [ 255.710451][T13563] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 255.785417][T13565] lo speed is unknown, defaulting to 1000 [ 256.170492][T13574] netlink: 'syz.3.3491': attribute type 4 has an invalid length. [ 256.187927][T13572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7957 sclass=netlink_route_socket pid=13572 comm=syz.0.3490 [ 256.280343][T13584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13584 comm=syz.3.3494 [ 256.460547][T13597] ip6tnl1: entered promiscuous mode [ 256.465796][T13597] ip6tnl1: entered allmulticast mode [ 256.849885][T13616] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 257.383202][T13623] netlink: 'syz.0.3505': attribute type 1 has an invalid length. [ 257.390990][T13623] __nla_validate_parse: 6 callbacks suppressed [ 257.391001][T13623] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3505'. [ 257.783090][T13638] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3512'. [ 257.872048][T13610] Set syz1 is full, maxelem 65536 reached [ 257.992990][T13642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3513'. [ 258.100986][T13644] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 258.345840][T13667] netlink: 188 bytes leftover after parsing attributes in process `syz.7.3523'. [ 258.508879][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 258.508893][ T29] audit: type=1326 audit(258.496:12874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13678 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff766b3f6c9 code=0x7ffc0000 [ 258.549609][ T29] audit: type=1326 audit(258.496:12875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13678 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff766b3f6c9 code=0x7ffc0000 [ 258.572619][ T29] audit: type=1326 audit(258.496:12876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13678 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff766b3f6c9 code=0x7ffc0000 [ 258.595479][ T29] audit: type=1326 audit(258.496:12877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13678 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff766b3f6c9 code=0x7ffc0000 [ 258.618479][ T29] audit: type=1326 audit(258.496:12878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13678 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff766b3f6c9 code=0x7ffc0000 [ 258.642463][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3522'. [ 258.651673][T13671] FAULT_INJECTION: forcing a failure. [ 258.651673][T13671] name failslab, interval 1, probability 0, space 0, times 0 [ 258.664297][T13671] CPU: 1 UID: 0 PID: 13671 Comm: syz.1.3522 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 258.664328][T13671] Tainted: [W]=WARN [ 258.664334][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.664388][T13671] Call Trace: [ 258.664395][T13671] [ 258.664402][T13671] __dump_stack+0x1d/0x30 [ 258.664422][T13671] dump_stack_lvl+0xe8/0x140 [ 258.664448][T13671] dump_stack+0x15/0x1b [ 258.664465][T13671] should_fail_ex+0x265/0x280 [ 258.664482][T13671] should_failslab+0x8c/0xb0 [ 258.664509][T13671] __kmalloc_noprof+0xa5/0x570 [ 258.664593][T13671] ? nft_obj_init+0x15f/0x220 [ 258.664623][T13671] nft_obj_init+0x15f/0x220 [ 258.664652][T13671] nf_tables_newobj+0x751/0x1070 [ 258.664679][T13671] nfnetlink_rcv+0xbc9/0x16c0 [ 258.664726][T13671] ? kmem_cache_free+0xe4/0x3d0 [ 258.664776][T13671] netlink_unicast+0x5c0/0x690 [ 258.664805][T13671] netlink_sendmsg+0x58b/0x6b0 [ 258.664824][T13671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.664909][T13671] __sock_sendmsg+0x145/0x180 [ 258.664935][T13671] ____sys_sendmsg+0x31e/0x4e0 [ 258.664965][T13671] ___sys_sendmsg+0x17b/0x1d0 [ 258.664989][T13671] __x64_sys_sendmsg+0xd4/0x160 [ 258.665092][T13671] x64_sys_call+0x191e/0x3000 [ 258.665122][T13671] do_syscall_64+0xd2/0x200 [ 