last executing test programs: 4m27.395938182s ago: executing program 2 (id=439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000ffff400000007fff0000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414fd000000000000000000000000000004d432000000fe80000000000000000000000000000b23030000000000000000000100000000000000000000000003000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000000010000000000000048000200706362632866637279707429000000000000000000001000"/238], 0x170}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0x6}}, 0x0, 0x0, 0x1d, 0x0, "824770ed9d3fc1114fa98b3115b51a7042ccec5e95bd9f46a985c3cf9ffa5fb6b26498702bcbe954eea58a3582073718f1ad6bd6721d341b42f3e5aae27255f15e424dc0e9b55d3af11e97f6ef2f1b4c"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x7, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, 0x7870, 0x7, 0x8, 0x8}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0), &(0x7f00000005c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg2\x00'}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r5, &(0x7f0000000680)=""/219, 0xdb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0x3, 0x0, {}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000400)={0x800, 0x2, {0x3, 0x7, 0xa5bd, 0x3, 0x7fff}, 0x10}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x598, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffe0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1000, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x1, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x4, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x8, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0xffffc848, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0xffff, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0xc, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x3, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0x3845, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000201}, {0x4, 0x2, 0x1, 0xa, 0x1fb, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) tkill(r4, 0x7) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe76) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 4m27.171690801s ago: executing program 2 (id=443): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x20, 0x1418, 0x1, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x4810) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0200260b0a0002000180c200000c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x2, 0x5, 0x500, 0x360, 0x118, 0xffffffff, 0x118, 0x360, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@private=0xa010102, @ipv4=@rand_addr=0x64010101, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x9, 0xa, 0x1, 0x0, "1f6e7fd418c3ad3267eafbb136b6b7cde9dd3dab7db3dbce603e93ad739c17ee01d1a9f8efefb08a0cfa51398cf55f3c15cb988217c90dd3f7025cd8b3bd9d44"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="01000000060000000800080008000000404302008d4f9a762482ece1289aaafb40ad93b0cb0e28f65501da07a05c0a957893887d1957936bffc47b348a27afac0111491605a7212e93226dc2531520535cbaf1781f408a6fcc9cd580137e26d30394059a75070dde42d77d66462fb4478d013436153dfb08802bce97e3f414d66725178acf623c253eead0d86421a715715d31b746618a5ed66c3540c2ad1c5e6e29ac712dac6e5b0646bed652f52f5662dc2563635754e5e55856bad1828be74bf0f1892b7ef6f13fa93f27b0d7bb9177f72988c8b6c36e9ccaa3b771465baff6d2364a98216fc0198c16649530fa924501f642457c0b1970fd682163452583aa492231a5606162807a313489af52d3d038a77f8c0375dbf42525cc1790cd6e7a32ca0a97b3cfb37c151909980f97f79c1eb2b69a6d9a434f6f60133d16052c50f24773f10961b5ec3f14caa997f7e540f9d268d160d190a56e", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) time(0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)) 4m26.601902106s ago: executing program 2 (id=448): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) mprotect(&(0x7f00008e6000/0x4000)=nil, 0x4000, 0x5) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='map_files\x00') r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x40) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000300)="1400000027000b6c8cff001b0529fc60072fc569", 0x33}], 0x1}, 0x4084) mmap(&(0x7f0000397000/0x1000)=nil, 0x1000, 0x5, 0x8031, r3, 0x3ff76000) mprotect(&(0x7f0000200000/0x2000)=nil, 0x2000, 0x8) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x80000000000005a, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, 0x0, 0x0) getdents(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYRES16=r1], 0x38}}, 0x200048d4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m26.104484798s ago: executing program 2 (id=451): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000b80)={'team_slave_0\x00', 0x2900}) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x50, 0x10000, 0x0, 0x5, 0x8, 0x20205, 0x1, 0x0, 0x8023, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRES8, @ANYRES64=r3], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x7, &(0x7f0000000b00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r7 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f00000009c0)='dns_resolver\x00', &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000d4ee000000000000000095694ab4f41e0000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = getpgid(0x0) sched_getparam(r9, &(0x7f0000000200)) 4m25.712140665s ago: executing program 2 (id=453): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000800)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x80, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x0, 0x0, 0x1, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7056}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r7 = socket(0xa, 0x5, 0x0) listen(r7, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) 4m25.566341492s ago: executing program 2 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000000), 0xcff5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0xd) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r10}}]}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)="2bbafe4ecdf66ba675ae279607308135ddac1e5518507ec869eba3cbcf4750ad4cbbbd29bcba7b62296cffefd326c5bf955c8ca5317ffaa5e6d8db354b341746ab3db9dcb6697f3125bd669723e9bb7d1c816313631e361e6aaf4e7b38291e930be5c566b67635c1c1f96bcea07f9b5e889eff10778e0600c94f1960c023f636bbb7ca550970c3839fdaa3b8522fbfc294bb9e172f0b2f0b5e503df9447bb321305fe81ec5cc72f480296df4038467b5f5ef", 0xb2}, {&(0x7f0000001500)="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", 0xf80}, {&(0x7f0000000540)="323ea3c314566c6df3e914fe1fb513230c81795d9c440e482850eeabe9c7a595cf772c3f31ea18e2ab1c1cac41cef4e268c65d08e8f3a2edb482f0d2054ac8094ea05fb4057ca55400e36c2ba9dcd1d30891426a65c2a1978dff25a4ec046931037be08f138e9910ded3da31033a838e9548a0003b2699eda350a4c5e7e2760859bc581eb2eb69df0d8f05c9e93eb5569e7943126280e754f71e45d99a6c06701e646c4f74cc279a8e8622a2049e2aab4b0b8cb56eb33bbcba0ca162d8dd501487b811", 0xc3}, {&(0x7f00000001c0)="2cfea6982e3ef43382fa1dcfd2822b8ee4224596bf4245b269a5da817d264eeec057e146b28bca64af9c04ef31f31f531996ddecf7e308137af580100e7ae426b41c61793b1faf3c9e046f608a3ffff31fdd63b886375eca369ab23e654f3c82f483b465b7c84a180405a1", 0x6b}, {&(0x7f0000000040)="b1b4611668b77f0316bd85f825361f77da0d304a9d19d81a5c643c57f445a01f3d09dcafb83b542d", 0x28}], 0x5, 0x0, 0x0, 0x400c801}, 0x4000004) getgroups(0x1, &(0x7f0000000200)=[0x0]) lchown(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, r11) 4m25.415868718s ago: executing program 32 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000000), 0xcff5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0xd) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r10}}]}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)="2bbafe4ecdf66ba675ae279607308135ddac1e5518507ec869eba3cbcf4750ad4cbbbd29bcba7b62296cffefd326c5bf955c8ca5317ffaa5e6d8db354b341746ab3db9dcb6697f3125bd669723e9bb7d1c816313631e361e6aaf4e7b38291e930be5c566b67635c1c1f96bcea07f9b5e889eff10778e0600c94f1960c023f636bbb7ca550970c3839fdaa3b8522fbfc294bb9e172f0b2f0b5e503df9447bb321305fe81ec5cc72f480296df4038467b5f5ef", 0xb2}, {&(0x7f0000001500)="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", 0xf80}, {&(0x7f0000000540)="323ea3c314566c6df3e914fe1fb513230c81795d9c440e482850eeabe9c7a595cf772c3f31ea18e2ab1c1cac41cef4e268c65d08e8f3a2edb482f0d2054ac8094ea05fb4057ca55400e36c2ba9dcd1d30891426a65c2a1978dff25a4ec046931037be08f138e9910ded3da31033a838e9548a0003b2699eda350a4c5e7e2760859bc581eb2eb69df0d8f05c9e93eb5569e7943126280e754f71e45d99a6c06701e646c4f74cc279a8e8622a2049e2aab4b0b8cb56eb33bbcba0ca162d8dd501487b811", 0xc3}, {&(0x7f00000001c0)="2cfea6982e3ef43382fa1dcfd2822b8ee4224596bf4245b269a5da817d264eeec057e146b28bca64af9c04ef31f31f531996ddecf7e308137af580100e7ae426b41c61793b1faf3c9e046f608a3ffff31fdd63b886375eca369ab23e654f3c82f483b465b7c84a180405a1", 0x6b}, {&(0x7f0000000040)="b1b4611668b77f0316bd85f825361f77da0d304a9d19d81a5c643c57f445a01f3d09dcafb83b542d", 0x28}], 0x5, 0x0, 0x0, 0x400c801}, 0x4000004) getgroups(0x1, &(0x7f0000000200)=[0x0]) lchown(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, r11) 3m57.343626193s ago: executing program 4 (id=653): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x44f0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000780)="15ca05765ad86218d433e26ab10546a47a5f373a23f3f24950a62be4ac050b0c319e89190ed2ebb19c45de272ceefd7a0eeb175f0d4df74768578f3e0ebba8544b78eb071febd82fd22006f5e8f1f46dcb6dc56a4e3978fec095c2e9b2ddc8cfea8c52625996167f93e8c31655886bdf8592ccdcac2cc957b991f0bc029c470d9b86c0039b18bbda986f86029435ee0e7fb13c50b86c062e722a1510d7d7c5207e07d2e7d4d1cf5b41268b6199df60a4c25978d29bfff9997246756b34e3a7c7b8ec2b34ebe8ea813d695878c2354ae38a6d62c380af3b8a3a69cc391d2b", 0xde, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000001c0)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 3m57.201327879s ago: executing program 4 (id=654): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x200) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x2, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r6) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r7, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r8 = syz_io_uring_setup(0x8c3, &(0x7f0000000140)={0x0, 0x9296, 0x0, 0x200002, 0xbedffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000340)=r11) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r12, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) setsockopt$inet_tcp_int(r12, 0x6, 0x25, &(0x7f0000000000), 0x4) io_uring_enter(r8, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 3m56.145800315s ago: executing program 4 (id=662): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) socket$unix(0x1, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000640)="26b3b0fbfbc83c273f3b76adeb298388619be5c1a512383555c745908d87c6e56cc551a8d2bb997f0fe63b899912e95d72fb5464aeb47f41e2d462d29554059d03408c67b82012ae4d44dacae0d8784e5b9751758c094c1df4363c3c2c647d128042fa3388d2111467cd9dfc85b5199bc3e2e77d14cf9f517add75df0f2dd0b050c2c4d516ea3ae7ad7c0afaba5b54629baea46c94d8dd0a7de675aa5bd6bc63f8724bf96bc552d43316b3654e98eca8d9a2aa246f441fcb11ed31ca39fc622c01cdd5afea73f0f529b907bafc22ca1417184e96ee5e19fded0c058c306fa8ea1fc032fca1963679902e26c4687650fd77eef7ec4badb4175d2e9ad314e9fc19e1fb8ba30e8bc2414b772f61aa2691a7455b7c53095447d0fb7e5a432ec177ac332d53c2014ae4ad1ff456b32f03db719a6855a8c7c76af46f80c708102cbb24629aefdabddde72c63ed8e432b675a72f93ab976fccdc41e7b7272a0eae390a90f525f18afd48d85b165184311bcd133bb8f82e4c326c86cf55e8905c37fe5916155af76f8b6c0e710ae0c9e0744d855850cfbf3a8d30b7f89af6a122c30e4b554bf45ff5df36432f78228953337350354111345cf7a4ed49758a177840ce36c1a73cf87755ddeef49d84311a31674ad3577e40901148cb4fceb435c6b26895e0c25b3d64a1a71c2fd494b2398fd377f80d679bab96ac7e5fa6c916d057b225142718447a30a60ad889e6ad00dded3ae943ab53d94b172ec2a972212e909ab5259b97cd4303db7f46145607afdfb5d0847d911dac1cbac8d928e3a346e74810403ec346a9d6061655db5480c0f9ef2330acc87173fb33e158e23621b03bb7c8126a936b53f38f5045af1205dc96d6bf245f413042be80ae24df7f6a5cad8a23ef80c3755a05ca5d85231e82318addd578cb6ba5d2a77f7a3bb7381a1f30ce1dc961274b313bb8159c3647a4beaa47f404ca535d208aa11586934be55f9b04ab6454e459b17e18eb5a13455272c9ea8a64e02f0e45715af58cdbeb8533e73c7c46ff94cfbf43bfb3a3006e5feb7bf88240cb19248ae2824efa873f4a6f955612ff2ccd0e57f0b3efbfbadd1df05f223fbf3ec95f48bc3d5729bba68a4cc700bd47c69ea9fb185a69ba532521f35b31ec36ba74f6b32493ba50166d191eaa6e57cc97ad6b270f8443cbcb853a2abbe71f8f2fbd880185278be93f7895df50cb8d32e966f96a301f58a8dbe850d429562c2dda3fd3f0a8609f083b4354e1f401a9f1f99b7154f0f9529d7a3ab25a9a6493ca64eb5ff1c0b5114581a39f94fd4d13ff17c91783b12a45a904ab7ad084e7fdb1650897080d8dafdcb3504652f7b4e8e93abbee4a69530c3be8178d011cbe30646c83208c1e04e84142b3a18a6112f09fcfe79e89a17fcc007da5dbf9817c94dd16aecf5ceffbb84e99b18122f9c74dde452b0ef3c125b1c72d10827de2f58b5410511a05fcedfd6539d2556ebe85e3e6ec3740b5269b31f4adfcb0bbb401d404c6073ebb43e39a287e88ebe45be122ae81f7d9a86a40c39ef4d8a6a8e2125655342348f1d38dd3fa84d25581dcd10b36977427c8a7900005cfec7963bc8bb4c0ee4d4034815ed2022afd16e16ede8bc7c5a772d7d", 0x485, 0x4810, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 3m52.796536921s ago: executing program 4 (id=676): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x8000000000, 0x20, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe10) io_setup(0x8, &(0x7f0000002740)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x1, @private2, 0x1f7}}}, 0x32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c00028005000100000000002c000180"], 0x88}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', r5, &(0x7f00000003c0)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) 3m51.628112682s ago: executing program 4 (id=685): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000ffff400000007fff0000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414fd000000000000000000000000000004d432000000fe80000000000000000000000000000b23030000000000000000000100000000000000000000000003000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000000010000000000000048000200706362632866637279707429000000000000000000001000"/238], 0x170}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0x6}}, 0x0, 0x0, 0x1d, 0x0, "824770ed9d3fc1114fa98b3115b51a7042ccec5e95bd9f46a985c3cf9ffa5fb6b26498702bcbe954eea58a3582073718f1ad6bd6721d341b42f3e5aae27255f15e424dc0e9b55d3af11e97f6ef2f1b4c"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x7, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, 0x7870, 0x7, 0x8, 0x8}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f00000005c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000600)={'wg2\x00'}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf2510000000080008000400000008000900090000002c00018014000200697036677265300000000000000000001400020076657468305f746f5f6272696467650054000180080003000100000014000200626f6e645f736c6176655f3100000000140002006772657461703000000000000000000008000100", @ANYBLOB="2e8193908ef89187405cbc0090121de483d53bb94a52e22eaaee8dbfcd16235b41eabb3048a520d3a6f3baaa7643e6335f77b19a50e7dff92c4386e6306b1e732c153b017c7b501d146fe17952a283d6b20654a33e3543dbd9981c8371e36e3e9113c7e91892ad79ed3f4434529dd5e156c2a0f63434c97e5a7f15462ce1984f3ba8f20b91922c10086c44f01ec372fde595596ddebad9fc12b5b9a899347d6c7c6b3ada979b9be5a8daaa47a67396cca9ba2654b685fb599926052712e99baccb69f960586985328e130c973e9dd4aabbf1a86429639ea138c65822", @ANYRES32=r5, @ANYBLOB="b0f7010000000000000008cb0d00", @ANYRES64=r1, @ANYBLOB="0800030003000000"], 0xa4}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r7, &(0x7f0000000680)=""/219, 0xdb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0x3, 0x0, {}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r7, 0xc0605345, &(0x7f0000000400)={0x800, 0x2, {0x3, 0x7, 0xa5bd, 0x3, 0x7fff}, 0x10}) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x598, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffe0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1000, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x1, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x4, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x8, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0xffffc848, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0xffff, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0xc, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x3, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0x3845, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000201}, {0x4, 0x2, 0x1, 0xa, 0x1fb, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) tkill(r6, 0x7) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe76) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 3m51.368534714s ago: executing program 4 (id=690): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) creat(0x0, 0x10) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_getoverrun(r2) openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="ba5236c12b1859a6"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000005c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff00000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d0000000000000300518ff5bfc878b772a953f44d17259c2105"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd58) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) 3m51.22474817s ago: executing program 33 (id=690): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) creat(0x0, 0x10) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_getoverrun(r2) openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="ba5236c12b1859a6"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000005c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff00000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d0000000000000300518ff5bfc878b772a953f44d17259c2105"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd58) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) 15.415998707s ago: executing program 0 (id=2370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x48) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$P9_RREAD(r1, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4f, "7b430b6cdc74d24855108e4ea587695ae17a5d063319f20dcc52d740111db9706a6552a03edaa19286219f68b4e4b51c7dbb83ffe8cf27575cea05b830b9f8d50c71ef0e9ac1fddeadef87793aea8b"}, &(0x7f0000000380)=0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@sg0, 