last executing test programs: 19m33.785524479s ago: executing program 2 (id=441): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1f, 0x445}, 0x10, 0x5, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19m32.205390551s ago: executing program 2 (id=452): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 19m32.164064813s ago: executing program 2 (id=456): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) close(0x3) 19m31.895737693s ago: executing program 2 (id=462): timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45fff219, 0x0, @perf_config_ext={0xd, 0x4}, 0x3110, 0x10000, 0x8, 0x1, 0x7, 0xffffffff, 0xb, 0x0, 0x7, 0x0, 0x20000006}, 0x0, 0x8, r0, 0xa) r1 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r1, 0x47f6, 0x0, 0x24, 0x0, 0x0) 19m31.715270489s ago: executing program 2 (id=463): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x2, 0x6, 0x6, 0xb, 0x2, 0x41}, @exit], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x17aa, &(0x7f0000000080)={0x0, 0x374e, 0x0, 0x2, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1f, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x22ce, 0x1d, 0x0, 0x0, 0x0) 19m31.013403087s ago: executing program 2 (id=472): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0x0, 0x8}, {0x100000001}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 19m30.989326022s ago: executing program 32 (id=472): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0x0, 0x8}, {0x100000001}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 5m59.869861183s ago: executing program 5 (id=5798): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TCSETS(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0xc08c4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="050000000000000000", @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), 0x0}, 0x20) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)}], 0x1, 0x80000001, 0x0, 0x14) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000010000107ffe00000000000000a000000060001001b00000008000a"], 0x24}}, 0x0) 5m58.902487185s ago: executing program 5 (id=5809): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf4, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0xb, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x800000, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x8, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x6, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0x1000, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0xfffffffe, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) dup(0xffffffffffffffff) r2 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r2, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) 5m57.139586497s ago: executing program 5 (id=5815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[{@uni_xlateno}, {@shortname_lower}, {@uni_xlateno}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_win95}, {@fat=@usefree}, {@shortname_lower}, {@shortname_mixed}, {@numtail}, {@numtail}, {@uni_xlate}, {@nonumtail}, {@rodir}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x5, 0x8, 0x43, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x1000c}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}}, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r5, 0x400, 0x2) 5m55.341532531s ago: executing program 5 (id=5818): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf4, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0xb, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x800000, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x8, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x6, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0x1000, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0xfffffffe, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) dup(0xffffffffffffffff) r2 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r2, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) 5m54.303718899s ago: executing program 5 (id=5825): syz_open_procfs(0x0, &(0x7f0000000500)='ns\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x133, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x10) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 5m53.23865655s ago: executing program 5 (id=5829): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f00002e7000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) io_setup(0x3, &(0x7f0000008240)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x200800, &(0x7f0000000200), 0x1, 0x4c9, &(0x7f0000010000)="$eJzs3ctrXGUbAPBnZnJp0nxfL1/5aPvB10KFeqG5Ik3UjSt1URALbhRKTKaxZpIJmUltQhep7rpwIYqCuHDvX+DGriyCuNa9uJCK1ggqCCNnLnUyyaSxppma8/vB6bzvmZk8553hefued84lgNQ6mfyTiRiIiC8j4kCtuv4FJ2sPa7evTiVLJiqV8z9kqq9L6o2XNt63PyJWI2JfRLzwTMQrmY1xS8srs5OFQn6xXh8qzy0MlZZXzlyam5zJz+TnR8bPTkyMD4+NTuxYW6+/9dr1c5881/PxL2/euvn2Z58mmzVQf65nx6KsV2t6dxxqWtcVEU/dp3i7LVdvT1+nN4R7knx//4mIU9X8PxC56rcJpEGlUqn8Xult9/RqBdizstUxcCY7GBG1cjY7OFgbwx+J/myhWCo/drG4ND9dGysfjO7sxUuF/HB9X+FgdGeS+ki1/Gd9tKU+FlEdA7+T66vWB6eKhend7eqAFvtb8v/nXC3/gZSwyw/pJf8hveQ/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+k0vPnziVLpXEe//Tl5aXZ4uUz0/nS7ODc0tTgVHFxYXCmWJypnrMzd7e/VygWF0Yej6UrQ+V8qTxUWl65MFdcmi9fqJ7XfyHfvSutArbj0IkbX2ciYvWJvuoSTdfCkKuwt1Uqmej0OchAZ+Q63QEBHWPqD9LLPj7Qeone1nHBvnZvXNj62rn2L+DBle30BgAdc/qY3/8grYzPIb3M/0N6GeMDm9yib52t5v+Bfybz/5BeA23u//Wvpnt3DUfEvyPiq1x3b+NeX8BekP0uUx//nz7w0EDrsz2ZX6s/EfRExOsfnH/vymS5vDiSrP/xzvry+/X1o01vbLvDAHRKI08beQwApNfa7atTjWU3437/dO0ghI3xu+pzk/uqv1H2r2XWHauQ2aFjF1avRcTRzeJn6vc7r+3I9K/lNsQ/nDw2TaBm69t05C/EX/gb8Y/VH5Pl/03xj9/7xwGpciPpf4Y3y79skpZ3JjJa+5+BHTp2on3/l73T/+Xa9H8n7vqrbc2rH77xbdv41yKOd/XVa+v7n656/Ex9nqc5frJtp7fZxlsvv/jfds9VPqr9nc36v4akNFSeWxgqLa+cqV5HbiY/PzJ+dmJifHhsdGKoOkfdGxHVmeqNnjz6xc2t2t/fJn5z+zf7/B/ZZvt/+9/nL53cIv7Dpzb//g9vET/5xh7dZvyfRr9p+19lEn+6TfuzW8RP1o1tM37p3Wd7t/lSAGAXlJZXZicLhfyigoJCRwrXHozNaCl0umcC7rfScrJrniR9p7cEAAAAAAAAAAAA2K7dOJy4020EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgL/ggAAP//atjKmw==") sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000033b52266000000000600000018010000786c6c25000000000020202063ed4d1f843fd29c3ee7b9558c55e77c0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202001001af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m53.157390043s ago: executing program 33 (id=5829): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f00002e7000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) io_setup(0x3, &(0x7f0000008240)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x200800, &(0x7f0000000200), 0x1, 