last executing test programs:

6m56.691059242s ago: executing program 32 (id=320):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

6m37.334543689s ago: executing program 33 (id=459):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x86f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)

6m34.897579854s ago: executing program 34 (id=479):
syz_clone(0x6063100, 0x0, 0x0, 0x0, 0x0, 0x0)

6m4.176707885s ago: executing program 35 (id=498):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000038c0)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="08c5399adea47f312c115fc8d091878e9e1fa9af1ce470e1bcbe6fe4c5186fde10633b9683035c7e1e5674e0fbff132324bed08c5c5541b3334dff0bb0b2d634f44c497426a402d542716d43b84d6756f171170dc71343f42eebe3f5482b8f0fd72a537af71ec7f575b9ff9cc5f917d568155446a59f009d5cd5e27eb6619bb8ec5d7bfd6ce4d25311649a53cf19b8e0e81ef050bc65a7ee9a9b92794b3b6d0324f95accb8bce12d18f540cf1617c6de46a8b54d", 0xb4}, {&(0x7f0000000740)="f549ed661b5b221d3cb01752bf0f6edda5b86286b3242704ae048cf813e31a432b2b44bb64b9eaee0eb38dabd62d7b05d44d7d02bbfabd270401a14d66e7279dd797f7114b9bd184b0f2bef9e2cc1cb27f60ac72c9082e6130ae4c577de690479bbcc58417a67adaf5100bdba675117cc0c8879f08416913fed9336dda58fd0dba1c209b7d0fb9abde55961d4daf0ca29bdb95cc1115ea78db08c6908c386fe8b96a8f3f483cb662e9e778016a5347ea53", 0xb1}], 0x3, &(0x7f0000000940)=ANY=[], 0x70, 0xc4}}, {{&(0x7f00000009c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000000a40)="15adc91aa283d39bfea2df76375a4d0bd236325b6a6c3f9745ad1d37c3fa35407dc7bb9da87003cd515e2bb255d383ca4a820206ded99dc07b7f45307c4660eb52fd3b19b67e1eecef1b85b4704de459ca2a139fd9adde6d933453268c91c1893d78db085ac2ce5db9d9e9f2785fd981e8188e7db70fe6df0c38c334dd0c7de15c26fcd6590da5e330e0d2694009a5b82c0463c8b731be61feb0e4f163ea49dfdc843ced90b2d1119295b7f6d671453a2dd1ee318733b3878a1a1d13dd3409b349a057f78dbec12b6e6bd6eb3f589691", 0xd0}, {&(0x7f0000001340)="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", 0x1000}], 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r2, @ANYRES8=r2], 0x30, 0x24000000}}, {{&(0x7f00000023c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003980)="feec51a93db914f155dffbb52d75c07708d83c09caa20a3de02ef93373ff60eb1fcb3cfbd8fd2f44d4ba457b5095bd7f7b2ec9b9e6f00fe26e98877d5205891832645e7b2b43f5a4215efc1dce80f08b86a5d3e88494a9768573eddfb5c75ce3f8c6779c37590a11cfb984d700f1112d7326961e8336c9bec73706d0dd30a50c08ddf57a7670be4bd800a6f1957ad6a632d48d5377bfc66460fdbc960b927b201931931c19375225a0f84bb87a44492d2f215a2980c2fbb8218cca1518a960be61e6d1c3e526cbc3706771d6bb9347c17a76ec65b64d6587ffa73cd8d116d143dd35738e13405e45a2e90df080ccd2abd6f3005458652a4c428e7a9a583e8b75b998b62df43d7ecc0dd85736b570e53344b4d8d2cd4c5875d54cad922531e499a14883fe0be9835ca9641d7b49cfe70ded8a7296ad7224c80056bf0c490890dfe2eed61082c639d2f9fddcc4f855f4776825d86245653f8d29943366b534e123277255e298872f2504a77df8cd02634394994e70f6e5558c5c2fc5c7e5cd09843547e7f02420f7404276a047f7087b4acb8b5dd26ae1df23bc036acbd8483c10d019e1c52271c63ce44c27d42c5ae7faf519da1e7a99317aa856c9b7916bdde433c4307cd79f49ef68a0eeec6f7e8c2b45ed7e937510712b8d1f030d81484082d01b5cdf4c3a6ec788a1c956a6131117bd3134c001c066aec0c2d479898fdaafbe51484d6f79c9f96d226b88659baa42fb105e75c72c9501104facf1f4e8fede1fb48d27325ecf8574aea84ff0b2254a1bc70ec8021c732b3f3aaaaa595d6e75280ac127489363b11918a15ce2777eec6803c93fcbeeabc774fb3f88d5f695f363bace161c5a56946c244a61dc75abe9fc647b2084a3c51053fddbf1f82dee820fd095266e252a2947a1ab155da24d84b2ff01cee0340365d8c9f3f24c8121adaf290788165f850081b820394cc9d3c3b5a301665acce74bafd22cdc9c883ddfc06cb5127785ab01342c2ecaa9a399500bcae2b4b2a05d11276f70cc1d148b95093a67f504335c4a2b3311988757ee73565d6fd49e139fcfc44438d5e821342b48504e4ef753e506a70b7a4ebed3bd0ad0187ac80f6a31ea8638388431c6590c29cdd4439b92ef0568822568843caa78540c19447597e5cf2db1867966c1f5027f8f552209616215154d2a2a772b084469285f198d73dfa54093b3fa9a6dec37841e31bd7d4abbb99fcb32f5f8bb29daa73b8c9b6374cf2ce019b67092c00e4d327f63870908ff6f75717924c0df3bdb0d8266439992ee2b8007aef41eee823072881084951906fd63b48eec4741f88ad3888c4cee55ecae95b51fd66d2dedfb350b859aed8af1ecf22dcbfadeffccd1780fddabf8cd110730f9f41398b227cf98f3ba07d4a9e1a087c7b768d5985f5620660dd2d6e357184e96ffeae1c467be8d38239145644f841beb19652fd01c2945236fc8e829ce8e5d70c30bba9bb8f0ce01945267585a9a8b7425a702bdf19ef9a86049540dbe7c256c8fa6b0c5be7a94b1eb657ee35f6d71f7082d8d78d8b334b34f56e26f1022d7e9c7b4ba52dac795b175ce93576d4dc8ab1b199545afe847e393f8e9124bcc084cbc27def699498e3463bef932fa44da8969a722b70a2a14414865a37d333faa1f1cd2812e5463e6cea9afd6fc4407442263906c9cdaea333cc8db7341e17bf9a33d63e2dd345b44a19ea9a645ea59d3df16fb4c1917e95fb12c093db39b45e9ce1ec328cc82dca20d354bd123f759a9dc0f52b6e536d9ce9ac19b3bd70fba6a7bba03e9f6460f8027ef23315be4d9d16fcf4bb3b5881d628e9e7d5e2db0ff5648c8b5ee6dafdc96fa36e74d932a02bb8b3a6cae54ebc3bab1b547f2c56a820afb4142bc8d52fad9619d647db157eaaf360517fe9e3914d8038689791db323b2a9ccf04fc1a32103820247aac876b72e52388588775cabdf10798439c542f38601304ddfee52d9b51b272f8ad918b34e2eb44163886fee55a779d956df0227f56102cf6818ba89ba6a6351c70592498dd44a93fe8a73bd8b46e83723b6a2859bf71cfefd58d35f0864fa46252efa81462b99361e0cb7dc97d03d011e7671cb728a4fa9bb5b664969c33836123d2210b662f2dea363a8905e0851cfdebf4e776057d12d403815a962df1e56b542d4736ff8680144e18119970c74dd791e0a798ef1453c79a1b0be29e7298c084f19a32c2142a6b5bb3e28eb73a62eb45f9b5bfbb09fd21ed52384b675b889f0d465f24ac16416db1ce47361e6337348d5caa681af20e6db665dc64cfb95cbeec8a2ce0fcb0ffbc06bebe845724bea707857d328f25df32040672aac7462e1dd945fcd68aca8330bd18d4b8116657c3c49553d1fddd46407210304a0410df7bdb54c731efe8e8f4741cbef3d09c146c1d7286a33548904e5d951086f01157b8f91046b31b710b243ad411b429c5ce45970fb03cd0353772db8554510fb8f373318ba4b54db317160c6857b8bb128dcb3467dcc2fd235740df7c68f5e08b827cb23c7939ac3e83dc91b2349e62bba919896bdce16ac5c4adf793dc5bb35b51a226377de59a5ed9156908a106f55f1673fa39403714be56a733897e03621bf7851abb844370b0256b855aff21e7710f461008ed06d04c44d0d212b649b500a65ce2cae9c1550fad49b6383bf55ea79f3f99ec8f817d781fd69704881e37b5a987d9a7b125f625e0c470c0322dc62bb55a747166ac9a9ef65c05ecb67ad1e7be32d9333057425f4d2034136dc0826ca861570d9ff1debeedd51ea63ce723f506b0f378f57bc6cd9117b42843119e9864e40d1848b6c6104efa19587f7376acbe7bd712449318145b7009da6aaed8ad4e516363fb0ac56ab9a891b503fe6ef03f0e2468f0aa17a6533ff80b552d5463fdcde6ea8638ab7c1e5969d7a2cade071e0c0921704fab0e27a579655d496f836d390942fea68a84ea8edbcdaf4d3a88b03a462b34a66642988ce1cc8f5e987f09d38a023189c0838438fcdff12d13ccec5363673fdc8d506092f8e3ac3700f2e8484d9a63d8d5b8d73754c21aca77e7681431241f41a597e36b8a79834f589aa0ef718f676c2ff357de26b90ba9895ebac290d39602b2dc0ca82a4d12d4ee092c3b9f739b5b4950bd039600782d79df2b94fb73fe9ca2ce7af483cd3a841bd2ac0e4660bb7491a5ffa51e36c31a57bca63e2a09fed37159410c02ee1080d9de6083113af442605e54dd904a146ecfb81919b63a95eae3be6f2db540a8e49a736c4c80bb0c25e2a7e4b0d50892453ebc2ce6de2d9d91b9a690593d7b8bdc80ac5ca51bb95e5074d281032acdc66cf25306aec4bdf83c59a1aaf6f723865a5fc853e4a212ee31d9bd9378094ac26fea2afbcc0ff33bddc8546025eb217e53d8cce675cf4048aaa2420e5836c54f6f8262951e8fbb7ffe37aece404005d910298e5b624d716b33f00c4f26e5088ce55b401fcbab05d2d82c555edd3915daf32a9894dacb8dda764f07bcdecae096c7d584560f068944f06ae6aa734bd205d6d5191eb5717b056c04b2a501f91beb6239b55a75b5f786b1aa826a7075506499360d172abf90a6897267b556e8c968e278980149b651823691bd8e88e0fe0a96cb68297027462c74a9d1837dd3f237cce9a1345fb57626d2e383cf98d9181a20dda3903a0f26e463b208a0a9b1aceef2794f2823c7504c7664d0428add957c9f0a40b47a02cfb8cd97035a4cabfb21e55a8ec6784d92bd05d82cfd8b736e7826d3e7e8d2b6863be749e6bdc9fd8dec5c6af6c8ef974f8fe3a8d9f777bd841ebef2ffabae517e620a83123daa1def530398d9c8a18d8227c176988920f374672564652399cddc8fa36ba08e5bbd2a42feb016fc0831fb6a57d6bfaab5c2771797bacddca3a96a521aa9422dff35669c7dbe4d3d5fe990ccbb03f82e3f8b8c5b340cdaa4dc051d63b6a4f25081298109fde7f0cfb7fe459369657f1fdfa40b9e46fb94c3a0bd51acdb975eb11499592b8475e70d14f415d2df4314c6173b1e76539f85bf8ab070fac888e328eddfac3271ed83d1ca43fdfa55bcf304b397c23dc8c0d9c2495ebba2bcd4c9ade2c4e1f43c57236a6ab4a8ba9c7bf6311f9d54dfcc68b6db573359c8afbdbcedc29415b3b6d300cec7005427e59dea3feb35896a7d08b7abd4a8f59004c629dd224573f11111f99e705c59aabbbc2e1924cd9449a2dbecce6ab47bc3f18f0a00827bb5d441505031239d09ba57f7cbd6797d2b8e2bbba68cbb487a960ca9e507d17b11d69a0a5fdc5c5f195899b977826e051e76c5fc19af8ad144c4ccb7532f03381871b6842c964fd1d7f5800c03df99a7047424867ccb9b35c8cbe261225ddac03ac373db51a3da2a025207c231c1fcf69f2ff09d94ac8e9ff981e791e826cf232670b008fa0b65724722954ae363ae4e4435788ef4ae815afa876ccd6259ed8cf0a4a650d213889ae0f2447a53528ed0df88cfa4709381b0d11d547e0f740501c511b96dad0690cd6a3cbc237d55b6eabe36915a633addede4b7d9fe3e83e188248bd3bc20eb6334f56bf4d518b4aab7b2130b51c673a130151741cf066ac52fff899431a2651c0d71719c2e7c8583f0e3dcb8293932e7b9d8f1043ea585d4076977f912848613fac86e3ed6a15cc56599d0c989b60e3dcac123ebbbf711905d58121f9fc4bb2d0cf9064b55407412779f3dd61ba7c6642c618b61309a6f8cb3fa03343b72750d86902092920bd82051d7d28e41a7f54d348c1cfb49e0310753830cee4ddae4861f5cb495efb017a25b7e5a8d8abdd60082d60dd787ab749d2f48322d795eacacd6fe53ecdbdd420df91b47904b2472d0ea47bc89932b77ebe7fc540ea6a19587a783b050793416af237818b14f1d27c701b822b5af5c6b35632d2024153c3d7edbd84a64dcf2f21bb3c5fd4cbd8e6a3a2ed7a230be82fb898cbbfe7a2ebc312859eaa193380016081a0fcbf24b1cf99875c6112f591c4f2999a4aaafb8f7f0333be1ce8eee6e90cb5d61e670a0ce693f198add2468b3d3924956bae2c328266a87757cd009c52bef24970afe0c6e2f7f98c0fa954565c2efc85bd08e365cdb637de6b9833d0703ecb84215cedab83dcd882cacda77a9dd53322871ecee1e0454669d15d662dc5e3615da590907ed55b5cae4296be90ec34fbacd24eeaa20fdb7e8886619eb67352ba1a36cb89a44e9e265a2e0b50f39b80238cc9f12f1fefeacd33c4f7ebb55286e8b07fcf19343203581297b4248900339d5942821bb4a829a1e344d7da902faa979a895af18c3bd9879533507d736e07f1c587c5e2ed107052b112c1c941101cc59157b92fac23de209774f1f92bc1527cd3bb9299f51adb702a27244acbed339d7d035f512f3c5ee27e3cbbccd625028ffd93592a18c219e24858fa23d1d5e8b546c520cb936d9567f9eb74be6749a4beebe2b4c90717a2cf11a6d2911dae9c3d3a513f9c76934853c6eeaf828c2db1b46303b385360dc3895e65b837bd46f42ed12e20b92ec5bdf159a78c1cd846cab9e37e9f8ddc31a52bed12f8eac5d114adef8a3408660952a1963f996a44af3f915a4d7a83b1f426072863582c0e75a09ea1b4ad0cae73c3328f037996eec6c8bf197f63acc87d94f8235bf5af250325eb82021b2df814b15701c0bd5191d9029f1abc60efdc5709496cd4010e51934d99a53f8b772a1b1e14cd79abf481c0ce9c8bd1422448049e575b9d7b853a96b389fe5ecf846b718af7f2558119107e43656f7f454ebab1c1a1f648fe2ce2042a611e663bd7ab04ee9d21c539d31238eaf7839945fb1d3ea75070e1fab156af3d4c65e930ac0bd1997278574d6b50ea0365a2f4", 0x103f}], 0x1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00', @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2, @ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000001000000000000f0ff000000000000000000", @ANYRES64=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000180000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32], 0x148, 0x24000011}}], 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11)
pwritev2(r3, &(0x7f0000000cc0)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0xffff, 0xc, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x321)
getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000100), 0x2)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
syz_clone(0xa1302400, 0x0, 0x57, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x2, 0xf}, 0x3830, 0x1, 0xbd4, 0x0, 0xe3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x800009}, r0, 0xbfffffffffffffff, r6, 0xb)
writev(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r8, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)}}], 0x1, 0x24004044)
setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000200), 0x0)

5m46.35474661s ago: executing program 36 (id=586):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000600)={0xdf8, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0xffffffff, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50bd20538adacbf67a000000004000"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10)
syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x80000)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
listen(r3, 0x5)
io_uring_setup(0x1334, &(0x7f0000000040)={0x0, 0xc8a0, 0x2, 0x3, 0xbd})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000001c0)={0x1, 0xf7fffffffffffffd})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a800000000300000000000014000700000000000000000000000000000000010800040001"], 0x38}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4], 0x38}}, 0x48800)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc00000000000000007fbb4b05000000ac1e00010000000000000000a05d000000000000000000000a0030803c000000"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
pipe2(0x0, 0x4800)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)

5m44.308968414s ago: executing program 37 (id=602):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101002)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40e00, 0x4d, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xd08, &(0x7f0000000040)={0x77359400})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="21000000000000e2872b6bf1018fc61081b2157984bf40002800128008000100687372001c00028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="0500070001000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000240)={0x3, &(0x7f0000000100)="607c52c06677"})
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r9, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdff", 0x3}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r9, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r11=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r11, 0x25, 0x2, @void}, 0x10)

5m41.26388956s ago: executing program 38 (id=617):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
prlimit64(0xffffffffffffffff, 0xc, &(0x7f0000000200)={0x400008, 0x400000008c}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}], [{@fowner_lt={'fowner<', 0xee01}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1cb)
r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
mkdir(0x0, 0x190)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1000}]}, 0x2c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$P9_RGETLOCK(r3, &(0x7f0000000640)=ANY=[], 0x200002e6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x20, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181100", @ANYRESHEX=r3], &(0x7f0000000600)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x2, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r2, r0], &(0x7f0000000700)=[{0x2, 0x2, 0x6, 0x6}, {0x5, 0x4, 0xb}, {0x5, 0x4, 0xc, 0x6}, {0x5, 0x4, 0x7, 0xc}], 0x10, 0xc}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000180), 0xd}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = socket$inet6(0xa, 0x802, 0x0)
fchdir(r1)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00')
pread64(r3, &(0x7f0000032400)=""/102349, 0x18fcd, 0x1c2a)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)