0x0, &(0x7f0000000240)='./file0\x00') unshare(0x40000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x82, &(0x7f0000000040)="1a00000000000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r11, &(0x7f0000000640)="1985b7a2a422e219dce9287fe24f8a9ebaef410e7e386e0e4f729fdd7f3242190cda4ef8a6dcd1ea464a5c16149f481e05632ccbece5f6f480e2b57032254543e837a62c2f8607d4e13ea3a433750021ed0b25997abe59f8657d08ddf6f20f4416078d57e07a57775e35d7dea07d927448a8db3afc6531fae17ee4ae78ace3cb619e32e5962b66ce17507dcdab20b2686be8a12847571d3fc4ced6caa120f670ab97ff5711766ce3d9625c09abb77f28e862a351a1cfd73b123b2306c0278710", 0xc0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_clone3(&(0x7f00000005c0)={0x80000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mptcp_buf(r12, 0x11c, 0x4, 0x0, &(0x7f0000000200)) 14.413941361s ago: executing program 0 (id=2373): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xe501, 0x3, 0x2d8, 0x148, 0xa, 0x1000000, 0x148, 0x0, 0x240, 0x230, 0x230, 0x240, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e22, 0x4e23, 0x4e24, 0x4e21, 0x4e23, 0x4e24, 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4e22, 0x4e24, 0x4e23, 0x4e20], [0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1], 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x2, 0x0, 0x7], 0x2, 0x3}, {0x3, [0x3, 0x0, 0x0, 0x1, 0x1, 0x4], 0x3, 0x5}}}}, {{@ip={@local, @local, 0x0, 0xff000000, 'team_slave_0\x00', 'pimreg\x00', {}, {}, 0xff}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, '\x00', 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x2, 0x6, 0x6, 0x4, 0x2], 0x1}, {0xffffffffffffffff, [0x7, 0x6, 0x4, 0x3, 0x5], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000a000001352b0d273cbd01930fbfc66b89b5566e0e83c1ac9aa4a94720dc22cc71350ca60cdc4492e58145ba27b3423981e5b018d9d3ece146917368faedcf07c86066db05a912a442ab2450b89065cadcf62de3f90562a4a01eb18838eb10e16fe60ab30de2d4ff8c148b10eb39fddece76e976f36a0c4f021d6905ef18"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30040803}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000880)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x83}}, {@dax}, {@nolazytime}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") close_range(r10, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 13.726694291s ago: executing program 0 (id=2377): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ptrace(0x10, r0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000040)={@loopback, @rand_addr=0x64010100, 0xffffffffffffffff, "1667c48e3a7c3006a7a363924097ffb78f990abcf43ad63aedd8dac061eaad1b", 0x7, 0x9, 0x1, 0x100}, 0x3c) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r6, &(0x7f00000001c0)=[{0x3, 0x3, 0x800}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e00", @ANYRES32=r3, @ANYRESOCT], 0xb4}}, 0x0) 13.463348843s ago: executing program 0 (id=2379): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0xfff7fffc, 0x2}], 0x10, 0xfffffffe}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x8) listen(r4, 0x100101) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x1, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x29, 0x0, 0x801}, 0x28) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) readv(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000480)=""/123, 0x7b}], 0x2) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x7fffffe, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) dup2(r1, r0) 6.485108967s ago: executing program 6 (id=2452): add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="43b7f928160725b2b55a77b6af28283989cfe21f55763b2a6f613665e448c43a76f791dd4bf4f59d670ae2d45c961e54bd47280e6a3c1be18ee55feb3c60cbb8909621a7ba61154d0398af0320583cb3bb1decec86a6a834049544a25f13d6f4ab39ccec4b4fd2070a325cb2ac2808640e7b77c4e0cb6c6f46b8e85c6868746afc27329b461aa2", 0x87, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r4 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000013000500000000000000000007000000", @ANYRESOCT=r0], 0x20}, 0x1, 0x0, 0x0, 0x604c050}, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000440)={0x5}, &(0x7f0000000fc0)) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000120000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x28) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) socket$key(0xf, 0x3, 0x2) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008085}, 0x804) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'syztnl2\x00', r5, 0x40, 0x8, 0x1, 0xb9d, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x65, 0x0, 0x1, 0x8c3435c5387b7005, 0x0, @private=0xa010100, @multicast2}}}}) 5.208626163s ago: executing program 6 (id=2458): r0 = fsopen(&(0x7f0000000100)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f0000000540), 0x0}, 0x20) fchdir(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x0) getdents(r3, 0x0, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='f2fs_gc_begin\x00', r1, 0x0, 0x6}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='.dead\x00', 0x0, &(0x7f00000003c0)="0000000000000000002a00009bc11786129ce7817050efbe75fbaa876395b1ae325bbe2ba680b6c0d2fb63f439364c368164bbb1c5c0", 0x36, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r9, 0x5522) 5.092787658s ago: executing program 6 (id=2459): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0xfc, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x7fffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000000a0a01020000000000000011c230801e0980010073797a3000000000e31c0e0bb10c460fe77d8633e7f4e4e1218134d4e16d264d3cecf7d9ceefc9a7e9bde885283bfbd5570f5c66a39f73243307ec6708a889e84a029f0f8d6f2c1171da2c61287dde47790835dd1fcafba6bbfe845e01b5504aecef1d24325763c95069ee0ab45da5524b5595209a5b7a3afa5621018ab9494efd891e4ce016258df4dd3a86d5a357b25c871a95ce1661a0b963383048a8662c043d267ae7cbf79cd70cda6465e5b2e9d7477bc021a00d51"], 0x20}, 0x1, 0x0, 0x0, 0x10004054}, 0xc0042) creat(&(0x7f00000002c0)='./file0\x00', 0x15) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000a, 0x11, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x40000000000004}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x433, &(0x7f0000000e00)="$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") r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x8000}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x5) 4.750979723s ago: executing program 6 (id=2463): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0xfc, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x7fffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000000a0a01020000000000000011c230801e0980010073797a3000000000e31c0e0bb10c460fe77d8633e7f4e4e1218134d4e16d264d3cecf7d9ceefc9a7e9bde885283bfbd5570f5c66a39f73243307ec6708a889e84a029f0f8d6f2c1171da2c61287dde47790835dd1fcafba6bbfe845e01b5504aecef1d24325763c95069ee0ab45da5524b5595209a5b7a3afa5621018ab9494efd891e4ce016258df4dd3a86d5a357b25c871a95ce1661a0b963383048a8662c043d267ae7cbf79cd70cda6465e5b2e9d7477bc021a00d51"], 0x20}, 0x1, 0x0, 0x0, 0x10004054}, 0xc0042) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x8000}, 0x18) rename(0x0, 0x0) 4.705682115s ago: executing program 6 (id=2464): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e20, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e0d, 0x4a3, @local, 0x4f1}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x202, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465f, 0x8, 0x3, 0x389}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r7, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r7, r2, 0x80000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000020000200130003"], 0x98}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) rseq(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) r13 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x8, 0xffff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @empty, 0xfffffffc}}}, 0x108) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') 4.34109129s ago: executing program 6 (id=2467): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES16=0x0, @ANYRES8=0xffffffffffffffff, @ANYRES16, @ANYRESOCT, @ANYBLOB="ad08216d7c6d6f68794663a9b097ce8b7435cdd856c058c6d7d5741a5cd68b9c194f8088194c73111a190d7b5f411372ff8b3b06afe20468f4c2ef136442690b3cf3becfd2000af33f493e85d4f978f0ca46c4dddb22ff", @ANYRESOCT, @ANYRESDEC, @ANYRESHEX], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) vmsplice(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)='D', 0x1}], 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000180)=""/78, 0x4e}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e25, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x4) recvmmsg(r4, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x3) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) 3.152968103s ago: executing program 5 (id=2479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000cd40009800800014000000006c80002800c0001800800014000000003", @ANYRES8=r2], 0x140}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000300)={0x11, 0x1b, r9, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) select(0x40, &(0x7f00000001c0)={0x6, 0x0, 0x8d, 0x4, 0x6, 0x8, 0x2, 0xffff}, &(0x7f0000000240)={0x9, 0x5833, 0x169, 0x6, 0x4, 0x7d42d6be, 0x2, 0x8000000000000001}, &(0x7f0000000280)={0x5, 0x68de000000000000, 0xffffffffffffffff, 0xfff, 0x42, 0x80000001, 0x9, 0x100}, &(0x7f00000003c0)={r10, r11/1000+60000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.650549204s ago: executing program 3 (id=2488): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 1.441965157s ago: executing program 0 (id=2490): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @remote, 0x6}, 0x1c) socket$kcm(0x10, 0x2, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(0xffffffffffffffff, 0xe7) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002c907800ffdbdf2504e7ff00"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="d360efe4e9968551212c69729ba64984736c069eda277f45046936f898a3c32283aa2edf993900ad0d80806822dd2b509a2017e8696681af6bdb0902fd5b5dbe7fc3f21b5997421be4492f823ac1957677e2f9764cebbe077375d39155061d4a313a24421ae92934e366384e57856ea63154bd6efdb2e9a0020d39d0", @ANYRESOCT=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r7 = socket(0x2, 0x80805, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000640)=""/201, 0xc9}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000840)=""/70, 0x46}], 0x7, &(0x7f0000000a00)=""/192, 0xc0}, 0x10003) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r7, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0x2, 0x4c21, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000001040)="6cb76def", 0x4}, {0x0}], 0x2}}], 0x2, 0x890) 1.441398447s ago: executing program 5 (id=2492): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 1.441153567s ago: executing program 3 (id=2493): keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x16, &(0x7f0000000240)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'C', "988b2b"}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="aa842e1df17ab589ac600108bd0f51ce8e050b0dbaa6e04ee6386dd23483482c6d2521b4c2b4ecb05f1e3a01b93a184df48d7b3678ffb0c059ba96288d2e1db70e9c6da55bbea368ca93144ee503303c16da8102edd7cb2ce6db4a946438f66c23bd81f54669ada2b5f3c083a306f3dc56afb57764ff1a810cea8319613a43b3850047d728ee98a73cd99c74b213972b545f15880e0f8321eaff155da60675dd9511a21272c140d2af9f22a20d3e1608d75f4f5ca087b3f7bf4bcd4911c0336a05316579201ec08be51b6f01", @ANYRESDEC, @ANYBLOB="9c43a96b6c1068eb7a2a66c858887758c50764446a6e64d2bed5723f78fec68bbf710d1155a825389d7dd9d8017458619259fb7d2144213a0d4babbff463d07ad4c66cd6fdf93c99231a264488b49cdb83", @ANYBLOB="61f6ffffff0f2d3a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000340)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/dev_mcast\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r2}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000300)={0x2, 0x1, 0x0, 0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r9, 0x2, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x2002000000, 0x4, 0x0, 0x1, 0xffff, r8, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0xf, 0xffffffffffffffff, &(0x7f00000001c0)="1f7560eaded0ebb7004639af3152d71203aaba537a6393", 0x17, 0x7f, 0x0, 0x1, r1}]) fcntl$lock(r7, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r10) 1.327634762s ago: executing program 5 (id=2494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000fcdbcf2554"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4c0, &(0x7f0000000a00)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) io_setup(0x2, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000380)=r5}, 0x20) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xc000200e}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r7, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000340)="b700001406005abeef4bd5984462732834d1a02785071754cb37cb", 0x1b}, {&(0x7f0000000240)='\x00'/11, 0xb}], 0x3) 1.297789313s ago: executing program 1 (id=2496): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0xffffffffffffffd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000280)={0x60, 0x2, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x6, &(0x7f0000000180)=[{0x3, 0x8, 0xf74}, {0x9, 0xc74e, 0x7}, {0x4, 0xfffffffffffffff7, 0x6}, {0x6, 0x7, 0x5}, {0x9, 0x4e28}], 0x5, 0x81, 0x4f, 0x2, 0x64, 0xcf}) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0x311}, &(0x7f0000010080), &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000e00700000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB="0300000d", @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x200048c0}, 0x2404c000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r7, 0x0, 0x1802}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, 0xfffffffffffffffe, 0x0) syz_io_uring_setup(0x20000111, &(0x7f0000000340)={0x0, 0x49b2, 0x2, 0x0, 0x36b, 0x0, r1}, 0x0, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000580)='nv', 0x2) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 1.129073991s ago: executing program 1 (id=2497): r0 = fsopen(&(0x7f0000001100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="58db1d", 0x0, 0x0, 0x0, 0x40}, 0x38) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) openat(r2, 0x0, 0x80101, 0x41) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) rmdir(0x0) 1.032528135s ago: executing program 5 (id=2498): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c00"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r6, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2d, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x40}]}, 0x24}}, 0x0) socket$kcm(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRESDEC, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 935.516509ms ago: executing program 1 (id=2499): unshare(0x400) socket(0x2b, 0x80801, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2}]) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000100)={r8, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000240)={0x7fff, 0x2, 0x100, 0xeb58, r8}, &(0x7f0000000800)=0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x1, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x101, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r11, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) recvmsg$can_raw(r3, &(0x7f00000001c0)={&(0x7f0000000380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f0000000480)=""/202, 0xca}, {&(0x7f0000000580)=""/87, 0x57}, {&(0x7f0000000600)=""/95, 0x5f}], 0x5, &(0x7f0000000700)=""/120, 0x78}, 0x41) socket$unix(0x1, 0x1, 0x0) unshare(0x22020400) r12 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) 804.174685ms ago: executing program 1 (id=2500): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/16, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="0d71a9390075faffff181100000001000000010058df82d808076a267d0d7b94585d3c0035f4ca428c971e22f630ed57aa989e5b80f43b9bd61c3c6badde0b106666bfb6676d6b24d27b3b96f44452fcd4facf5ad64977671cdf5c0a6e067cd289835d624469b51516f0646b2d38f035a691e58b0dc40903554d79ed5d3b9b81f6f8be742e9f7067c4339a4881745f475d41a8588f62f864b426e4f256a2e1032234b39b4220e4c258a03a513403719ff15c422ed0c543e6ff449c2f8f135fd3d449f6a2d5a241d5a55700500034c46078", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) set_robust_list(0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x30) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000012c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000980)}, 0x4000000) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfe33) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) syz_io_uring_setup(0x6db1, &(0x7f0000000000)={0x0, 0x28a, 0x8, 0x3, 0x1e6, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000180)) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x603f) fsync(r3) 483.459119ms ago: executing program 5 (id=2501): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0xfc, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x7fffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000000a0a01020000000000000011c230801e0980010073797a3000000000e31c0e0bb10c460fe77d8633e7f4e4e1218134d4e16d264d3cecf7d9ceefc9a7e9bde885283bfbd5570f5c66a39f73243307ec6708a889e84a029f0f8d6f2c1171da2c61287dde47790835dd1fcafba6bbfe845e01b5504aecef1d24325763c95069ee0ab45da5524b5595209a5b7a3afa5621018ab9494efd891e4ce016258df4dd3a86d5a357b25c871a95ce1661a0b963383048a8662c043d267ae7cbf79cd70cda6465e5b2e9d7477bc021a00d51"], 0x20}, 0x1, 0x0, 0x0, 0x10004054}, 0xc0042) creat(&(0x7f00000002c0)='./file0\x00', 0x15) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000a, 0x11, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x40000000000004}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x433, &(0x7f0000000e00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0x8000}, 0x18) rename(0x0, 0x0) mmap(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x3, 0x200000005c833, r5, 0xa45af000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x400007}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) r8 