0x4c9, &(0x7f0000010000)="$eJzs3ctrXGUbAPBnZnJp0nxfL1/5aPvB10KFeqG5Ik3UjSt1URALbhRKTKaxZpIJmUltQhep7rpwIYqCuHDvX+DGriyCuNa9uJCK1ggqCCNnLnUyyaSxppma8/vB6bzvmZk8553hefued84lgNQ6mfyTiRiIiC8j4kCtuv4FJ2sPa7evTiVLJiqV8z9kqq9L6o2XNt63PyJWI2JfRLzwTMQrmY1xS8srs5OFQn6xXh8qzy0MlZZXzlyam5zJz+TnR8bPTkyMD4+NTuxYW6+/9dr1c5881/PxL2/euvn2Z58mmzVQf65nx6KsV2t6dxxqWtcVEU/dp3i7LVdvT1+nN4R7knx//4mIU9X8PxC56rcJpEGlUqn8Xult9/RqBdizstUxcCY7GBG1cjY7OFgbwx+J/myhWCo/drG4ND9dGysfjO7sxUuF/HB9X+FgdGeS+ki1/Gd9tKU+FlEdA7+T66vWB6eKhend7eqAFvtb8v/nXC3/gZSwyw/pJf8hveQ/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+k0vPnziVLpXEe//Tl5aXZ4uUz0/nS7ODc0tTgVHFxYXCmWJypnrMzd7e/VygWF0Yej6UrQ+V8qTxUWl65MFdcmi9fqJ7XfyHfvSutArbj0IkbX2ciYvWJvuoSTdfCkKuwt1Uqmej0OchAZ+Q63QEBHWPqD9LLPj7Qeone1nHBvnZvXNj62rn2L+DBle30BgAdc/qY3/8grYzPIb3M/0N6GeMDm9yib52t5v+Bfybz/5BeA23u//Wvpnt3DUfEvyPiq1x3b+NeX8BekP0uUx//nz7w0EDrsz2ZX6s/EfRExOsfnH/vymS5vDiSrP/xzvry+/X1o01vbLvDAHRKI08beQwApNfa7atTjWU3437/dO0ghI3xu+pzk/uqv1H2r2XWHauQ2aFjF1avRcTRzeJn6vc7r+3I9K/lNsQ/nDw2TaBm69t05C/EX/gb8Y/VH5Pl/03xj9/7xwGpciPpf4Y3y79skpZ3JjJa+5+BHTp2on3/l73T/+Xa9H8n7vqrbc2rH77xbdv41yKOd/XVa+v7n656/Ex9nqc5frJtp7fZxlsvv/jfds9VPqr9nc36v4akNFSeWxgqLa+cqV5HbiY/PzJ+dmJifHhsdGKoOkfdGxHVmeqNnjz6xc2t2t/fJn5z+zf7/B/ZZvt/+9/nL53cIv7Dpzb//g9vET/5xh7dZvyfRr9p+19lEn+6TfuzW8RP1o1tM37p3Wd7t/lSAGAXlJZXZicLhfyigoJCRwrXHozNaCl0umcC7rfScrJrniR9p7cEAAAAAAAAAAAA2K7dOJy4020EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgL/ggAAP//atjKmw==") sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000033b52266000000000600000018010000786c6c25000000000020202063ed4d1f843fd29c3ee7b9558c55e77c0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202001001af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.469720657s ago: executing program 1 (id=7198): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$BTRFS_IOC_START_SYNC(r0, 0x402c542c, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001d80)=""/4096, 0x1000}, {0x0}], 0x3) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r3, 0xfffffffffffffffe) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@getstats={0x1c, 0x5e, 0x200, 0x70b928, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40480c1}, 0x24000800) 6.965885579s ago: executing program 3 (id=7200): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000000)={0x0, 0x0, "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", "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"}) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0x8, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002800)={{r1, 0x200, 0x10000, 0x200000003ff, 0x46e8, 0x10100000000008, 0x5, 0x7, 0xd90b, 0x3, 0x4, 0x2, 0xb3ed, 0x0, 0x3}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x5, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="180024d4d7f412000000000000000000951fbb315d1794507a31156e121a4fd2024f5b6008a572e1f6a6ff7da1a24ce0a4d44de9bba30a5335c80931018e8617f1bb0d767ee542ff0e4425dff40a0c770f8b04e7ccab150248faff884befdb8c82e7f80fbdeaca380bfa1f0164b3"], &(0x7f0000000c00)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_GET_NO_NEW_PRIVS(0x27) unshare(0x60000600) sync() sync() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106300, 0x10004, 0x20da, 0x5, 0xa, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") 6.617714613s ago: executing program 6 (id=7201): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2d, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*', 0x1}], 0x1}}], 0x1, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20013, 0x2021}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x64, r5}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r9], 0x1c}}, 0x0) sendfile(r7, r7, 0x0, 0xe3aa6ea) 6.477410256s ago: executing program 1 (id=7203): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000051) syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x7ad82179598b3c, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061114800"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r8, &(0x7f0000000100)=ANY=[], 0xd) socket(0x11, 0x3, 0x10001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e000100000000000000000000008000"/642], 0x590) 6.420749065s ago: executing program 4 (id=7204): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf4, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0xb, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x800000, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x8, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x6, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0x1000, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0xfffffffe, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) dup(0xffffffffffffffff) r2 = open(0x0, 0x80, 0x122) fcntl$notify(r2, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) 5.801305166s ago: executing program 0 (id=7205): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffff7fd}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e09f54230f243b5ae8c3e4b39741", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001340)={"b2a87744d2f87358d3526d761a3861ee", 0x0, 0x0, {0x2623}, {0x1f, 0x775}, 0xf, [0x8af, 0xffffffff, 0x3, 0x4, 0x0, 0x5644663a, 0x100000001, 0x2d, 0x2, 0x6, 0x6, 0x9, 0xb, 0x6, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001440)={{r0}, r8, 0x14, @inherit={0x50, &(0x7f0000002440)=ANY=[]}, @name="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"}) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x90, 0x11, 0x148, 0x90, 0x0, 0x148, 0x2a8, 0x2a8, 0x148, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x101, 0x8, 0x64, '\x00', {0x8a}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 4.773595028s ago: executing program 0 (id=7207): setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r7, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x25, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r9}}, 0x18) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) 4.773184218s ago: executing program 6 (id=7208): syz_read_part_table(0x5af, &(0x7f0000000000)="$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") r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x1e) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) sendfile(r6, r5, 0x0, 0x3ffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x801) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 4.772870788s ago: executing program 4 (id=7209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r2, 0x2) 4.771876228s ago: executing program 1 (id=7217): socket$netlink(0x10, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40404, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0xf91fcd82589f6638, 0x10000, 0xfffffffe, 0x5, 0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0xf) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)=ANY=[@ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000040010000000000004002010000630e22c80d957101"], 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) getpeername$tipc(r4, 