258.665143][T13671] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 258.665170][T13671] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 258.665261][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.665280][T13671] RIP: 0033:0x7f7e5a28f6c9 [ 258.665293][T13671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.665311][T13671] RSP: 002b:00007f7e58cef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.665342][T13671] RAX: ffffffffffffffda RBX: 00007f7e5a4e5fa0 RCX: 00007f7e5a28f6c9 [ 258.665355][T13671] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 258.665366][T13671] RBP: 00007f7e58cef090 R08: 0000000000000000 R09: 0000000000000000 [ 258.665405][T13671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.665459][T13671] R13: 00007f7e5a4e6038 R14: 00007f7e5a4e5fa0 R15: 00007ffe051b00c8 [ 258.665477][T13671] [ 258.891448][T13691] FAULT_INJECTION: forcing a failure. [ 258.891448][T13691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.904600][T13691] CPU: 0 UID: 0 PID: 13691 Comm: syz.4.3531 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 258.904637][T13691] Tainted: [W]=WARN [ 258.904644][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.904656][T13691] Call Trace: [ 258.904668][T13691] [ 258.904675][T13691] __dump_stack+0x1d/0x30 [ 258.904697][T13691] dump_stack_lvl+0xe8/0x140 [ 258.904716][T13691] dump_stack+0x15/0x1b [ 258.904769][T13691] should_fail_ex+0x265/0x280 [ 258.904787][T13691] should_fail+0xb/0x20 [ 258.904870][T13691] should_fail_usercopy+0x1a/0x20 [ 258.904937][T13691] _copy_from_user+0x1c/0xb0 [ 258.904958][T13691] do_sock_getsockopt+0xf1/0x240 [ 258.904986][T13691] __x64_sys_getsockopt+0x11e/0x1a0 [ 258.905015][T13691] x64_sys_call+0x2bca/0x3000 [ 258.905096][T13691] do_syscall_64+0xd2/0x200 [ 258.905113][T13691] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 258.905164][T13691] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 258.905265][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.905308][T13691] RIP: 0033:0x7ff766b3f6c9 [ 258.905320][T13691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.905335][T13691] RSP: 002b:00007ff7655a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 258.905389][T13691] RAX: ffffffffffffffda RBX: 00007ff766d95fa0 RCX: 00007ff766b3f6c9 [ 258.905400][T13691] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000003 [ 258.905410][T13691] RBP: 00007ff7655a7090 R08: 0000200000000040 R09: 0000000000000000 [ 258.905420][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.905430][T13691] R13: 00007ff766d96038 R14: 00007ff766d95fa0 R15: 00007fff6c384af8 [ 258.905482][T13691] [ 258.905617][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3522'. [ 259.172408][ T29] audit: type=1326 audit(259.076:12879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.7.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 259.195603][ T29] audit: type=1326 audit(259.076:12880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.7.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 259.218888][ T29] audit: type=1326 audit(259.076:12881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.7.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 259.241867][ T29] audit: type=1326 audit(259.076:12882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.7.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 259.264820][ T29] audit: type=1326 audit(259.076:12883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.7.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd678f6c9 code=0x7ffc0000 [ 259.342227][T13698] lo speed is unknown, defaulting to 1000 [ 259.782870][T13717] lo speed is unknown, defaulting to 1000 [ 260.053993][T13724] ..