4m58.108993003s ago: executing program 9 (id=896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000130a0300000000000000000002000000090002"], 0x34}}, 0x4000040)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x1}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000040)="dc92f2d5213ba376328309d6661c4c71369ede3fd771d69f06d288de20785f7dad13a85fa68d15e772e77d967152ba877f0140c98822048e4c6be4256918bb1a4824f7801e45e1bb74dbef371166963860be7edcec955ed33d110f96802fb0a53bfd4c4e46e6272ae3e1783b12717e9efc4c756cc30cc1223b9e395e0fcc207203f11f277a6a7375397ada8de764a34654cf85e2dbf54ede3c26569883888777ec39732ff7555d595ffe4509f63a09161501", 0xb2}, {&(0x7f0000000100)="68507e56aeacd84abaa91da0189d5029fb14befdadd7c59c6086c433130b4dc7658e0023e4e6e80a47cd7232e50ccec6dd3d83f5924a27", 0x37}, {&(0x7f00000001c0)="8f235a8e5b9837dfe2e3a9035c369359e911159c39c26460afa21f24a626034e5a96cfe4", 0x24}, {&(0x7f0000000280)="3dae38277cad950efb8b180814e42b0116e86ad8f0ccea58b041ceca06e26254a74809718668aa1d159b4f6242e03d18c4b56b09e22a1b050037c5f6f59be238f858ba4ffe67f37f791c3e9780e85135a7532fb66396aec359d2b4d5d22d47ee2ac139d083f4e9791f34462b5d01a09a62d74a2ed321cbe31e5445d5a7f6ff0263c2ef3076759bc0b691ec5ab1aa3afedc84a3398968ab3e01f29fc57b6478125c222c09e3d913099857f2fa628a65ffaf1877e4617819c85a7880a379dd6e02bdadf17eafbaa01009a37464656a0cfb01e82d06", 0xd4}, {&(0x7f0000000380)="21ffb3e7b2689a250cf2a8f8bc87a4695fad35941a7d480a9d25e67f64bef592660635c84f039fac210422e560cd71ad00e88d8ca3a9bc00db03207537eddc99db8ebc8eef4dc0", 0x47}, {&(0x7f0000000400)="cd8f5f2438e936971483d42a38869cc545e99a19b334f6d17b14e5f30718dab1d45ccff1a68904b8ddc9b8cc17d786", 0x2f}, {&(0x7f0000000440)="c42564833ff1afbb1dd7585928d4ae26b794830e0e4006e65d3479ba5cd69ca8b767f446a4009e3586f5e524a429af432f533c3986fe66793d55c63be1bdd89ede6787db32f9174f6a379e4099d21a96b2cf09975ce33defec13c24a9f3d3f03a545f54a92a894a4676726962622eab6b0427145393b5d699fcaf348e278f727cc0c971f44565d73f94741605bd93d0f849e22a0cf98ecec5be25fef836651a63ec67edf7376c236d084b5b05a1c7c942c3c08af3c84a64e669f2d9bc1df01d0bc2669d134c41ba097f071228edb26055c20f724664dc1a19bbd13", 0xdb}, {&(0x7f0000000540)="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", 0xfa}], 0x8, 0x0, 0x0, 0x10}, 0x20000040)

4m58.098891843s ago: executing program 9 (id=898):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89ff, 0x0)

4m58.083219704s ago: executing program 9 (id=899):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000046, 0x4)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000)
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000400)={[{@grpquota}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0x4, 0x3, 0x0, 0x8, 0x6, 0x6, 0x20000001000, 0xffffffff, 0xfffffffd})
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x4580, 0x3e4e5aba, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
munmap(&(0x7f000025f000/0x1000)=nil, 0x1000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)

4m56.930342348s ago: executing program 9 (id=904):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10004d, 0x0, 0x6, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000100))
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
socket(0x2, 0x80802, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0)
setresgid(0xee00, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x18101)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='-cpuset getlb \x00'/26], 0x1a)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r6 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r6, &(0x7f0000000100)=[{0x96, 0x0, 0x0, 0x4, @tick, {0x8, 0x2}, {0x8}, @ext={0x0, 0x0}}, {0x9, 0x3, 0x13, 0xd0, @time={0x6, 0xffffffff}, {0x0, 0x31}, {0x59, 0x7f}, @note={0xe4, 0x7, 0xb, 0x6b}}], 0x38)

4m56.574749116s ago: executing program 9 (id=906):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
fstat(r0, 0x0)
syz_usbip_server_init(0x1)

4m55.501921109s ago: executing program 9 (id=909):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89ff, 0x0)

4m54.435741253s ago: executing program 0 (id=913):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000600)={0xdf8, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0xffffffff, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50bd20538adacbf67a000000004000"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10)
syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x80000)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
listen(r3, 0x5)
io_uring_setup(0x1334, &(0x7f0000000040)={0x0, 0xc8a0, 0x2, 0x3, 0xbd})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000001c0)={0x1, 0xf7fffffffffffffd})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a800000000300000000000014000700000000000000000000000000000000010800040001"], 0x38}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x48800)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc00000000000000007fbb4b05000000ac1e00010000000000000000a05d000000000000000000000a0030803c000000"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
pipe2(0x0, 0x4800)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)

4m54.354812104s ago: executing program 0 (id=914):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000002780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002740)={&(0x7f0000001e00)={0x8dc, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x21c, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x7d, 0x6, 0xd8fa, 0xd, 0xe7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0xb, 0x30, 0x12, 0x24, 0x60, 0x2, 0x24, 0x4, 0xc, 0x1, 0x9, 0x5, 0x24, 0x5, 0x36, 0x3, 0x1, 0xa, 0x30, 0x2a, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x4, 0x7}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x1}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0xa}, {0x3, 0xa}, {0x2, 0xa}, {0x4, 0x2}, {0x3, 0x7}, {0x6, 0x5}, {0x7, 0x6}, {0x6}, {0x1, 0x6}, {0x0, 0x3}, {0x4, 0xa}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x3}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x6}, {0x4, 0x3}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x7}, {0x7, 0xa}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x7}, {0x5, 0x4}, {0x6, 0xa}, {0x3, 0x2}, {0x3, 0x3}, {0x2, 0x2}, {0x2, 0x4}, {0x7, 0x8}, {0x0, 0x2}, {0x5, 0x6}, {0x3, 0x8}, {0x1}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe1, 0x7, 0x0, 0x6, 0x3, 0x5, 0x1ff, 0xd9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x0, 0x30, 0x30, 0x30, 0x16, 0xc, 0x6c, 0x3, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8000, 0x4, 0x2, 0x3e, 0x7, 0x9, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x7, 0x31fc, 0x0, 0x6, 0x1, 0x0, 0x5f]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x3}, {0x1, 0x2}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x1}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x1ff, 0x9, 0xffff, 0x5e93, 0x81, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x7, 0x6, 0xfff9, 0x5, 0x696b, 0xf57, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe89c, 0x5, 0x1003, 0x7, 0x5, 0x88f, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x98, 0x1, 0x7, 0x9, 0x5, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x27}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x668, 0x11d, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x9, 0x10, 0xbed3, 0x5, 0xd, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0xa}, {0x4, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x3, 0x6}, {0x2, 0x7}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x6}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x2}, {0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0x4}, {0x4, 0x6}, {0x7, 0x2}, {0x1, 0x3}, {0x1, 0xa}, {0x7}, {0x1, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x7, 0x6}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0xa}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x7}, {0x1}, {0x2, 0x7}, {}, {0x3, 0x7}, {0x4, 0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x7}, {0x6, 0x4}, {0x5, 0x7}, {0x5, 0x4}, {0x7}, {0x4, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0x5}, {0x7}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x4}, {0x3, 0x9}, {0x7, 0x1}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x5, 0x9, 0x2, 0x2, 0x246, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x51}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x200, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x6, 0x3, 0x1, 0x0, 0x40ff, 0x8]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x2}, {0x7, 0x2}, {0x3, 0x4}, {0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x5}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x5, 0x2}, {0x7, 0x3}, {0x4, 0x4}, {0x2, 0x3}, {0x1}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x8}, {0x3}, {0x4, 0x3}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x5}, {0x0, 0x6}, {0x2, 0x17}, {0x6, 0x5}, {0x4, 0x6}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x9, 0x2, 0x5, 0x2, 0x1000, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x2, 0x23a, 0x7, 0x3ff, 0x10, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1ff, 0x8000, 0x1, 0x3, 0x0, 0x0, 0xfffe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfb, 0x82bd, 0x1, 0x400, 0x209, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3f, 0x6, 0x9, 0xfff, 0x7, 0x6, 0x4]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x3, 0x50, 0x401, 0xb3f4, 0x91, 0x1, 0x997]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffc0, 0xff, 0xa, 0x5ce6, 0x2, 0xfffb, 0xcd, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x1, 0xb, 0x6c, 0x16, 0x36, 0x24, 0x4, 0xb, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8, 0x5, 0x0, 0x5, 0x7f, 0x8001, 0xd29]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x6, 0x7, 0x5, 0x1, 0xff19, 0x0, 0x400]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x30, 0xd]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x7}, {0x7}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x2, 0x6}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0x7}, {0x7, 0x8}, {0x5, 0x13}, {0x3, 0x5}, {0x7, 0x9}, {0x7}, {0x7, 0x7}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x68b, 0x400, 0x0, 0x5, 0xfff8, 0x401, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x60, 0x12]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1b9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x72}]}, {0x324, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x184, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x48, 0x30, 0x1, 0x2, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x8, 0x0, 0x0, 0x5, 0x81, 0x7, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe7, 0x6, 0x5, 0x6, 0x7fff, 0xfff8, 0x3, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xee7b, 0xc, 0x8, 0x9, 0x400, 0xcc66, 0x5, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcd, 0x5, 0x3, 0x1, 0x7, 0xa1, 0x800, 0x2]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x9, 0x8, 0x2, 0x1, 0xc, 0x2]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x3}, {0x7, 0xa}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x1}, {0x3, 0x5}, {0x6, 0x1}, {0x5, 0x5}, {0x3, 0x7}, {0x5, 0x4}, {0x1, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xa00, 0x1000, 0x10, 0xe, 0x5, 0x9, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x9, 0x2, 0xff, 0x0, 0x4, 0xcb]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x5}, {0x2, 0x4}, {0x2, 0x4}, {0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x4}, {0x5, 0x1}, {0x2, 0x2}, {0x4, 0x6}, {0x3, 0x9}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x6}, {0x6}, {0x4, 0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x2}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0x8}, {0x4, 0x6}, {0x4, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfffa, 0x0, 0x7, 0xc, 0x200, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x16, 0x9, 0x9, 0x1, 0x0, 0x30, 0x24, 0x16, 0x24, 0x48, 0xee95d1ed29bdc360, 0x30, 0xb, 0x12, 0x2, 0x30, 0x18, 0x36, 0x1, 0x2, 0x3, 0x48, 0x1, 0x2, 0x30, 0x48, 0x24, 0x1, 0x2, 0x9, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x3, 0x4ba, 0x7, 0x10, 0x7fff, 0x9]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x5}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0x8}, {0x7}, {0x3, 0x2}, {0x3}, {0x1, 0x2}, {0x7, 0x4}, {0x4, 0x6}, {0x0, 0x8}, {}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x0, 0x5}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x3}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7ff, 0x6, 0x1, 0xfff, 0x4, 0x2, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2c, 0x7fff, 0x1, 0x5269, 0x9, 0x800, 0x32, 0xff]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x9, 0x3, 0x6, 0xc7, 0x7e, 0xfff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x1, 0xc, 0x6c, 0x5, 0x60, 0x16, 0x2, 0x2, 0x1, 0x48, 0xc, 0x2, 0x9, 0x1, 0x0, 0x0, 0x18, 0x4, 0x4, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x7}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x1}, {0x4, 0x4}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x4, 0x7}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x4}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x5, 0x6}, {0x5, 0x5}, {0x6, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x5, 0x9}, {0x1, 0x5}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {0x7, 0x3}, {0x2, 0x5}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf8b2, 0x9, 0x6, 0x401, 0xaa, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x143e, 0x0, 0xfff9, 0x4, 0xfff0, 0x0, 0x10]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x8001}, 0x1)
syz_open_dev$mouse(&(0x7f0000000000), 0xffff, 0x480c00)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2804808}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x28000001)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000840)={&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000740)="2290522883b0aead1b660a6f5efceffef07dec830603f850131fcec9445d18fe1aa2219aeb1029ec9061b9587f2af06f3aca7fd900c1a9a1e414f05657841bc70d7935840704b2c9c17490ab52cfbe0e2264967b9a08246d199ca7c186d0b0ae10351852760e15073537277a4dbab7591ce21f9ed0174903f127609277a2ea535b9408f9be759fadbb5d6028bbba7f04a6d777c67f925a3cef3fddf66693e0b16bf63a66d863ea3b73c990e1c692f20f03e97cc7f3b90ef530808496ff56c7fb22128140ca8598c19a8215d1f2e733b4dd0d65a7a442a2bdbc16bb9a", 0xdc, r4}, 0x68)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x14, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x4, 0x6, 0x8, 0xffffffff, 0x10000})
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0)

4m54.234184397s ago: executing program 0 (id=915):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000600)={0xdf8, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0xffffffff, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50bd20538adacbf67a000000004000"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10)
syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x80000)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
listen(r3, 0x5)
io_uring_setup(0x1334, &(0x7f0000000040)={0x0, 0xc8a0, 0x2, 0x3, 0xbd})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000001c0)={0x1, 0xf7fffffffffffffd})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a800000000300000000000014000700000000000000000000000000000000010800040001"], 0x38}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x48800)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc00000000000000007fbb4b05000000ac1e00010000000000000000a05d000000000000000000000a0030803c000000"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
pipe2(0x0, 0x4800)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)

4m54.029680621s ago: executing program 0 (id=917):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='$\\,\xd6\x00', 0x14000, &(0x7f0000000040)={@align=0x4, {0x2, 0x7fff, 0x83, 0xc}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x6d})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x8010, r0, 0x2d808000)
chown(0x0, 0x0, 0xffffffffffffffff)

4m53.352738376s ago: executing program 0 (id=919):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
fstat(r0, 0x0)
syz_usbip_server_init(0x1)

4m53.285411167s ago: executing program 2 (id=920):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x8004, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0x10, 0x2, 0x2, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118)
syz_emit_ethernet(0x0, 0x0, 0x0)
exit(0x5ee)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x24)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
fcntl$notify(r9, 0x402, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

4m52.70603243s ago: executing program 0 (id=921):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080)=0x1000000, 0x0}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x3000000, 0x40}, 0x0)

4m52.328183368s ago: executing program 2 (id=923):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
timer_create(0x0, 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000180))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x400001)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000000), 0x0, 0x0, 0x1)
fgetxattr(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x8)
perf_event_open(0x0, 0x0, 0x1, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x524, &(0x7f0000000680)="$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")
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
accept4$unix(r3, &(0x7f0000000100), 0x0, 0x80000)
sendmsg$NFT_BATCH(r3, 0x0, 0x8000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)

4m51.957851926s ago: executing program 2 (id=925):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x1, @perf_bp={0x0}, 0xc234, 0x2, 0x8, 0x7, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB="6d6d6e7465726c650583653d0000617469633a302c0000000000"])
setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100), 0x0)
r1 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061195400080000009500000000000000e23c51143956b5154dd1d51a1df71f86e0815427af41ccffb915a081f4102223929a4e5b51618dcb8596204a518a50e3f7f12fec50edb4a256f943c9966705b737693707a25e4d8d5e197707d191455990dac745b14204fe7c9d352f43ecfeacc617c8da3d24c4214aa4d276b22f646f44007bdfac310f2fb73c5bd2920defcc12e78c514a483252af6a14a44ee0bbcbf98604606561ff6173"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001800dd8d000000000000000002001000fe0400010000002008001e0002000000040008800502797d5213c7ad77b1e0a33ee3e4e3d90d032c5aca073375210284f00dc7569d7226a72e2e31d3a63a4ad32696457d4182ea47a4340258644436c2dfe6d6c7ca2b239968448224ed818cbe7c7841b32fde617ac10c89b4708f144eb0084f2ae3db2adf243dcdd471d2d90f1b0ea8"], 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000000000000200", @ANYRES32=r3, @ANYBLOB="18000880"], 0x40}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000180)=0x9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
creat(&(0x7f0000000840)='./file0\x00', 0x40)
mount$bpf(0x0, 0x0, 0x0, 0x1900040, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB='C'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x80088a02, 0xffffffffffffffff)
listen(r0, 0x8)

4m51.263535411s ago: executing program 2 (id=928):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10004d, 0x0, 0x6, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000100))
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
socket(0x2, 0x80802, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0)
setresgid(0xee00, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x18101)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='-cpuset getlb \x00'/26], 0x1a)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
syz_open_dev$usbfs(0x0, 0x1ff, 0x42102)
r6 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r6, &(0x7f0000000100)=[{0x96, 0x0, 0x0, 0x4, @tick, {0x8, 0x2}, {0x8}, @ext={0x0, 0x0}}, {0x9, 0x3, 0x13, 0xd0, @time={0x6, 0xffffffff}, {0x0, 0x31}, {0x59, 0x7f}, @note={0xe4, 0x7, 0xb, 0x6b}}], 0x38)
io_uring_setup(0x135a, &(0x7f0000000000)={0x0, 0x6790, 0x2, 0x2, 0x1ef, 0x0, r6})

4m51.040061786s ago: executing program 2 (id=931):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
fstat(r0, 0x0)
syz_usbip_server_init(0x1)

4m50.212923824s ago: executing program 2 (id=933):
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={0x0, 0x48}, &(0x7f0000000500)=ANY=[@ANYBLOB='enc=raw hash=hmac(sha256)\x00'/45], &(0x7f0000003c40)="6890f19b5397935253b94a947785d85156e45e7167760a2ced42478740490b776d2b8face43be7ac743d87f535f69e3b3be5d02bb3fe360257f8c9d81506be39afa719826e74945c", 0x0)
r0 = gettid()
syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12002, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x8000000007, 0x0, 0xffff}, r0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setreuid(0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000280))
close(0x3)
r2 = socket(0x2, 0x6, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x37800, 0x0, 0x800, 0xfffffffffffffffe, 0x80fffff, 0x9}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x3, 0x6a9}, 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4007)
close(0x3)
r5 = syz_usb_connect(0x1, 0x56, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r5, @ANYRES64=r5, @ANYBLOB="01074000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x0, 0xfffd, 0xac, {0xffff, 0x1}, {0x4b, 0xff5a}, @cond=[{0x8, 0x5388, 0xc, 0x803, 0xb535, 0x7}, {0x0, 0x805, 0x101, 0x8000, 0x130, 0x5}]})
write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250)
ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000400)=""/62)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)
socket$nl_route(0x10, 0x3, 0x0)

4m40.432859936s ago: executing program 39 (id=909):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89ff, 0x0)

4m37.397868551s ago: executing program 40 (id=921):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080)=0x1000000, 0x0}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x3000000, 0x40}, 0x0)