0x0, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x24000106) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @private0, 0x3}], 0x1c) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r0, 0x0, 0xffff, 0x2) 4.73304037s ago: executing program 3 (id=7210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r6, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}]}, 0x18, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) socket$inet6(0x10, 0x3, 0x0) 4.479514992s ago: executing program 4 (id=7211): syz_open_procfs(0x0, &(0x7f0000000500)='ns\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x133, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x10) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 4.345710766s ago: executing program 3 (id=7212): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@grpjquota}, {@errors_remount}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5d4, &(0x7f0000001080)="$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") socketpair$tipc(0x1e, 0xbf9de76f07fedae7, 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket(0x840000000002, 0x3, 0x100) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000038000000030a01010000000000000000010000000900030073797a30000000000c00048008000140000000040900010073797a3000000000140000001100010000000000000000000000000a453d93d944dcdac67366c69d552f8ea3a1cc1a974832e13921d8a011533afdb9fa99c1efd48be01f447036cf637b69d54b141f0ce98f7640d2787a283ec5fc2fec221c6092962298a5c1ab893e76be2214e940a777a9c2f076788fdf47"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0xff84) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0xfffffffffffffffd, 0xfffffffffffffff7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 4.136981626s ago: executing program 6 (id=7213): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$setsig(0x4203, r1, 0x6, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r1, r1, 0x29) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.11788167s ago: executing program 6 (id=7214): r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0xe800) perf_event_open(&(0x7f0000000000)={0x2, 0x1d, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc0503, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10003, 0x8, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x6005, 0x0, 0x4) set_mempolicy(0x6005, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400040002060500000000000000000003000000"], 0x14}}, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'wlc\x00', 0x11, 0x7, 0x69}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(r5, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00') exit(0x9) preadv(r6, &(0x7f00000000c0), 0x0, 0x1, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x714, 0x4e24, 0xb, 0x2, 0x20, 0x0, 0x8}, {0x3, 0x6, 0x800, 0xb, 0x1, 0xff, 0x7, 0x6}, {0x7, 0x8b3a, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x4e7622839259d754}, {{@in6=@mcast1, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x4, 0x1, 0xe, 0x401, 0x9, 0x4}}, 0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) 3.11740438s ago: executing program 4 (id=7215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000821bd468000300000a580000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c000440000000002df31ab30c0005400000000000000081"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r7, 0x0, 0x0) 3.111680788s ago: executing program 0 (id=7225): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$setsig(0x4203, r1, 0x6, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r1, r1, 0x29) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.102530846s ago: executing program 3 (id=7216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r8 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r7, 0x0, 0x2) fchdir(r10) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f00000001c0), 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000640)=@ethtool_drvinfo={0x3, "59df9bafbcfdb56315f245396a297796990e82b4ae58f23aceb70576cbc23bcf", "2b536027a7994037f51fcc3a0ec483e3792474f83462ba98870aa688d1b5cdb0", "918ccf48820000000000cd231f8ff94845fe17b702610000000000429200", "34f031fbffffffffffffff9c000600000000000000000000f0ffffffffffffff", "bb500649861d98c16388c84037d69c38e4bef90c3cb04c56b47c7dc408fa5f7c", "5958dd3d80c1542523c508e5", 0x882c, 0x0, 0xbc, 0x201}}) 1.958937187s ago: executing program 0 (id=7218): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$BTRFS_IOC_START_SYNC(r0, 0x402c542c, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001d80)=""/4096, 0x1000}, {0x0}], 0x3) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r3, 0xfffffffffffffffe) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@getstats={0x1c, 0x5e, 0x200, 0x70b928, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40480c1}, 0x24000800) 1.918695059s ago: executing program 6 (id=7219): unshare(0x62040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000fc85000000a000000085000000a00000009500000000000000929caaa99d7a198f66f29fc7f32d3b4d7ef0d332430900000000000000e6eb32f612bc0761b855f9758b661ecebd956671880d750014fbd3eeb55c9e1390811637ee8c4ff8a04946dfa64f6ea68b5bc0123150ddcc95e8c6655c00aeddb721a064209bb09c7bc366c0dfcfec6d8579880000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad0200"/14, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f00000002c0)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000006800e97804000000000000000a0000000000000004000400262f626f46a491a9e909988ae28f7fa820469527a42a400ab5df9874710133cda854d2cd54d7489007000000d25b524e303e0d3e8666b0f0bf0cb5e90cfb4bf7bb6d8d9ac450763ae876c863f121a35b48241ae9d3d89eb0c4f1b05c91f0bdcd49554d01495ce8c5ce54ed33957791260257"], 0x1c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x2, 0x3c, 0x8, 0x2, 0x0, 0xe075, 0x4004, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x8, 0x8000000000000000, 0x1, 0x3, 0x6, 0xfffffffb, 0x5, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x35, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x98b2, 0x4, 0x6, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4da5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000100)=0x2, 0x4) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r7 = socket(0x10, 0x3, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x101000, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0)=0xb, 0x4594) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000009c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x0, 0x400, 0x37f, 0x5e71, 0x2, 0x0, 0x7, 0x1, 0xc098, 0xd3e, 0x20c5, 0xffffffff, 0x80, 0xa6, 0xf042, 0xf328, 0x3, 0x200, 0x856f, 0x1, 0x1, 0x5b2, 0x0, 0x5be, 0x0, 0x1, 0x2, 0x9, 0x6, 0x200, 0xa62, 0xb, 0x0, 0x9e280, 0x3723, 0x713, 0x4f80, 0x9, 0x3, 0x6, 0x1, 0xff, 0xc000000, 0xf, 0x6, 0x7fffffff, 0xc00000, 0xfffffc51, 0xed, 0x9, 0x1, 0x7, 0x9, 0x1c, 