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r8) inotify_init1(0x800) fcntl$setstatus(r8, 0x4, 0x2c00) 425.264222ms ago: executing program 1 (id=2502): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0xfc, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x7fffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000000a0a01020000000000000011c230801e0980010073797a3000000000e31c0e0bb10c460fe77d8633e7f4e4e1218134d4e16d264d3cecf7d9ceefc9a7e9bde885283bfbd5570f5c66a39f73243307ec6708a889e84a029f0f8d6f2c1171da2c61287dde47790835dd1fcafba6bbfe845e01b5504aecef1d24325763c95069ee0ab45da5524b5595209a5b7a3afa5621018ab9494efd891e4ce016258df4dd3a86d5a357b25c871a95ce1661a0b963383048a8662c043d267ae7cbf79cd70cda6465e5b2e9d7477bc021a00d51"], 0x20}, 0x1, 0x0, 0x0, 0x10004054}, 0xc0042) creat(&(0x7f00000002c0)='./file0\x00', 0x15) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000a, 0x11, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x40000000000004}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x433, &(0x7f0000000e00)="$eJzs289PHFUcAPDv7LJU+kOwqT9Kq6LVSPwBhdbagxeNJh40MdFDPSLQBrstpmBiG6JoTD2aJt6NRxP/Ak96MerJxKveTZPGcGn1tGZ2Z2B32aVAF7a6n08y8N7MW9777szbfW8eE0DPGkl/JBH7I+L3iBisZRsLjNR+3VpZmv57ZWk6iUrlrb+SarmbK0vTedH8dfvyTF9E4bMkjrSod+HylfNT5fLspSw/vnjh/fGFy1eem7swdW723OzFydOnT56YeOHU5PMdiTON6+bwR/NHD7/2zrU3ps9ce/fnb5M8/qY4OmRko4NPViodrq67DtSlk74uNoQtKda6aZSq/X8wirF28gbj1U+72jhgR1UqlcoD7Q8vV4D/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qTYBSuO+lW21I31RyMqUmua3nTQSEWeW//kq3WJn7kMAADT4Ph3/PNtq/FeI+vtC92ZrKEMRcV9EHIyIUxFxKCLuj6iWfTAiHtpi/c2LJOvHP4Xr2wpsk9Lx34vZ2lbj+C8f/cVQMcsdqMZfSs7OlWePZ+/JaJT2pPmJDer44ZXfvmh3rH78l25p/flYMGvH9b49ja+ZmVqcupOY6934JGK4r1X8yepKQBIRhyNieJt1zD39zdF2x24f/wY6sM5U+Triqdr5X46m+HPJxuuT4/dEefb4eH5VrPfLr1ffbFf/HcXfAen539vy+l+NfyipX69d2HodV//4vO2cZrvXf3/ydsO+D6cWFy9NRPQnr9caXb9/sqnc5Fr5NP7RY637/8FYeyeORER6ET8cEY9ExKNZ2x+LiMcj4tgG8f/08hPvbT/+nZXGP7Ol87+W6I/mPa0TxfM/ftdQ6dBW4k/P/8lqajTbs5nPv820a3tXMwAAAPz3FCJifySFsdV0oTA2Vvsf/kOxt1CeX1h85uz8Bxdnas8IDEWpkN/pGqy7HzqRTevz/GRT/kR23/jL4kA1PzY9X57pdvDQ4/a16f+pP4vdbh2w4zyvBb1L/4fepf9D79L/oXe16P8D3WgHsPtaff9/3IV2ALuvqf9b9oMeYv4PvUv/h96l/0NPWhiI2z8kLyGxLhGFu6IZErVEqdN/sNufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP///Frmbg==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x8000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) inotify_init1(0x800) 252.532109ms ago: executing program 0 (id=2503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000140)=""/44, 0x2c}], 0x2, 0x300, 0x8000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000001a03000010070000003d0000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r2, 0x200002) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r7, &(0x7f00000012c0)=""/4102, 0x1006) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38) sendfile(r6, r8, &(0x7f0000000100)=0x10, 0xfffd) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="88010000", @ANYRES16=r10, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendfile(r4, r3, 0x0, 0x80001d00c0d0) 252.284259ms ago: executing program 3 (id=2504): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 156.496004ms ago: executing program 3 (id=2505): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0xfc, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x7fffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000000a0a01020000000000000011c230801e0980010073797a3000000000e31c0e0bb10c460fe77d8633e7f4e4e1218134d4e16d264d3cecf7d9ceefc9a7e9bde885283bfbd5570f5c66a39f73243307ec6708a889e84a029f0f8d6f2c1171da2c61287dde47790835dd1fcafba6bbfe845e01b5504aecef1d24325763c95069ee0ab45da5524b5595209a5b7a3afa5621018ab9494efd891e4ce016258df4dd3a86d5a357b25c871a95ce1661a0b963383048a8662c043d267ae7cbf79cd70cda6465e5b2e9d7477bc021a00d51"], 0x20}, 0x1, 0x0, 0x0, 0x10004054}, 0xc0042) creat(&(0x7f00000002c0)='./file0\x00', 0x15) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000a, 0x11, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x40000000000004}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x433, &(0x7f0000000e00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0x8000}, 0x18) rename(0x0, 0x0) mmap(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x3, 0x200000005c833, r5, 0xa45af000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8, 0x0, 0x400007}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) r9 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r9) 146.170313ms ago: executing program 5 (id=2506): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = epoll_create(0x9) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 122.536724ms ago: executing program 1 (id=2507): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25101f08104e264e2203000000060000000f000000c3000000f91c00000e0000000000004007e13c53e01a1971c40000006ac7f5841709fa22f22a3a9d7091459cdbf1972b2a4b08c8e422a753a0fdf7cd024430b18f9715a72b00abfe74a5aa6366136bf29028f5f96fffa778af6e99d67fb5ce42e8a73ebde402fc62fdc75c494ebd718fd6f55f1ac02fc29d969552f9376f47b0235c5caaa5c88cc65f1171e65f369ed9239fb1c651be99dd2429cbe135a64365e9abde18f5", @ANYRES16=r8, @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x4404c044}, 0x0) 51.055038ms ago: executing program 3 (id=2508): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ptrace(0x10, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000680)=[{&(0x7f0000000540)="17708552528b6cf3bbf71fe8c78775d6d4face5ce720185142afab595430ef89a8f17d7ccee4de05b0b889108b55ef7e40984296de19305ae75b540f5bb00592265b5789c124a4ed6b1f21277dd4c8e8432d6d5133451d81fdf17f77695e686461624a95ff449c91de28e2b414c8da02713126ef8211983fe6735fd329911bbfd37c2cc14c7fc10cd64ba9a147033eddbe732d569e1b7aa4609faa", 0x9b}, {&(0x7f0000000600)="343845b724c532f745637c718e6ce4a424c5cd756ba544ba5ffd21d886b851e651376589350ed27f6d6dd3912679d48d82c3519c25c1ee2a7424de0033c5cb33d84791ebbe49cc0a3efb6b2bea8735944b73b19c1d1b3f64ab31390c34db6c128f7fca66441594910fbf4b14153390e9d3b9a64212", 0x75}], 0x2, r4) ptrace$setregs(0xd, r0, 0x7, &(0x7f0000000440)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES8=r5], 0x7c}}, 0x944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000009c0)={0x140, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x27}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x88}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRES8, @ANYRES16], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = gettid() r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r8, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x23, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r10}) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') chmod(&(0x7f0000000000)='./file0\x00', 0x60) 0s ago: executing program 3 (id=2509): bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000000c0)=0x80, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xa0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xd0, 0x18c, 0x203, 0xd0, 0x19030000, 0x198, 0x2e0, 0x2e0, 0x198, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x3}, 0x18) unshare(0x20060400) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='snd_soc_jack_irq\x00', r9}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000140)='./file0\x00', r10, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.3.1780'. [ 247.974783][T10504] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 247.984414][T10504] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1777: invalid indirect mapped block 1 (level 1) [ 247.999112][T10504] EXT4-fs (loop5): 1 truncate cleaned up [ 248.005170][T10504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.169375][ T5258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.197963][T10523] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 248.224325][T10526] sctp: [Deprecated]: syz.5.1782 (pid 10526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.224325][T10526] Use struct sctp_sack_info instead [ 248.282464][T10531] netlink: 'syz.0.1786': attribute type 10 has an invalid length. [ 248.293022][T10531] netlink: 'syz.0.1786': attribute type 10 has an invalid length. [ 248.301809][T10531] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 248.312366][T10531] team0: Port device dummy0 removed [ 248.370218][T10526] bridge3: entered promiscuous mode [ 248.375503][T10526] bridge3: entered allmulticast mode [ 248.384030][T10526] team0: Port device bridge3 added [ 248.392606][T10526] bridge0: port 1(team0) entered blocking state [ 248.399037][T10526] bridge0: port 1(team0) entered disabled state [ 248.405697][T10526] team0: entered allmulticast mode [ 248.411031][T10526] team_slave_0: entered allmulticast mode [ 248.416797][T10526] team_slave_1: entered allmulticast mode [ 248.423689][T10526] team0: entered promiscuous mode [ 248.428792][T10526] team_slave_0: entered promiscuous mode [ 248.434549][T10526] team_slave_1: entered promiscuous mode [ 248.451258][T10526] IPv6: sit1: Disabled Multicast RS [ 248.511544][T10542] macvtap0: entered allmulticast mode [ 248.535959][T10544] netlink: 'syz.0.1791': attribute type 21 has an invalid length. [ 248.860117][T10556] loop5: detected capacity change from 0 to 512 [ 249.225406][T10556] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 249.233423][T10556] EXT4-fs (loop5): orphan cleanup on readonly fs [ 249.241351][T10556] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 249.252972][T10556] EXT4-fs (loop5): Remounting filesystem read-only [ 249.259597][T10556] EXT4-fs (loop5): 1 truncate cleaned up [ 249.269590][ T8644] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 249.280193][ T8644] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 249.316428][ T8644] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 249.351281][T10556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.364039][T10556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.405357][T10568] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.425643][T10556] lo speed is unknown, defaulting to 1000 [ 249.431765][T10556] lo speed is unknown, defaulting to 1000 [ 249.492363][T10556] wg1 speed is unknown, defaulting to 1000 [ 249.498867][T10556] lo speed is unknown, defaulting to 1000 [ 249.827012][T10579] netlink: 'syz.5.1799': attribute type 10 has an invalid length. [ 249.900846][T10582] netlink: 'syz.5.1799': attribute type 10 has an invalid length. [ 249.964263][T10584] io-wq is not configured for unbound workers [ 249.979548][T10579] bond0: (slave dummy0): Releasing backup interface [ 250.050945][T10588] __nla_validate_parse: 5 callbacks suppressed [ 250.050960][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 250.152035][T10579] dummy0: entered promiscuous mode [ 250.217748][T10579] dummy0: entered allmulticast mode [ 250.223894][T10579] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 250.319712][T10579] team0: Failed to send options change via netlink (err -105) [ 250.327279][T10579] team0: Port device dummy0 added [ 250.333260][T10582] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 250.343471][T10582] dummy0: left promiscuous mode [ 250.348464][T10582] dummy0: left allmulticast mode [ 250.354601][T10582] team0: Failed to send options change via netlink (err -105) [ 250.362397][T10582] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 250.371895][T10582] team0: Port device dummy0 removed [ 250.379391][T10582] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 250.496985][ T29] kauditd_printk_skb: 1434 callbacks suppressed [ 250.497000][ T29] audit: type=1326 audit(247.062:35820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.3.1805" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55e562f749 code=0x0 [ 250.547681][T10599] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1807'. [ 250.565071][ T29] audit: type=1326 audit(247.135:35821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 250.588536][ T29] audit: type=1326 audit(247.135:35822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 250.611557][ T29] audit: type=1326 audit(247.135:35823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 250.634596][ T29] audit: type=1326 audit(247.135:35824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 250.657672][ T29] audit: type=1326 audit(247.135:35825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 250.680722][ T29] audit: type=1326 audit(247.135:35826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 250.703580][ T29] audit: type=1326 audit(247.135:35827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 250.726606][ T29] audit: type=1326 audit(247.135:35828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 250.749634][ T29] audit: type=1326 audit(247.135:35829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 250.774083][T10606] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 251.039437][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 251.048447][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 251.110732][T10614] lo speed is unknown, defaulting to 1000 [ 251.117165][T10614] lo speed is unknown, defaulting to 1000 [ 251.228572][T10614] wg1 speed is unknown, defaulting to 1000 [ 251.236146][T10614] lo speed is unknown, defaulting to 1000 [ 251.784751][T10627] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.802358][T10630] lo speed is unknown, defaulting to 1000 [ 251.812543][T10630] lo speed is unknown, defaulting to 1000 [ 251.817378][T10634] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1812'. [ 251.874970][T10630] wg1 speed is unknown, defaulting to 1000 [ 251.882058][T10630] lo speed is unknown, defaulting to 1000 [ 252.031682][T10646] @ÿ: renamed from hsr0 [ 252.054661][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'. [ 252.196604][T10647] netlink: 'syz.5.1817': attribute type 13 has an invalid length. [ 252.210082][T10650] siw: device registration error -23 [ 252.805456][T10668] loop5: detected capacity change from 0 to 512 [ 252.832593][T10669] netlink: 'syz.6.1824': attribute type 21 has an invalid length. [ 252.848304][T10668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.856273][T10668] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.920093][T10668] EXT4-fs (loop5): 1 truncate cleaned up [ 253.074424][T10668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.087733][T10669] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1824'. [ 253.342782][ T5258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.441006][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 253.450007][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 253.507204][T10686] lo speed is unknown, defaulting to 1000 [ 253.513723][T10686] lo speed is unknown, defaulting to 1000 [ 253.628472][T10686] wg1 speed is unknown, defaulting to 1000 [ 253.635554][T10686] lo speed is unknown, defaulting to 1000 [ 254.152304][T10702] siw: device registration error -23 [ 254.242645][T10705] sit1: entered allmulticast mode [ 254.256734][T10707] netlink: 'syz.3.1835': attribute type 10 has an invalid length. [ 254.270949][T10707] team0: Port device dummy0 added [ 254.439109][T10716] 0ªî{X¹¦: renamed from gretap0 [ 254.455949][T10716] 0ªî{X¹¦: entered allmulticast mode [ 254.464503][T10716] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 254.579080][T10718] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 254.590149][T10634] syz.0.1812 (10634) used greatest stack depth: 6160 bytes left [ 254.962339][T10736] bridge0: entered promiscuous mode [ 254.967601][T10736] macvtap0: entered allmulticast mode [ 254.973034][T10736] bridge0: entered allmulticast mode [ 255.002986][T10736] bridge0: left allmulticast mode [ 255.008098][T10736] bridge0: left promiscuous mode [ 255.189099][T10740] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 255.219360][T10740] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 255.238192][T10742] netlink: 'syz.5.1848': attribute type 10 has an invalid length. [ 255.246985][T10740] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 255.264461][T10740] team0: Port device dummy0 removed [ 255.325525][T10742] bond0: (slave dummy0): Releasing backup interface [ 255.416674][T10742] dummy0: entered promiscuous mode [ 255.483598][T10742] dummy0: entered allmulticast mode [ 255.541200][T10742] team0: Port device dummy0 added [ 255.590371][ T29] kauditd_printk_skb: 768 callbacks suppressed [ 255.590386][ T29] audit: type=1107 audit(252.411:36598): pid=10748 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 255.704965][T10755] __nla_validate_parse: 6 callbacks suppressed [ 255.704979][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1853'. [ 255.811326][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1853'. [ 255.829410][ T29] audit: type=1400 audit(252.632:36599): avc: denied { create } for pid=10754 comm="syz.3.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 255.848730][ T29] audit: type=1400 audit(252.632:36600): avc: denied { connect } for pid=10754 comm="syz.3.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 256.010719][T10761] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1854'. [ 256.051377][T10769] siw: device registration error -23 [ 256.063820][T10765] loop5: detected capacity change from 0 to 1024 [ 256.114719][T10765] EXT4-fs: Ignoring removed nobh option [ 256.120428][T10765] EXT4-fs: Ignoring removed bh option [ 256.169938][T10765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.206366][ T29] audit: type=1400 audit(253.052:36601): avc: denied { create } for pid=10763 comm="syz.5.1857" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 256.323458][ T29] audit: type=1400 audit(253.094:36602): avc: denied { read write } for pid=10763 comm="syz.5.1857" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.345734][ T29] audit: type=1400 audit(253.094:36603): avc: denied { open } for pid=10763 comm="syz.5.1857" path="/233/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.362650][T10765] EXT4-fs (loop5): pa ffff888107a6b230: logic 1, phys. 129, len 4 [ 256.368391][ T29] audit: type=1400 audit(253.157:36604): avc: denied { setattr } for pid=10763 comm="syz.5.1857" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.376169][T10765] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 256.473201][ T29] audit: type=1326 audit(253.346:36605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.6.