4m35.036733442s ago: executing program 41 (id=933):
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={0x0, 0x48}, &(0x7f0000000500)=ANY=[@ANYBLOB='enc=raw hash=hmac(sha256)\x00'/45], &(0x7f0000003c40)="6890f19b5397935253b94a947785d85156e45e7167760a2ced42478740490b776d2b8face43be7ac743d87f535f69e3b3be5d02bb3fe360257f8c9d81506be39afa719826e74945c", 0x0)
r0 = gettid()
syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12002, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x8000000007, 0x0, 0xffff}, r0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setreuid(0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000280))
close(0x3)
r2 = socket(0x2, 0x6, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x37800, 0x0, 0x800, 0xfffffffffffffffe, 0x80fffff, 0x9}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x3, 0x6a9}, 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4007)
close(0x3)
r5 = syz_usb_connect(0x1, 0x56, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r5, @ANYRES64=r5, @ANYBLOB="01074000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x0, 0xfffd, 0xac, {0xffff, 0x1}, {0x4b, 0xff5a}, @cond=[{0x8, 0x5388, 0xc, 0x803, 0xb535, 0x7}, {0x0, 0x805, 0x101, 0x8000, 0x130, 0x5}]})
write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250)
ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000400)=""/62)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1m24.60714501s ago: executing program 4 (id=1815):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
r3 = getpid()
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000180)={{0x2}, {0x4, 0x2}, 0x2, 0x4, 0x1})
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
fsopen(&(0x7f0000000280)='devpts\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
creat(&(0x7f0000000040)='./file2\x00', 0x8)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00')
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
unshare(0x64000600)

1m23.22051008s ago: executing program 4 (id=1822):
r0 = timerfd_create(0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1)
syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}])
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042"], 0x50)

1m22.325104009s ago: executing program 4 (id=1830):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

1m22.170622043s ago: executing program 4 (id=1832):
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r0, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x105f0827e8, 0x20000000000000fb, 0x100000000000, 0x0, 0x858, 0x6, 0x0, 0x0, 0x20000, 0x8000000000000001, 0xde1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x401, 0x3})
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x1e, 0x805, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
getrandom(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
close(0x3)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffe, 0x0, 0x0, 0x5})

1m21.314332741s ago: executing program 4 (id=1838):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = gettid()
r1 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x7, 0x5, 0x3, 0x0, 0x0, 0x6, 0x11b02, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_config_ext={0x4, 0x80000001}, 0x0, 0xf6dd, 0x593, 0x5, 0x1c00000, 0xb, 0x7fc8, 0x0, 0xb6f, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x5, 0x3, 0x1, 0x0, 0x4a1, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xfae7, 0x9dd5}, 0x420, 0xc61e, 0xd4d, 0x6, 0x8, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9757}, r0, 0x10, r1, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfe1, &(0x7f0000001840)=""/4065}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x40000)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
futex(0x0, 0x10b, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000deffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), &(0x7f00000004c0), 0x2, 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740))
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10)
socket(0x1e, 0x4, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x7fffffff, 0x0, 0x32}, 0x9c)
bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x7fc, @loopback, 0x3}, 0x1c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c)

1m21.089615316s ago: executing program 4 (id=1840):
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x82082)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x3830, 0x1, 0xbd6, 0x0, 0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4, 0x2}, 0x3e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
mknod(0x0, 0x2, 0x200)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000100)=[{r5, 0x3328}, {r4, 0x4236}], 0x2, 0x0, 0x0, 0x0)
unshare(0x22020400)
close(r3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x536, &(0x7f0000000cc0)="$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")
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x6c, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xff], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x5]}}}}}}, 0x0)

1m21.065610876s ago: executing program 42 (id=1840):
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x82082)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x3830, 0x1, 0xbd6, 0x0, 0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4, 0x2}, 0x3e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
mknod(0x0, 0x2, 0x200)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000100)=[{r5, 0x3328}, {r4, 0x4236}], 0x2, 0x0, 0x0, 0x0)
unshare(0x22020400)
close(r3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x536, &(0x7f0000000cc0)="$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")
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x6c, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xff], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x5]}}}}}}, 0x0)

1m19.179070387s ago: executing program 3 (id=1849):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r1 = dup(r0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), r3)
sendmsg$TIPC_NL_NET_GET(r3, 0x0, 0x40000)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000001500)={0x28, 0x0, 0x2710, @host}, 0x10)
ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000))
timer_gettime(0x0, 0x0)

1m17.952971644s ago: executing program 3 (id=1856):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0xff}}, {@nodioread_nolock}, {@delalloc}, {@barrier}, {@auto_da_alloc}, {@barrier}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x9, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20004000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x1a, 0x20}, 0x20)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x60000600)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/partitions\x00', 0x0, 0x0)
read$msr(r2, &(0x7f0000033a40)=""/102391, 0x18ff7)
preadv(r2, &(0x7f0000000100)=[{&(0x7f00000010c0)=""/4108, 0x100c}], 0x1, 0x800, 0x1)
sync()
sync()

1m14.188408455s ago: executing program 3 (id=1873):
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9)
pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES16], &(0x7f0000000c00)='GPL\x00', 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073113e00000000008510000002000000850000007600000095000000000000009500a5050000000000bd97255185fea13551121e2d8d39175b1166bcf5ff9e127fc737450d73e6d90d7f2f602ba4a26d7dabae2385d145ab863dc6d1876688b4a55b0ace00b0df82ce32d4d3ad88350bc2325c485596344d53fb65196627727bebaa3ede997895e4aa2c916333683d044c3969ccf373b0ad31e50636328b49774e796f1da83e6f4ed8cf1afe87c8fdafa07312eb0ef29da01f8fb70cc42b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000600)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x7fff, 0x8a}, 0x0) (async)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x7fff, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
preadv2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)
pidfd_getfd(0xffffffffffffffff, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f0000003e40)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/90, 0x5a}, {&(0x7f0000003cc0)=""/143, 0x8f}, {&(0x7f0000000400)}], 0x4, &(0x7f0000003e00)=""/15, 0xf}, 0x6}], 0x1, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r6, &(0x7f0000000340)={&(0x7f0000000380)={0xa, 0x4e1a, 0x80000, @mcast2, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit={{0x18, 0x29, 0x34, 0xfffffffd}}], 0x18}, 0x4894)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0xa, 0x4e1e, 0xfffffffc, @mcast1, 0x1000}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x5}}], 0x1, 0x0) (async)
sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0xa, 0x4e1e, 0xfffffffc, @mcast1, 0x1000}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x5}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) (async)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

1m12.548991741s ago: executing program 3 (id=1885):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0)
creat(0x0, 0x154)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@grpjquota}]}, 0x1, 0x452, &(0x7f0000000140)="$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")
memfd_create(0x0, 0x7)
alarm(0xfd48)
close(r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc00000010000100feffffff00010000fe8000000000000000000000000000aaac14143b000000000000000000000000fffe07144e2300050000a0a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d43c000000ac1e0001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001f250800000000000200000000000000ff0700fb000000000000000000000000ffffffffffffffff04000000000000001e00000000000000feffffffffffffff02000000fcffffff000000202abd7000043500000a00010030000000000000000c0008000800080001040000"], 0xfc}, 0x1, 0x0, 0x0, 0x48810}, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r4, 0x4)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r6=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x30, &(0x7f0000000400)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}])

1m10.892939046s ago: executing program 3 (id=1890):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000"], 0x37c}, 0x1, 0x0, 0x0, 0x20000014}, 0x24004000)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfbffff7f, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)

1m10.467749366s ago: executing program 3 (id=1894):
ppoll(&(0x7f00000009c0)=[{0xffffffffffffffff, 0x8000}, {}], 0x2, &(0x7f0000000ac0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x6}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000000b, 0x149900)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3801000010000100feffffff00010000ff010000000000000000000000000001fe80000000000000000000000000002f000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c25080000000000020000000000001000000000000000000000000000000000ffffffffffffffff00000000001000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200ee0000008000000063d648b947fe0689aa26e64e9c18edd05e880aa565d7fc2bf26bcfb0e9d4ac2fccc9e58dc6acf5bfa233cb65db26697abc580bcb4a0ed1473fdcd7a4a3d32bbad9f06a0af6f310ab9cd527321a1e948351a373b87441ea29c514340fd947c4c103e7162a982fb2c2019fb11204ea7395fa5323759b7c6606d14c9b0565d6671cddf70ead7c56dfd1ae37396203ac48c6387c286cd52315e605e5a1f308eb80303aa1b33639470d275513f0600242089b45b40031ef332a5e5f2f7b84a401d4e478912fa5549cc09fb33d63c20304279bc1da16d139", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @local})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x41)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000540)={0x1, 0x0, 0x0, 0x0})
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000f3ff00000100000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="00000000000100020000000000000000000000000000030000000000"], 0x48)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f00000002c0)={[{@resgid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@mblk_io_submit}, {@nomblk_io_submit}, {@noblock_validity}]}, 0xfe, 0x4bb, &(0x7f0000001180)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0xd270, 0x0, 0x1, 0xc05, 0xd4})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000008c0)={[], [{@permit_directio}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=")
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x1b06475, &(0x7f0000001b00)=ANY=[], 0x5, 0x0, &(0x7f0000000000))

1m10.410443007s ago: executing program 43 (id=1894):
ppoll(&(0x7f00000009c0)=[{0xffffffffffffffff, 0x8000}, {}], 0x2, &(0x7f0000000ac0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x6}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000000b, 0x149900)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3801000010000100feffffff00010000ff010000000000000000000000000001fe80000000000000000000000000002f000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c25080000000000020000000000001000000000000000000000000000000000ffffffffffffffff00000000001000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200ee0000008000000063d648b947fe0689aa26e64e9c18edd05e880aa565d7fc2bf26bcfb0e9d4ac2fccc9e58dc6acf5bfa233cb65db26697abc580bcb4a0ed1473fdcd7a4a3d32bbad9f06a0af6f310ab9cd527321a1e948351a373b87441ea29c514340fd947c4c103e7162a982fb2c2019fb11204ea7395fa5323759b7c6606d14c9b0565d6671cddf70ead7c56dfd1ae37396203ac48c6387c286cd52315e605e5a1f308eb80303aa1b33639470d275513f0600242089b45b40031ef332a5e5f2f7b84a401d4e478912fa5549cc09fb33d63c20304279bc1da16d139", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @local})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x41)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000540)={0x1, 0x0, 0x0, 0x0})
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000f3ff00000100000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="00000000000100020000000000000000000000000000030000000000"], 0x48)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f00000002c0)={[{@resgid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@mblk_io_submit}, {@nomblk_io_submit}, {@noblock_validity}]}, 0xfe, 0x4bb, &(0x7f0000001180)="$eJzs3M1vVFUbAPDnTj/4pry8vLzvy4dU0dj40dKCysLEaHSniYkucGNS20KQgRpaEiFEqjG4NCTujStj9C9wpRuirkzc6t6QECUY0IWMuXPvHaal09JhPoD+fsnAOb1n5pxnzv0495yZCWDVGkz/SSI2RsTPETGQZecXGMz+u37l7MSfV85OJFGpvPZbUi137crZiaJo8bwNeWaoFFH6MMkrmW/m9Jlj4+Xy1Mk8PzJ7/J2RmdNnnjx6fPzI1JGpE2MHDx7YP/rM02NPtSTONK5rO96b3pX0vnHhlYlDF976/qveiNi+O9teH8cdKW2oJQfTwH+vVC0s9khLKrt7bKpLJ71dbAgr0hMRaXf1VY//geiJm503EC990Oh5fZ1qINA26bVpTePNczcqwP0riW63AOiO4kKf3v8Wjw4NPe4Kl5/PboDSuK/nj2xLb5TyMu281/lfRBya++vT9BF5P/y9sY0VAgCr3jfp+OeJxcZ/pdheV25zvoayJSL+FRFbI+LfEbEtIv4TUS3733w8sxLZ0lBPLX/r+LN0qengbkM6/ns2X9uaP/7LRn+VSuVGT57bVI2/Lzl8tDy1L39PhqJvTZofXaKOb1/86eNG2wbrxn/pI62/GAvm7bjUu2CCbnJ8drxVg9LL70fs6F0s/qS2EpBExP8jYsfKXnpzkTj62Be7GhVaPv4ltGCdqfJZxKNZ/8/FgvgLydLrkyNrozy1b6TYK271w4/nX21U/x3F3wJp/6+fv/8vKDFwNalfr51ZeR3nf/mo4T1ls/t/f/J6dc26P//bu+OzsydHI/qTl6v5/nN1fx+7+dwiX5RP4x/aW4t/Tf3xvzVLXEzj3xkR6U68OyIeiIg9edsfjIiHImJvowDXRXz3wsNvNxP/Hx24D0zjn1z0/Ffb/7fM7/+VJ3qOXfy6mfgzaf8fqKaG8vNw9fy3jMbNifJUelpvem8GAACAe096P70xktJwLV0qDQ9nn+HfFutL5emZ2ccPT586MZl9R2BL9JWKma6BfD40vdseTebyV8zmR8fyueJivnR/Pm/8Sc+6an54Yro82eXYYbXb0OD4T/3a0+3WAW3n+1qwei08/ktdagfQea7/sHo1c/w/14Z2AJ3n+g+rV93x/+Wp8zuriezz03tqGxZdC1jil0OAe0P99f9MF9sBdN7y4//77ecqgUJx/C+/7ne17W0BOqvZ+b/TLW4H0FF38r3+5hP90f66+lv3grG2k2/U533d6ZQVJqK0VJk3o+MNi7vibbmNRP7Tm+duq3Cy5I9ZtDHR7TMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wTAAD//9QP9q0=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0xd270, 0x0, 0x1, 0xc05, 0xd4})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000008c0)={[], [{@permit_directio}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise}]}, 0x1, 0x512, &(0x7f0000000380)="$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")
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x1b06475, &(0x7f0000001b00)=ANY=[], 0x5, 0x0, &(0x7f0000000000))

3.328069008s ago: executing program 5 (id=2536):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x485, 0x0, 0x0)

2.26856751s ago: executing program 1 (id=2541):
close(0x4)

2.26811337s ago: executing program 1 (id=2542):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x3ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fe, &(0x7f0000000080))

2.26724137s ago: executing program 6 (id=2544):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.221203481s ago: executing program 6 (id=2546):
close(0xffffffffffffffff)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001)
recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141)
recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000780)=""/191, 0xbf}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000c80)=""/202, 0xca}], 0x6}, 0x40002040)
socket$kcm(0x21, 0x2, 0xa)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x20}, 0x10044001)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1)

2.017162036s ago: executing program 5 (id=2547):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

2.016460086s ago: executing program 7 (id=2548):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0)
close(r2)
accept4(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x0, 0x81000)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)

1.990329497s ago: executing program 1 (id=2549):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.983323847s ago: executing program 5 (id=2551):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x1}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.958906377s ago: executing program 6 (id=2552):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="61108dfa83"], &(0x7f0000000200)='GPL\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.913041068s ago: executing program 1 (id=2553):
close(0x4)

1.912772388s ago: executing program 1 (id=2554):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x12, &(0x7f0000000200), 0x4)

1.912604208s ago: executing program 1 (id=2555):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000004c0)={'a', ' *:* ', 'rwm\x00'}, 0xa)

1.161035755s ago: executing program 7 (id=2557):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

1.052996446s ago: executing program 7 (id=2559):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
close(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x11, 0x200000000000000, 0x300)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0xc8, 0xfff, 0x0, 0x20000, 0x0, 0x400}, 0x0, 0x8, 0xffffffffffffffff, 0x5)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001540)={[{0x2b, 'hugetlb'}, {0x2b, 'rdma'}]}, 0xf)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x15)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x1ff)
write$cgroup_int(r0, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)="2b7314", 0x3}], 0x1}, 0x4044004)
sendmsg$inet(r3, 0x0, 0x52cc)
ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)

399.224931ms ago: executing program 6 (id=2560):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r3, 0x58, &(0x7f0000000500)}, 0x10)

301.247723ms ago: executing program 5 (id=2561):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

274.591334ms ago: executing program 8 (id=2562):
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080))

229.358004ms ago: executing program 5 (id=2563):
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

199.789345ms ago: executing program 7 (id=2564):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000db000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x600003, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

199.430005ms ago: executing program 8 (id=2565):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000bc0)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\a'], 0x10)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80), 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000000000000000711711000000000095000000000000f2fb255f0c4cf0df3693c646de758a497cfebe40cfac5e6208336fc9fb4479347278020036157981427e32d1f5f37a17cc871a2cfdac999e96645bfc3d07eb65a0ec441ed472b1fc7ae9a5d0db1ceb53002a772ba88e8c6b4c1169"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

121.085087ms ago: executing program 6 (id=2566):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0)
close(r2)
accept4(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x0, 0x81000)
socket(0x1e, 0x4, 0x0)

120.914237ms ago: executing program 5 (id=2567):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)

107.709687ms ago: executing program 8 (id=2568):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x42}, 0x0, 0xc8, 0x40000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)

76.432318ms ago: executing program 8 (id=2569):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x1)
perf_event_open(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x13)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[], 0x0, 0x26}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_all\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000680), &(0x7f0000000700)=r1}, 0x20)

54.935468ms ago: executing program 8 (id=2570):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

19.614799ms ago: executing program 7 (id=2571):
r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf4, 0x0, 0xfe, 0xfc, 0x0, 0xfffffffffffffffe, 0x141302, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x6000, 0x40000000000000, 0x1, 0x6, 0x0, 0xa020000a, 0xfffc, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x4)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000002d00)={0x0, r2}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x15, 0x17, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000c904000000000000000000000018110000ec32b9b5019d009920662c1de4f3bc500c200b85d6ef5b9d4bd661253a820b3f1ddf68570f5384269c86e2d707a659fdbe2d34111e8c60247815bade9fa319e2b3502399733bbe454d517054ecd5627232de7358061438c5e7567f19e29282b9281ecd96f9a12b2a672110f785ede91d87b6e436b9236c0432f8139f41c8b72accd66bf5cb3d39853b45611c8c0f", @ANYRES16=r2, @ANYBLOB="0000000000000000b702000014000500b7030000000000008500000076000000bf0900000000000026090600000003e70400000006000000180100002020732500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200020000008505000000000000b7040000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=""/2, 0x3, 0x0, 0x81, 0x0, &(0x7f0000000500)="bc08a5753e735da4ba36f8449fdf481ec7f53dc013d0e9aa53388b5d18663845c365e5ddcfae3d3120fc601ce86149ce76b7caf95db2f99c9b7830de765d36b6f9f1129a0929d0b0026705bc004adf731a717dd720d5296af24d0f30eea91caa8accd795f090383d6161c8ce64910d44022689c6d9cf54810b23c1f8d39706b894", 0x0, 0x6, 0x0, 0xc6}, 0x50)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x1, 0xff, 0x4, 0x7, 0x0, 0xc81d, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x10000}, 0x4820, 0x6f6, 0x5, 0x3, 0x2800000, 0x5, 0x1, 0x0, 0x0, 0x0, 0xf31d}, r1, 0x8, r0, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x19, &(0x7f0000000200)=r4, 0x78)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240), 0x4)
sendmsg(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000000840)}, 0x804)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
sendmsg$sock(r4, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001bc0)="a89ad31798398d38b4daf46227ac3631af4decb8c08bc24353968b7673c2c3b4a5d9fa27c4c7fd53b9cc3a69026963b0defd11207e8f562bfc8d7a372a821b12f93824ac009abf7a30b05faf0ecab620cb1e4aa56428c1b37d867a957d46b48081fad7", 0x63}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003e00)='\\', 0x1}], 0x8, &(0x7f0000003ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xd49}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x78}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000052105863c7c49f155800030000000000000000000002000000000200000000000004020000000200000000000011ffffffff00000000005f00be01c589639659e411bce9af568b6ba7ecce73"], 0x0, 0x43}, 0x28)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0)