0x3, 0x5, 0x8, 0xfffffffc, 0x0, 0x2, 0x3, 0x3, 0x8, 0xa8, 0x6, 0x8, 0x6, 0x0, 0x7, 0x3, 0x80, 0x0, 0x5, 0x0, 0x44d, 0x3, 0x3, 0x7, 0x4, 0x80000000, 0x9, 0x6, 0x8, 0x7f, 0xfffffffc, 0xc, 0x7f, 0x200, 0x7, 0x9, 0x4, 0x200, 0x10, 0xffff, 0x7, 0x6, 0x10, 0x8, 0x7fffffff, 0x40, 0x5, 0x3, 0x2, 0xfc3, 0x85, 0x7ff, 0x8, 0x9, 0x6, 0x5, 0x4, 0xfffffbf3, 0x0, 0xda1, 0x80, 0x8001, 0x8, 0x9, 0x0, 0x3b, 0x10001, 0x0, 0x8001, 0x3, 0x3, 0x1, 0x7, 0x7], "09508942095f5ac1ae92b6eb"}}) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x24}}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) 1.750775717s ago: executing program 3 (id=7220): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf4, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0xb, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x800000, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x8, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x6, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0x1000, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0xfffffffe, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) dup(0xffffffffffffffff) r2 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r2, 0x402, 0x24) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) 1.104635533s ago: executing program 4 (id=7221): dup(0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) unshare(0x20000680) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x4}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") getsockopt$inet_mptcp_buf(r2, 0x6, 0x1e, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) bind$rxrpc(r1, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000007040)={0x400, &(0x7f0000006e40), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000007000)=[0xffffffffffffffff], 0x1}, 0x58) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) unshare(0x10000000) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.086435689s ago: executing program 1 (id=7222): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r0, 0x2) 955.306714ms ago: executing program 1 (id=7223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r6, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}]}, 0x18, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) socket$inet6(0x10, 0x3, 0x0) 556.232847ms ago: executing program 0 (id=7224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r6, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}]}, 0x18, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) socket$inet6(0x10, 0x3, 0x0) 369.979992ms ago: executing program 6 (id=7226): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c000000030000000000000800000000ffffffff04000004ff0f00000500000003000000ff0000000c00000003000000a58dfa810000000002000000010100000300000004000000070000000055002e2e"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56fab4bc69df3e378f2103aaa3ae96de0975cff8d7b7d13072c83b227e5c15856e07aa2c5b3", @ANYRESHEX=r3, @ANYBLOB=',k']) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x40, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r8, &(0x7f00000005c0)="c08835dce418866f1d9bda16e3311cb66dbb8c5fdc419d02a480467277f70bcfe0b3e61d42ce2fa705f32e54a60c7386872b1987233855792472c981f8022d1615076c73900c2c59fbbeef076010387924205d23793954f2c0e06451b8a2db311f8f5bcb3252", 0x66, 0x4) lseek(r7, 0xfffd, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) preadv(r9, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x2, 0x6, 0x0, 0x0, 0x10000}, 0x1c) 359.300309ms ago: executing program 1 (id=7236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r6, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}]}, 0x18, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) socket$inet6(0x10, 0x3, 0x0) 251.854639ms ago: executing program 0 (id=7227): setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r7, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x25, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r9}}, 0x18) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) 142.681078ms ago: executing program 3 (id=7228): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="a915a02f70fabfb141a0386563fbe3ef121e62cc9b5d75ba86cb514fc1dfbf30e7b7a529d107e5eb2ffa63f0bcb5a6445a7e"], 0x10) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) getpid() socketpair(0x27, 0x2, 0x5, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 4 (id=7229): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199", 0x62}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xf}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x109805, 0x0, 0x7fc, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1}, &(0x7f0000000580), &(0x7f0000000800)=r2}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="ecffffffffffffffb704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="f0"], 0x7) syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000080)="00af230579af5d532e0b0e6645f8", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 90/0x9d0 [ 1143.769043][T26794] ? futex_hash_allocate+0x190/0x9d0 [ 1143.769085][T26794] futex_hash_allocate+0x190/0x9d0 [ 1143.769176][T26794] ? cap_task_prctl+0x13f/0x6e0 [ 1143.769204][T26794] futex_hash_prctl+0xd8/0xf0 [ 1143.769266][T26794] __se_sys_prctl+0xa3d/0x13f0 [ 1143.769306][T26794] __x64_sys_prctl+0x67/0x80 [ 1143.769341][T26794] x64_sys_call+0x2533/0x3020 [ 1143.769372][T26794] do_syscall_64+0x12c/0x370 [ 1143.769450][T26794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.769471][T26794] RIP: 0033:0x7f8ae3c5c629 [ 1143.769488][T26794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.769652][T26794] RSP: 002b:00007f8ae26b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1143.769675][T26794] RAX: ffffffffffffffda RBX: 00007f8ae3ed5fa0 RCX: 00007f8ae3c5c629 [ 1143.769692][T26794] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1143.769709][T26794] RBP: 00007f8ae3cf2b39 R08: 0000000000000000 R09: 0000000000000000 [ 1143.769724][T26794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.769754][T26794] R13: 00007f8ae3ed6038 R14: 00007f8ae3ed5fa0 R15: 00007fff427af828 [ 1143.769776][T26794] [ 1143.769942][T26794] memory: usage 238480kB, limit 307200kB, failcnt 3683 [ 1143.854403][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1143.864188][T26811] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 1144.016710][T26811] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1144.024220][T26814] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(16) [ 1144.030846][T26814] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1144.042402][T26794] memory+swap: usage 239344kB, limit 9007199254740988kB, failcnt 0 [ 1144.050673][T26794] kmem: usage 165572kB, limit 9007199254740988kB, failcnt 0 [ 1144.060549][T26818] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(19) [ 