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 256.527795][ T29] audit: type=1326 audit(253.367:36606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.6.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 256.550870][ T29] audit: type=1326 audit(253.367:36607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.6.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 257.028703][T10791] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 257.080269][ T5258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.194534][T10799] netlink: 'syz.5.1866': attribute type 10 has an invalid length. [ 257.204064][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1865'. [ 257.240821][T10800] sit2: entered allmulticast mode [ 257.362029][T10806] loop5: detected capacity change from 0 to 512 [ 257.430075][T10808] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 257.685998][T10818] netlink: 'syz.1.1870': attribute type 10 has an invalid length. [ 257.694160][T10818] netlink: 'syz.1.1870': attribute type 10 has an invalid length. [ 258.403739][T10836] 9pnet_fd: p9_fd_create_unix (10836): problem connecting socket: ./file0: -2 [ 258.598889][T10849] netlink: 102824 bytes leftover after parsing attributes in process `syz.1.1881'. [ 258.615007][T10849] netlink: zone id is out of range [ 258.620159][T10849] netlink: zone id is out of range [ 258.634187][T10849] netlink: zone id is out of range [ 258.638571][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1882'. [ 258.643479][T10849] netlink: zone id is out of range [ 258.650945][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1882'. [ 258.665410][T10849] netlink: zone id is out of range [ 258.675154][T10849] netlink: zone id is out of range [ 258.684559][T10849] netlink: zone id is out of range [ 258.689712][T10849] netlink: zone id is out of range [ 258.694861][T10849] netlink: zone id is out of range [ 259.232592][T10864] netlink: 'syz.1.1883': attribute type 10 has an invalid length. [ 259.254920][T10864] netlink: 'syz.1.1883': attribute type 10 has an invalid length. [ 259.337507][T10867] loop5: detected capacity change from 0 to 1024 [ 259.405948][T10867] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 259.416864][T10867] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 259.429113][T10867] JBD2: no valid journal superblock found [ 259.434857][T10867] EXT4-fs (loop5): Could not load journal inode [ 259.450535][T10867] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 259.468650][T10867] loop5: detected capacity change from 0 to 512 [ 259.524121][T10867] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 259.532306][T10867] EXT4-fs (loop5): orphan cleanup on readonly fs [ 259.545543][T10867] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1886: corrupted inode contents [ 259.558378][T10867] EXT4-fs (loop5): Remounting filesystem read-only [ 259.565146][T10867] EXT4-fs (loop5): 1 truncate cleaned up [ 259.571121][ T8340] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 259.581628][ T8340] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 259.726628][ T8340] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 259.805596][T10867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.834786][T10865] lo speed is unknown, defaulting to 1000 [ 259.840843][T10865] lo speed is unknown, defaulting to 1000 [ 259.913064][T10865] wg1 speed is unknown, defaulting to 1000 [ 259.919756][T10865] lo speed is unknown, defaulting to 1000 [ 260.058739][ T5258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.210027][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1890'. [ 260.220824][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1890'. [ 260.235985][T10876] loop5: detected capacity change from 0 to 512 [ 260.254899][T10876] EXT4-fs (loop5): orphan cleanup on readonly fs [ 260.264177][T10876] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1889: bad orphan inode 13 [ 260.275077][T10876] ext4_test_bit(bit=12, block=18) = 1 [ 260.280583][T10876] is_bad_inode(inode)=0 [ 260.284802][T10876] NEXT_ORPHAN(inode)=2130706432 [ 260.289658][T10876] max_ino=32 [ 260.292928][T10876] i_nlink=1 [ 260.306135][T10876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.343647][T10890] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1895'. [ 260.358886][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 260.358900][ T29] audit: type=1326 audit(257.421:37092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 260.399172][ T29] audit: type=1326 audit(257.421:37093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 260.422285][ T29] audit: type=1326 audit(257.421:37094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 260.445311][ T29] audit: type=1326 audit(257.421:37095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 260.468337][ T29] audit: type=1326 audit(257.421:37096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 260.491327][ T29] audit: type=1326 audit(257.421:37097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 260.514358][ T29] audit: type=1326 audit(257.421:37098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 260.537317][ T29] audit: type=1326 audit(257.421:37099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 260.560365][ T29] audit: type=1326 audit(257.421:37100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 260.583391][ T29] audit: type=1326 audit(257.421:37101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 260.639686][T10900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.651539][T10895] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 260.660956][ T5258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.731018][T10905] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1900'. [ 260.750204][T10905] pimreg: left allmulticast mode [ 260.835778][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1898'. [ 260.934125][T10916] netlink: 'syz.3.1897': attribute type 12 has an invalid length. [ 260.942197][T10916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1897'. [ 261.117482][T10923] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 261.127764][T10923] team0: Failed to send options change via netlink (err -105) [ 261.135424][T10923] team0: Port device dummy0 added [ 261.141939][T10923] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 261.150493][T10923] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 261.188521][T10926] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1902'. [ 261.196278][T10923] team0: Failed to send options change via netlink (err -105) [ 261.207491][T10923] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 261.216869][T10923] team0: Port device dummy0 removed [ 261.522569][T10948] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1910'. [ 261.564170][T10952] netlink: 'syz.3.1911': attribute type 3 has an invalid length. [ 261.611807][T10952] 9pnet_virtio: no channels available for device syz [ 261.764806][T10958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.831658][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'. [ 261.840779][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'. [ 261.903735][T10959] lo speed is unknown, defaulting to 1000 [ 261.910284][T10959] lo speed is unknown, defaulting to 1000 [ 262.025562][T10959] wg1 speed is unknown, defaulting to 1000 [ 262.032744][T10959] lo speed is unknown, defaulting to 1000 [ 262.668619][T10969] netlink: 'syz.1.1918': attribute type 1 has an invalid length. [ 262.682313][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'. [ 262.691509][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1918'. [ 262.720545][T10972] netlink: 'syz.3.1919': attribute type 10 has an invalid length. [ 262.730704][T10969] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 262.737476][T10969] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 262.748313][T10969] 0ªî{X¹¦: entered promiscuous mode [ 262.762240][T10972] team0: Failed to send options change via netlink (err -105) [ 262.768755][T10974] netlink: 'syz.3.1919': attribute type 10 has an invalid length. [ 262.769768][T10972] team0: Port device dummy0 added [ 262.796637][T10969] 0ªî{X¹¦: left promiscuous mode [ 262.801894][T10969] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 262.812104][T10974] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 262.828379][T10974] team0: Failed to send options change via netlink (err -105) [ 262.836891][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'. [ 262.846007][T10974] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 262.855177][T10974] team0: Port device dummy0 removed [ 263.057649][T10992] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 263.082163][T10992] 0ªî{X¹¦: entered allmulticast mode [ 263.087851][T10992] net_ratelimit: 118 callbacks suppressed [ 263.087867][T10992] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 264.029119][T11017] blktrace: Concurrent blktraces are not allowed on loop6 [ 264.036904][T11017] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 264.151389][T10925] syz.5.1902 (10925) used greatest stack depth: 6120 bytes left [ 264.170099][T11026] netlink: 'syz.1.1935': attribute type 10 has an invalid length. [ 264.178695][T11026] netlink: 'syz.1.1935': attribute type 10 has an invalid length. [ 265.069996][T11047] 9pnet_fd: Insufficient options for proto=fd [ 265.079042][T11047] Set syz1 is full, maxelem 65536 reached [ 265.199942][T11049] bond1 (unregistering): Released all slaves [ 265.844039][T11060] __nla_validate_parse: 8 callbacks suppressed [ 265.844073][T11060] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1948'. [ 265.859462][T11060] unsupported nlmsg_type 40 [ 265.887634][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 265.887647][ T29] audit: type=1326 audit(263.236:37585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 265.925580][ T29] audit: type=1326 audit(263.268:37586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 265.948646][ T29] audit: type=1326 audit(263.268:37587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 265.971637][ T29] audit: type=1326 audit(263.268:37588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 265.994610][ T29] audit: type=1326 audit(263.268:37589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 266.018091][ T29] audit: type=1326 audit(263.268:37590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 266.041113][ T29] audit: type=1326 audit(263.268:37591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 266.064099][ T29] audit: type=1326 audit(263.268:37592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 266.106247][ T29] audit: type=1326 audit(263.446:37593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 266.114418][T11072] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1952'. [ 266.129328][ T29] audit: type=1326 audit(263.446:37594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.3.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 266.232058][T11076] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1954'. [ 266.430782][T11088] 9pnet_fd: Insufficient options for proto=fd [ 266.438117][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'. [ 266.503302][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1955'. [ 266.512392][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1955'. [ 266.578854][T11089] lo speed is unknown, defaulting to 1000 [ 266.585934][T11089] lo speed is unknown, defaulting to 1000 [ 266.701171][T11089] wg1 speed is unknown, defaulting to 1000 [ 266.708659][T11089] lo speed is unknown, defaulting to 1000 [ 267.092301][T11100] lo speed is unknown, defaulting to 1000 [ 267.109149][T11100] lo speed is unknown, defaulting to 1000 [ 267.176017][T11102] netlink: 'syz.1.1968': attribute type 10 has an invalid length. [ 267.339160][T11100] wg1 speed is unknown, defaulting to 1000 [ 267.346605][T11100] lo speed is unknown, defaulting to 1000 [ 267.461852][T11118] lo speed is unknown, defaulting to 1000 [ 267.467312][ T4129] page_pool_release_retry() stalled pool shutdown: id 55, 34 inflight 60 sec [ 267.468062][T11118] lo speed is unknown, defaulting to 1000 [ 267.515320][T11098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.552453][T11098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.751252][T11118] wg1 speed is unknown, defaulting to 1000 [ 267.820129][T11118] lo speed is unknown, defaulting to 1000 [ 267.959568][T11124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1963'. [ 268.132077][T11132] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1967'. [ 268.161208][T11132] 0ªî{X¹¦: renamed from gretap0 [ 268.173938][T11132] 0ªî{X¹¦: entered allmulticast mode [ 268.192992][T11132] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 268.264615][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'. [ 268.277898][T11137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11137 comm=syz.1.1969 [ 268.293105][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'. [ 268.450179][T11143] loop5: detected capacity change from 0 to 512 [ 268.466506][T11143] EXT4-fs error (device loop5): __ext4_fill_super:5553: inode #2: comm syz.5.1971: casefold flag without casefold feature [ 268.480933][T11143] EXT4-fs (loop5): get root inode failed [ 268.487176][T11143] EXT4-fs (loop5): mount failed [ 268.745704][T11169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.124919][T11191] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 269.180626][T11191] lo speed is unknown, defaulting to 1000 [ 269.187260][T11191] lo speed is unknown, defaulting to 1000 [ 269.297394][T11191] wg1 speed is unknown, defaulting to 1000 [ 269.304561][T11191] lo speed is unknown, defaulting to 1000 [ 269.744980][T11196] lo speed is unknown, defaulting to 1000 [ 269.767803][T11196] lo speed is unknown, defaulting to 1000 [ 269.790577][T11198] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 269.833903][T11201] netlink: 'syz.1.1978': attribute type 10 has an invalid length. [ 270.009483][T11196] wg1 speed is unknown, defaulting to 1000 [ 270.016183][T11196] lo speed is unknown, defaulting to 1000 [ 270.124801][T11224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.136156][T11207] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 270.482711][T11224] netlink: 'syz.0.1980': attribute type 12 has an invalid length. [ 270.683775][T11257] __nla_validate_parse: 6 callbacks suppressed [ 270.683790][T11257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1981'. [ 270.842118][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1984'. [ 270.879655][T11269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1985'. [ 270.986648][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 270.986662][ T29] audit: type=1326 audit(268.585:37866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 271.022314][ T29] audit: type=1326 audit(268.627:37867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 271.076884][ T29] audit: type=1326 audit(268.658:37868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 271.099964][ T29] audit: type=1326 audit(269.666:37869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 271.123029][ T29] audit: type=1326 audit(269.666:37870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 271.146617][ T29] audit: type=1326 audit(269.666:37871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 271.169636][ T29] audit: type=1326 audit(269.666:37872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 271.193150][ T29] audit: type=1326 audit(269.666:37873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 271.216231][ T29] audit: type=1326 audit(269.666:37874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 271.239341][ T29] audit: type=1326 audit(269.666:37875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 271.240049][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1987'. [ 271.334151][T11281] siw: device registration error -23 [ 271.739207][T11289] netlink: 'syz.5.1990': attribute type 10 has an invalid length. [ 271.781498][T11293] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 271.891830][T11294] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 271.955267][T11294] lo speed is unknown, defaulting to 1000 [ 271.961845][T11294] lo speed is unknown, defaulting to 1000 [ 272.077845][T11294] wg1 speed is unknown, defaulting to 1000 [ 272.085214][T11294] lo speed is unknown, defaulting to 1000 [ 272.395366][T11296] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 272.724391][T11298] pim6reg: entered allmulticast mode [ 272.732893][T11298] team0: entered allmulticast mode [ 272.738025][T11298] team_slave_0: entered allmulticast mode [ 272.743796][T11298] team_slave_1: entered allmulticast mode [ 272.764511][T11306] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 272.820732][T11307] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 272.842186][T11308] pimreg: entered allmulticast mode [ 272.854411][T11308] pimreg: left allmulticast mode [ 272.912543][T11311] netlink: 'syz.5.1994': attribute type 10 has an invalid length. [ 272.947707][T11312] team0: left allmulticast mode [ 272.952670][T11312] team_slave_0: left allmulticast mode [ 272.958130][T11312] team_slave_1: left allmulticast mode [ 273.057269][T11312] pim6reg: left allmulticast mode [ 273.365793][T11305] lo speed is unknown, defaulting to 1000 [ 273.372005][T11305] lo speed is unknown, defaulting to 1000 [ 273.449831][T11320] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 273.450040][T11305] wg1 speed is unknown, defaulting to 1000 [ 273.470409][T11323] netlink: 'syz.1.1997': attribute type 10 has an invalid length. [ 273.479025][T11323] netlink: 'syz.1.1997': attribute type 10 has an invalid length. [ 273.500013][T11305] lo speed is unknown, defaulting to 1000 [ 273.559806][T11325] x_tables: unsorted underflow at hook 3 [ 274.900248][T11354] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 274.971824][T11354] lo speed is unknown, defaulting to 1000 [ 274.977880][T11354] lo speed is unknown, defaulting to 1000 [ 275.011160][T11359] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 275.036685][T11361] netem: change failed [ 275.056645][T11354] wg1 speed is unknown, defaulting to 1000 [ 275.064166][T11354] lo speed is unknown, defaulting to 1000 [ 275.289761][T11359] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 275.340195][T11372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.410738][T11377] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.450465][T11377] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.538561][T11377] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.767668][T11380] bond1 (unregistering): Released all slaves [ 275.841063][T11377] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.086009][T11373] netlink: 'syz.6.2015': attribute type 12 has an invalid length. [ 276.093880][T11373] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2015'. [ 276.245288][ T8317] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.258919][ T8317] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.276499][ T8317] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.289404][ T8317] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.352174][ T29] kauditd_printk_skb: 904 callbacks suppressed [ 276.352236][ T29] audit: type=1326 audit(275.222:38780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.1.