19.108699ms ago: executing program 6 (id=2572):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50)

643.73µs ago: executing program 8 (id=2573):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20)

0s ago: executing program 7 (id=2574):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu!=0||!')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03316844268c", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='.'], 0x0}, 0x94)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x3, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b86, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
sendmsg$sock(r0, &(0x7f0000000800)={&(0x7f0000000380)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)="ebb183ebfc784e040d266f3c5dc8a88c90602a2481d85fd99afb057efc351f5a029bcd2ffc36aafc962eb52b79dfc93dc344b719580a247347e4253e80096fb3dd4ed4b319cb0f28a57c8f2c08bd8f0ff1ddee8e5ba7301bcbbfc657468b058a2f5ba280627653c899dbb1acceee0d2d9131d201d5a47af673c08231dafe15d911a1d4a5bc4099db7c866b2b016fe08bda76ae5c1ed30876acf7cd0edf310a63009577352292817c43a2e55998fb900a811944842eb534804f294fa76c2d2a6445847d4c82bc39b549ceb71e24eed53879061edabc", 0xd5}, {&(0x7f00000006c0)="99c8a5f048bf0de526f8b354a00fc2060ae97be1efa3b4152e051ca80a232b56a13cd80a1147731b68a2a55dc19e961fe3dd34683e0bba4e2da4a66e18a063f9be2b4260c00b197558bc02075799500a9de967848efe777856593f5f77ffc59d1204c493a95c18d60b52b8c9243fe29e685428bf656fbad26ed901b5115bdddac491811cff902cac15900de114d03b0a50bdc55e2ec5e63addba616a765256c92374029afa4658414fc8711cdffdbcb172a69c4ad0d9484f190d29ab7310c6f82be58a5d0eb45c255ddcf54426336b3a49397b606f2b94e27e768f6cae1f22d1810cf95173accc3a34e5be", 0xeb}], 0x2}, 0x10)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)

kernel console output (not intermixed with test programs):