1144.067183][T26818] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1144.074977][T26794] Memory cgroup stats for /syz1: [ 1144.075296][T26794] cache 17248256 [ 1144.084061][T26794] rss 1032192 [ 1144.087764][T26794] shmem 17244160 [ 1144.092036][T26814] vhci_hcd vhci_hcd.0: Device attached [ 1144.097554][T26794] mapped_file 32768 [ 1144.104513][T26818] vhci_hcd vhci_hcd.0: Device attached [ 1144.110074][T26794] dirty 0 [ 1144.113072][T26794] writeback 0 [ 1144.117607][T26814] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(18) [ 1144.124227][T26814] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1144.132232][T26794] workingset_refault_anon 2766 [ 1144.137027][T26794] workingset_refault_file 12902 [ 1144.141907][T26794] swap 52002816 [ 1144.148319][T26814] vhci_hcd vhci_hcd.0: Device attached [ 1144.154282][T26794] swapcached 62550016 [ 1144.158314][T26794] pgpgin 986465 [ 1144.161784][T26794] pgpgout 981849 [ 1144.167215][T26794] pgfault 848036 [ 1144.170900][T26794] pgmajfault 429 [ 1144.174781][T26814] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(21) [ 1144.181400][T26814] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1144.191923][T26794] inactive_anon 1404928 [ 1144.196414][T26794] active_anon 17498112 [ 1144.200561][T26794] inactive_file 4096 [ 1144.204465][T26794] active_file 0 [ 1144.208011][T26814] vhci_hcd vhci_hcd.0: Device attached [ 1144.216390][T26794] unevictable 0 [ 1144.219994][T26794] hierarchical_memory_limit 314572800 [ 1144.220064][T26811] vhci_hcd vhci_hcd.0: Device attached [ 1144.231457][T26818] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1144.239608][T26794] hierarchical_memsw_limit 9223372036854771712 [ 1144.244383][T26815] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(25) [ 1144.249606][T26814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1144.252411][T26815] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1144.261256][T26794] total_cache 17248256 [ 1144.272976][T26794] total_rss 1032192 [ 1144.276810][T26794] total_shmem 17244160 [ 1144.280901][T26794] total_mapped_file 32768 [ 1144.286617][T26814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1144.294947][T26794] total_dirty 0 [ 1144.298512][T26794] total_writeback 0 [ 1144.306268][T26794] total_workingset_refault_anon 2766 [ 1144.313198][T26794] total_workingset_refault_file 12902 [ 1144.320684][T26794] total_swap 52002816 [ 1144.325022][T26815] vhci_hcd vhci_hcd.0: Device attached [ 1144.335823][T26794] total_swapcached 62550016 [ 1144.342389][T26825] vhci_hcd: connection closed [ 1144.342580][T18437] vhci_hcd vhci_hcd.6: stop threads [ 1144.342995][T26823] vhci_hcd: connection closed [ 1144.347350][ T6767] usb 13-2: new low-speed USB device number 2 using vhci_hcd [ 1144.353892][T26821] vhci_hcd: connection closed [ 1144.357474][T18437] vhci_hcd vhci_hcd.6: release socket [ 1144.365047][T26819] vhci_hcd: connection closed [ 1144.381489][T18437] vhci_hcd vhci_hcd.6: disconnect device [ 1144.389277][T26812] vhci_hcd: connection closed [ 1144.393607][T26816] vhci_hcd: connection reset by peer [ 1144.403747][T26794] total_pgpgin 986465 [ 1144.403831][T18437] vhci_hcd vhci_hcd.6: stop threads [ 1144.407742][T26794] total_pgpgout 981849 [ 1144.407755][T26794] total_pgfault 848036 [ 1144.407764][T26794] total_pgmajfault 429 [ 1144.430973][T26794] total_inactive_anon 1404928 [ 1144.435703][T26794] total_active_anon 17498112 [ 1144.435835][T26830] 9p: Bad value for 'rfdno' [ 1144.440417][T26794] total_inactive_file 4096 [ 1144.449854][T18437] vhci_hcd vhci_hcd.6: release socket [ 1144.461698][T18437] vhci_hcd vhci_hcd.6: disconnect device [ 1144.467715][T26794] total_active_file 0 [ 1144.471733][T26794] total_unevictable 0 [ 1144.475960][T26794] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6857,pid=26793,uid=0 [ 1144.492143][T26794] Memory cgroup out of memory: Killed process 26794 (syz.1.6857) total-vm:94292kB, anon-rss:1420kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1144.556174][T18437] vhci_hcd vhci_hcd.6: stop threads [ 1144.645086][T18437] vhci_hcd vhci_hcd.6: release socket [ 1144.650675][T18437] vhci_hcd vhci_hcd.6: disconnect device [ 1144.656853][T18437] vhci_hcd vhci_hcd.6: stop threads [ 1144.662354][T18437] vhci_hcd vhci_hcd.6: release socket [ 1144.668259][T18437] vhci_hcd vhci_hcd.6: disconnect device [ 1144.674129][T18437] vhci_hcd vhci_hcd.6: stop threads [ 1144.679671][T18437] vhci_hcd vhci_hcd.6: release socket [ 1144.719091][T18437] vhci_hcd vhci_hcd.6: disconnect device [ 1144.726031][T18437] vhci_hcd vhci_hcd.6: stop threads [ 1144.731692][T18437] vhci_hcd vhci_hcd.6: release socket [ 1144.737377][T18437] vhci_hcd vhci_hcd.6: disconnect device [ 1144.745931][T26837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1144.760283][T26837] bridge0: port 1(ipvlan2) entered blocking state [ 1144.766809][T26837] bridge0: port 1(ipvlan2) entered disabled state [ 1144.773820][T26837] ipvlan2: entered allmulticast mode [ 1144.779139][T26837] bridge0: entered allmulticast mode [ 1144.785201][T26837] ipvlan2: left allmulticast mode [ 1144.790313][T26837] bridge0: left allmulticast mode [ 1145.567822][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1145.567849][ T28] audit: type=1326 audit(3919537771.057:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.4.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1145.778292][T18437] net_ratelimit: 13 callbacks suppressed [ 1145.778317][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1145.875250][ T28] audit: type=1326 audit(3919537771.057:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.4.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1146.089355][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1146.110481][ T28] audit: type=1326 audit(3919537771.057:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.4.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1146.419146][T18429] bond7: (slave macvlan2): failed to get link speed/duplex [ 1146.480586][ T28] audit: type=1326 audit(3919537771.057:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.4.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1146.569469][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1146.645751][ T28] audit: type=1326 audit(3919537771.057:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.4.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1146.678587][ T28] audit: type=1326 audit(3919537771.057:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.4.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1146.702200][ T28] audit: type=1326 audit(3919537771.057:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.4.