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 276.423336][T11393] pim6reg: entered allmulticast mode [ 276.432299][ T29] audit: type=1326 audit(275.254:38781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.1.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 276.455347][ T29] audit: type=1326 audit(275.254:38782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.1.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 276.478363][ T29] audit: type=1326 audit(275.254:38783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.1.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 276.501388][ T29] audit: type=1326 audit(275.254:38784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.1.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 276.524332][ T29] audit: type=1326 audit(275.254:38785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.1.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 276.547247][ T29] audit: type=1326 audit(275.254:38786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.1.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 276.570295][ T29] audit: type=1326 audit(275.254:38787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.1.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 276.593447][ T29] audit: type=1326 audit(275.254:38788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.1.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 276.616422][ T29] audit: type=1326 audit(275.254:38789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.1.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 276.651791][T11393] team0: entered allmulticast mode [ 276.656982][T11393] team_slave_0: entered allmulticast mode [ 276.662726][T11393] team_slave_1: entered allmulticast mode [ 276.672643][T11393] team0: left allmulticast mode [ 276.672799][T11392] netlink: 'syz.0.2016': attribute type 10 has an invalid length. [ 276.677510][T11393] team_slave_0: left allmulticast mode [ 276.677528][T11393] team_slave_1: left allmulticast mode [ 276.697215][T11393] pim6reg: left allmulticast mode [ 276.707203][T11392] team0: Failed to send options change via netlink (err -105) [ 276.714784][T11392] team0: Port device dummy0 added [ 276.732886][T11392] netlink: 'syz.0.2016': attribute type 10 has an invalid length. [ 276.741623][T11392] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 276.796945][T11398] loop5: detected capacity change from 0 to 128 [ 276.804974][T11392] team0: Failed to send options change via netlink (err -105) [ 276.838479][T11392] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 276.869253][T11392] team0: Port device dummy0 removed [ 276.904235][T11401] bio_check_eod: 33 callbacks suppressed [ 276.904252][T11401] syz.5.2021: attempt to access beyond end of device [ 276.904252][T11401] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 276.924538][T11401] syz.5.2021: attempt to access beyond end of device [ 276.924538][T11401] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 276.939056][T11401] syz.5.2021: attempt to access beyond end of device [ 276.939056][T11401] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 276.953850][T11401] syz.5.2021: attempt to access beyond end of device [ 276.953850][T11401] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 276.967560][T11401] syz.5.2021: attempt to access beyond end of device [ 276.967560][T11401] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 276.981607][T11401] syz.5.2021: attempt to access beyond end of device [ 276.981607][T11401] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 276.995936][T11401] syz.5.2021: attempt to access beyond end of device [ 276.995936][T11401] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 277.010040][T11401] syz.5.2021: attempt to access beyond end of device [ 277.010040][T11401] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 277.042422][T11401] syz.5.2021: attempt to access beyond end of device [ 277.042422][T11401] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 277.074456][T11401] syz.5.2021: attempt to access beyond end of device [ 277.074456][T11401] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 277.166321][T11407] netlink: 102824 bytes leftover after parsing attributes in process `syz.0.2024'. [ 277.177503][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 277.187463][T11407] netlink: zone id is out of range [ 277.192597][T11407] netlink: zone id is out of range [ 277.200566][T11409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11409 comm=syz.3.2025 [ 277.209916][T11407] netlink: zone id is out of range [ 277.228385][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2025'. [ 277.230202][T11407] netlink: zone id is out of range [ 277.256359][T11407] netlink: zone id is out of range [ 277.273889][T11407] netlink: zone id is out of range [ 277.285045][T11407] netlink: zone id is out of range [ 277.290283][T11407] netlink: zone id is out of range [ 277.295438][T11407] netlink: zone id is out of range [ 277.300579][T11407] netlink: zone id is out of range [ 277.422950][T11416] 9pnet_fd: Insufficient options for proto=fd [ 277.741954][T11419] sz1: rxe_newlink: already configured on lo [ 277.948075][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2031'. [ 277.957002][T11424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.964811][T11424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.059828][T11429] lo speed is unknown, defaulting to 1000 [ 278.066320][T11429] lo speed is unknown, defaulting to 1000 [ 278.130923][T11429] wg1 speed is unknown, defaulting to 1000 [ 278.138200][T11429] lo speed is unknown, defaulting to 1000 [ 278.805742][T11436] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2033'. [ 278.913605][T11440] loop5: detected capacity change from 0 to 128 [ 278.939008][T11441] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2036'. [ 278.987480][T11440] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.114307][T11440] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 279.240906][ T8643] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.365373][T11463] loop5: detected capacity change from 0 to 1024 [ 281.014371][T11463] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 281.028087][T11463] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 281.050990][T11463] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #32: comm syz.5.2040: iget: special inode unallocated [ 281.067846][T11469] netlink: 'syz.6.2042': attribute type 10 has an invalid length. [ 281.076680][T11463] EXT4-fs (loop5): Remounting filesystem read-only [ 281.084320][T11463] EXT4-fs (loop5): no journal found [ 281.090369][T11463] EXT4-fs (loop5): can't get journal size [ 281.109183][T11469] bond0: (slave dummy0): Releasing backup interface [ 281.157227][T11470] netlink: 'syz.6.2042': attribute type 10 has an invalid length. [ 281.242329][T11469] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.288722][T11463] EXT4-fs (loop5): filesystem is read-only [ 281.352406][T11436] syz.1.2033 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 281.352476][T11469] team0: Failed to send options change via netlink (err -105) [ 281.366349][T11436] CPU: 0 UID: 0 PID: 11436 Comm: syz.1.2033 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.366376][T11436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.366390][T11436] Call Trace: [ 281.366432][T11436] [ 281.366441][T11436] __dump_stack+0x1d/0x30 [ 281.366541][T11436] dump_stack_lvl+0xe8/0x140 [ 281.366563][T11436] dump_stack+0x15/0x1b [ 281.366581][T11436] dump_header+0x81/0x240 [ 281.366609][T11436] oom_kill_process+0x295/0x350 [ 281.366632][T11436] out_of_memory+0x97b/0xb80 [ 281.366666][T11436] try_charge_memcg+0x610/0xa10 [ 281.366741][T11436] obj_cgroup_charge_pages+0xa6/0x150 [ 281.366769][T11436] __memcg_kmem_charge_page+0x9f/0x170 [ 281.366844][T11436] __alloc_frozen_pages_noprof+0x18f/0x360 [ 281.366950][T11436] alloc_pages_mpol+0xb3/0x260 [ 281.366979][T11436] alloc_pages_noprof+0x90/0x130 [ 281.367006][T11436] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 281.367104][T11436] __kvmalloc_node_noprof+0x492/0x6b0 [ 281.367128][T11436] ? ip_set_alloc+0x24/0x30 [ 281.367151][T11436] ? ip_set_alloc+0x24/0x30 [ 281.367232][T11436] ip_set_alloc+0x24/0x30 [ 281.367254][T11436] hash_netiface_create+0x282/0x740 [ 281.367388][T11436] ? __pfx_hash_netiface_create+0x10/0x10 [ 281.367413][T11436] ip_set_create+0x3cc/0x970 [ 281.367469][T11436] ? __nla_parse+0x40/0x60 [ 281.367494][T11436] nfnetlink_rcv_msg+0x4c6/0x590 [ 281.367536][T11436] netlink_rcv_skb+0x123/0x220 [ 281.367576][T11436] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 281.367603][T11436] nfnetlink_rcv+0x167/0x16c0 [ 281.367628][T11436] ? copy_from_user_nofault+0xea/0x120 [ 281.367733][T11436] ? bpf_probe_read_user+0x6c/0x70 [ 281.367756][T11436] ? __rcu_read_unlock+0x4f/0x70 [ 281.367837][T11436] ? bpf_trace_run3+0x12c/0x1e0 [ 281.367866][T11436] ? copy_from_user_nofault+0xea/0x120 [ 281.367893][T11436] ? mas_next_slot+0x69b/0x6f0 [ 281.367962][T11436] ? should_fail_ex+0x30/0x280 [ 281.367984][T11436] ? selinux_nlmsg_lookup+0x99/0x890 [ 281.368007][T11436] ? __rcu_read_unlock+0x34/0x70 [ 281.368083][T11436] ? __netlink_lookup+0x266/0x2a0 [ 281.368112][T11436] netlink_unicast+0x5c0/0x690 [ 281.368207][T11436] netlink_sendmsg+0x58b/0x6b0 [ 281.368270][T11436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.368295][T11436] __sock_sendmsg+0x145/0x180 [ 281.368325][T11436] ____sys_sendmsg+0x31e/0x4a0 [ 281.368351][T11436] ___sys_sendmsg+0x17b/0x1d0 [ 281.368450][T11436] __x64_sys_sendmsg+0xd4/0x160 [ 281.368477][T11436] x64_sys_call+0x17ba/0x3000 [ 281.368544][T11436] do_syscall_64+0xd8/0x2a0 [ 281.368582][T11436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.368603][T11436] RIP: 0033:0x7f962ce5f749 [ 281.368620][T11436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.368637][T11436] RSP: 002b:00007f962b89e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.368680][T11436] RAX: ffffffffffffffda RBX: 00007f962d0b6090 RCX: 00007f962ce5f749 [ 281.368698][T11436] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 281.368733][T11436] RBP: 00007f962cee3f91 R08: 0000000000000000 R09: 0000000000000000 [ 281.368745][T11436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.368757][T11436] R13: 00007f962d0b6128 R14: 00007f962d0b6090 R15: 00007ffc66e9b248 [ 281.368776][T11436] [ 281.368787][T11436] memory: usage 307200kB, limit 307200kB, failcnt 3663 [ 281.373820][T11469] team0: Port device dummy0 added [ 281.383777][T11436] memory+swap: usage 320612kB, limit 9007199254740988kB, failcnt 0 [ 281.419591][T11463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 281.422281][T11436] kmem: usage 302580kB, limit 9007199254740988kB, failcnt 0 [ 281.422297][T11436] Memory cgroup stats for [ 281.561819][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 281.561834][ T29] audit: type=1400 audit(281.691:39015): avc: denied { read } for pid=11462 comm="syz.5.2040" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 281.563002][T11436] /syz1 [ 281.567973][ T29] audit: type=1400 audit(281.691:39016): avc: denied { open } for pid=11462 comm="syz.5.2040" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 281.572957][T11436] : [ 281.592389][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2043'. [ 281.599415][T11436] cache 0 [ 281.601980][ T29] audit: type=1400 audit(281.733:39017): avc: denied { ioctl } for pid=11462 comm="syz.5.2040" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 281.606676][T11436] rss 4726784 [ 281.613405][T11470] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.615888][T11436] shmem 0 [ 281.615898][T11436] mapped_file 208896 [ 281.615905][T11436] dirty 0 [ 281.615911][T11436] writeback 0 [ 281.615918][T11436] workingset_refault_anon 15184 [ 281.667224][T11481] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 281.670201][T11436] workingset_refault_file 14401 [ 281.670213][T11436] swap 13733888 [ 281.670220][T11436] swapcached 0 [ 281.670226][T11436] pgpgin 506897 [ 281.670233][T11436] pgpgout 505742 [ 281.670238][T11436] pgfault 326218 [ 281.670277][T11436] pgmajfault 2418 [ 281.901668][T11436] inactive_anon 0 [ 281.905295][T11436] active_anon 0 [ 281.908777][T11436] inactive_file 4730880 [ 281.912922][T11436] active_file 0 [ 281.916477][T11436] unevictable 0 [ 281.919969][T11436] hierarchical_memory_limit 314572800 [ 281.925428][T11436] hierarchical_memsw_limit 9223372036854771712 [ 281.931604][T11436] total_cache 0 [ 281.935065][T11436] total_rss 4726784 [ 281.938877][T11436] total_shmem 0 [ 281.942321][T11436] total_mapped_file 208896 [ 281.946840][T11436] total_dirty 0 [ 281.950349][T11436] total_writeback 0 [ 281.954200][T11436] total_workingset_refault_anon 15184 [ 281.959571][T11436] total_workingset_refault_file 14401 [ 281.964933][T11436] total_swap 13733888 [ 281.968941][T11436] total_swapcached 0 [ 281.972818][T11436] total_pgpgin 506897 [ 281.976854][T11436] total_pgpgout 505742 [ 281.980972][T11436] total_pgfault 326218 [ 281.985058][T11436] total_pgmajfault 2418 [ 281.989199][T11436] total_inactive_anon 0 [ 281.993359][T11436] total_active_anon 0 [ 281.997349][T11436] total_inactive_file 4730880 [ 282.002015][T11436] total_active_file 0 [ 282.006028][T11436] total_unevictable 0 [ 282.010006][T11436] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2033,pid=11434,uid=0 [ 282.024780][T11436] Memory cgroup out of memory: Killed process 11434 (syz.1.2033) total-vm:91244kB, anon-rss:5740kB, file-rss:22508kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0 [ 282.048087][T11470] team0: Port device dummy0 removed [ 282.128904][ T29] audit: type=1326 audit(282.289:39018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11483 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 282.231669][ T29] audit: type=1326 audit(282.321:39019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11483 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 282.254759][ T29] audit: type=1326 audit(282.321:39020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11483 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 282.255765][T11470] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 282.277789][ T29] audit: type=1326 audit(282.321:39021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11483 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 282.299651][ T8644] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 282.309331][ T29] audit: type=1326 audit(282.321:39022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11483 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 282.309357][ T29] audit: type=1326 audit(282.321:39023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11483 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 282.309380][ T29] audit: type=1326 audit(282.321:39024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11483 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 282.453240][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2047'. [ 282.523673][T11488] siw: device registration error -23 [ 282.534165][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 282.543100][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 282.576030][ T5258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.599259][T11489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2047'. [ 282.844026][T11495] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2048'. [ 282.977646][T11500] 9pnet_fd: Insufficient options for proto=fd [ 283.035123][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2052'. [ 283.889071][T11518] tipc: Bearer : already 2 bearers with priority 10 [ 283.896333][T11518] tipc: Bearer : trying with adjusted priority [ 283.903209][T11518] tipc: Enabling of bearer rejected, failed to enable media [ 283.973846][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 284.111773][T11522] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 284.118326][T11522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 284.125939][T11522] vhci_hcd vhci_hcd.0: Device attached [ 284.167928][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2057'. [ 284.237779][T11522] can0: slcan on ptm0. [ 284.288827][T11522] can0 (unregistered): slcan off ptm0. [ 284.309603][T11523] vhci_hcd: connection closed [ 284.309891][ T8317] vhci_hcd: stop threads [ 284.318885][ T8317] vhci_hcd: release socket [ 284.323371][ T8317] vhci_hcd: disconnect device [ 284.355706][ T4129] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 284.363319][ T4129] usb 11-1: enqueue for inactive port 0 [ 284.373420][ T4129] usb 11-1: enqueue for inactive port 0 [ 284.392902][ T4129] usb 11-1: enqueue for inactive port 0 [ 284.418334][T11541] net_ratelimit: 117 callbacks suppressed [ 284.418358][T11541] Set syz1 is full, maxelem 65536 reached [ 284.477762][ T4129] vhci_hcd: vhci_device speed not set [ 284.528939][T11547] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 284.564326][T11547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.588119][T11547] bond1: (slave geneve2): making interface the new active one [ 284.593445][T11556] netlink: 'syz.1.2062': attribute type 10 has an invalid length. [ 284.597612][T11547] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 284.612231][ T8317] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.624372][ T8317] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.644277][T11556] netlink: 'syz.1.2062': attribute type 10 has an invalid length. [ 284.652972][ T8317] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.671369][ T8317] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.814794][T11571] siw: device registration error -23 [ 284.935881][T11574] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2066'. [ 285.061474][T11576] ip6tnl0: Caught tx_queue_len zero misconfig [ 285.144163][T11583] loop5: detected capacity change from 0 to 512 [ 285.157465][T11583] ext4: Bad value for 'max_batch_time' [ 286.146573][T11592] netlink: 'syz.0.2074': attribute type 10 has an invalid length. [ 286.223212][T11599] netlink: 'syz.0.2074': attribute type 10 has an invalid length. [ 286.251919][T11592] team0: Failed to send options change via netlink (err -105) [ 286.259431][T11592] team0: Port device dummy0 added [ 286.276816][T11599] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 286.298911][T11599] team0: Failed to send options change via netlink (err -105) [ 286.347657][T11599] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 286.367585][T11599] team0: Port device dummy0 removed [ 287.233654][ T29] kauditd_printk_skb: 1198 callbacks suppressed [ 287.233667][ T29] audit: type=1107 audit(287.657:40223): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 287.393925][T11609] netlink: 'syz.6.2079': attribute type 21 has an invalid length. [ 287.493227][T11609] __nla_validate_parse: 1 callbacks suppressed [ 287.493239][T11609] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2079'. [ 287.719918][ T29] audit: type=1326 audit(288.161:40224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.0.