fs (loop7): error count since last fsck: 1
[  432.861081][    C0] EXT4-fs (loop7): initial error at time 1783288039: ext4_orphan_get:1399: inode 15
[  432.861219][    C0] EXT4-fs (loop7): last error at time 1783288039: ext4_orphan_get:1399: inode 15
[  433.051422][T12419] loop7: lost filesystem error report for type 5 error -117
[  433.052233][T12419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.085450][   T28] audit: type=1400 audit(1783288040.034:2301): avc:  denied  { write } for  pid=12418 comm="syz.7.1820" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  433.188939][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  433.235387][T12419] gre0 speed is unknown, defaulting to 1000
[  433.294864][T12426] random: crng reseeded on system resumption
[  433.316917][T12419] gre0 speed is unknown, defaulting to 1000
[  433.322988][T12419] gre0 speed is unknown, defaulting to 1000
[  433.337934][T12426] program syz.1.1821 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  433.410955][   T28] audit: type=1400 audit(1783288040.364:2302): avc:  denied  { bind } for  pid=12430 comm="syz.3.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  433.433990][   T28] audit: type=1400 audit(1783288040.364:2303): avc:  denied  { listen } for  pid=12430 comm="syz.3.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  433.455265][   T28] audit: type=1400 audit(1783288040.364:2304): avc:  denied  { connect } for  pid=12430 comm="syz.3.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  433.617011][ T8439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.641944][T12437] loop3: detected capacity change from 0 to 512
[  433.700644][T12437] EXT4-fs (loop3): orphan cleanup on readonly fs
[  433.714348][T12444] FAULT_INJECTION: forcing a failure.
[  433.714348][T12444] name failslab, interval 1, probability 0, space 0, times 0
[  433.733045][T12437] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  433.748112][T12444] CPU: 0 UID: 0 PID: 12444 Comm: syz.6.1828 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  433.748151][T12444] Tainted: [W]=WARN
[  433.748160][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  433.748177][T12444] Call Trace:
[  433.748187][T12444]  <TASK>
[  433.748197][T12444]  __dump_stack+0x1d/0x30
[  433.748267][T12444]  dump_stack_lvl+0x95/0xd0
[  433.748289][T12444]  dump_stack+0x15/0x1b
[  433.748313][T12444]  should_fail_ex+0x25e/0x270
[  433.748377][T12444]  should_failslab+0x8c/0xb0
[  433.748439][T12444]  __kmalloc_node_noprof+0xda/0x4c0
[  433.748466][T12444]  ? qdisc_alloc+0x65/0x410
[  433.748510][T12444]  ? qdisc_alloc+0x65/0x410
[  433.748600][T12444]  qdisc_alloc+0x65/0x410
[  433.748650][T12444]  qdisc_create+0xf0/0x9c0
[  433.748685][T12444]  tc_modify_qdisc+0x102a/0x1550
[  433.748741][T12444]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  433.748776][T12444]  rtnetlink_rcv_msg+0x6a7/0x720
[  433.748808][T12444]  netlink_rcv_skb+0x11e/0x220
[  433.748835][T12444]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  433.748869][T12444]  rtnetlink_rcv+0x1c/0x30
[  433.748932][T12444]  netlink_unicast+0x5a7/0x680
[  433.748974][T12444]  netlink_sendmsg+0x5be/0x6f0
[  433.749003][T12444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  433.749027][T12444]  ____sys_sendmsg+0x532/0x580
[  433.749068][T12444]  ___sys_sendmsg+0x195/0x1e0
[  433.749120][T12444]  __x64_sys_sendmsg+0xd4/0x160
[  433.749189][T12444]  x64_sys_call+0x194c/0x3020
[  433.749218][T12444]  do_syscall_64+0x136/0x3c0
[  433.749287][T12444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.749316][T12444] RIP: 0033:0x7ff0e5dede59
[  433.749336][T12444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.749424][T12444] RSP: 002b:00007ff0e4847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  433.749451][T12444] RAX: ffffffffffffffda RBX: 00007ff0e6075fa0 RCX: 00007ff0e5dede59
[  433.749469][T12444] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  433.749484][T12444] RBP: 00007ff0e4847090 R08: 0000000000000000 R09: 0000000000000000
[  433.749496][T12444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.749508][T12444] R13: 00007ff0e6076038 R14: 00007ff0e6075fa0 R15: 00007ffd167b2878
[  433.749534][T12444]  </TASK>
[  433.764426][T12437] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  433.781928][T12419] infiniband syz1: set active
[  433.813708][T12437] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  433.816956][ T3415] gre0 speed is unknown, defaulting to 1000
[  433.822424][T12437] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #14: comm syz.3.1826: invalid orphan symlink nlink 1
[  433.822459][T12437] loop3: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  433.823864][T12437] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1826: couldn't read orphan inode 14 (err -117)
[  433.831507][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  433.831531][    C1] EXT4-fs (loop3): last error at time 1783288296: ext4_orphan_get:1399: inode 14
[  433.876575][T12419] infiniband syz1: added gre0
[  433.877841][T12437] loop3: lost filesystem error report for type 5 error -117
[  433.960469][T12419] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  433.972633][T12437] EXT4-fs (loop3): 1 truncate cleaned up
[  433.979977][T12419] infiniband syz1: Couldn't open port 1
[  433.984345][T12437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  434.083621][T12419] RDS/IB: syz1: added
[  434.111703][T12419] smc: adding ib device syz1 with port count 1
[  434.111719][T12419] smc:    ib device syz1 port 1 has no pnetid
[  434.111940][T12419] gre0 speed is unknown, defaulting to 1000
[  434.124596][ T3415] gre0 speed is unknown, defaulting to 1000
[  434.242321][T12419] gre0 speed is unknown, defaulting to 1000
[  434.294464][T12459] tmpfs: Bad value for 'mpol'
[  434.294692][T12460] tmpfs: Bad value for 'mpol'
[  434.295532][T12459] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1831'.
[  434.295662][   T28] audit: type=1400 audit(1783288297.272:2305): avc:  denied  { mounton } for  pid=12456 comm="syz.6.1831" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  434.409147][T12419] gre0 speed is unknown, defaulting to 1000
[  434.609370][   T28] audit: type=1400 audit(1783288297.592:2306): avc:  denied  { mount } for  pid=12462 comm="syz.4.1832" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  434.694290][T12419] gre0 speed is unknown, defaulting to 1000
[  434.974359][T12419] gre0 speed is unknown, defaulting to 1000
[  435.055316][ T8518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.268932][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  435.302580][ T5479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.513970][T12488] hub 8-0:1.0: USB hub found
[  435.529319][T12488] hub 8-0:1.0: 8 ports detected
[  435.613817][   T28] audit: type=1400 audit(1783288298.592:2307): avc:  denied  { mounton } for  pid=12493 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  435.733664][T12499] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1843'.
[  435.918098][T12493] lo speed is unknown, defaulting to 1000
[  436.031935][T12493] gre0 speed is unknown, defaulting to 1000
[  436.265984][T12512] random: crng reseeded on system resumption
[  436.274341][T12512] program syz.6.1845 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  437.348924][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  437.636438][T12493] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.153108][T12535] loop3: detected capacity change from 0 to 128
[  438.210129][T12493] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.234761][T12493] bridge_slave_0: entered allmulticast mode
[  438.262684][T12493] bridge_slave_0: entered promiscuous mode
[  438.272832][T12493] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.279974][T12493] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.287133][T12493] bridge_slave_1: entered allmulticast mode
[  438.293869][T12493] bridge_slave_1: entered promiscuous mode
[  438.374972][T12493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.403491][T12493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.426805][T12493] team0: Port device team_slave_0 added
[  438.435088][T12493] team0: Port device team_slave_1 added
[  438.452325][T12493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.459502][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.485579][T12493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.497107][T12493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.504229][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.530336][T12493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.553213][T12546] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1854'.
[  438.572299][T12546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1854'.
[  438.623536][T12493] hsr_slave_0: entered promiscuous mode
[  438.623794][T12550] loop3: detected capacity change from 0 to 1024
[  438.639870][T12493] hsr_slave_1: entered promiscuous mode
[  438.646436][T12550] EXT4-fs: Ignoring removed bh option
[  438.673489][T12550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  438.674483][T12493] debugfs: 'hsr0' already exists in 'hsr'
[  438.697958][T12493] Cannot create hsr debugfs directory
[  438.704276][T12550] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  438.801089][   T28] audit: type=1400 audit(1783288301.782:2308): avc:  denied  { write } for  pid=12549 comm="syz.3.1856" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  438.836836][T12550] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.1856: lblock 3 mapped to illegal pblock 3 (length 3)
[  438.866079][T12550] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  438.894951][T12556] random: crng reseeded on system resumption
[  438.903076][T12556] program syz.6.1857 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  438.958191][T12550] EXT4-fs (loop3): This should not happen!! Data will be lost
[  438.958191][T12550] 
[  439.000673][T12550] lo speed is unknown, defaulting to 1000
[  439.091975][ T6877] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:16: lblock 8 mapped to illegal pblock 8 (length 8)
[  439.163910][T12566] IPv6: addrconf: prefix option has invalid lifetime
[  439.188228][ T6877] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  439.204450][ T6877] EXT4-fs (loop3): This should not happen!! Data will be lost
[  439.204450][ T6877] 
[  439.236918][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1859'.
[  439.285689][T12550] gre0 speed is unknown, defaulting to 1000
[  439.428969][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  439.516561][T12573] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1860'.
[  439.631928][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1860'.
[  439.737850][T12573] netlink: 'syz.7.1860': attribute type 1 has an invalid length.
[  440.016512][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1860'.
[  440.115921][T12493] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  440.164554][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  440.211926][T12493] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  440.244274][   T28] audit: type=1400 audit(1783288303.222:2309): avc:  denied  { write } for  pid=12569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  440.316642][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  440.350796][T12493] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  440.381728][   T28] audit: type=1400 audit(1783288303.322:2310): avc:  denied  { write } for  pid=12586 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  440.416249][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  440.453825][T12493] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  440.510696][T12597] FAULT_INJECTION: forcing a failure.
[  440.510696][T12597] name failslab, interval 1, probability 0, space 0, times 0
[  440.524094][T12597] CPU: 0 UID: 0 PID: 12597 Comm: syz.1.1865 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  440.524170][T12597] Tainted: [W]=WARN
[  440.524179][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  440.524195][T12597] Call Trace:
[  440.524202][T12597]  <TASK>
[  440.524211][T12597]  __dump_stack+0x1d/0x30
[  440.524291][T12597]  dump_stack_lvl+0x95/0xd0
[  440.524317][T12597]  dump_stack+0x15/0x1b
[  440.524336][T12597]  should_fail_ex+0x25e/0x270
[  440.524364][T12597]  ? ipv6_flowlabel_opt+0x8dc/0x1af0
[  440.524523][T12597]  should_failslab+0x8c/0xb0
[  440.524604][T12597]  __kmalloc_cache_noprof+0x7b/0x3d0
[  440.524637][T12597]  ? ipv6_flowlabel_opt+0x8dc/0x1af0
[  440.524735][T12597]  ipv6_flowlabel_opt+0x8dc/0x1af0
[  440.524766][T12597]  ? selinux_file_open+0x2e6/0x330
[  440.524794][T12597]  ? lockref_put_return+0xf7/0x130
[  440.524842][T12597]  ? __rcu_read_unlock+0x4e/0x70
[  440.524893][T12597]  ? __rcu_read_unlock+0x4e/0x70
[  440.524929][T12597]  ? lock_sock_nested+0x84/0x110
[  440.525026][T12597]  do_ipv6_setsockopt+0xaed/0x2040
[  440.525050][T12597]  ? kstrtoull+0x111/0x140
[  440.525075][T12597]  ? __rcu_read_unlock+0x4e/0x70
[  440.525168][T12597]  ? avc_has_perm_noaudit+0xa3/0x120
[  440.525199][T12597]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[  440.525244][T12597]  ipv6_setsockopt+0x59/0x130
[  440.525330][T12597]  tcp_setsockopt+0x98/0xb0
[  440.525402][T12597]  sock_common_setsockopt+0x69/0x80
[  440.525431][T12597]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  440.525461][T12597]  __sys_setsockopt+0x184/0x200
[  440.525495][T12597]  __x64_sys_setsockopt+0x64/0x80
[  440.525571][T12597]  x64_sys_call+0x2327/0x3020
[  440.525595][T12597]  do_syscall_64+0x136/0x3c0
[  440.525628][T12597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.525692][T12597] RIP: 0033:0x7fa94280de59
[  440.525751][T12597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.525770][T12597] RSP: 002b:00007fa941267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  440.525791][T12597] RAX: ffffffffffffffda RBX: 00007fa942a95fa0 RCX: 00007fa94280de59
[  440.525845][T12597] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[  440.525861][T12597] RBP: 00007fa941267090 R08: 000000000000fe60 R09: 0000000000000000
[  440.525910][T12597] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  440.525960][T12597] R13: 00007fa942a96038 R14: 00007fa942a95fa0 R15: 00007ffdea4d4858
[  440.525981][T12597]  </TASK>
[  440.853566][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  440.946059][   T28] audit: type=1400 audit(1783288303.922:2311): avc:  denied  { write } for  pid=12593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  441.141962][T12620] random: crng reseeded on system resumption
[  441.157456][T12620] program syz.1.1867 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  441.316260][   T28] audit: type=1400 audit(1783288304.292:2312): avc:  denied  { write } for  pid=12624 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  441.422015][T12493] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.441369][T12493] 8021q: adding VLAN 0 to HW filter on device team0
[  441.454853][T12628] loop6: detected capacity change from 0 to 512
[  441.478810][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.486052][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.508907][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  441.532403][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.539568][ T6878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.657506][ T3390] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  441.673509][ T3390] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  441.899600][T12633] fido_id[12633]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  441.941998][T12635] loop6: detected capacity change from 0 to 1024
[  441.968528][T12635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  441.993603][T12635] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.046928][   T28] audit: type=1400 audit(1783288305.022:2313): avc:  denied  { write } for  pid=12634 comm="syz.6.1870" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  442.072125][T12635] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.1870: lblock 3 mapped to illegal pblock 3 (length 3)
[  442.135025][T12635] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  442.152029][   T28] audit: type=1400 audit(1783288305.132:2314): avc:  denied  { write } for  pid=12631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  442.175925][T12652] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1870: bg 0: block 112: padding at end of block bitmap is not set
[  442.213746][T12635] EXT4-fs (loop6): This should not happen!! Data will be lost
[  442.213746][T12635] 
[  442.226798][   T28] audit: type=1400 audit(1783288305.162:2315): avc:  denied  { append } for  pid=12634 comm="syz.6.1870" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  442.233812][T12652] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28
[  442.263076][   T28] audit: type=1400 audit(1783288305.232:2316): avc:  denied  { write } for  pid=12656 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  442.301941][T12652] EXT4-fs (loop6): This should not happen!! Data will be lost
[  442.301941][T12652] 
[  442.318996][T12652] EXT4-fs (loop6): Total free blocks count 0
[  442.326654][T12652] EXT4-fs (loop6): Free/Dirty block details
[  442.380937][ T8518] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  442.385016][T12652] EXT4-fs (loop6): free_blocks=0
[  442.406774][ T8518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  442.418211][T12652] EXT4-fs (loop6): dirty_blocks=64
[  442.423980][T12652] EXT4-fs (loop6): Block reservation details
[  442.467352][ T6877] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:16: lblock 8 mapped to illegal pblock 8 (length 8)
[  442.492237][ T8642] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  442.507950][T12493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.743625][T12688] random: crng reseeded on system resumption
[  442.751779][T12688] program syz.7.1877 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  442.758679][T12697] syzkaller0: entered promiscuous mode
[  442.778583][   T28] audit: type=1400 audit(1783288305.722:2317): avc:  denied  { create } for  pid=12698 comm="syz.1.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  442.822718][T12697] syzkaller0: entered allmulticast mode
[  443.184685][T12726] loop7: detected capacity change from 0 to 512
[  443.197986][T12726] EXT4-fs: Ignoring removed orlov option
[  443.224039][T12726] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  443.326817][T12726] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1880: invalid indirect mapped block 32768 (level 2)
[  443.343904][T12726] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  443.361863][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  443.379964][    C1] EXT4-fs (loop7): initial error at time 1783288306: ext4_free_branches:1023: inode 16
[  443.392394][    C1] EXT4-fs (loop7): last error at time 1783288306: ext4_free_branches:1023: inode 16
[  443.415690][T12726] EXT4-fs (loop7): 1 orphan inode deleted
[  443.423299][T12726] EXT4-fs (loop7): 1 truncate cleaned up
[  443.429962][T12726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.588931][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  443.877434][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  443.877451][   T28] audit: type=1400 audit(1783288306.852:2321): avc:  denied  { write } for  pid=12717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  444.116722][T12740] FAULT_INJECTION: forcing a failure.
[  444.116722][T12740] name failslab, interval 1, probability 0, space 0, times 0
[  444.916515][T12740] CPU: 0 UID: 0 PID: 12740 Comm: syz.6.1884 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  444.916596][T12740] Tainted: [W]=WARN
[  444.916608][T12740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  444.916628][T12740] Call Trace:
[  444.916638][T12740]  <TASK>
[  444.916651][T12740]  __dump_stack+0x1d/0x30
[  444.916726][T12740]  dump_stack_lvl+0x95/0xd0
[  444.916820][T12740]  dump_stack+0x15/0x1b
[  444.916850][T12740]  should_fail_ex+0x25e/0x270
[  444.916885][T12740]  should_failslab+0x8c/0xb0
[  444.916918][T12740]  __kmalloc_noprof+0xd4/0x4a0
[  444.916962][T12740]  ? io_uring_alloc_async_data+0xbe/0x140
[  444.917003][T12740]  ? io_uring_alloc_async_data+0xbe/0x140
[  444.917051][T12740]  io_uring_alloc_async_data+0xbe/0x140
[  444.917250][T12740]  io_bind_prep+0xf0/0x1d0
[  444.917354][T12740]  io_submit_sqes+0x737/0x1180
[  444.917395][T12740]  __se_sys_io_uring_enter+0x25c/0xf90
[  444.917421][T12740]  ? mutex_unlock+0x4e/0x90
[  444.917456][T12740]  ? fput+0x8f/0xc0
[  444.917497][T12740]  __x64_sys_io_uring_enter+0x78/0x90
[  444.917565][T12740]  x64_sys_call+0x1e16/0x3020
[  444.917604][T12740]  do_syscall_64+0x136/0x3c0
[  444.917716][T12740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.917812][T12740] RIP: 0033:0x7ff0e5dede59
[  444.917831][T12740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.917852][T12740] RSP: 002b:00007ff0e4847028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  444.917881][T12740] RAX: ffffffffffffffda RBX: 00007ff0e6075fa0 RCX: 00007ff0e5dede59
[  444.917903][T12740] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  444.917931][T12740] RBP: 00007ff0e4847090 R08: 0000000000000000 R09: 0000000000000000
[  444.917946][T12740] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[  444.918024][T12740] R13: 00007ff0e6076038 R14: 00007ff0e6075fa0 R15: 00007ffd167b2878
[  444.918047][T12740]  </TASK>
[  445.220713][ T5479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.269522][   T28] audit: type=1400 audit(1783288308.222:2322): avc:  denied  { write } for  pid=12738 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  445.432862][T12742] loop3: detected capacity change from 0 to 512
[  445.472865][T12742] EXT4-fs: Ignoring removed oldalloc option
[  445.545628][T12742] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  445.572674][T12493] veth0_vlan: entered promiscuous mode
[  445.590648][T12742] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1885: invalid indirect mapped block 83886080 (level 1)
[  445.604890][T12742] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  445.605261][T12742] EXT4-fs (loop3): Remounting filesystem read-only
[  445.622596][T12742] EXT4-fs (loop3): 1 orphan inode deleted
[  445.628488][T12742] EXT4-fs (loop3): 1 truncate cleaned up
[  445.635451][T12742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.692802][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  445.752239][T12493] veth1_vlan: entered promiscuous mode
[  445.784404][T12758] random: crng reseeded on system resumption
[  445.793225][T12758] program syz.7.1889 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  445.809489][T11925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.856004][T12771] loop6: detected capacity change from 0 to 512
[  445.866787][T12771] vfat: Unknown parameter '01777777777777777777777'
[  445.887727][   T28] audit: type=1400 audit(1783288308.872:2323): avc:  denied  { write } for  pid=12754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  445.967936][T12493] veth0_macvtap: entered promiscuous mode
[  445.980026][   T28] audit: type=1400 audit(1783288308.952:2324): avc:  denied  { listen } for  pid=12770 comm="syz.6.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  446.023218][T12493] veth1_macvtap: entered promiscuous mode
[  446.043522][   T28] audit: type=1400 audit(1783288308.982:2325): avc:  denied  { shutdown } for  pid=12770 comm="syz.6.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  446.064603][   T28] audit: type=1400 audit(1783288308.992:2326): avc:  denied  { write } for  pid=12781 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.122161][T12493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.147768][T12493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  446.223165][T12794] loop7: detected capacity change from 0 to 512
[  446.282611][T12794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.296475][T12794] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.497875][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.521432][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.540855][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.575756][   T28] audit: type=1400 audit(1783288309.552:2327): avc:  denied  { write } for  pid=12788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.625638][   T28] audit: type=1400 audit(1783288309.602:2328): avc:  denied  { write } for  pid=12812 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.672853][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.721511][   T28] audit: type=1400 audit(1783288309.692:2329): avc:  denied  { mounton } for  pid=12493 comm="syz-executor" path="/root/syzkaller.6PTR2V/syz-tmp" dev="sda1" ino=2069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  447.115056][   T28] audit: type=1400 audit(1783288309.742:2330): avc:  denied  { mount } for  pid=12493 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  447.204581][ T5479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.229088][T12831] loop5: detected capacity change from 0 to 1024
[  447.295787][T12799] lo speed is unknown, defaulting to 1000
[  447.315162][T12844] syzkaller0: entered promiscuous mode
[  447.315231][T12831] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  447.331975][T12844] syzkaller0: entered allmulticast mode
[  447.460936][T12847] random: crng reseeded on system resumption
[  447.465224][T12831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.481222][T12847] program syz.6.1902 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  447.563163][T12799] gre0 speed is unknown, defaulting to 1000
[  447.748945][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  447.878535][T12493] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.975329][T12799] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.984142][T12799] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.993038][T12799] bridge_slave_0: entered allmulticast mode
[  448.001079][T12799] bridge_slave_0: entered promiscuous mode
[  448.008242][T12799] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.016732][T12799] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.025512][T12799] bridge_slave_1: entered allmulticast mode
[  448.033548][T12799] bridge_slave_1: entered promiscuous mode
[  448.055090][T12799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.092868][T12904] syzkaller0: entered promiscuous mode
[  448.137098][T12904] syzkaller0: entered allmulticast mode
[  448.146684][T12799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.176104][T12799] team0: Port device team_slave_0 added
[  448.192605][T12799] team0: Port device team_slave_1 added
[  449.168670][T12799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.177089][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.389790][T12921] loop5: detected capacity change from 0 to 512
[  449.424693][T12921] EXT4-fs: Ignoring removed oldalloc option
[  449.507904][T12921] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  449.640653][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  449.640681][   T28] audit: type=1400 audit(1783288312.622:2342): avc:  denied  { write } for  pid=12911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  449.685633][T12921] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1912: invalid indirect mapped block 83886080 (level 1)
[  449.763056][T12921] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  449.763378][T12921] EXT4-fs (loop5): Remounting filesystem read-only
[  449.772611][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  449.772628][    C1] EXT4-fs (loop5): initial error at time 1783288312: ext4_free_branches:1023: inode 16
[  449.772654][    C1] EXT4-fs (loop5): last error at time 1783288312: ext4_free_branches:1023: inode 16