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1146.725809][ T28] audit: type=1326 audit(3919537771.057:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.4.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1146.729688][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1146.772374][ T28] audit: type=1326 audit(3919537771.066:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.4.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1146.825553][ T28] audit: type=1326 audit(3919537771.066:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.4.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1146.944897][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1147.060654][T26869] netlink: 'syz.4.6872': attribute type 4 has an invalid length. [ 1147.210986][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1147.553681][T26872] netlink: 'syz.4.6872': attribute type 4 has an invalid length. [ 1147.958290][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6872'. [ 1148.022817][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1148.183379][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1148.322589][T18457] bond7: (slave macvlan2): failed to get link speed/duplex [ 1148.771870][T26888] syz.4.6878 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1148.785913][T26888] CPU: 0 UID: 0 PID: 26888 Comm: syz.4.6878 Tainted: G W syzkaller #0 PREEMPT(full) [ 1148.785951][T26888] Tainted: [W]=WARN [ 1148.785959][T26888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1148.785981][T26888] Call Trace: [ 1148.785991][T26888] [ 1148.786003][T26888] __dump_stack+0x1d/0x30 [ 1148.786035][T26888] dump_stack_lvl+0x95/0xd0 [ 1148.786147][T26888] dump_stack+0x15/0x1b [ 1148.786179][T26888] dump_header+0x80/0x240 [ 1148.786204][T26888] oom_kill_process+0x295/0x350 [ 1148.786298][T26888] out_of_memory+0x97d/0xb80 [ 1148.786368][T26888] try_charge_memcg+0x62e/0xa10 [ 1148.786443][T26888] obj_cgroup_charge_pages+0x23/0xc0 [ 1148.786483][T26888] __memcg_kmem_charge_page+0x9e/0x170 [ 1148.786586][T26888] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1148.786618][T26888] alloc_pages_mpol+0xb3/0x260 [ 1148.786727][T26888] alloc_pages_noprof+0x8f/0x130 [ 1148.786756][T26888] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1148.786810][T26888] __kvmalloc_node_noprof+0x3d4/0x650 [ 1148.786904][T26888] ? futex_hash_allocate+0x190/0x9d0 [ 1148.786945][T26888] ? futex_hash_allocate+0xa4/0x9d0 [ 1148.786979][T26888] ? futex_hash_allocate+0x190/0x9d0 [ 1148.787024][T26888] futex_hash_allocate+0x190/0x9d0 [ 1148.787064][T26888] ? __sanitizer_cov_trace_switch+0x7/0x130 [ 1148.787110][T26888] futex_hash_prctl+0xd8/0xf0 [ 1148.787146][T26888] __se_sys_prctl+0xa3d/0x13f0 [ 1148.787224][T26888] __x64_sys_prctl+0x67/0x80 [ 1148.787253][T26888] x64_sys_call+0x2533/0x3020 [ 1148.787287][T26888] do_syscall_64+0x12c/0x370 [ 1148.787327][T26888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.787385][T26888] RIP: 0033:0x7efc5a89c629 [ 1148.787404][T26888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.787425][T26888] RSP: 002b:00007efc592ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1148.787451][T26888] RAX: ffffffffffffffda RBX: 00007efc5ab15fa0 RCX: 00007efc5a89c629 [ 1148.787470][T26888] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1148.787554][T26888] RBP: 00007efc5a932b39 R08: 0000000000000000 R09: 0000000000000000 [ 1148.787568][T26888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.787656][T26888] R13: 00007efc5ab16038 R14: 00007efc5ab15fa0 R15: 00007ffe29a18d58 [ 1148.787684][T26888] [ 1148.787737][T26888] memory: usage 307200kB, limit 307200kB, failcnt 2421 [ 1149.066596][T26888] memory+swap: usage 243592kB, limit 9007199254740988kB, failcnt 0 [ 1149.092532][T26888] kmem: usage 210580kB, limit 9007199254740988kB, failcnt 0 [ 1149.113203][T26888] Memory cgroup stats for /syz4: [ 1149.113453][T26888] cache 139264 [ 1149.121804][T26888] rss 2756608 [ 1150.120449][T26888] shmem 131072 [ 1150.123947][T26888] mapped_file 450560 [ 1150.127874][T26888] dirty 0 [ 1150.138385][T26888] writeback 0 [ 1150.141961][T26888] workingset_refault_anon 2832 [ 1150.146741][T26888] workingset_refault_file 20798 [ 1150.151958][ T6767] usb 13-2: enqueue for inactive port 1 [ 1150.152035][T26888] swap 360448 [ 1150.152046][T26888] swapcached 33017856 [ 1150.157604][ T6767] usb 13-2: enqueue for inactive port 1 [ 1150.162234][T26888] pgpgin 1340785 [ 1150.941899][T26900] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6879'. [ 1150.996160][ T6767] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1151.190163][T21991] net_ratelimit: 7 callbacks suppressed [ 1151.190184][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1151.204385][T26888] pgpgout 1340077 [ 1151.208055][T26888] pgfault 1241825 [ 1151.220877][T26888] pgmajfault 498 [ 1151.227195][T26888] inactive_anon 1970176 [ 1151.236296][T26888] active_anon 921600 [ 1151.240228][T26888] inactive_file 8192 [ 1151.251389][T26888] active_file 0 [ 1151.254891][T26888] unevictable 0 [ 1151.258379][T26888] hierarchical_memory_limit 314572800 [ 1151.300930][T26888] hierarchical_memsw_limit 9223372036854771712 [ 1151.310584][T26888] total_cache 139264 [ 1151.332660][T26906] 9p: Bad value for 'rfdno' [ 1151.337002][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1151.344934][T26888] total_rss 2756608 [ 1151.349118][T26888] total_shmem 131072 [ 1151.353081][T26888] total_mapped_file 450560 [ 1151.357556][T26888] total_dirty 0 [ 1151.361312][T26888] total_writeback 0 [ 1151.365170][T26888] total_workingset_refault_anon 2832 [ 1151.379322][T26888] total_workingset_refault_file 20798 [ 1151.384945][T26888] total_swap 360448 [ 1151.388805][T26888] total_swapcached 33017856 [ 1151.393583][T26888] total_pgpgin 1340785 [ 1151.397703][T26888] total_pgpgout 1340077 [ 1151.403093][T26888] total_pgfault 1241825 [ 1151.432756][T26888] total_pgmajfault 498 [ 1151.437208][T26888] total_inactive_anon 1970176 [ 1151.442005][T26888] total_active_anon 921600 [ 1151.448867][T26888] total_inactive_file 8192 [ 1151.453363][T26888] total_active_file 0 [ 1151.457479][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1151.465182][T26888] total_unevictable 0 [ 1151.469225][T26888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6878,pid=26887,uid=0 [ 1151.484321][T26888] Memory cgroup out of memory: Killed process 26888 (syz.4.6878) total-vm:94028kB, anon-rss:1428kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 1151.583484][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1151.621963][T26917] siw: device registration error -23 [ 1151.650482][T26918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6880'. [ 1151.665528][T26918] bridge0: port 1(ipvlan0) entered blocking state [ 1151.672284][T26918] bridge0: port 1(ipvlan0) entered