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 287.806060][ T29] audit: type=1326 audit(288.192:40225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.0.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 287.829150][ T29] audit: type=1326 audit(288.192:40226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.0.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 287.852127][ T29] audit: type=1326 audit(288.192:40227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.0.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 287.875175][ T29] audit: type=1326 audit(288.192:40228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.0.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 287.898144][ T29] audit: type=1326 audit(288.192:40229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.0.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 287.921328][ T29] audit: type=1326 audit(288.203:40230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.0.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 287.944394][ T29] audit: type=1326 audit(288.203:40231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.0.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 287.967427][ T29] audit: type=1326 audit(288.203:40232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.0.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 288.557908][T11609] netlink: 'syz.6.2079': attribute type 5 has an invalid length. [ 288.565779][T11609] netlink: 'syz.6.2079': attribute type 6 has an invalid length. [ 288.573553][T11609] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2079'. [ 289.297337][T11623] netlink: 'syz.6.2084': attribute type 1 has an invalid length. [ 289.461221][T11623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.492177][T11630] siw: device registration error -23 [ 289.559812][T11615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11615 comm=syz.0.2081 [ 289.643140][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2088'. [ 289.672476][T11638] Invalid ELF header type: 2 != 1 [ 290.583301][T11659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11659 comm=syz.0.2095 [ 290.702283][T11663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=11663 comm=syz.0.2095 [ 290.748283][T11659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2095'. [ 290.844694][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2098'. [ 290.856580][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'. [ 290.882205][T11669] siw: device registration error -23 [ 290.903438][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 290.913624][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 290.932758][T11669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2097'. [ 291.101797][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'. [ 291.144637][T11682] lo speed is unknown, defaulting to 1000 [ 291.171439][T11682] lo speed is unknown, defaulting to 1000 [ 291.185162][T11687] netlink: 'syz.6.2103': attribute type 10 has an invalid length. [ 291.240590][T11689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11689 comm=syz.5.2116 [ 291.428407][T11682] wg1 speed is unknown, defaulting to 1000 [ 291.452940][T11682] lo speed is unknown, defaulting to 1000 [ 291.556216][T11703] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 291.832427][T11708] lo speed is unknown, defaulting to 1000 [ 291.838902][T11708] lo speed is unknown, defaulting to 1000 [ 291.971317][T11708] wg1 speed is unknown, defaulting to 1000 [ 291.980021][T11708] lo speed is unknown, defaulting to 1000 [ 292.267054][T11708] team0: Caught tx_queue_len zero misconfig [ 292.355813][ T29] kauditd_printk_skb: 552 callbacks suppressed [ 292.355830][ T29] audit: type=1400 audit(292.961:40785): avc: denied { name_connect } for pid=11704 comm="syz.0.2109" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 292.384504][ T29] audit: type=1326 audit(292.961:40786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 292.408627][ T29] audit: type=1326 audit(292.961:40787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 292.662530][ T29] audit: type=1326 audit(293.286:40788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 292.686720][ T29] audit: type=1326 audit(293.286:40789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 292.710877][ T29] audit: type=1326 audit(293.286:40790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 292.734938][ T29] audit: type=1326 audit(293.286:40791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 292.759656][ T29] audit: type=1326 audit(293.286:40792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 292.783828][ T29] audit: type=1326 audit(293.286:40793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 292.805441][T11718] __nla_validate_parse: 3 callbacks suppressed [ 292.805458][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 292.808023][ T29] audit: type=1326 audit(293.286:40794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 292.871581][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 293.003902][T11725] siw: device registration error -23 [ 293.152082][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'. [ 293.206441][T11735] siw: device registration error -23 [ 293.479608][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 293.489680][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 293.564833][T11741] lo speed is unknown, defaulting to 1000 [ 293.571368][T11741] lo speed is unknown, defaulting to 1000 [ 293.701756][T11741] wg1 speed is unknown, defaulting to 1000 [ 293.710016][T11741] lo speed is unknown, defaulting to 1000 [ 294.443976][T11751] lo speed is unknown, defaulting to 1000 [ 294.472211][T11751] lo speed is unknown, defaulting to 1000 [ 294.487551][T11757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11757 comm=syz.3.2122 [ 294.566023][T11757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=11757 comm=syz.3.2122 [ 294.617212][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2122'. [ 294.641229][T11756] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2124'. [ 294.651366][T11756] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2124'. [ 294.740926][T11751] wg1 speed is unknown, defaulting to 1000 [ 294.748855][T11751] lo speed is unknown, defaulting to 1000 [ 295.944359][T11775] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 296.047791][T11782] siw: device registration error -23 [ 296.288770][T11775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.366024][T11786] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2131'. [ 296.736391][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2125'. [ 296.752765][T11798] loop5: detected capacity change from 0 to 512 [ 296.759502][T11798] ext4: Bad value for 'max_batch_time' [ 296.875887][T11803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.091874][T11803] loop5: detected capacity change from 0 to 32768 [ 297.124423][ T29] kauditd_printk_skb: 1047 callbacks suppressed [ 297.124504][ T29] audit: type=1326 audit(298.044:41842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 297.138699][T11811] netlink: 'syz.5.2135': attribute type 12 has an invalid length. [ 297.162143][ T29] audit: type=1326 audit(298.075:41843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f962ce565e7 code=0x7ffc0000 [ 297.186210][ T29] audit: type=1326 audit(298.075:41844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f962cdfb829 code=0x7ffc0000 [ 297.210384][ T29] audit: type=1326 audit(298.075:41845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 297.219169][T11813] netlink: 'syz.5.2135': attribute type 1 has an invalid length. [ 297.234574][ T29] audit: type=1326 audit(298.075:41846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 297.266501][ T29] audit: type=1326 audit(298.075:41847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 297.290577][ T29] audit: type=1326 audit(298.075:41848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 297.314812][ T29] audit: type=1326 audit(298.075:41849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 297.334361][T11726] loop5: p1 p2 p3 < p5 p6 > [ 297.339229][ T29] audit: type=1326 audit(298.170:41850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f962ce565e7 code=0x7ffc0000 [ 297.346040][T11726] loop5: p2 size 16775168 extends beyond EOD, truncated [ 297.366524][ T29] audit: type=1326 audit(298.170:41851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f962cdfb829 code=0x7ffc0000 [ 297.374866][T11726] loop5: p5 start 4294970168 is beyond EOD, truncated [ 297.414241][T11803] loop5: p1 p2 p3 < p5 p6 > [ 297.442000][T11803] loop5: p2 size 16775168 extends beyond EOD, truncated [ 297.473190][T11822] netlink: 'syz.1.2141': attribute type 10 has an invalid length. [ 297.507406][T11803] loop5: p5 start 4294970168 is beyond EOD, truncated [ 297.684904][T11829] __nla_validate_parse: 4 callbacks suppressed [ 297.684920][T11829] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2143'. [ 297.825509][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'. [ 297.836462][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'. [ 297.893738][T11833] siw: device registration error -23 [ 298.221503][T11852] netlink: 'syz.6.2153': attribute type 10 has an invalid length. [ 298.841656][T11852] bond0: (slave dummy0): Releasing backup interface [ 298.878579][T11852] team0: Port device dummy0 added [ 298.926828][T11858] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2155'. [ 298.945614][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2156'. [ 299.031085][T11864] siw: device registration error -23 [ 299.041833][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 299.150222][T11876] netlink: 'syz.1.2162': attribute type 13 has an invalid length. [ 299.169669][T11880] Cannot find set identified by id 0 to match [ 299.191547][T11877] lo speed is unknown, defaulting to 1000 [ 299.211510][T11877] lo speed is unknown, defaulting to 1000 [ 299.226259][T11883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.351439][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2164'. [ 299.406784][T11877] wg1 speed is unknown, defaulting to 1000 [ 299.426878][T11877] lo speed is unknown, defaulting to 1000 [ 299.499490][T11888] netlink: 'syz.1.2163': attribute type 12 has an invalid length. [ 299.507439][T11888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2163'. [ 299.654763][T11892] netlink: 'syz.5.2165': attribute type 10 has an invalid length. [ 299.884764][T11900] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2168'. [ 299.901090][T11897] loop5: detected capacity change from 0 to 128 [ 300.092096][T11897] bio_check_eod: 40 callbacks suppressed [ 300.092111][T11897] syz.5.2167: attempt to access beyond end of device [ 300.092111][T11897] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 300.125164][T11897] syz.5.2167: attempt to access beyond end of device [ 300.125164][T11897] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 300.162171][T11897] syz.5.2167: attempt to access beyond end of device [ 300.162171][T11897] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 300.249392][T11897] syz.5.2167: attempt to access beyond end of device [ 300.249392][T11897] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 300.263157][T11897] syz.5.2167: attempt to access beyond end of device [ 300.263157][T11897] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 300.277465][T11897] syz.5.2167: attempt to access beyond end of device [ 300.277465][T11897] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 300.291252][T11897] syz.5.2167: attempt to access beyond end of device [ 300.291252][T11897] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 300.307097][T11897] syz.5.2167: attempt to access beyond end of device [ 300.307097][T11897] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 300.321012][T11910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11910 comm=syz.1.2173 [ 300.321231][T11897] syz.5.2167: attempt to access beyond end of device [ 300.321231][T11897] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 300.347773][T11897] syz.5.2167: attempt to access beyond end of device [ 300.347773][T11897] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 300.772182][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2176'. [ 300.995309][T11922] loop5: detected capacity change from 0 to 8192 [ 301.098483][T11929] program syz.5.2177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.318520][T11931] loop5: detected capacity change from 0 to 1024 [ 301.369023][T11931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.461381][T11933] netlink: zone id is out of range [ 301.467863][T11933] netlink: zone id is out of range [ 301.472962][T11933] netlink: zone id is out of range [ 301.519791][T11936] SELinux: Context system_u:object_r:dri_device_t:s0 is not valid (left unmapped). [ 301.564296][T11933] netlink: zone id is out of range [ 301.582091][T11933] netlink: zone id is out of range [ 301.615415][T11933] netlink: zone id is out of range [ 301.644899][T11933] netlink: zone id is out of range [ 301.690730][T11933] netlink: zone id is out of range [ 301.725861][T11933] netlink: zone id is out of range [ 301.756159][T11945] lo speed is unknown, defaulting to 1000 [ 301.764429][T11945] lo speed is unknown, defaulting to 1000 [ 301.786242][T11944] xt_connbytes: Forcing CT accounting to be enabled [ 301.800511][T11944] set match dimension is over the limit! [ 301.816318][T11933] netlink: zone id is out of range [ 302.197021][T11945] wg1 speed is unknown, defaulting to 1000 [ 302.244812][T11945] lo speed is unknown, defaulting to 1000 [ 302.471698][ T5258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.540264][T11955] __nla_validate_parse: 3 callbacks suppressed [ 302.540278][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2183'. [ 302.622566][T11961] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11961 comm=syz.5.2184 [ 302.721192][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2184'. [ 302.738267][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 302.738286][ T29] audit: type=1326 audit(303.936:42013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.6.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 302.783445][ T29] audit: type=1326 audit(303.978:42014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.6.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 302.807786][ T29] audit: type=1326 audit(303.978:42015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.6.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 302.831891][ T29] audit: type=1326 audit(303.978:42016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.6.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 302.855986][ T29] audit: type=1326 audit(303.978:42017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.6.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 302.880032][ T29] audit: type=1326 audit(303.978:42018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.6.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 302.904238][ T29] audit: type=1326 audit(303.978:42019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.6.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 302.928822][ T29] audit: type=1326 audit(303.989:42020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.6.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 302.952930][ T29] audit: type=1326 audit(303.989:42021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.6.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 302.977196][ T29] audit: type=1326 audit(303.989:42022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.6.