[  449.828939][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  449.854303][   T28] audit: type=1400 audit(1783288312.832:2343): avc:  denied  { write } for  pid=12933 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  449.973403][T12921] EXT4-fs (loop5): 1 orphan inode deleted
[  450.007103][T12921] EXT4-fs (loop5): 1 truncate cleaned up
[  450.045474][T12921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.127282][T12921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.266907][T12940] random: crng reseeded on system resumption
[  450.276101][T12940] program syz.1.1913 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  450.384840][T12799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.554759][T12799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.135165][T12947] netlink: 'syz.7.1915': attribute type 11 has an invalid length.
[  451.135823][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.169253][T12799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.209342][T12799] hsr_slave_0: entered promiscuous mode
[  451.236030][T12947] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1915'.
[  451.248026][T12799] hsr_slave_1: entered promiscuous mode
[  451.273335][   T28] audit: type=1400 audit(1783288314.252:2344): avc:  denied  { cpu } for  pid=12950 comm="syz.6.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  451.300222][T12799] debugfs: 'hsr0' already exists in 'hsr'
[  451.326100][T12799] Cannot create hsr debugfs directory
[  451.550849][   T28] audit: type=1400 audit(1783288314.522:2345): avc:  denied  { write } for  pid=12935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  451.617357][T12975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  451.624774][T12975] IPv6: NLM_F_CREATE should be set when creating new route
[  451.643756][T12978] loop6: detected capacity change from 0 to 256
[  451.668302][   T28] audit: type=1400 audit(1783288314.642:2346): avc:  denied  { write } for  pid=12970 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  451.699414][T12975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  451.897052][   T28] audit: type=1400 audit(1783288314.862:2347): avc:  denied  { bind } for  pid=12986 comm="syz.5.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  451.909095][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  451.928636][T12989] syzkaller0: entered promiscuous mode
[  451.962422][T12984] random: crng reseeded on system resumption
[  451.967940][T12989] syzkaller0: entered allmulticast mode
[  451.975683][T12987] syz.5.1924 (12987) used greatest stack depth: 9136 bytes left
[  451.983471][T12984] program syz.6.1923 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  451.988627][   T28] audit: type=1400 audit(1783288314.862:2348): avc:  denied  { node_bind } for  pid=12986 comm="syz.5.1924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  452.235690][   T28] audit: type=1400 audit(1783288315.212:2349): avc:  denied  { write } for  pid=12983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  452.296780][   T28] audit: type=1400 audit(1783288315.272:2350): avc:  denied  { write } for  pid=13008 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  452.495817][T12799] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  452.564611][T13023] loop5: detected capacity change from 0 to 512
[  452.676717][T13023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.689402][T13023] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.765191][   T28] audit: type=1400 audit(1783288315.732:2351): avc:  denied  { write } for  pid=13012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  452.875859][T12799] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  452.886560][T12799] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  452.911604][T12799] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  452.931197][T13035] loop7: detected capacity change from 0 to 512
[  452.940745][T13035] EXT4-fs: Ignoring removed oldalloc option
[  452.950737][T12799] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  452.961827][T12799] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  452.970992][T12799] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  452.972669][T13035] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  452.998196][T12799] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  453.026510][T13035] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1931: invalid indirect mapped block 83886080 (level 1)
[  453.060104][T13035] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  453.067336][T13035] EXT4-fs (loop7): Remounting filesystem read-only
[  453.076580][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  453.076607][    C1] EXT4-fs (loop7): initial error at time 1783288316: ext4_free_branches:1023: inode 16
[  453.076668][    C1] EXT4-fs (loop7): last error at time 1783288316: ext4_free_branches:1023: inode 16
[  453.109281][T13035] EXT4-fs (loop7): 1 orphan inode deleted
[  453.115091][T13035] EXT4-fs (loop7): 1 truncate cleaned up
[  453.132374][T13035] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.192257][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'.
[  453.240097][T13035] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.263307][T12493] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.287184][T12799] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.321532][T12799] 8021q: adding VLAN 0 to HW filter on device team0
[  453.374084][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.381245][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.472638][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.479845][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.626983][T13067] random: crng reseeded on system resumption
[  453.675232][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'.
[  453.763735][T13068] loop5: detected capacity change from 0 to 8192
[  453.941015][T13091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  453.950065][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1935'.
[  453.959133][T13068] netlink: 'syz.5.1935': attribute type 30 has an invalid length.
[  453.967030][T13068] netlink: 'syz.5.1935': attribute type 29 has an invalid length.
[  453.974873][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1935'.
[  454.039207][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  454.060282][T13106] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  454.068887][T13091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  454.098508][T12799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.106085][T13091] netlink: 173 bytes leftover after parsing attributes in process `syz.6.1943'.
[  454.117124][T13106] FAT-fs (loop5): Filesystem has been set read-only
[  454.307338][ T6878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.407186][T13136] loop7: detected capacity change from 0 to 512
[  454.501715][T13136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.515671][T13136] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  454.745071][T13142] random: crng reseeded on system resumption
[  454.802091][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  454.802111][   T28] audit: type=1400 audit(1783288317.782:2358): avc:  denied  { write } for  pid=13144 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  454.834980][ T6878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.859897][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1950'.
[  454.885180][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1950'.
[  454.910874][ T6878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.999304][T13153] loop5: detected capacity change from 0 to 512
[  455.022935][T13153] EXT4-fs: Ignoring removed oldalloc option
[  455.084432][T13153] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  455.101581][T13153] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1951: invalid indirect mapped block 83886080 (level 1)
[  455.119413][T13153] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  455.119656][T13153] EXT4-fs (loop5): Remounting filesystem read-only
[  455.128867][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  455.128904][    C1] EXT4-fs (loop5): initial error at time 1783288318: ext4_free_branches:1023: inode 16
[  455.128938][    C1] EXT4-fs (loop5): last error at time 1783288318: ext4_free_branches:1023: inode 16
[  455.170744][ T6878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.194267][   T28] audit: type=1400 audit(1783288318.172:2359): avc:  denied  { write } for  pid=13154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  455.227235][ T5479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.240485][T13153] EXT4-fs (loop5): 1 orphan inode deleted
[  455.268789][T13153] EXT4-fs (loop5): 1 truncate cleaned up
[  455.277778][   T28] audit: type=1400 audit(1783288318.252:2360): avc:  denied  { write } for  pid=13173 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  455.300582][T13153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.323652][T13153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.604739][T12799] veth0_vlan: entered promiscuous mode
[  455.651531][ T6878] team0: left allmulticast mode
[  455.676742][ T6878] team_slave_0: left allmulticast mode
[  455.696772][ T6878] team_slave_1: left allmulticast mode
[  455.708542][ T6878] team0: left promiscuous mode
[  455.721865][   T28] audit: type=1400 audit(1783288318.692:2361): avc:  denied  { write } for  pid=13175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  455.749692][ T6878] team_slave_0: left promiscuous mode
[  455.763087][T13198] loop5: detected capacity change from 0 to 512
[  455.770973][ T6878] team_slave_1: left promiscuous mode
[  455.782335][T13198] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  455.791433][ T6878] bridge0: port 3(team0) entered disabled state
[  455.816927][ T6878] bridge_slave_1: left allmulticast mode
[  455.835951][ T6878] bridge_slave_1: left promiscuous mode
[  455.847545][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.863162][ T6878] bridge_slave_0: left allmulticast mode
[  455.877921][ T6878] bridge_slave_0: left promiscuous mode
[  455.887267][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.957488][   T28] audit: type=1400 audit(1783288318.922:2362): avc:  denied  { write } for  pid=13203 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  456.061594][T13208] loop5: detected capacity change from 0 to 512
[  456.068905][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  456.134020][T13208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  456.147124][T13208] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal
[  456.226583][T12799] veth1_vlan: entered promiscuous mode
[  456.328279][T13208] bridge1: entered promiscuous mode
[  456.333722][T13208] bridge1: entered allmulticast mode
[  456.341413][T13208] team0: Port device bridge1 added
[  456.381660][T12799] veth0_macvtap: entered promiscuous mode
[  456.393069][T12799] veth1_macvtap: entered promiscuous mode
[  456.429748][T12799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.543140][T12799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.625877][   T28] audit: type=1400 audit(1783288319.602:2363): avc:  denied  { write } for  pid=13212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  456.675491][T13215] random: crng reseeded on system resumption
[  456.747500][ T6878] hsr_slave_0: left promiscuous mode
[  456.772642][ T6878] hsr_slave_1: left promiscuous mode
[  456.788747][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.810413][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.822538][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.840779][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.848044][   T28] audit: type=1400 audit(1783288319.812:2364): avc:  denied  { write } for  pid=13229 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  456.902053][ T6878] veth1_macvtap: left promiscuous mode
[  456.922275][ T6878] veth0_macvtap: left promiscuous mode
[  456.941812][ T6878] veth1_vlan: left promiscuous mode
[  456.957186][ T6878] veth0_vlan: left promiscuous mode
[  457.133325][   T28] audit: type=1400 audit(1783288320.112:2365): avc:  denied  { write } for  pid=13232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  457.208252][   T28] audit: type=1400 audit(1783288320.182:2366): avc:  denied  { write } for  pid=13253 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  457.239555][ T6878] team0 (unregistering): Port device team_slave_1 removed
[  457.276384][ T6878] team0 (unregistering): Port device team_slave_0 removed
[  457.304325][   T28] audit: type=1400 audit(1783288320.282:2367): avc:  denied  { listen } for  pid=13259 comm="syz.1.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  457.464176][ T6883] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.492819][ T6883] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.530468][ T6883] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.539367][ T6883] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.148925][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  458.206481][T13291] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1896'.
[  458.281463][T13291] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1896'.
[  458.523885][T13295] random: crng reseeded on system resumption
[  458.557803][T13295] program syz.6.1969 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  458.730231][T13298] IPv6: NLM_F_CREATE should be specified when creating new route
[  458.935786][T13303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  458.943243][T13303] IPv6: NLM_F_CREATE should be set when creating new route
[  458.999415][T13307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  459.040243][T13303] netlink: 173 bytes leftover after parsing attributes in process `syz.8.1971'.
[  460.163850][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  460.163865][   T28] audit: type=1400 audit(1783288323.142:2372): avc:  denied  { write } for  pid=13328 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.228917][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  460.402229][T13343] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1981'.
[  460.434273][T13343] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1981'.
[  460.445806][T13341] random: crng reseeded on system resumption
[  460.454143][T13341] program syz.8.1980 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  460.531576][T13351] loop8: detected capacity change from 0 to 512
[  460.546554][T13351] EXT4-fs: Ignoring removed oldalloc option
[  460.565957][T13351] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  460.597296][T13353] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1983'.
[  460.615297][T13351] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.1982: invalid indirect mapped block 83886080 (level 1)
[  460.637912][T13351] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  460.638186][T13351] EXT4-fs (loop8): Remounting filesystem read-only
[  460.647674][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  460.647700][    C1] EXT4-fs (loop8): initial error at time 1783288323: ext4_free_branches:1023: inode 16
[  460.647737][    C1] EXT4-fs (loop8): last error at time 1783288323: ext4_free_branches:1023: inode 16
[  460.685275][T13351] EXT4-fs (loop8): 1 orphan inode deleted
[  460.691130][T13351] EXT4-fs (loop8): 1 truncate cleaned up
[  460.697317][T13351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.711612][T13351] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.719638][   T28] audit: type=1400 audit(1783288323.692:2373): avc:  denied  { write } for  pid=13334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.917329][   T28] audit: type=1400 audit(1783288323.892:2374): avc:  denied  { write } for  pid=13366 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.508359][   T28] audit: type=1400 audit(1783288324.352:2375): avc:  denied  { map } for  pid=13384 comm="syz.6.1987" path="pipe:[37857]" dev="pipefs" ino=37857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  461.620417][T13388] loop8: detected capacity change from 0 to 512
[  461.707491][T13391] loop6: detected capacity change from 0 to 512
[  461.718339][T13388] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.769950][   T28] audit: type=1400 audit(1783288324.652:2376): avc:  denied  { write } for  pid=13370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.817449][T13388] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.840154][T13391] EXT4-fs (loop6): orphan cleanup on readonly fs
[  461.872145][T13391] Quota error (device loop6): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  461.925934][T13391] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  461.943449][   T28] audit: type=1400 audit(1783288324.832:2377): avc:  denied  { write } for  pid=13394 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  462.023064][T13391] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  462.045629][T13391] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #14: comm syz.6.1989: invalid orphan symlink nlink 1
[  462.046941][   T28] audit: type=1400 audit(1783288324.882:2378): avc:  denied  { write } for  pid=13386 comm="syz.8.1988" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  462.113319][   T28] audit: type=1400 audit(1783288324.952:2379): avc:  denied  { write } for  pid=13386 comm="syz.8.1988" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  462.162867][   T28] audit: type=1400 audit(1783288324.972:2380): avc:  denied  { map } for  pid=13386 comm="syz.8.1988" path="/6/file1/memory.events" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  462.207205][T13391] loop6: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  462.207433][T13391] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1989: couldn't read orphan inode 14 (err -117)
[  462.216651][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  462.216707][    C0] EXT4-fs (loop6): last error at time 1783288325: ext4_orphan_get:1399: inode 14
[  462.289643][T13391] loop6: lost filesystem error report for type 5 error -117
[  462.289889][T13391] EXT4-fs (loop6): 1 truncate cleaned up
[  462.308907][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  462.334437][T13391] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  462.370556][T13401] loop5: detected capacity change from 0 to 8192
[  462.512554][T12799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.272635][T13422] random: crng reseeded on system resumption
[  463.292733][T13422] program syz.8.1992 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  463.765306][T13428] loop8: detected capacity change from 0 to 512
[  463.805097][T13428] EXT4-fs (loop8): 1 truncate cleaned up
[  463.811822][T13428] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.138204][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1
[  464.230892][T12799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.241780][ T8642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.372167][T13455] FAULT_INJECTION: forcing a failure.
[  464.372167][T13455] name failslab, interval 1, probability 0, space 0, times 0
[  464.388920][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  464.450357][T13455] CPU: 0 UID: 0 PID: 13455 Comm: syz.8.1998 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  464.450522][T13455] Tainted: [W]=WARN
[  464.450531][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  464.450573][T13455] Call Trace:
[  464.450583][T13455]  <TASK>
[  464.450594][T13455]  __dump_stack+0x1d/0x30
[  464.450619][T13455]  dump_stack_lvl+0x95/0xd0
[  464.450641][T13455]  dump_stack+0x15/0x1b
[  464.450721][T13455]  should_fail_ex+0x25e/0x270
[  464.450758][T13455]  ? __get_vm_area_node+0x106/0x1d0
[  464.450789][T13455]  should_failslab+0x8c/0xb0
[  464.450817][T13455]  __kmalloc_cache_node_noprof+0x81/0x3e0
[  464.450855][T13455]  ? __get_vm_area_node+0x106/0x1d0
[  464.450889][T13455]  __get_vm_area_node+0x106/0x1d0
[  464.450951][T13455]  __vmalloc_node_range_noprof+0x266/0x11e0
[  464.451004][T13455]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  464.451045][T13455]  ? avc_has_perm_noaudit+0xa3/0x120
[  464.451081][T13455]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  464.451197][T13455]  __vmalloc_noprof+0xa4/0xf0
[  464.451292][T13455]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  464.451325][T13455]  bpf_prog_alloc_no_stats+0x47/0x390
[  464.451355][T13455]  ? bpf_prog_alloc+0x2a/0x150
[  464.451432][T13455]  bpf_prog_alloc+0x3c/0x150
[  464.451462][T13455]  bpf_prog_load+0x54b/0x1100
[  464.451570][T13455]  ? avc_has_perm_noaudit+0xa3/0x120
[  464.451654][T13455]  ? vfs_write+0x7f0/0x990
[  464.451674][T13455]  __sys_bpf+0xbae/0xc30
[  464.451755][T13455]  ? vfs_write+0x7f0/0x990
[  464.451774][T13455]  ? vfs_write+0x7f0/0x990
[  464.451798][T13455]  __x64_sys_bpf+0x69/0x80
[  464.451915][T13455]  x64_sys_call+0x10cb/0x3020
[  464.451940][T13455]  do_syscall_64+0x136/0x3c0
[  464.451982][T13455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.452004][T13455] RIP: 0033:0x7f4c1318de59
[  464.452067][T13455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.452087][T13455] RSP: 002b:00007f4c11be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  464.452107][T13455] RAX: ffffffffffffffda RBX: 00007f4c13415fa0 RCX: 00007f4c1318de59
[  464.452124][T13455] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[  464.452143][T13455] RBP: 00007f4c11be7090 R08: 0000000000000000 R09: 0000000000000000
[  464.452161][T13455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.452209][T13455] R13: 00007f4c13416038 R14: 00007f4c13415fa0 R15: 00007ffdc5490508
[  464.452229][T13455]  </TASK>
[  464.704592][T13455] syz.8.1998: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[  464.724669][T13459] FAULT_INJECTION: forcing a failure.
[  464.724669][T13459] name failslab, interval 1, probability 0, space 0, times 0
[  464.760630][T13459] CPU: 0 UID: 0 PID: 13459 Comm: syz.5.1999 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  464.760701][T13459] Tainted: [W]=WARN
[  464.760751][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  464.760766][T13459] Call Trace:
[  464.760774][T13459]  <TASK>
[  464.760784][T13459]  __dump_stack+0x1d/0x30
[  464.760811][T13459]  dump_stack_lvl+0x95/0xd0
[  464.760839][T13459]  dump_stack+0x15/0x1b
[  464.760864][T13459]  should_fail_ex+0x25e/0x270
[  464.760905][T13459]  ? __get_vm_area_node+0x106/0x1d0
[  464.760934][T13459]  should_failslab+0x8c/0xb0
[  464.760963][T13459]  __kmalloc_cache_node_noprof+0x81/0x3e0
[  464.761086][T13459]  ? __get_vm_area_node+0x106/0x1d0
[  464.761119][T13459]  __get_vm_area_node+0x106/0x1d0
[  464.761149][T13459]  __vmalloc_node_range_noprof+0x266/0x11e0
[  464.761184][T13459]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  464.761219][T13459]  ? avc_has_perm_noaudit+0xa3/0x120
[  464.761267][T13459]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  464.761303][T13459]  __vmalloc_noprof+0xa4/0xf0
[  464.761331][T13459]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  464.761415][T13459]  bpf_prog_alloc_no_stats+0x47/0x390
[  464.761453][T13459]  ? bpf_prog_alloc+0x2a/0x150
[  464.761503][T13459]  bpf_prog_alloc+0x3c/0x150
[  464.761540][T13459]  bpf_prog_load+0x54b/0x1100
[  464.761610][T13459]  ? avc_has_perm_noaudit+0xa3/0x120
[  464.761649][T13459]  ? vfs_write+0x7f0/0x990
[  464.761673][T13459]  __sys_bpf+0xbae/0xc30
[  464.761716][T13459]  ? vfs_write+0x7f0/0x990
[  464.761741][T13459]  ? vfs_write+0x7f0/0x990
[  464.761774][T13459]  __x64_sys_bpf+0x69/0x80
[  464.761809][T13459]  x64_sys_call+0x10cb/0x3020
[  464.761833][T13459]  do_syscall_64+0x136/0x3c0
[  464.761872][T13459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.761894][T13459] RIP: 0033:0x7f4af2cede59
[  464.761976][T13459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.762061][T13459] RSP: 002b:00007f4af1726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  464.762086][T13459] RAX: ffffffffffffffda RBX: 00007f4af2f76090 RCX: 00007f4af2cede59
[  464.762113][T13459] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005
[  464.762232][T13459] RBP: 00007f4af1726090 R08: 0000000000000000 R09: 0000000000000000
[  464.762305][T13459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.762318][T13459] R13: 00007f4af2f76128 R14: 00007f4af2f76090 R15: 00007ffc494a8d88
[  464.762338][T13459]  </TASK>
[  464.762395][T13455] CPU: 0 UID: 0 PID: 13455 Comm: syz.8.1998 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  464.762505][T13455] Tainted: [W]=WARN
[  464.762515][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  464.762529][T13455] Call Trace:
[  464.762535][T13455]  <TASK>
[  464.762563][T13455]  __dump_stack+0x1d/0x30
[  464.762590][T13455]  dump_stack_lvl+0x95/0xd0
[  464.762615][T13455]  dump_stack+0x15/0x1b
[  464.762636][T13455]  warn_alloc+0x145/0x1c0
[  464.762691][T13455]  __vmalloc_node_range_noprof+0x28b/0x11e0
[  464.762732][T13455]  ? avc_has_perm_noaudit+0xa3/0x120
[  464.762759][T13455]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  464.762874][T13455]  __vmalloc_noprof+0xa4/0xf0
[  464.762898][T13455]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  464.763012][T13455]  bpf_prog_alloc_no_stats+0x47/0x390
[  464.763116][T13455]  ? bpf_prog_alloc+0x2a/0x150
[  464.763148][T13455]  bpf_prog_alloc+0x3c/0x150
[  464.763176][T13455]  bpf_prog_load+0x54b/0x1100
[  464.763222][T13455]  ? avc_has_perm_noaudit+0xa3/0x120
[  464.763262][T13455]  ? vfs_write+0x7f0/0x990
[  464.763354][T13455]  __sys_bpf+0xbae/0xc30
[  464.763386][T13455]  ? vfs_write+0x7f0/0x990
[  464.763499][T13455]  ? vfs_write+0x7f0/0x990
[  464.763523][T13455]  __x64_sys_bpf+0x69/0x80
[  464.763625][T13455]  x64_sys_call+0x10cb/0x3020
[  464.763685][T13455]  do_syscall_64+0x136/0x3c0
[  464.763726][T13455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.763750][T13455] RIP: 0033:0x7f4c1318de59
[  464.763770][T13455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.763838][T13455] RSP: 002b:00007f4c11be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  464.763857][T13455] RAX: ffffffffffffffda RBX: 00007f4c13415fa0 RCX: 00007f4c1318de59
[  464.763873][T13455] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[  464.763890][T13455] RBP: 00007f4c11be7090 R08: 0000000000000000 R09: 0000000000000000
[  464.763906][T13455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.763923][T13455] R13: 00007f4c13416038 R14: 00007f4c13415fa0 R15: 00007ffdc5490508
[  464.763986][T13455]  </TASK>
[  464.764003][T13455] Mem-Info:
[  465.458911][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  465.458931][   T28] audit: type=1400 audit(1783288328.402:2388): avc:  denied  { write } for  pid=13460 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  465.499932][T13455] active_anon:29212 inactive_anon:4 isolated_anon:0
[  465.499932][T13455]  active_file:2333 inactive_file:27027 isolated_file:0
[  465.499932][T13455]  unevictable:0 dirty:403 writeback:0
[  465.499932][T13455]  slab_reclaimable:2896 slab_unreclaimable:23325
[  465.499932][T13455]  mapped:30350 shmem:17079 pagetables:1486
[  465.499932][T13455]  sec_pagetables:0 bounce:0
[  465.499932][T13455]  kernel_misc_reclaimable:0
[  465.499932][T13455]  free:1809193 free_pcp:22938 free_cma:0
[  465.550040][T13455] Node 0 active_anon:115456kB inactive_anon:16kB active_file:9332kB inactive_file:108108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121400kB dirty:1612kB writeback:0kB shmem:66924kB kernel_stack:4304kB pagetables:5944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  465.584741][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.621045][T13465] loop5: detected capacity change from 0 to 512
[  465.626012][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  465.667801][T13465] ext4: Unknown parameter 'obj_type'
[  465.689533][T13455] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  465.748280][T13455] lowmem_reserve[]: 0 2878 7857 7857