disabled state [ 1151.679104][T26918] ipvlan0: entered allmulticast mode [ 1151.684420][T26918] bridge0: entered allmulticast mode [ 1151.690734][T26918] ipvlan0: left allmulticast mode [ 1151.695799][T26918] bridge0: left allmulticast mode [ 1151.743204][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1151.860782][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1152.021072][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1152.147597][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1152.290800][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1152.333141][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 1152.333219][ T28] audit: type=1400 audit(3919537777.530:2869): avc: denied { append } for pid=26925 comm="syz.6.6886" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1152.437941][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1152.627473][T26936] ipt_REJECT: ECHOREPLY no longer supported. [ 1152.651958][T26936] lo speed is unknown, defaulting to 1000 [ 1152.658354][T26936] xfrm0 speed is unknown, defaulting to 1000 [ 1153.522054][T26939] loop6: detected capacity change from 0 to 256 [ 1155.457395][T26939] FAT-fs (loop6): Directory bread(block 64) failed [ 1155.464061][T26939] FAT-fs (loop6): Directory bread(block 65) failed [ 1155.470628][T26939] FAT-fs (loop6): Directory bread(block 66) failed [ 1155.477187][T26939] FAT-fs (loop6): Directory bread(block 67) failed [ 1155.483744][T26939] FAT-fs (loop6): Directory bread(block 68) failed [ 1155.490337][T26939] FAT-fs (loop6): Directory bread(block 69) failed [ 1155.496928][T26939] FAT-fs (loop6): Directory bread(block 70) failed [ 1155.503538][T26939] FAT-fs (loop6): Directory bread(block 71) failed [ 1155.510102][T26939] FAT-fs (loop6): Directory bread(block 72) failed [ 1155.516682][T26939] FAT-fs (loop6): Directory bread(block 73) failed [ 1155.643455][T26939] vfat filesystem being mounted at /207/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 1155.803474][T26936] lo speed is unknown, defaulting to 1000 [ 1155.833705][T26945] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 1156.620273][T21988] net_ratelimit: 5 callbacks suppressed [ 1156.620364][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1157.186370][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1157.302207][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1157.433271][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1157.480763][T26962] syz.6.6895 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1157.514951][T26962] CPU: 1 UID: 0 PID: 26962 Comm: syz.6.6895 Tainted: G W syzkaller #0 PREEMPT(full) [ 1157.514990][T26962] Tainted: [W]=WARN [ 1157.514999][T26962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1157.515105][T26962] Call Trace: [ 1157.515112][T26962] [ 1157.515119][T26962] __dump_stack+0x1d/0x30 [ 1157.515148][T26962] dump_stack_lvl+0x95/0xd0 [ 1157.515176][T26962] dump_stack+0x15/0x1b [ 1157.515247][T26962] dump_header+0x80/0x240 [ 1157.515296][T26962] oom_kill_process+0x295/0x350 [ 1157.515321][T26962] out_of_memory+0x97d/0xb80 [ 1157.515353][T26962] try_charge_memcg+0x62e/0xa10 [ 1157.515398][T26962] obj_cgroup_charge_pages+0x23/0xc0 [ 1157.515495][T26962] __memcg_kmem_charge_page+0x9e/0x170 [ 1157.515534][T26962] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1157.515675][T26962] alloc_pages_bulk_noprof+0x4aa/0x530 [ 1157.515702][T26962] ? policy_nodemask+0x417/0x5e0 [ 1157.515730][T26962] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 1157.515795][T26962] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 1157.515877][T26962] ? alloc_pages_mpol+0x217/0x260 [ 1157.515915][T26962] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 1157.515968][T26962] __kvmalloc_node_noprof+0x3d4/0x650 [ 1157.516054][T26962] ? futex_hash_allocate+0x190/0x9d0 [ 1157.516084][T26962] ? futex_hash_allocate+0x190/0x9d0 [ 1157.516181][T26962] futex_hash_allocate+0x190/0x9d0 [ 1157.516270][T26962] ? cap_task_prctl+0x13f/0x6e0 [ 1157.516297][T26962] futex_hash_prctl+0xd8/0xf0 [ 1157.516466][T26962] __se_sys_prctl+0xa3d/0x13f0 [ 1157.516520][T26962] __x64_sys_prctl+0x67/0x80 [ 1157.516554][T26962] x64_sys_call+0x2533/0x3020 [ 1157.516582][T26962] do_syscall_64+0x12c/0x370 [ 1157.516640][T26962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.516668][T26962] RIP: 0033:0x7fa9b222c629 [ 1157.516747][T26962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.516767][T26962] RSP: 002b:00007fa9b0c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1157.516794][T26962] RAX: ffffffffffffffda RBX: 00007fa9b24a6090 RCX: 00007fa9b222c629 [ 1157.516869][T26962] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1157.516881][T26962] RBP: 00007fa9b22c2b39 R08: 0000000000000000 R09: 0000000000000000 [ 1157.516895][T26962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.516911][T26962] R13: 00007fa9b24a6128 R14: 00007fa9b24a6090 R15: 00007ffe6e7e2008 [ 1157.516935][T26962] [ 1157.748606][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1157.774396][T26962] memory: usage 273400kB, limit 307200kB, failcnt 689 [ 1157.803031][T26962] memory+swap: usage 245320kB, limit 9007199254740988kB, failcnt 0 [ 1157.830529][T26962] kmem: usage 152928kB, limit 9007199254740988kB, failcnt 0 [ 1157.887772][T26962] Memory cgroup stats for /syz6: [ 1157.887959][T26962] cache 82731008 [ 1157.933165][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1157.946251][T26962] rss 917504 [ 1157.962381][T26962] shmem 82731008 [ 1157.973229][T26962] mapped_file 0 [ 1157.986151][T26962] dirty 0 [ 1157.995303][T26962] writeback 0 [ 1158.007911][T26962] workingset_refault_anon 0 [ 1158.022033][T26962] workingset_refault_file 0 [ 1158.038477][T26962] swap 0 [ 1158.047092][T26962] swapcached 0 [ 1158.058588][T26962] pgpgin 214309 [ 1158.062319][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1158.085649][T26962] pgpgout 193886 [ 1158.091733][T26962] pgfault 216517 [ 1158.101428][T26962] pgmajfault 6 [ 1158.114297][T26962] inactive_anon 83308544 [ 1158.126053][T26962] active_anon 339968 [ 1158.130043][T26962] inactive_file 0 [ 1158.133702][T26962] active_file 4096 [ 1158.137539][T26962] unevictable 0 [ 1158.141088][T26962] hierarchical_memory_limit 314572800 [ 1158.146505][T26962] hierarchical_memsw_limit 9223372036854771712 [ 1158.152764][T26962] total_cache 82731008 [ 1158.154901][T26972] lo speed is unknown, defaulting to 1000 [ 1158.156949][T26962] total_rss 917504 [ 1158.156961][T26962] total_shmem 82731008 [ 1158.156970][T26962] total_mapped_file 0 [ 1158.156979][T26962] total_dirty 0 [ 1158.156988][T26962] total_writeback 0 [ 1158.182053][T26962] total_workingset_refault_anon 0 [ 1158.187206][T26962] total_workingset_refault_file 0 [ 1158.193190][T26962] total_swap 