@ÿ: renamed from bond_slave_0 [ 260.466713][T13736] FAULT_INJECTION: forcing a failure. [ 260.466713][T13736] name failslab, interval 1, probability 0, space 0, times 0 [ 260.479393][T13736] CPU: 1 UID: 0 PID: 13736 Comm: syz.1.3545 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 260.479426][T13736] Tainted: [W]=WARN [ 260.479433][T13736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.479472][T13736] Call Trace: [ 260.479478][T13736] [ 260.479484][T13736] __dump_stack+0x1d/0x30 [ 260.479506][T13736] dump_stack_lvl+0xe8/0x140 [ 260.479527][T13736] dump_stack+0x15/0x1b [ 260.479545][T13736] should_fail_ex+0x265/0x280 [ 260.479561][T13736] should_failslab+0x8c/0xb0 [ 260.479639][T13736] kmem_cache_alloc_noprof+0x50/0x480 [ 260.479667][T13736] ? skb_clone+0x151/0x1f0 [ 260.479709][T13736] skb_clone+0x151/0x1f0 [ 260.479725][T13736] __netlink_deliver_tap+0x2c9/0x500 [ 260.479792][T13736] netlink_unicast+0x66b/0x690 [ 260.479821][T13736] netlink_sendmsg+0x58b/0x6b0 [ 260.479841][T13736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.479981][T13736] __sock_sendmsg+0x145/0x180 [ 260.480001][T13736] ____sys_sendmsg+0x345/0x4e0 [ 260.480035][T13736] ___sys_sendmsg+0x17b/0x1d0 [ 260.480064][T13736] __sys_sendmmsg+0x178/0x300 [ 260.480162][T13736] __x64_sys_sendmmsg+0x57/0x70 [ 260.480182][T13736] x64_sys_call+0x1c4a/0x3000 [ 260.480206][T13736] do_syscall_64+0xd2/0x200 [ 260.480226][T13736] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 260.480299][T13736] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 260.480333][T13736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.480403][T13736] RIP: 0033:0x7f7e5a28f6c9 [ 260.480417][T13736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.480433][T13736] RSP: 002b:00007f7e58cef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 260.480451][T13736] RAX: ffffffffffffffda RBX: 00007f7e5a4e5fa0 RCX: 00007f7e5a28f6c9 [ 260.480501][T13736] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000006 [ 260.480512][T13736] RBP: 00007f7e58cef090 R08: 0000000000000000 R09: 0000000000000000 [ 260.480523][T13736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.480533][T13736] R13: 00007f7e5a4e6038 R14: 00007f7e5a4e5fa0 R15: 00007ffe051b00c8 [ 260.480550][T13736] [ 260.703264][T13736] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3545'. [ 260.834810][T13742] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3548'. [ 260.919739][T13745] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3549'. [ 261.038513][T13760] FAULT_INJECTION: forcing a failure. [ 261.038513][T13760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.051611][T13760] CPU: 0 UID: 0 PID: 13760 Comm: syz.1.3555 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 261.051708][T13760] Tainted: [W]=WARN [ 261.051715][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.051728][T13760] Call Trace: [ 261.051734][T13760] [ 261.051740][T13760] __dump_stack+0x1d/0x30 [ 261.051760][T13760] dump_stack_lvl+0xe8/0x140 [ 261.051776][T13760] dump_stack+0x15/0x1b [ 261.051804][T13760] should_fail_ex+0x265/0x280 [ 261.051823][T13760] should_fail+0xb/0x20 [ 261.051841][T13760] should_fail_usercopy+0x1a/0x20 [ 261.051863][T13760] _copy_from_user+0x1c/0xb0 [ 261.051890][T13760] ___sys_sendmsg+0xc1/0x1d0 [ 261.051936][T13760] __x64_sys_sendmsg+0xd4/0x160 [ 261.051992][T13760] x64_sys_call+0x191e/0x3000 [ 261.052011][T13760] do_syscall_64+0xd2/0x200 [ 261.052033][T13760] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 261.052062][T13760] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 261.052167][T13760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.052190][T13760] RIP: 0033:0x7f7e5a28f6c9 [ 261.052206][T13760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.052221][T13760] RSP: 002b:00007f7e58cef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.052238][T13760] RAX: ffffffffffffffda RBX: 