[  465.775711][T13455] Node 0 DMA32 free:2944088kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947716kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB
[  465.807273][T13455] lowmem_reserve[]: 0 0 4978 4978
[  465.821343][T13455] Node 0 Normal free:4273620kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:132012kB inactive_anon:16kB active_file:9332kB inactive_file:108108kB unevictable:0kB writepending:1612kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:76804kB local_pcp:35772kB free_cma:0kB
[  466.079542][T13478] loop6: detected capacity change from 0 to 512
[  466.099359][T13478] EXT4-fs: Ignoring removed orlov option
[  466.468913][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  466.711443][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2
[  466.734002][T13475] syz.7.2001 (13475) used obsolete PPPIOCDETACH ioctl
[  466.772450][T13478] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  466.929044][T13455] lowmem_reserve[]: 0 0 0 0
[  466.936248][T13455] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  466.950261][T13455] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944088kB
[  467.737504][T13455] Node 0 Normal: 31*4kB (UE) 343*8kB (UME) 269*16kB (UME) 203*32kB (UME) 87*64kB (ME) 103*128kB (UME) 163*256kB (UME) 23*512kB (UME) 7*1024kB (ME) 3*2048kB (M) 1010*4096kB (UM) = 4236196kB
[  467.889141][T13455] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  467.899512][T13455] 51868 total pagecache pages
[  467.904306][T13455] 4 pages in swap cache
[  467.908519][T13455] Free swap  = 124980kB
[  467.913037][T13455] Total swap = 124996kB
[  467.917293][T13455] 2097051 pages RAM
[  467.932436][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.548919][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  468.751410][T13455] 0 pages HighMem/MovableOnly
[  468.770577][T13455] 81723 pages reserved
[  468.775302][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  468.933568][T13478] EXT4-fs: error -4 creating inode table initialization thread
[  468.960302][T13478] EXT4-fs (loop6): mount failed
[  469.599773][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2007'.
[  469.740447][T13488] bond0: option ad_select: unable to set because the bond device is up
[  469.853246][   T28] audit: type=1400 audit(1783288332.822:2389): avc:  denied  { create } for  pid=13493 comm="syz.6.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  469.903653][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.051223][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  470.628906][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  470.802286][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.834609][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  470.997661][T13507] loop8: detected capacity change from 0 to 8192
[  471.011742][   T12] gretap0: left allmulticast mode
[  471.020167][   T28] audit: type=1400 audit(1783288334.002:2390): avc:  denied  { write } for  pid=13502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  471.050107][   T12] gretap0: left promiscuous mode
[  471.068898][   T12] bridge0: port 3(gretap0) entered disabled state
[  471.112020][   T12] bridge_slave_1: left allmulticast mode
[  471.119412][   T12] bridge_slave_1: left promiscuous mode
[  471.130259][   T28] audit: type=1400 audit(1783288334.102:2391): avc:  denied  { write } for  pid=13531 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  471.157944][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.190989][   T12] bridge_slave_0: left allmulticast mode
[  471.199199][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2012'.
[  471.209759][   T12] bridge_slave_0: left promiscuous mode
[  471.218531][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.224152][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2010'.
[  471.246120][T13532] netlink: 'syz.8.2010': attribute type 30 has an invalid length.
[  471.254009][T13532] netlink: 'syz.8.2010': attribute type 29 has an invalid length.
[  471.261919][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2010'.
[  471.453111][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  471.474860][T13543] loop7: detected capacity change from 0 to 512
[  471.487443][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  471.499960][T13543] EXT4-fs: Ignoring removed oldalloc option
[  471.508375][   T12] bond0 (unregistering): Released all slaves
[  471.521883][T13543] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  471.536128][   T12] bond1 (unregistering): (slave veth3): Releasing active interface
[  471.551720][T13543] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2016: invalid indirect mapped block 83886080 (level 1)
[  471.567214][T13543] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  471.567638][T13543] EXT4-fs (loop7): Remounting filesystem read-only
[  471.576940][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  471.576968][    C0] EXT4-fs (loop7): initial error at time 1783288334: ext4_free_branches:1023: inode 16
[  471.577020][    C0] EXT4-fs (loop7): last error at time 1783288334: ext4_free_branches:1023: inode 16
[  471.613497][T13543] EXT4-fs (loop7): 1 orphan inode deleted
[  471.619882][   T12] bond1 (unregistering): (slave veth5): Releasing active interface
[  471.628096][T13543] EXT4-fs (loop7): 1 truncate cleaned up
[  471.635747][T13543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.649395][   T12] bond1 (unregistering): Released all slaves
[  471.679554][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3
[  471.744135][T13543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.788444][   T28] audit: type=1400 audit(1783288334.762:2392): avc:  denied  { write } for  pid=13550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  471.863367][   T12] tipc: Left network mode
[  471.931084][   T28] audit: type=1400 audit(1783288334.912:2393): avc:  denied  { write } for  pid=13562 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  472.120803][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4
[  472.183436][   T12] hsr_slave_0: left promiscuous mode
[  472.190748][   T12] hsr_slave_1: left promiscuous mode
[  472.196406][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  472.246068][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  472.291258][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  472.312147][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  472.331567][   T12] veth1_macvtap: left promiscuous mode
[  472.350499][   T12] veth0_macvtap: left promiscuous mode
[  472.383310][   T12] veth1_vlan: left promiscuous mode
[  472.411998][   T12] veth0_vlan: left promiscuous mode
[  472.798964][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  474.880113][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  475.026723][T13585] loop7: detected capacity change from 0 to 1024
[  475.400818][T13585] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  475.640386][   T28] audit: type=1400 audit(1783288338.612:2394): avc:  denied  { write } for  pid=13589 comm="syz.1.2021" name="file0" dev="tmpfs" ino=2617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  476.779656][   T28] audit: type=1400 audit(1783288338.612:2395): avc:  denied  { open } for  pid=13589 comm="syz.1.2021" path="/484/file0" dev="tmpfs" ino=2617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  476.948912][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  477.012880][T13585] EXT4-fs warning (device loop7): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop7.
[  477.054350][   T28] audit: type=1400 audit(1783288339.992:2396): avc:  denied  { ioctl } for  pid=13589 comm="syz.1.2021" path="/484/file0" dev="tmpfs" ino=2617 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  477.203503][   T12] team0 (unregistering): Port device team_slave_1 removed
[  477.235516][   T12] team0 (unregistering): Port device team_slave_0 removed
[  477.436986][   T28] audit: type=1400 audit(1783288340.392:2397): avc:  denied  { write } for  pid=13569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  477.541433][T13603] loop8: detected capacity change from 0 to 512
[  477.552153][   T28] audit: type=1400 audit(1783288340.472:2398): avc:  denied  { write } for  pid=13600 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  477.588499][T13603] EXT4-fs (loop8): orphan cleanup on readonly fs
[  477.615204][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17
[  477.619960][T13603] Quota error (device loop8): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  477.640819][T13603] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  477.722816][T13603] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  477.732591][T13603] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #14: comm syz.8.2023: invalid orphan symlink nlink 1
[  477.744995][T13603] loop8: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  477.745223][T13603] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2023: couldn't read orphan inode 14 (err -117)
[  477.754508][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  477.754546][    C0] EXT4-fs (loop8): last error at time 1783288340: ext4_orphan_get:1399: inode 14
[  477.792058][T13603] loop8: lost filesystem error report for type 5 error -117
[  477.825029][T13603] EXT4-fs (loop8): 1 truncate cleaned up
[  477.840232][T13603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  478.601822][T13614] loop7: detected capacity change from 0 to 512
[  478.737755][T12799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.752184][   T28] audit: type=1400 audit(1783288341.732:2399): avc:  denied  { write } for  pid=13616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  478.832189][T13640] loop8: detected capacity change from 0 to 256
[  478.889315][   T28] audit: type=1400 audit(1783288341.812:2400): avc:  denied  { write } for  pid=13638 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  478.953279][T13614] EXT4-fs (loop7): 1 orphan inode deleted
[  478.965782][   T28] audit: type=1400 audit(1783288341.812:2401): avc:  denied  { watch watch_reads } for  pid=13639 comm="syz.8.2030" path="/14/file1" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  479.006647][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18
[  479.007471][T13614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.107173][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  479.165801][   T28] audit: type=1400 audit(1783288342.142:2402): avc:  denied  { write } for  pid=13613 comm="syz.7.2027" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  479.167132][T13614] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 13: comm syz.7.2027: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  479.234507][T13614] EXT4-fs (loop7): Remounting filesystem read-only
[  479.319900][ T5479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.347995][T13664] loop7: detected capacity change from 0 to 512
[  479.355471][   T28] audit: type=1400 audit(1783288342.322:2403): avc:  denied  { write } for  pid=13644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  479.379235][T13665] syzkaller0: entered promiscuous mode
[  479.384768][T13665] syzkaller0: entered allmulticast mode
[  479.436293][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19
[  479.532183][T13664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.556827][T13664] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  479.584709][T13680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  479.598351][T13680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  479.608332][T13680] netlink: 85 bytes leftover after parsing attributes in process `syz.6.2037'.
[  480.160678][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20
[  480.453907][ T5479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.866426][T13721] loop7: detected capacity change from 0 to 512
[  480.878140][T13721] EXT4-fs: Ignoring removed oldalloc option
[  480.912866][    C1] sd 0:0:1:0: [sda] tag#8014 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  480.919647][T13721] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  480.923335][    C1] sd 0:0:1:0: [sda] tag#8014 CDB: Read(6) 08 00 00 fc 01 80 00 00 00 00 00 00
[  480.945981][T13723] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2044'.
[  480.976109][T13721] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2041: invalid indirect mapped block 83886080 (level 1)
[  481.016771][T13721] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  481.024230][T13721] EXT4-fs (loop7): Remounting filesystem read-only
[  481.033457][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  481.033479][    C1] EXT4-fs (loop7): initial error at time 1783288343: ext4_free_branches:1023: inode 16
[  481.033512][    C1] EXT4-fs (loop7): last error at time 1783288343: ext4_free_branches:1023: inode 16
[  481.068641][T13721] EXT4-fs (loop7): 1 orphan inode deleted
[  481.074438][T13721] EXT4-fs (loop7): 1 truncate cleaned up
[  481.080749][T13721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.189175][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  481.212735][T13721] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.925454][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  481.925474][   T28] audit: type=1400 audit(1783288344.902:2412): avc:  denied  { bind } for  pid=13749 comm="syz.7.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  481.973350][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2051'.
[  482.092114][   T28] audit: type=1400 audit(1783288344.972:2413): avc:  denied  { bind } for  pid=13753 comm="syz.6.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  482.115303][   T28] audit: type=1400 audit(1783288345.092:2414): avc:  denied  { connect } for  pid=13753 comm="syz.6.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  482.300317][   T28] audit: type=1400 audit(1783288345.282:2415): avc:  denied  { name_bind } for  pid=13765 comm="syz.5.2055" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  482.359848][T13754] pim6reg: entered allmulticast mode
[  482.381671][T13754] pim6reg: left allmulticast mode
[  482.444922][T13767] loop7: detected capacity change from 0 to 512
[  482.560378][T13767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.573278][T13767] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  482.692043][   T11] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  482.702866][   T11] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  482.747430][T13776] loop6: detected capacity change from 0 to 512
[  482.769049][T13776] EXT4-fs (loop6): orphan cleanup on readonly fs
[  482.784581][T13776] Quota error (device loop6): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  482.799350][T13776] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  482.851865][T13776] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  482.872422][T13776] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #14: comm syz.6.2057: invalid orphan symlink nlink 1
[  482.906252][T13776] loop6: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  482.908865][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  482.924633][    C1] EXT4-fs (loop6): last error at time 1783288345: ext4_orphan_get:1399: inode 14
[  482.945884][T13776] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2057: couldn't read orphan inode 14 (err -117)
[  482.972210][T13776] loop6: lost filesystem error report for type 5 error -117
[  482.972409][T13776] EXT4-fs (loop6): 1 truncate cleaned up
[  482.997581][T13776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  483.268894][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  483.292039][ T5479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.635783][T13766] netlink: 83 bytes leftover after parsing attributes in process `syz.5.2055'.
[  483.741484][ T8642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.900015][T13797] sctp: [Deprecated]: syz.7.2058 (pid 13797) Use of int in max_burst socket option.
[  483.900015][T13797] Use struct sctp_assoc_value instead
[  483.917511][T13791] loop6: detected capacity change from 0 to 8192
[  483.932108][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2060'.
[  483.941135][T13791] netlink: 'syz.6.2060': attribute type 30 has an invalid length.
[  483.948989][T13791] netlink: 'syz.6.2060': attribute type 29 has an invalid length.
[  483.956831][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2060'.
[  483.958916][   T28] audit: type=1400 audit(1783288346.882:2416): avc:  denied  { read } for  pid=13788 comm="syz.7.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  484.834312][T13816] random: crng reseeded on system resumption
[  484.886950][T13806] syzkaller0: entered promiscuous mode
[  484.892515][T13806] syzkaller0: entered allmulticast mode
[  484.905008][T13816] program syz.6.2067 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  485.040566][T13825] loop5: detected capacity change from 0 to 512
[  485.059083][   T28] audit: type=1400 audit(1783288348.022:2417): avc:  denied  { write } for  pid=13821 comm="syz.6.2069" path="socket:[38901]" dev="sockfs" ino=38901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  485.092441][T13825] EXT4-fs (loop5): orphan cleanup on readonly fs
[  485.099314][T13825] Quota error (device loop5): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  485.109845][T13825] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  485.128900][T13825] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  485.144295][T13825] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #14: comm syz.5.2070: invalid orphan symlink nlink 1
[  485.156519][T13825] loop5: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  485.157926][T13825] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2070: couldn't read orphan inode 14 (err -117)
[  485.167209][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  485.167240][    C0] EXT4-fs (loop5): last error at time 1783288348: ext4_orphan_get:1399: inode 14
[  485.195371][T13825] loop5: lost filesystem error report for type 5 error -117
[  485.196196][T13825] EXT4-fs (loop5): 1 truncate cleaned up
[  485.216588][T13825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  485.348918][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  485.412906][T13835] loop7: detected capacity change from 0 to 512
[  485.539660][T13835] EXT4-fs: Ignoring removed oldalloc option
[  485.558125][T13835] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  485.623967][T13835] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2073: invalid indirect mapped block 83886080 (level 1)
[  485.686506][T13835] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  485.687982][T13835] EXT4-fs (loop7): Remounting filesystem read-only
[  485.697244][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  485.697263][    C0] EXT4-fs (loop7): initial error at time 1783288348: ext4_free_branches:1023: inode 16
[  485.697288][    C0] EXT4-fs (loop7): last error at time 1783288348: ext4_free_branches:1023: inode 16
[  485.973393][T13835] EXT4-fs (loop7): 1 orphan inode deleted
[  485.989012][T13835] EXT4-fs (loop7): 1 truncate cleaned up
[  485.995609][T13835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.996126][T12493] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.019298][T13835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.330780][   T28] audit: type=1400 audit(1783288349.312:2418): avc:  denied  { write } for  pid=13861 comm="syz.6.2076" path="socket:[39992]" dev="sockfs" ino=39992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  486.386604][T13860] random: crng reseeded on system resumption
[  486.418587][T13860] program syz.5.2079 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  486.446487][T13868] loop8: detected capacity change from 0 to 1024
[  486.472141][T13868] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  486.648751][T13878] syzkaller0: entered promiscuous mode
[  486.654409][T13878] syzkaller0: entered allmulticast mode
[  486.688216][T13880] loop6: detected capacity change from 0 to 512
[  486.699469][T13868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.725657][T13880] EXT4-fs (loop6): orphan cleanup on readonly fs
[  486.737032][T13880] Quota error (device loop6): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  486.747381][T13880] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  486.765535][T13880] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  486.772988][T13880] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #14: comm syz.6.2085: invalid orphan symlink nlink 1
[  486.785050][T13880] loop6: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  486.785338][T13880] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2085: couldn't read orphan inode 14 (err -117)
[  486.806377][T13880] loop6: lost filesystem error report for type 5 error -117
[  486.806603][T13880] EXT4-fs (loop6): 1 truncate cleaned up
[  486.820128][T13880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  486.957704][T12799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.428966][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  487.461720][T13904] loop8: detected capacity change from 0 to 1024
[  487.506757][T13909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13909 comm=syz.7.2091
[  487.635805][ T8642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.648936][T13904] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  487.737883][T13916] loop6: detected capacity change from 0 to 512
[  487.752376][T13916] EXT4-fs: Ignoring removed oldalloc option
[  487.779069][T13904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.792023][T13916] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  487.841372][T13916] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.2092: invalid indirect mapped block 83886080 (level 1)
[  487.856637][T13916] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  487.856858][T13916] EXT4-fs (loop6): Remounting filesystem read-only
[  487.872689][T13916] EXT4-fs (loop6): 1 orphan inode deleted
[  487.878522][T13916] EXT4-fs (loop6): 1 truncate cleaned up
[  487.884302][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  487.884332][    C0] EXT4-fs (loop6): initial error at time 1783288350: ext4_free_branches:1023: inode 16
[  487.884359][    C0] EXT4-fs (loop6): last error at time 1783288350: ext4_free_branches:1023: inode 16
[  487.910964][T13916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.924267][T13916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.120060][T13926] random: crng reseeded on system resumption
[  488.149951][T13926] program syz.5.2096 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  488.204770][T12799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.226836][   T28] audit: type=1400 audit(1783288351.202:2419): avc:  denied  { setopt } for  pid=13921 comm="syz.7.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  488.420925][T13945] netlink: zone id is out of range
[  488.432158][T13940] xt_hashlimit: size too large, truncated to 1048576
[  488.441404][T13945] netlink: zone id is out of range
[  488.595621][T13957] FAULT_INJECTION: forcing a failure.
[  488.595621][T13957] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  488.608941][T13957] CPU: 0 UID: 0 PID: 13957 Comm: syz.5.2106 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  488.609169][T13957] Tainted: [W]=WARN
[  488.609179][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  488.609195][T13957] Call Trace:
[  488.609204][T13957]  <TASK>
[  488.609214][T13957]  __dump_stack+0x1d/0x30
[  488.609244][T13957]  dump_stack_lvl+0x95/0xd0
[  488.609270][T13957]  dump_stack+0x15/0x1b
[  488.609363][T13957]  should_fail_ex+0x25e/0x270
[  488.609471][T13957]  should_fail+0xb/0x20
[  488.609500][T13957]  should_fail_usercopy+0x1a/0x20
[  488.609606][T13957]  _copy_to_user+0x20/0xa0
[  488.609631][T13957]  simple_read_from_buffer+0xb5/0x130
[  488.609730][T13957]  proc_fail_nth_read+0x10e/0x150
[  488.609759][T13957]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  488.609786][T13957]  vfs_read+0x18e/0x7c0
[  488.609838][T13957]  ? __rcu_read_unlock+0x4e/0x70
[  488.609896][T13957]  ? __fget_files+0x184/0x1c0
[  488.609943][T13957]  ? mutex_lock+0x57/0x90
[  488.609969][T13957]  ksys_read+0xdc/0x1a0
[  488.609989][T13957]  __x64_sys_read+0x40/0x50
[  488.610071][T13957]  x64_sys_call+0x2886/0x3020
[  488.610104][T13957]  do_syscall_64+0x136/0x3c0
[  488.610141][T13957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.610171][T13957] RIP: 0033:0x7f4af2cae68e
[  488.610255][T13957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  488.610301][T13957] RSP: 002b:00007f4af1746fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  488.610327][T13957] RAX: ffffffffffffffda RBX: 00007f4af17476c0 RCX: 00007f4af2cae68e
[  488.610371][T13957] RDX: 000000000000000f RSI: 00007f4af17470a0 RDI: 0000000000000004
[  488.610389][T13957] RBP: 00007f4af1747090 R08: 0000000000000000 R09: 0000000000000000
[  488.610403][T13957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  488.610419][T13957] R13: 00007f4af2f76038 R14: 00007f4af2f75fa0 R15: 00007ffc494a8d88
[  488.610482][T13957]  </TASK>
[  488.631487][T13955] loop7: detected capacity change from 0 to 256
[  489.188675][T13963] loop5: detected capacity change from 0 to 1024
[  489.332236][T13963] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  489.502528][T13963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.530454][   T28] audit: type=1400 audit(1783288352.482:2420): avc:  denied  { connect } for  pid=13984 comm="syz.7.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  489.552082][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  489.735913][T12493] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.780237][   T28] audit: type=1400 audit(1783288352.722:2421): avc:  denied  { accept } for  pid=13995 comm="syz.8.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  489.811901][   T28] audit: type=1400 audit(1783288352.782:2422): avc:  denied  { accept } for  pid=13999 comm="syz.7.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  489.860185][   T28] audit: type=1400 audit(1783288352.782:2423): avc:  denied  { write } for  pid=13999 comm="syz.7.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  489.931652][T14003] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14003 comm=syz.5.2118
[  489.944755][   T28] audit: type=1400 audit(1783288352.912:2424): avc:  denied  { name_connect } for  pid=14002 comm="syz.5.2118" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  489.991737][T14009] loop8: detected capacity change from 0 to 512
[  490.004324][T14009] EXT4-fs: Ignoring removed oldalloc option
[  490.029013][T14009] ext4: Unknown parameter 'subj_user'
[  490.152836][   T28] audit: type=1400 audit(1783288353.132:2425): avc:  denied  { name_bind } for  pid=14007 comm="syz.8.2120" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  490.245146][T14022] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2123'.
[  490.254718][T14022] 8021q: VLANs not supported on ip_vti0
[  490.261332][T14022] netlink: zone id is out of range
[  490.266534][T14022] netlink: zone id is out of range
[  490.560102][T14032] loop8: detected capacity change from 0 to 512
[  490.566944][T14032] EXT4-fs: Ignoring removed orlov option
[  490.577687][T14032] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  490.591179][T14032] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2125: invalid indirect mapped block 32768 (level 2)
[  490.604774][T14032] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  490.608828][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  490.624464][    C0] EXT4-fs (loop8): initial error at time 1783288353: ext4_free_branches:1023: inode 16
[  490.634206][    C0] EXT4-fs (loop8): last error at time 1783288353: ext4_free_branches:1023: inode 16
[  491.580046][T14032] EXT4-fs (loop8): 1 orphan inode deleted
[  491.585893][T14032] EXT4-fs (loop8): 1 truncate cleaned up