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 303.152637][T11980] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2191'. [ 303.265032][T11983] netlink: 131712 bytes leftover after parsing attributes in process `syz.5.2193'. [ 303.329832][T11985] siw: device registration error -23 [ 303.366054][T11991] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2192'. [ 304.277675][T12009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2200'. [ 304.433696][T12020] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2204'. [ 304.509112][T12023] netlink: 'syz.6.2205': attribute type 10 has an invalid length. [ 304.951148][T12038] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2208'. [ 304.965893][T12038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2208'. [ 305.022719][T12040] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12040 comm=syz.1.2209 [ 305.981306][T12059] netlink: 'syz.3.2217': attribute type 10 has an invalid length. [ 305.995920][T12062] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12062 comm=syz.1.2218 [ 305.998883][T12060] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2216'. [ 306.011998][T12059] team0: Port device dummy0 added [ 306.140432][T12066] netlink: 'syz.3.2219': attribute type 10 has an invalid length. [ 306.151363][T12066] netlink: 'syz.3.2219': attribute type 10 has an invalid length. [ 306.206759][T12066] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 306.216105][T12066] team0: Port device dummy0 removed [ 306.238277][T12063] lo speed is unknown, defaulting to 1000 [ 306.248636][T12063] lo speed is unknown, defaulting to 1000 [ 306.331807][T12071] set match dimension is over the limit! [ 306.418274][T12074] lo speed is unknown, defaulting to 1000 [ 307.502438][ T29] kauditd_printk_skb: 916 callbacks suppressed [ 307.502453][ T29] audit: type=1326 audit(308.946:42939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 307.537916][ T29] audit: type=1326 audit(308.978:42940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 307.562175][ T29] audit: type=1326 audit(308.978:42941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 307.586310][ T29] audit: type=1326 audit(308.978:42942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 307.610618][ T29] audit: type=1326 audit(308.978:42943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 307.634740][ T29] audit: type=1326 audit(308.978:42944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962ce92005 code=0x7ffc0000 [ 307.668783][ T29] audit: type=1326 audit(309.114:42945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 307.739307][T12063] wg1 speed is unknown, defaulting to 1000 [ 307.745934][T12063] lo speed is unknown, defaulting to 1000 [ 307.757493][T12074] lo speed is unknown, defaulting to 1000 [ 307.826349][ T29] audit: type=1326 audit(309.282:42946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 307.895297][T12074] wg1 speed is unknown, defaulting to 1000 [ 307.916529][T12074] lo speed is unknown, defaulting to 1000 [ 307.959680][T12087] loop5: detected capacity change from 0 to 128 [ 307.976851][T12087] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.093696][T12087] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.236211][T12087] lo: Caught tx_queue_len zero misconfig [ 308.304795][T12089] siw: device registration error -23 [ 308.403716][ T8652] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.432335][ T29] audit: type=1400 audit(309.912:42947): avc: denied { ioctl } for pid=12094 comm="syz.3.2226" path="socket:[35173]" dev="sockfs" ino=35173 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 308.580753][ T29] audit: type=1400 audit(309.944:42948): avc: denied { bind } for pid=12094 comm="syz.3.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 308.998417][T12105] netlink: 'syz.1.2229': attribute type 10 has an invalid length. [ 309.133257][T12110] x_tables: duplicate underflow at hook 2 [ 309.180126][T12106] loop5: detected capacity change from 0 to 128 [ 309.320723][T12110] lo speed is unknown, defaulting to 1000 [ 309.337505][T12110] lo speed is unknown, defaulting to 1000 [ 309.382578][T12106] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 309.503134][T12110] wg1 speed is unknown, defaulting to 1000 [ 309.511265][T12110] lo speed is unknown, defaulting to 1000 [ 309.532899][T12114] __nla_validate_parse: 1 callbacks suppressed [ 309.532915][T12114] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2232'. [ 309.633108][T12116] netlink: 'syz.3.2234': attribute type 13 has an invalid length. [ 309.714414][ T4129] syb2: Port: 1 Link DOWN [ 309.718791][ T8330] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.727689][ T8330] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.737738][ T8330] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.747566][ T8330] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.817217][T12125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2236'. [ 309.922212][T12133] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 309.937055][T12133] team0: Port device dummy0 added [ 309.985478][T12141] netlink: 'syz.6.2243': attribute type 10 has an invalid length. [ 309.995523][T12141] netlink: 'syz.6.2243': attribute type 10 has an invalid length. [ 310.036618][T12141] team0: Port device dummy0 removed [ 310.047701][T12141] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 310.077544][ T61] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 310.159389][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2244'. [ 310.458954][T12162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.466231][T12162] IPv6: NLM_F_CREATE should be set when creating new route [ 310.615034][T12163] lo speed is unknown, defaulting to 1000 [ 310.684760][T12163] lo speed is unknown, defaulting to 1000 [ 311.098931][T12163] wg1 speed is unknown, defaulting to 1000 [ 311.116403][T12163] lo speed is unknown, defaulting to 1000 [ 311.277471][T12181] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 311.341948][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2263'. [ 311.801868][T12204] rdma_rxe: rxe_newlink: failed to add lo [ 311.916643][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2260'. [ 311.925669][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2260'. [ 311.996682][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'. [ 312.013422][T12214] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12214 comm=syz.6.2260 [ 312.060091][T12187] net_ratelimit: 17 callbacks suppressed [ 312.060105][T12187] Set syz1 is full, maxelem 65536 reached [ 312.070920][T12221] netlink: 'syz.6.2265': attribute type 10 has an invalid length. [ 312.087847][T12221] bond0: (slave dummy0): Releasing backup interface [ 312.097337][T12221] team0: Port device dummy0 added [ 312.181965][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2268'. [ 312.346798][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 312.346812][ T29] audit: type=1326 audit(314.030:43206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 312.388128][ T29] audit: type=1326 audit(314.061:43207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 312.411401][ T29] audit: type=1326 audit(314.061:43208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 312.434363][ T29] audit: type=1326 audit(314.061:43209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 312.457339][ T29] audit: type=1326 audit(314.061:43210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 312.480465][ T29] audit: type=1326 audit(314.061:43211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 312.503389][ T29] audit: type=1326 audit(314.061:43212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 312.526465][ T29] audit: type=1326 audit(314.061:43213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 312.549479][ T29] audit: type=1326 audit(314.061:43214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f55e56315dc code=0x7ffc0000 [ 312.572433][ T29] audit: type=1326 audit(314.061:43215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12232 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f55e5631514 code=0x7ffc0000 [ 312.787211][T12245] netlink: 'syz.6.2273': attribute type 4 has an invalid length. [ 312.863677][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2276'. [ 312.890550][T12260] siw: device registration error -23 [ 312.928084][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2277'. [ 312.992158][T12272] netlink: 'syz.5.2280': attribute type 10 has an invalid length. [ 313.296039][T12298] siw: device registration error -23 [ 313.364017][T12302] loop5: detected capacity change from 0 to 1024 [ 313.370988][T12302] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.378786][T12302] EXT4-fs: Invalid want_extra_isize 65536 [ 314.637720][T12311] netlink: 'syz.0.2293': attribute type 10 has an invalid length. [ 314.898025][T12311] team0: Port device dummy0 added [ 315.095998][T12318] __nla_validate_parse: 2 callbacks suppressed [ 315.096015][T12318] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2294'. [ 315.559670][T12324] netlink: 'syz.0.2295': attribute type 10 has an invalid length. [ 315.645947][T12326] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 315.660376][T12326] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2297'. [ 315.672095][T12324] netlink: 'syz.0.2295': attribute type 10 has an invalid length. [ 315.718963][T12324] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 315.731999][T12330] loop5: detected capacity change from 0 to 1024 [ 315.740213][T12324] team0: Port device dummy0 removed [ 315.747317][T12330] EXT4-fs: Ignoring removed nobh option [ 315.753053][T12326] hsr_slave_0: left promiscuous mode [ 315.760372][T12326] hsr_slave_1: left promiscuous mode [ 315.791885][T12330] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 315.809907][T12330] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 315.820829][T12330] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: comm syz.5.2299: inode #4294967295: comm syz.5.2299: iget: illegal inode # [ 315.823897][T12324] block device autoloading is deprecated and will be removed. [ 315.859688][T12330] EXT4-fs (loop5): no journal found [ 315.865008][T12330] EXT4-fs (loop5): can't get journal size [ 315.945808][T12330] EXT4-fs (loop5): failed to initialize system zone (-22) [ 315.979145][T12330] EXT4-fs (loop5): mount failed [ 316.122251][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'. [ 316.256958][T12330] netlink: 'syz.5.2299': attribute type 13 has an invalid length. [ 316.273737][T12347] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 316.662974][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2306'. [ 316.679564][T12366] loop5: detected capacity change from 0 to 512 [ 316.686276][T12366] ext4: Bad value for 'max_batch_time' [ 316.802954][T12374] syzkaller1: entered promiscuous mode [ 316.810304][T12374] syzkaller1: entered allmulticast mode [ 317.006710][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2312'. [ 317.039175][T12385] netlink: 'syz.5.2313': attribute type 10 has an invalid length. [ 317.048638][T12385] netlink: 'syz.5.2313': attribute type 10 has an invalid length. [ 317.057836][T12385] dummy0: left promiscuous mode [ 317.067505][T12385] dummy0: left allmulticast mode [ 317.081223][T12385] team0: Port device dummy0 removed [ 317.091445][T12385] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 317.150392][T12389] rdma_rxe: rxe_newlink: failed to add lo [ 317.205979][ T29] kauditd_printk_skb: 748 callbacks suppressed [ 317.205992][ T29] audit: type=1326 audit(319.134:43964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 317.236350][ T29] audit: type=1326 audit(319.155:43965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 317.259381][ T29] audit: type=1326 audit(319.155:43966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 317.282374][ T29] audit: type=1326 audit(319.155:43967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 317.305460][ T29] audit: type=1326 audit(319.155:43968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 317.328509][ T29] audit: type=1326 audit(319.155:43969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 317.351527][ T29] audit: type=1326 audit(319.155:43970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1ee0f749 code=0x7ffc0000 [ 317.374665][ T29] audit: type=1326 audit(319.155:43971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde1ee11667 code=0x7ffc0000 [ 317.397558][ T29] audit: type=1326 audit(319.155:43972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fde1ee115dc code=0x7ffc0000 [ 317.420468][ T29] audit: type=1326 audit(319.155:43973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fde1ee11514 code=0x7ffc0000 [ 317.709052][T12428] bond3: option miimon: invalid value (18446744071562079972) [ 317.716575][T12428] bond3: option miimon: allowed values 0 - 2147483647 [ 317.726356][T12428] bond3 (unregistering): Released all slaves [ 317.825933][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2326'. [ 318.007097][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2327'. [ 318.170694][T12443] sz1: rxe_newlink: already configured on lo [ 318.203867][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2332'. [ 318.283343][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2333'. [ 318.449123][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2337'. [ 318.589045][T12468] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 319.470473][T12476] rdma_rxe: rxe_newlink: failed to add lo [ 319.746935][T12497] netlink: 'syz.1.2350': attribute type 142 has an invalid length. [ 320.029695][T12499] lo speed is unknown, defaulting to 1000 [ 320.035964][T12499] lo speed is unknown, defaulting to 1000 [ 320.106469][T12499] wg1 speed is unknown, defaulting to 1000 [ 320.114764][T12499] lo speed is unknown, defaulting to 1000 [ 320.762453][T12508] lo speed is unknown, defaulting to 1000 [ 320.794398][T12508] lo speed is unknown, defaulting to 1000 [ 320.979157][T12508] wg1 speed is unknown, defaulting to 1000 [ 320.990357][T12508] lo speed is unknown, defaulting to 1000 [ 321.864678][T12533] __nla_validate_parse: 4 callbacks suppressed [ 321.864691][T12533] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2361'. [ 321.883571][T12533] hsr_slave_0: left promiscuous mode [ 321.890888][T12533] hsr_slave_1: left promiscuous mode [ 321.899029][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2362'. [ 321.931443][T12535] rdma_rxe: rxe_newlink: failed to add lo [ 321.975367][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'. [ 321.984416][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2370'. [ 321.993416][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'. [ 321.996731][T12542] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 322.020454][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2370'. [ 322.029617][T12538] netlink: 'syz.0.2370': attribute type 6 has an invalid length. [ 322.038071][ T29] kauditd_printk_skb: 641 callbacks suppressed [ 322.038084][ T29] audit: type=1400 audit(324.207:44615): avc: denied { write } for pid=12541 comm="syz.5.2364" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 322.053735][T12547] lo speed is unknown, defaulting to 1000 [ 322.080835][T12547] lo speed is unknown, defaulting to 1000 [ 322.098040][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 322.108884][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 322.126667][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 322.136507][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 322.151848][T12550] all: renamed from team_slave_0 [ 322.187899][T12552] loop5: detected capacity change from 0 to 512 [ 322.196286][ T29] audit: type=1107 audit(324.364:44616): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 322.212850][T12552] EXT4-fs: Ignoring removed bh option [ 322.307197][T12547] wg1 speed is unknown, defaulting to 1000 [ 322.317510][T12547] lo speed is unknown, defaulting to 1000 [ 322.339344][ T29] audit: type=1326 audit(324.522:44617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.6.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 322.367838][ T29] audit: type=1326 audit(324.554:44618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.6.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 322.392105][ T29] audit: type=1326 audit(324.554:44619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.6.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 322.416334][ T29] audit: type=1326 audit(324.554:44620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.6.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 322.440475][ T29] audit: type=1326 audit(324.554:44621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.6.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 322.464331][ T29] audit: type=1326 audit(324.554:44622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.6.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 322.479839][T12552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.488539][ T29] audit: type=1326 audit(324.554:44623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.6.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 322.524429][ T29] audit: type=1326 audit(324.554:44624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.6.