00007f7e5a4e5fa0 RCX: 00007f7e5a28f6c9 [ 261.052250][T13760] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 261.052261][T13760] RBP: 00007f7e58cef090 R08: 0000000000000000 R09: 0000000000000000 [ 261.052337][T13760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.052347][T13760] R13: 00007f7e5a4e6038 R14: 00007f7e5a4e5fa0 R15: 00007ffe051b00c8 [ 261.052363][T13760] [ 261.305557][ T8710] Bluetooth: hci0: Frame reassembly failed (-84) [ 261.335496][T13770] lo speed is unknown, defaulting to 1000 [ 261.342603][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3559'. [ 261.389030][T13768] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 261.407912][T13777] netlink: 'syz.1.3562': attribute type 1 has an invalid length. [ 261.711372][T13777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.078420][ T8381] ================================================================== [ 262.080022][T13780] syz.7.3563 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 262.086540][ T8381] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 262.097230][T13780] CPU: 0 UID: 0 PID: 13780 Comm: syz.7.3563 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 262.097263][T13780] Tainted: [W]=WARN [ 262.097270][T13780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.097282][T13780] Call Trace: [ 262.097290][T13780] [ 262.097298][T13780] __dump_stack+0x1d/0x30 [ 262.097376][T13780] dump_stack_lvl+0xe8/0x140 [ 262.097396][T13780] dump_stack+0x15/0x1b [ 262.097459][T13780] dump_header+0x81/0x220 [ 262.097477][T13780] oom_kill_process+0x342/0x400 [ 262.097508][T13780] out_of_memory+0x979/0xb80 [ 262.097539][T13780] try_charge_memcg+0x610/0xa10 [ 262.097606][T13780] charge_memcg+0x51/0xc0 [ 262.097628][T13780] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 262.097655][T13780] __read_swap_cache_async+0x17b/0x2d0 [ 262.097678][T13780] swap_cluster_readahead+0x262/0x3c0 [ 262.097778][T13780] swapin_readahead+0xde/0x6f0 [ 262.097830][T13780] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 262.097867][T13780] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 262.097923][T13780] ? __rcu_read_unlock+0x4f/0x70 [ 262.097949][T13780] ? swap_cache_get_folio+0x277/0x280 [ 262.097970][T13780] do_swap_page+0x2ae/0x2370 [ 262.097995][T13780] ? css_rstat_updated+0xb7/0x240 [ 262.098015][T13780] ? __pfx_default_wake_function+0x10/0x10 [ 262.098043][T13780] handle_mm_fault+0x9a5/0x2be0 [ 262.098068][T13780] ? vma_start_read+0x141/0x1f0 [ 262.098126][T13780] do_user_addr_fault+0x630/0x1080 [ 262.098147][T13780] ? fpregs_restore_userregs+0xe2/0x1d0 [ 262.098223][T13780] ? switch_fpu_return+0xe/0x20 [ 262.098252][T13780] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 262.098339][T13780] exc_page_fault+0x62/0xa0 [ 262.098368][T13780] asm_exc_page_fault+0x26/0x30 [ 262.098461][T13780] RIP: 0033:0x7f9cd6665928 [ 262.098476][T13780] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 9a 24 38 00 00 0f 8e 09 fe ff ff e8 c3 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 66 fd ea 00 e8 03 00 00 48 8d 1d 67 06 38 00 e8 e2 9c 12 00 [ 262.098494][T13780] RSP: 002b:00007ffc33f89650 EFLAGS: 00010216 [ 262.098510][T13780] RAX: 000000000003ff9e RBX: 00007f9cd69e7da0 RCX: 000000000003ff70 [ 262.098570][T13780] RDX: 000000000000002e RSI: 00007ffc33f89630 RDI: 0000000000000001 [ 262.098583][T13780] RBP: 00007f9cd69e7da0 R08: 0000000002cd1f12 R09: 7fffffffffffffff [ 262.098595][T13780] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000004006a [ 262.098608][T13780] R13: 00007f9cd69e6090 R14: ffffffffffffffff R15: 00007ffc33f89760 [ 262.098626][T13780] [ 262.098669][T13780] memory: usage 307200kB, limit 307200kB, failcnt 229 [ 262.106969][ T8381] [ 262.106975][ T8381] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 262.118373][T13780] memory+swap: usage 307832kB, limit 9007199254740988kB, failcnt 0 [ 262.122095][ T8381] tick_do_update_jiffies64+0x113/0x1c0 [ 262.132158][T13780] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 262.135384][ T8381] tick_nohz_handler+0x7f/0x2d0 [ 262.138297][T13780] Memory cgroup stats for /syz7 [ 262.142595][ T8381] __hrtimer_run_queues+0x20f/0x5a0 [ 262.147178][T13780] : [ 262.151284][ T8381] hrtimer_interrupt+0x21a/0x460 [ 262.151308][ T8381] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 262.151335][ T8381] sysvec_apic_timer_interrupt+0x6f/0x80 [ 262.151360][ T8381] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.157424][T13780] cache 0 [ 262.160487][ T8381] _raw_spin_unlock_irq+0x2f/0x50 [ 262.160513][ T8381] evict_folios+0x2987/0x3590 [ 262.160538][ T8381] try_to_shrink_lruvec+0x5b5/0x950 [ 262.160561][ T8381] shrink_lruvec+0x22e/0x1b50 [ 262.160578][ T8381] shrink_node+0x686/0x2120 [ 262.165147][T13780] rss 0 [ 262.165155][T13780] shmem 0 [ 262.169966][ T8381] do_try_to_free_pages+0x3f6/0xcd0 [ 262.169989][ T8381] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 262.170011][ T8381] try_charge_memcg+0x383/0xa10 [ 262.174310][T13780] mapped_file 0 [ 262.174318][T13780] dirty 0 [ 262.180256][ T8381] charge_memcg+0x51/0xc0 [ 262.180277][ T8381] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 262.180299][ T8381] __read_swap_cache_async+0x17b/0x2d0 [ 262.180320][ T8381] swap_cluster_readahead+0x262/0x3c0 [ 262.180338][ T8381] swapin_readahead+0xde/0x6f0 [ 262.185766][T13780] writeback 4096 [ 262.185775][T13780] workingset_refault_anon 1185 [ 262.191107][ T8381] do_swap_page+0x2ae/0x2370 [ 262.191127][ T8381] handle_mm_fault+0x9a5/0x2be0 [ 262.191146][ T8381] do_user_addr_fault+0x630/0x1080 [ 262.191164][ T8381] exc_page_fault+0x62/0xa0 [ 262.195901][T13780] workingset_refault_file 1794 [ 262.201425][ T8381] asm_exc_page_fault+0x26/0x30 [ 262.201446][ T8381] [ 262.201451][ T8381] read to 0xffffffff868099c0 of 8 bytes by task 8381 on cpu 1: [ 262.201467][ T8381] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 262.206983][T13780] swap 647168 [ 262.206991][T13780] swapcached 12288 [ 262.211891][ T8381] count_shadow_nodes+0x6a/0x230 [ 262.211912][ T8381] do_shrink_slab+0x63/0x680 [ 262.211937][ T8381] shrink_slab+0x448/0x760 [ 262.217295][T13780] pgpgin 222058 [ 262.221926][ T8381] shrink_node+0x6c3/0x2120 [ 262.221952][ T8381] do_try_to_free_pages+0x3f6/0xcd0 [ 262.221970][ T8381] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 262.226971][T13780] pgpgout 222055 [ 262.232744][ T8381] try_charge_memcg+0x383/0xa10 [ 262.232765][ T8381] charge_memcg+0x51/0xc0 [ 262.232785][ T8381] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 262.237600][T13780] pgfault 200396 [ 262.242426][ T8381] __read_swap_cache_async+0x17b/0x2d0 [ 262.242448][ T8381] swap_cluster_readahead+0x262/0x3c0 [ 262.247532][T13780] pgmajfault 237 [ 262.247540][T13780] inactive_anon 4096 [ 262.253056][ T8381] swapin_readahead+0xde/0x6f0 [ 262.253076][ T8381] do_swap_page+0x2ae/0x2370 [ 262.253094][ T8381] handle_mm_fault+0x9a5/0x2be0 [ 262.257913][T13780] active_anon 8192 [ 262.257922][T13780] inactive_file 0 [ 262.263948][ T8381] do_user_addr_fault+0x630/0x1080 [ 262.263968][ T8381] exc_page_fault+0x62/0xa0 [ 262.263991][ T8381] asm_exc_page_fault+0x26/0x30 [ 262.264009][ T8381] [ 262.264013][ T8381] value changed: 0x00000000fffff103 -> 0x00000000fffff104 [ 262.264025][ T8381] [ 262.264029][ T8381] Reported by Kernel Concurrency Sanitizer on: [ 262.268509][T13780] active_file 0 [ 262.273323][ T8381] CPU: 1 UID: 0 PID: 8381 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 262.277703][T13780] unevictable 0 [ 262.277711][T13780] hierarchical_memory_limit 314572800 [ 262.297297][ T8381] Tainted: [W]=WARN [ 