[  491.591707][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  491.607270][T14032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  491.734862][T14036] loop7: detected capacity change from 0 to 512
[  491.742040][T14036] EXT4-fs: Ignoring removed orlov option
[  492.398863][T14036] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  492.639185][T14035] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  493.668931][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  493.685674][T14036] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2126: invalid indirect mapped block 32768 (level 2)
[  493.699559][T14036] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  493.700020][T14036] EXT4-fs (loop7): 1 orphan inode deleted
[  493.709241][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  493.709267][    C0] EXT4-fs (loop7): initial error at time 1783288356: ext4_free_branches:1023: inode 16
[  493.709297][    C0] EXT4-fs (loop7): last error at time 1783288356: ext4_free_branches:1023: inode 16
[  493.780685][T14036] EXT4-fs (loop7): 1 truncate cleaned up
[  493.879394][T14036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  493.984901][   T28] audit: type=1400 audit(1783288356.962:2426): avc:  denied  { write } for  pid=14039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  494.019318][T12799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.021201][ T5479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.058025][T14055] netdevsim netdevsim8 netdevsim0: refused to change device tx_queue_len
[  494.070530][   T28] audit: type=1400 audit(1783288357.032:2427): avc:  denied  { read } for  pid=14054 comm="syz.8.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  494.163292][   T28] audit: type=1400 audit(1783288357.082:2428): avc:  denied  { write } for  pid=14056 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  494.383173][   T28] audit: type=1400 audit(1783288357.362:2429): avc:  denied  { write } for  pid=14065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  494.414109][T14085] loop5: detected capacity change from 0 to 512
[  494.463088][T14085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.486077][   T28] audit: type=1400 audit(1783288357.462:2430): avc:  denied  { write } for  pid=14088 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  494.512342][T14085] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  494.541388][   T28] audit: type=1400 audit(1783288357.522:2431): avc:  denied  { write } for  pid=14084 comm="syz.5.2136" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  494.566655][ T6882] Bluetooth: hci0: Frame reassembly failed (-84)
[  494.642169][T14072] loop7: detected capacity change from 0 to 8192
[  494.650071][T14085] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.2136: iget: bad i_size value: 2533274857506816
[  494.742707][T14100] Bluetooth: hci0: Frame reassembly failed (-84)
[  494.854700][T14072] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  494.903355][   T28] audit: type=1400 audit(1783288357.882:2432): avc:  denied  { write } for  pid=14099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  494.982640][   T28] audit: type=1400 audit(1783288357.932:2433): avc:  denied  { write } for  pid=14116 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  495.197692][   T28] audit: type=1400 audit(1783288358.172:2434): avc:  denied  { write } for  pid=14120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  495.255770][T14135] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2139'.
[  495.264907][T14135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2139'.
[  495.267555][   T28] audit: type=1400 audit(1783288358.182:2435): avc:  denied  { write } for  pid=14133 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  495.451266][T14140] random: crng reseeded on system resumption
[  495.460254][T14140] program syz.8.2140 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  495.709074][T14157] loop8: detected capacity change from 0 to 1024
[  495.732648][T14157] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  495.748900][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  495.817909][T14168] loop7: detected capacity change from 0 to 512
[  495.827131][T14157] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.874081][T14168] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.908959][T14168] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  495.920761][T12799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.241083][T14201] loop8: detected capacity change from 0 to 512
[  496.316059][T14201] EXT4-fs (loop8): 1 orphan inode deleted
[  496.331139][T14201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.382332][T14201] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2146: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  496.404775][T14201] EXT4-fs (loop8): Remounting filesystem read-only
[  496.440380][T12799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.508249][T14219] syzkaller1: entered promiscuous mode
[  496.515829][T14219] syzkaller1: entered allmulticast mode
[  496.601567][T14221] loop8: detected capacity change from 0 to 512
[  496.609274][T14221] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  496.622960][T14221] EXT4-fs (loop8): orphan file too big: 4294967295
[  496.629830][ T3769] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  496.640146][T14221] EXT4-fs (loop8): mount failed
[  496.655590][ T5479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.786781][T14232] random: crng reseeded on system resumption
[  496.794910][T14232] program syz.6.2152 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  496.934381][T12493] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.013010][T14245] loop6: detected capacity change from 0 to 1024
[  497.052220][T14245] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  497.142129][T14245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.217768][T14280] syzkaller0: entered promiscuous mode
[  497.230558][T14280] syzkaller0: entered allmulticast mode
[  497.268006][ T8642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.798595][T14297] random: crng reseeded on system resumption
[  497.806823][T14297] program syz.8.2165 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  497.900227][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  497.928395][T14304] loop8: detected capacity change from 0 to 512
[  497.942639][T14307] loop6: detected capacity change from 0 to 512
[  497.954337][T14304] EXT4-fs (loop8): 1 orphan inode deleted
[  497.960691][T14304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  497.975466][T14304] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2168: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  497.995451][T14304] EXT4-fs (loop8): Remounting filesystem read-only
[  498.024424][T14307] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2169: bad orphan inode 15
[  498.056551][T12799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.067769][T14307] loop6: lost filesystem error report for type 5 error -117
[  498.068830][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  498.069713][T14314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.076307][    C0] EXT4-fs (loop6): initial error at time 1783288361: ext4_orphan_get:1425
[  498.083555][T14314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.091240][    C0] 
[  498.109762][    C0] EXT4-fs (loop6): last error at time 1783288361: ext4_orphan_get:1425
[  498.127959][T14307] EXT4-fs (loop6): Remounting filesystem read-only
[  498.145397][T14307] ext4_test_bit(bit=14, block=18) = 1
[  498.170350][T14307] is_bad_inode(inode)=0
[  498.175759][T14307] NEXT_ORPHAN(inode)=1023
[  498.181113][T14307] max_ino=32
[  498.186045][T14307] i_nlink=0
[  498.214971][T14307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  498.232805][T14307] ext4 filesystem being mounted at /226/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  498.251639][T14311] syzkaller0: entered promiscuous mode
[  498.257183][T14311] syzkaller0: entered allmulticast mode
[  498.262953][T14307] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2169'.
[  498.266107][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'.
[  498.299697][T14326] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2175'.
[  498.384964][T14340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.395075][T14340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.411232][T14342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.419959][T14342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.755163][ T8642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.796940][T14349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.817164][T14349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.893206][T14359] af_packet: tpacket_rcv: packet too big, clamped from 64586 to 4294967272. macoff=96
[  498.908315][T14361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.921303][T14361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.973522][T14369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.986165][T14369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  499.007107][T14373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  499.015807][T14373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  499.098765][T14383] syzkaller1: entered promiscuous mode
[  499.104461][T14383] syzkaller1: entered allmulticast mode
[  499.374189][T14405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  499.383491][T14405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  499.509674][ T4241] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  499.534053][ T4241] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  499.612869][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  499.612887][   T28] audit: type=1400 audit(1783288362.592:2452): avc:  denied  { mmap_zero } for  pid=14425 comm="syz.8.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  499.645977][ T3390] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  499.665997][ T3390] hid-generic 0000:0000:0000.000F: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  499.749416][   T28] audit: type=1400 audit(1783288362.732:2453): avc:  denied  { mounton } for  pid=14430 comm="syz.1.2218" path="/proc/1570/task" dev="proc" ino=41309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  499.773047][T14431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  499.820410][T14431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.085120][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  500.132186][   T28] audit: type=1400 audit(1783288363.112:2454): avc:  denied  { read } for  pid=14454 comm="syz.5.2227" lport=5022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  500.197574][   T28] audit: type=1400 audit(1783288363.172:2455): avc:  denied  { append } for  pid=14456 comm="syz.5.2228" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  500.742471][   T28] audit: type=1400 audit(1783288363.712:2456): avc:  denied  { create } for  pid=14486 comm="syz.7.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  500.774681][T14497] netlink: 'syz.6.2243': attribute type 29 has an invalid length.
[  501.073454][T14503] netlink: 14207 bytes leftover after parsing attributes in process `syz.6.2245'.
[  501.135417][   T28] audit: type=1400 audit(1783288364.112:2457): avc:  denied  { create } for  pid=14504 comm="syz.5.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  501.204535][T14508] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2247'.
[  501.777694][T14551] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2263'.
[  501.849783][T14559] netlink: 'syz.7.2265': attribute type 1 has an invalid length.
[  501.873188][T14559] netlink: 112865 bytes leftover after parsing attributes in process `syz.7.2265'.
[  502.116451][T14571] netlink: 16255 bytes leftover after parsing attributes in process `syz.8.2271'.
[  502.142831][T14573] netlink: 154788 bytes leftover after parsing attributes in process `syz.5.2272'.
[  502.152874][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  502.169169][T14573] openvswitch: netlink: Message has 48126 unknown bytes.
[  502.207947][T14577] netlink: 126588 bytes leftover after parsing attributes in process `syz.7.2274'.
[  502.621475][T14623] netlink: 'syz.1.2284': attribute type 12 has an invalid length.
[  502.867311][T14649] netlink: 'syz.1.2290': attribute type 9 has an invalid length.
[  502.912039][T14649] netlink: 'syz.1.2290': attribute type 4 has an invalid length.
[  503.231821][T14703] netlink: 'syz.6.2300': attribute type 21 has an invalid length.
[  503.654692][T14727] __nla_validate_parse: 7 callbacks suppressed
[  503.654772][T14727] netlink: 154788 bytes leftover after parsing attributes in process `syz.7.2312'.
[  503.698290][T14727] openvswitch: netlink: Message has 48126 unknown bytes.
[  504.228956][    C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  504.495643][   T28] audit: type=1400 audit(1783288367.462:2458): avc:  denied  { name_bind } for  pid=14757 comm="syz.7.2325" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  504.639803][T14765] netlink: 'syz.1.2328': attribute type 10 has an invalid length.
[  504.647875][T14765] batman_adv: batadv0: Interface deactivated: dummy0
[  504.660070][T14765] batman_adv: batadv0: Removing interface: dummy0
[  504.727683][T14772] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.2331'.
[  505.752631][T14798] netlink: 'syz.7.2343': attribute type 4 has an invalid length.
[  505.768763][T14798] netlink: 134728 bytes leftover after parsing attributes in process `syz.7.2343'.
[  505.812474][T14804] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.2340'.
[  506.083859][T14813] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2349'.
[  507.025525][T14828] netlink: 'syz.1.2355': attribute type 10 has an invalid length.
[  507.034166][T14830] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.2356'.
[  507.092547][T14828] team0: Port device veth0 added
[  507.226805][T14839] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2361'.
[  507.252136][T14842] veth1_macvtap: left promiscuous mode
[  507.274118][T14842] macsec0: entered allmulticast mode
[  507.299506][T14842] veth1_macvtap: entered promiscuous mode
[  507.310570][T14842] veth1_macvtap: entered allmulticast mode
[  507.323717][T14842] macsec0: entered promiscuous mode
[  508.330619][T14865] syzkaller0: create flow: hash 3981198933 index 1
[  508.582603][T14873] syzkaller0: delete flow: hash 3981198933 index 1
[  508.635438][T14881] netlink: 'syz.5.2378': attribute type 12 has an invalid length.
[  508.645136][T14881] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2378'.
[  508.917429][T14904] netlink: 'syz.8.2388': attribute type 21 has an invalid length.
[  508.938172][T14904] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2388'.
[  508.964918][T14906] netlink: 'syz.5.2391': attribute type 10 has an invalid length.
[  508.972969][T14906] netlink: 'syz.5.2391': attribute type 4 has an invalid length.
[  508.980942][T14906] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2391'.
[  508.994499][T14906] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  509.044496][T14904] netlink: 'syz.8.2388': attribute type 2 has an invalid length.
[  509.052800][T14904] netlink: 197536 bytes leftover after parsing attributes in process `syz.8.2388'.
[  509.104967][T14912] netlink: 'syz.6.2394': attribute type 17 has an invalid length.
[  509.120266][T14912] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2394'.
[  509.141260][T14912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  509.373687][T14932] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2402'.
[  509.404440][   T28] audit: type=1400 audit(1783288372.382:2459): avc:  denied  { write } for  pid=14935 comm="syz.8.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  509.424220][T14932] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2402'.
[  509.447456][T14932] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2402'.
[  509.663455][T14956] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2413'.
[  509.857049][T14956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  509.924081][T14956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  509.934391][T14956] bond0 (unregistering): Released all slaves
[  510.213644][   T28] audit: type=1400 audit(1783288373.192:2460): avc:  denied  { write } for  pid=15000 comm="syz.6.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  510.282823][T15005] netlink: 15999 bytes leftover after parsing attributes in process `syz.7.2436'.
[  510.378264][   T28] audit: type=1400 audit(1783288373.352:2461): avc:  denied  { create } for  pid=15006 comm="syz.8.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  510.466407][T15026] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  510.671953][T15035] netlink: 2060 bytes leftover after parsing attributes in process `syz.6.2449'.
[  510.690681][T15039] tipc: Cannot configure node identity twice
[  511.663363][T15127] netlink: 'syz.7.2490': attribute type 21 has an invalid length.
[  512.658761][T15191] tap0: tun_chr_ioctl cmd 1074025692
[  513.623794][   T28] audit: type=1400 audit(1783288376.602:2462): avc:  denied  { read } for  pid=15248 comm="syz.1.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  514.829046][T15291] lo speed is unknown, defaulting to 1000
[  514.876153][T15291] gre0 speed is unknown, defaulting to 1000
[  515.036350][T15291] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.043681][T15291] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.051268][T15291] bridge_slave_0: entered allmulticast mode
[  515.058146][T15291] bridge_slave_0: entered promiscuous mode
[  515.065525][T15291] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.072894][T15291] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.080374][T15291] bridge_slave_1: entered allmulticast mode
[  515.087103][T15291] bridge_slave_1: entered promiscuous mode
[  515.111036][T15291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.122044][T15291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.145711][T15291] team0: Port device team_slave_0 added
[  515.152964][T15291] team0: Port device team_slave_1 added
[  515.171324][T15291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.178483][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  515.207559][T15291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  515.219588][T15291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  515.226694][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  515.253868][T15291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  515.285131][T15291] hsr_slave_0: entered promiscuous mode
[  515.291555][T15291] hsr_slave_1: entered promiscuous mode
[  515.580271][T15315] __nla_validate_parse: 9 callbacks suppressed
[  515.580340][T15315] netlink: 65185 bytes leftover after parsing attributes in process `syz.7.2559'.
[  516.152173][T15291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.210406][T15291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.293764][T15291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.413757][T15291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.564144][ T2981] ==================================================================
[  516.572308][ T2981] BUG: KCSAN: data-race in __d_lookup / __d_rehash
[  516.578875][ T2981] 
[  516.581232][ T2981] write to 0xffff88811a845a90 of 8 bytes by task 15291 on cpu 0:
[  516.588976][ T2981]  __d_rehash+0xa3/0x1d0
[  516.593283][ T2981]  __d_add+0x326/0x490
[  516.597407][ T2981]  d_splice_alias_ops+0xe3/0x370
[  516.602399][ T2981]  d_splice_alias+0x1f/0x30
[  516.606971][ T2981]  simple_lookup+0xb7/0xd0
[  516.611441][ T2981]  lookup_one_qstr_excl+0xc7/0x240
[  516.616601][ T2981]  start_dirop+0x3e/0x70
[  516.620829][T15291] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  516.620889][ T2981]  simple_start_creating+0xa2/0xd0
[  516.632722][ T2981]  debugfs_start_creating+0xda/0x150
[  516.638044][ T2981]  debugfs_create_symlink+0x39/0x150
[  516.643503][ T2981]  __nsim_dev_port_add+0x4fb/0x700
[  516.648659][ T2981]  nsim_dev_port_add_all+0x33/0xc0
[  516.653811][ T2981]  nsim_drv_probe+0x68f/0x7c0
[  516.658525][ T2981]  nsim_bus_probe+0x15/0x20
[  516.663093][ T2981]  really_probe+0x1ba/0x600
[  516.667643][ T2981]  __driver_probe_device+0x14f/0x1c0
[  516.672972][ T2981]  driver_probe_device+0x37/0x2f0
[  516.678044][ T2981]  __device_attach_driver+0x227/0x330
[  516.683452][ T2981]  bus_for_each_drv+0x1c0/0x230
[  516.688338][ T2981]  __device_attach+0x1d1/0x2a0
[  516.693140][ T2981]  device_initial_probe+0x70/0x90
[  516.698241][ T2981]  bus_probe_device+0x101/0x1b0
[  516.703155][ T2981]  device_add+0x5e8/0x790
[  516.707528][ T2981]  device_register+0x1d/0x30
[  516.712235][ T2981]  new_device_store+0x276/0x470
[  516.717133][ T2981]  bus_attr_store+0x57/0x80
[  516.721669][ T2981]  sysfs_kf_write+0xfe/0x120
[  516.726300][ T2981]  kernfs_fop_write_iter+0x1d2/0x2e0
[  516.731619][ T2981]  vfs_write+0x57d/0x990
[  516.735889][ T2981]  ksys_write+0xdc/0x1a0
[  516.740177][ T2981]  __x64_sys_write+0x40/0x50
[  516.744799][ T2981]  x64_sys_call+0x27e1/0x3020
[  516.749509][ T2981]  do_syscall_64+0x136/0x3c0
[  516.754143][ T2981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.760078][ T2981] 
[  516.762428][ T2981] read to 0xffff88811a845a90 of 8 bytes by task 2981 on cpu 1:
[  516.769998][ T2981]  __d_lookup+0xf8/0x340
[  516.774285][ T2981]  lookup_fast+0x5e/0x320
[  516.778652][ T2981]  link_path_walk+0x523/0xdd0
[  516.783364][ T2981]  path_lookupat+0x53/0x4c0
[  516.787899][ T2981]  filename_lookup+0x18f/0x390
[  516.792703][ T2981]  do_readlinkat+0x74/0x2f0
[  516.797241][ T2981]  __x64_sys_readlink+0x47/0x60
[  516.802121][ T2981]  x64_sys_call+0x2b51/0x3020
[  516.806856][ T2981]  do_syscall_64+0x136/0x3c0
[  516.811612][ T2981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.817531][ T2981] 
[  516.819869][ T2981] value changed: 0xffff88823753f650 -> 0xffff888105f1a848
[  516.826997][ T2981] 
[  516.829336][ T2981] Reported by Kernel Concurrency Sanitizer on:
[  516.835510][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  516.845951][ T2981] Tainted: [W]=WARN
[  516.849773][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  516.859876][ T2981] ==================================================================
[  516.876697][   T28] audit: type=1400 audit(1783288379.852:2463): avc:  denied  { write } for  pid=3282 comm="syz-executor" path="pipe:[1548]" dev="pipefs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  516.921561][T15291] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  516.943383][T15291] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  516.960929][T15291] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  516.971741][T15291] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  516.997891][T15291] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  517.012077][T15291] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  517.034156][T15291] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  517.059385][T15291] kthread_run failed with err -4
[  517.307574][ T6884] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.402667][ T6884] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.471915][ T6884] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.531771][ T6884] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.701920][   T28] audit: type=1400 audit(1783288380.682:2464): avc:  denied  { write } for  pid=15351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  517.734794][   T28] audit: type=1400 audit(1783288380.712:2465): avc:  denied  { write } for  pid=15362 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  517.769710][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21
[  517.852616][   T28] audit: type=1400 audit(1783288380.832:2466): avc:  denied  { write } for  pid=15365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  517.895171][ T6884] bridge_slave_1: left allmulticast mode
[  517.900935][ T6884] bridge_slave_1: left promiscuous mode
[  517.906650][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.916806][ T6884] bridge_slave_0: left allmulticast mode
[  517.923635][   T28] audit: type=1400 audit(1783288380.902:2467): avc:  denied  { write } for  pid=15377 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  517.927136][ T6884] bridge_slave_0: left promiscuous mode
[  517.952216][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.962145][ T6884] bridge_slave_1: left allmulticast mode
[  517.967853][ T6884] bridge_slave_1: left promiscuous mode
[  517.974365][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.982866][ T6884] bridge_slave_0: left allmulticast mode
[  517.988607][ T6884] bridge_slave_0: left promiscuous mode
[  517.994731][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.042195][ T6884] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  518.061775][ T6884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  518.072236][ T6884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  518.082145][ T6884] bond0 (unregistering): Released all slaves
[  518.090778][ T6884] bond1 (unregistering): (slave bond2): Releasing backup interface
[  518.100035][ T6884] bond1 (unregistering): Released all slaves
[  518.108487][ T6884] bond2 (unregistering): Released all slaves
[  518.132643][ T6884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  518.142647][ T6884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  518.152372][ T6884] bond0 (unregistering): Released all slaves
[  518.160577][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22
[  518.250760][   T28] audit: type=1400 audit(1783288381.232:2468): avc:  denied  { write } for  pid=15380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  518.286483][   T28] audit: type=1400 audit(1783288381.262:2469): avc:  denied  { write } for  pid=15391 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  518.324084][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23
[  518.357321][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.364932][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.373759][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.382626][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.393432][ T6884] hsr_slave_0: left promiscuous mode
[  518.399407][ T6884] hsr_slave_1: left promiscuous mode
[  518.405270][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.413349][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.424751][ T6884] veth1_macvtap: left allmulticast mode
[  518.432450][ T6884] veth1_macvtap: left promiscuous mode
[  518.438012][ T6884] veth0_macvtap: left promiscuous mode
[  518.443881][ T6884] veth1_vlan: left promiscuous mode
[  518.449241][ T6884] veth0_vlan: left promiscuous mode
[  518.474961][   T28] audit: type=1400 audit(1783288381.452:2470): avc:  denied  { write } for  pid=15394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  518.519397][   T28] audit: type=1400 audit(1783288381.492:2471): avc:  denied  { write } for  pid=15405 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  518.564732][ T6884] team0 (unregistering): Port device team_slave_1 removed
[  518.574808][ T6884] team0 (unregistering): Port device team_slave_0 removed
[  518.607364][   T12] smc: removing ib device s
z1
[  518.665166][ T6884] team0 (unregistering): Port device team_slave_1 removed
[  518.677754][ T6884] team0 (unregistering): Port device team_slave_0 removed
[  518.734041][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24
[  518.832297][   T28] audit: type=1400 audit(1783288381.812:2472): avc:  denied  { write } for  pid=15408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  518.881403][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25
[  519.006991][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26
[  519.123888][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27
[  519.235168][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28