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f099274f749 code=0x7ffc0000 [ 322.585051][T12552] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.2368: corrupted inode contents [ 322.602619][T12552] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #18: comm syz.5.2368: mark_inode_dirty error [ 323.235484][T12552] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.2368: corrupted inode contents [ 323.252273][T12552] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #18: comm syz.5.2368: mark_inode_dirty error [ 323.265972][T12552] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #18: comm syz.5.2368: mark inode dirty (error -117) [ 323.288951][T12552] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 323.480947][ T5258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.568936][T12582] loop5: detected capacity change from 0 to 512 [ 323.575981][T12582] ext4: Bad value for 'max_batch_time' [ 323.659270][T12588] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 323.745916][T12588] loop5: detected capacity change from 0 to 2048 [ 323.774703][T12588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.790184][T12588] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2378: bg 0: block 345: padding at end of block bitmap is not set [ 323.813933][T12588] EXT4-fs (loop5): Remounting filesystem read-only [ 323.828806][T12593] syz!: rxe_newlink: already configured on team_slave_0 [ 324.168775][T12603] netlink: 'syz.1.2383': attribute type 10 has an invalid length. [ 324.230005][T12607] bond4: entered promiscuous mode [ 324.384589][T12615] xt_hashlimit: max too large, truncated to 1048576 [ 324.631196][ T5258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.722153][T12612] Set syz1 is full, maxelem 65536 reached [ 324.731595][T12626] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 324.956574][T12636] ip6t_srh: unknown srh match flags 4000 [ 325.338372][T12651] loop5: detected capacity change from 0 to 512 [ 325.370682][T12651] ext4: Bad value for 'max_batch_time' [ 325.558068][ T4129] page_pool_release_retry() stalled pool shutdown: id 55, 34 inflight 121 sec [ 325.561808][T12655] pim6reg: entered allmulticast mode [ 325.739636][T12660] netlink: 'syz.5.2402': attribute type 10 has an invalid length. [ 325.788944][T12660] bond0: (slave dummy0): Releasing backup interface [ 325.828167][T12660] dummy0: entered promiscuous mode [ 325.853742][T12660] dummy0: entered allmulticast mode [ 325.883229][T12660] team0: Port device dummy0 added [ 326.021816][T12670] loop5: detected capacity change from 0 to 512 [ 326.802556][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 326.802569][ T29] audit: type=1400 audit(329.217:45193): avc: denied { shutdown } for pid=12691 comm="syz.3.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.847734][T12692] __nla_validate_parse: 17 callbacks suppressed [ 326.847750][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'. [ 326.867362][ T29] audit: type=1400 audit(329.238:45194): avc: denied { getopt } for pid=12691 comm="syz.3.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.886466][ T29] audit: type=1400 audit(329.238:45195): avc: denied { connect } for pid=12691 comm="syz.3.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.905603][ T29] audit: type=1400 audit(329.238:45196): avc: denied { name_connect } for pid=12691 comm="syz.3.2411" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 327.058575][ T29] audit: type=1326 audit(329.364:45197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.5.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 327.081755][ T29] audit: type=1326 audit(329.364:45198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.5.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961769f749 code=0x7ffc0000 [ 327.104890][ T29] audit: type=1400 audit(329.395:45199): avc: denied { write } for pid=12690 comm="syz.1.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 327.257858][ T29] audit: type=1400 audit(329.658:45200): avc: denied { mount } for pid=12703 comm="syz.1.2412" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 327.279629][ T29] audit: type=1400 audit(329.669:45201): avc: denied { create } for pid=12703 comm="syz.1.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.298711][ T29] audit: type=1400 audit(329.679:45202): avc: denied { write } for pid=12703 comm="syz.1.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.422639][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2415'. [ 327.488182][T12710] netlink: 'syz.5.2414': attribute type 10 has an invalid length. [ 327.631779][T12715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.721698][T12715] wireguard0: entered promiscuous mode [ 327.727226][T12715] wireguard0: entered allmulticast mode [ 327.860949][T12723] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2420'. [ 327.977828][T12731] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2423'. [ 328.290253][T12743] netlink: 'syz.5.2426': attribute type 30 has an invalid length. [ 328.358049][T12752] geneve2: entered promiscuous mode [ 328.363604][T12752] geneve2: entered allmulticast mode [ 328.372146][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 328.379727][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2425'. [ 328.389975][T12739] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2425'. [ 328.403859][T12755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12755 comm=syz.5.2426 [ 328.425290][T12743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12743 comm=syz.5.2426 [ 328.470494][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2429'. [ 328.480785][T12757] netlink: 'syz.6.2428': attribute type 10 has an invalid length. [ 328.707038][T12769] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2432'. [ 328.778371][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2431'. [ 328.832689][T12777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12777 comm=syz.1.2435 [ 328.929123][T12791] loop5: detected capacity change from 0 to 256 [ 329.100387][T12801] netlink: 'syz.3.2442': attribute type 6 has an invalid length. [ 329.121136][T12801] lo speed is unknown, defaulting to 1000 [ 329.128412][T12801] lo speed is unknown, defaulting to 1000 [ 329.223853][T12801] wg1 speed is unknown, defaulting to 1000 [ 329.230422][T12801] lo speed is unknown, defaulting to 1000 [ 330.532872][T12816] loop5: detected capacity change from 0 to 512 [ 331.136699][T12839] lo speed is unknown, defaulting to 1000 [ 331.142938][T12839] lo speed is unknown, defaulting to 1000 [ 331.202748][T12839] wg1 speed is unknown, defaulting to 1000 [ 331.209362][T12839] lo speed is unknown, defaulting to 1000 [ 331.791844][T12849] loop5: detected capacity change from 0 to 128 [ 331.812469][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 331.812482][ T29] audit: type=1326 audit(334.479:45528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.6.2452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f099274f749 code=0x0 [ 331.901482][T12852] netlink: 'syz.1.2455': attribute type 2 has an invalid length. [ 331.910553][T12852] netlink: 'syz.1.2455': attribute type 2 has an invalid length. [ 331.914577][T12849] veth0: entered promiscuous mode [ 331.919801][T12852] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 331.932363][T12852] __nla_validate_parse: 11 callbacks suppressed [ 331.932375][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2455'. [ 331.950757][ T29] audit: type=1400 audit(334.584:45529): avc: denied { setopt } for pid=12848 comm="syz.5.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.999286][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2453'. [ 332.021863][T12855] veth0 (unregistering): left promiscuous mode [ 332.035708][ T29] audit: type=1400 audit(334.710:45530): avc: denied { create } for pid=12857 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 332.057778][T12858] siw: device registration error -23 [ 332.065492][ T29] audit: type=1400 audit(334.731:45531): avc: denied { write } for pid=12857 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 332.086450][ T29] audit: type=1400 audit(334.731:45532): avc: denied { connect } for pid=12857 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 332.093995][T12860] futex_wake_op: syz.3.2456 tries to shift op by -1; fix this program [ 332.115369][T12849] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 332.116066][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 332.123960][T12849] FAT-fs (loop5): Filesystem has been set read-only [ 332.233994][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2459'. [ 332.285849][ T29] audit: type=1326 audit(334.973:45533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12868 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 332.308900][ T29] audit: type=1326 audit(334.973:45534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12868 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 332.337086][ T29] audit: type=1326 audit(335.025:45535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12868 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 332.360164][ T29] audit: type=1326 audit(335.025:45536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12868 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 332.383179][ T29] audit: type=1326 audit(335.025:45537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12868 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962ce5f749 code=0x7ffc0000 [ 332.532298][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2463'. [ 332.611662][T12849] bio_check_eod: 7 callbacks suppressed [ 332.611677][T12849] ÿ: attempt to access beyond end of device [ 332.611677][T12849] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 332.631126][T12849] buffer_io_error: 19 callbacks suppressed [ 332.631139][T12849] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 332.675475][T12855] syz.5.2453: attempt to access beyond end of device [ 332.675475][T12855] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 332.688901][T12855] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 332.917064][T12893] netlink: 'syz.5.2466': attribute type 10 has an invalid length. [ 333.134603][T12903] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2471'. [ 333.193109][T12904] lo speed is unknown, defaulting to 1000 [ 333.200491][T12908] netlink: 'syz.3.2472': attribute type 10 has an invalid length. [ 333.210914][T12908] netlink: 'syz.3.2472': attribute type 10 has an invalid length. [ 333.220235][T12908] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 333.232113][T12908] team0: Port device dummy0 removed [ 333.242953][T12904] lo speed is unknown, defaulting to 1000 [ 333.311545][T12904] wg1 speed is unknown, defaulting to 1000 [ 333.318481][T12904] lo speed is unknown, defaulting to 1000 [ 333.696326][T12934] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2476'. [ 333.924838][T12940] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 334.147154][T12942] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2489'. [ 334.179808][T12942] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2489'. [ 334.188766][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2489'. [ 334.201670][T12943] siw: device registration error -23 [ 334.295121][T12947] xt_hashlimit: max too large, truncated to 1048576 [ 334.471819][T12958] bond0: (slave veth3): Releasing backup interface [ 334.518288][T12962] netlink: 'syz.1.2486': attribute type 7 has an invalid length. [ 335.899532][T12982] lo speed is unknown, defaulting to 1000 [ 335.907974][T12982] lo speed is unknown, defaulting to 1000 [ 335.954948][T12988] loop5: detected capacity change from 0 to 512 [ 335.992412][T12988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.994442][T12992] netlink: 'syz.1.2496': attribute type 4 has an invalid length. [ 336.119092][T12982] wg1 speed is unknown, defaulting to 1000 [ 336.203600][T12982] lo speed is unknown, defaulting to 1000 [ 336.239770][ T5258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.352110][T13003] netlink: 'syz.5.2498': attribute type 10 has an invalid length. [ 336.389982][T13003] dummy0: left promiscuous mode [ 336.408214][T13003] dummy0: left allmulticast mode [ 336.438426][T13003] team0: Port device dummy0 removed [ 336.455859][T13003] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 336.579678][ T29] kauditd_printk_skb: 971 callbacks suppressed [ 336.579693][ T29] audit: type=1326 audit(339.489:46510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.0.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde1ee42005 code=0x7ffc0000 [ 336.610954][ T29] audit: type=1326 audit(339.478:46509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55e55cb829 code=0x7ffc0000 [ 336.635044][ T29] audit: type=1326 audit(339.520:46511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55e56265e7 code=0x7ffc0000 [ 336.659211][ T29] audit: type=1326 audit(339.520:46512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55e55cb829 code=0x7ffc0000 [ 336.683251][ T29] audit: type=1326 audit(339.520:46513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 336.707405][ T29] audit: type=1326 audit(339.520:46514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12981 comm="syz.0.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde1ee42005 code=0x7ffc0000 [ 336.732051][ T29] audit: type=1326 audit(339.573:46515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13011 comm="syz.0.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde1ee42005 code=0x7ffc0000 [ 336.756256][ T29] audit: type=1326 audit(339.615:46516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55e56265e7 code=0x7ffc0000 [ 336.779226][ T29] audit: type=1326 audit(339.615:46517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55e55cb829 code=0x7ffc0000 [ 336.803601][ T29] audit: type=1326 audit(339.615:46518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.3.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f55e562f749 code=0x7ffc0000 [ 336.846525][T13013] __nla_validate_parse: 5 callbacks suppressed [ 336.846540][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2501'. [ 336.935152][T13013] loop5: detected capacity change from 0 to 512 [ 337.026696][T13013] ext4: Bad value for 'max_batch_time' [ 337.081861][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2505'. [ 337.094482][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2502'. [ 337.285385][T13023] syzkaller1: entered promiscuous mode [ 337.290884][T13023] syzkaller1: entered allmulticast mode [ 337.910335][ T3011] ================================================================== [ 337.918439][ T3011] BUG: KCSAN: data-race in set_nlink / set_nlink [ 337.924771][ T3011] [ 337.927086][ T3011] read to 0xffff88810785a780 of 4 bytes by task 11726 on cpu 1: [ 337.934708][ T3011] set_nlink+0x29/0xb0 [ 337.938774][ T3011] kernfs_iop_permission+0x1e2/0x220 [ 337.944052][ T3011] inode_permission+0x2de/0x3c0 [ 337.948904][ T3011] link_path_walk+0x779/0xe30 [ 337.953580][ T3011] path_openat+0x1c0/0x23b0 [ 337.958100][ T3011] do_filp_open+0x109/0x230 [ 337.962614][ T3011] do_sys_openat2+0xa6/0x150 [ 337.967214][ T3011] __x64_sys_openat+0xf2/0x120 [ 337.971991][ T3011] x64_sys_call+0x2b07/0x3000 [ 337.976681][ T3011] do_syscall_64+0xd8/0x2a0 [ 337.981200][ T3011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.987103][ T3011] [ 337.989427][ T3011] write to 0xffff88810785a780 of 4 bytes by task 3011 on cpu 0: [ 337.997055][ T3011] set_nlink+0x99/0xb0 [ 338.001129][ T3011] kernfs_iop_permission+0x1e2/0x220 [ 338.006405][ T3011] inode_permission+0x2de/0x3c0 [ 338.011256][ T3011] link_path_walk+0x779/0xe30 [ 338.015925][ T3011] path_openat+0x1c0/0x23b0 [ 338.020426][ T3011] do_filp_open+0x109/0x230 [ 338.024937][ T3011] do_sys_openat2+0xa6/0x150 [ 338.029528][ T3011] __x64_sys_openat+0xf2/0x120 [ 338.034294][ T3011] x64_sys_call+0x2b07/0x3000 [ 338.038973][ T3011] do_syscall_64+0xd8/0x2a0 [ 338.043471][ T3011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.049355][ T3011] [ 338.051676][ T3011] value changed: 0x0000001f -> 0x0000001e [ 338.057389][ T3011] [ 338.059711][ T3011] Reported by Kernel Concurrency Sanitizer on: [ 338.065852][ T3011] CPU: 0 UID: 0 PID: 3011 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 338.075146][ T3011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.085194][ T3011] ================================================================== [ 345.160765][ T8340] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.206981][ T8340] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.244992][ T8340] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.301550][ T8340] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.372226][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 345.372240][ T29] audit: type=1400 audit(348.710:46707): avc: denied { read } for pid=3050 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 345.447323][ T29] audit: type=1400 audit(348.794:46708): avc: denied { search } for pid=3050 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.468428][ T29] audit: type=1400 audit(348.794:46709): avc: denied { search } for pid=3050 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.489719][ T29] audit: type=1400 audit(348.794:46710): avc: denied { search } for pid=3050 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.510993][ T29] audit: type=1400 audit(348.794:46711): avc: denied { read } for pid=3050 comm="dhcpcd" name="n39" dev="tmpfs" ino=6557 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 345.532253][ T29] audit: type=1400 audit(348.794:46712): avc: denied { open } for pid=3050 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=6557 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 345.554842][ T29] audit: type=1400 audit(348.794:46713): avc: denied { getattr } for pid=3050 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=6557 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 345.583097][ T29] audit: type=1400 audit(348.836:46714): avc: denied { read open } for pid=13051 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.608350][ T29] audit: type=1400 audit(348.836:46715): avc: denied { getattr } for pid=13051 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.636655][ T29] audit: type=1400 audit(348.952:46716): avc: denied { add_name } for pid=13050 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.761299][ T8340] hsr_slave_0: left promiscuous mode [ 345.769761][ T8340] hsr_slave_1: left promiscuous mode [ 345.775495][ T8340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.784119][ T8340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.793134][ T8340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.801584][ T8340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.812702][ T8340] veth1_macvtap: left promiscuous mode [ 345.819018][ T8340] veth0_macvtap: left promiscuous mode [ 345.872422][ T8340] team0 (unregistering): Port device team_slave_1 removed [ 345.882204][ T8340] team0 (unregistering): Port device team_slave_0 removed [ 346.116535][ T8340] IPVS: stop unused estimator thread 0...