262.297304][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.297316][ T8381] ================================================================== [ 262.737286][T13780] hierarchical_memsw_limit 9223372036854771712 [ 262.743431][T13780] total_cache 0 [ 262.746861][T13780] total_rss 0 [ 262.750135][T13780] total_shmem 0 [ 262.753630][T13780] total_mapped_file 0 [ 262.757588][T13780] total_dirty 0 [ 262.761119][T13780] total_writeback 4096 [ 262.765238][T13780] total_workingset_refault_anon 1185 [ 262.770516][T13780] total_workingset_refault_file 1794 [ 262.775768][T13780] total_swap 647168 [ 262.779584][T13780] total_swapcached 12288 [ 262.783845][T13780] total_pgpgin 222058 [ 262.787793][T13780] total_pgpgout 222055 [ 262.791853][T13780] total_pgfault 200396 [ 262.795897][T13780] total_pgmajfault 237 [ 262.799959][T13780] total_inactive_anon 4096 [ 262.804344][T13780] total_active_anon 8192 [ 262.808581][T13780] total_inactive_file 0 [ 262.812717][T13780] total_active_file 0 [ 262.816742][T13780] total_unevictable 0 [ 262.820711][T13780] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3563,pid=13780,uid=0 [ 262.835461][T13780] Memory cgroup out of memory: Killed process 13780 (syz.7.3563) total-vm:93956kB, anon-rss:1140kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 263.318757][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 263.320081][ T3490] Bluetooth: hci0: command 0x1003 tx timeout [ 263.331024][T13772] FAULT_INJECTION: forcing a failure. [ 263.331024][T13772] name failslab, interval 1, probability 0, space 0, times 0 [ 263.343709][T13772] CPU: 0 UID: 0 PID: 13772 Comm: syz.4.3561 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 263.343737][T13772] Tainted: [W]=WARN [ 263.343742][T13772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.343753][T13772] Call Trace: [ 263.343758][T13772] [ 263.343766][T13772] __dump_stack+0x1d/0x30 [ 263.343789][T13772] dump_stack_lvl+0xe8/0x140 [ 263.343825][T13772] dump_stack+0x15/0x1b [ 263.343835][T13772] should_fail_ex+0x265/0x280 [ 263.343846][T13772] should_failslab+0x8c/0xb0 [ 263.343861][T13772] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 263.343879][T13772] ? __alloc_skb+0x101/0x320 [ 263.343908][T13772] __alloc_skb+0x101/0x320 [ 263.343922][T13772] ? cancel_delayed_work_sync+0xa6/0xc0 [ 263.343941][T13772] hci_sock_dev_event+0xd0/0x2f0 [ 263.343954][T13772] hci_unregister_dev+0x244/0x2b0 [ 263.343990][T13772] hci_uart_tty_close+0x115/0x170 [ 263.344006][T13772] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 263.344021][T13772] tty_ldisc_kill+0x8d/0x140 [ 263.344034][T13772] tty_ldisc_hangup+0x2fa/0x370 [ 263.344077][T13772] __tty_hangup+0x3c2/0x540 [ 263.344089][T13772] tty_ioctl+0x601/0xb80 [ 263.344100][T13772] ? __pfx_tty_ioctl+0x10/0x10 [ 263.344112][T13772] __se_sys_ioctl+0xce/0x140 [ 263.344177][T13772] __x64_sys_ioctl+0x43/0x50 [ 263.344188][T13772] x64_sys_call+0x1816/0x3000 [ 263.344200][T13772] do_syscall_64+0xd2/0x200 [ 263.344211][T13772] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 263.344303][T13772] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 263.344321][T13772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.344334][T13772] RIP: 0033:0x7ff766b3f6c9 [ 263.344342][T13772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.344353][T13772] RSP: 002b:00007ff7655a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.344364][T13772] RAX: ffffffffffffffda RBX: 00007ff766d95fa0 RCX: 00007ff766b3f6c9 [ 263.344439][T13772] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 263.344446][T13772] RBP: 00007ff7655a7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.344453][T13772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.344460][T13772] R13: 00007ff766d96038 R14: 00007ff766d95fa0 R15: 00007fff6c384af8 [ 263.344470][T13772]