0 [ 1158.196646][T26962] total_swapcached 0 [ 1158.202169][T26972] xfrm0 speed is unknown, defaulting to 1000 [ 1158.218281][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1158.227887][T26962] total_pgpgin 214309 [ 1158.231998][T26962] total_pgpgout 193886 [ 1158.239521][T26962] total_pgfault 216517 [ 1158.249578][T26962] total_pgmajfault 6 [ 1158.271784][T26974] lo speed is unknown, defaulting to 1000 [ 1158.284471][T26962] total_inactive_anon 83308544 [ 1158.319001][T26975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6898'. [ 1158.342025][T26962] total_active_anon 339968 [ 1158.417449][T26962] total_inactive_file 0 [ 1158.457539][T26962] total_active_file 4096 [ 1158.467482][T26962] total_unevictable 0 [ 1158.472599][T26962] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.6895,pid=26953,uid=0 [ 1158.478243][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1158.553170][T26962] Memory cgroup out of memory: Killed process 26954 (syz.6.6895) total-vm:94160kB, anon-rss:1412kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1158.692108][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1158.819471][T26974] xfrm0 speed is unknown, defaulting to 1000 [ 1158.859445][T26974] lo speed is unknown, defaulting to 1000 [ 1158.891262][T26972] lo speed is unknown, defaulting to 1000 [ 1158.949916][T26983] lo speed is unknown, defaulting to 1000 [ 1158.956175][T26983] xfrm0 speed is unknown, defaulting to 1000 [ 1159.138575][T26983] lo speed is unknown, defaulting to 1000 [ 1159.215055][T26992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6901'. [ 1159.224182][T26992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6901'. [ 1160.041376][T26983] loop6: detected capacity change from 0 to 128 [ 1160.070477][ T28] audit: type=1326 audit(3919537784.760:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26997 comm="syz.0.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1160.146249][ T28] audit: type=1326 audit(3919537784.760:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26997 comm="syz.0.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1160.163480][T26983] vfat filesystem being mounted at /209/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1160.223702][ T28] audit: type=1326 audit(3919537784.760:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26997 comm="syz.0.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1160.276474][ T28] audit: type=1326 audit(3919537784.760:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26997 comm="syz.0.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1160.328106][ T28] audit: type=1326 audit(3919537784.760:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26997 comm="syz.0.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1160.384505][ T28] audit: type=1326 audit(3919537784.760:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26997 comm="syz.0.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1160.431456][ T28] audit: type=1326 audit(3919537784.760:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26997 comm="syz.0.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1160.497658][ T28] audit: type=1326 audit(3919537784.760:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26997 comm="syz.0.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1160.565087][ T28] audit: type=1326 audit(3919537784.760:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26997 comm="syz.0.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1160.611102][ T28] audit: type=1326 audit(3919537784.798:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26997 comm="syz.0.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1160.799919][T27004] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1160.867315][T27010] ipt_REJECT: ECHOREPLY no longer supported. [ 1160.890739][T27010] lo speed is unknown, defaulting to 1000 [ 1160.898076][T27010] xfrm0 speed is unknown, defaulting to 1000 [ 1160.974067][T27010] lo speed is unknown, defaulting to 1000 [ 1161.974632][T21988] net_ratelimit: 16 callbacks suppressed [ 1161.974649][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1162.134595][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1162.262974][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1162.401622][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1162.540783][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1162.679573][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1162.733081][T27025] syz.3.6914 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1162.747832][T27025] CPU: 1 UID: 0 PID: 27025 Comm: syz.3.6914 Tainted: G W syzkaller #0 PREEMPT(full) [ 1162.747894][T27025] Tainted: [W]=WARN [ 1162.747903][T27025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1162.747919][T27025] Call Trace: [ 1162.747948][T27025] [ 1162.747958][T27025] __dump_stack+0x1d/0x30 [ 1162.747984][T27025] dump_stack_lvl+0x95/0xd0 [ 1162.748007][T27025] dump_stack+0x15/0x1b [ 1162.748031][T27025] dump_header+0x80/0x240 [ 1162.748129][T27025] oom_kill_process+0x295/0x350 [ 1162.748153][T27025] out_of_memory+0x97d/0xb80 [ 1162.748183][T27025] try_charge_memcg+0x62e/0xa10 [ 1162.748254][T27025] obj_cgroup_charge_pages+0x23/0xc0 [ 1162.748289][T27025] __memcg_kmem_charge_page+0x9e/0x170 [ 1162.748316][T27025] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1162.748397][T27025] alloc_pages_bulk_noprof+0x4aa/0x530 [ 1162.748427][T27025] ? policy_nodemask+0x417/0x5e0 [ 1162.748463][T27025] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 1162.748555][T27025] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 1162.748751][T27025] ? alloc_pages_mpol+0x217/0x260 [ 1162.748792][T27025] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 1162.748915][T27025] __kvmalloc_node_noprof+0x3d4/0x650 [ 1162.748968][T27025] ? futex_hash_allocate+0x190/0x9d0 [ 1162.749025][T27025] ? futex_hash_allocate+0x190/0x9d0 [ 1162.749069][T27025] futex_hash_allocate+0x190/0x9d0 [ 1162.749155][T27025] ? cap_task_prctl+0x13f/0x6e0 [ 1162.749186][T27025] futex_hash_prctl+0xd8/0xf0 [ 1162.749283][T27025] __se_sys_prctl+0xa3d/0x13f0 [ 1162.749316][T27025] __x64_sys_prctl+0x67/0x80 [ 1162.749348][T27025] x64_sys_call+0x2533/0x3020 [ 1162.749444][T27025] do_syscall_64+0x12c/0x370 [ 1162.749494][T27025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.749528][T27025] RIP: 0033:0x7fe4e169c629 [ 1162.749546][T27025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.749568][T27025] RSP: 002b:00007fe4e00ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1162.749589][T27025] RAX: ffffffffffffffda RBX: 00007fe4e1915fa0 RCX: 00007fe4e169c629 [ 1162.749612][T27025] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1162.749631][T27025] RBP: 00007fe4e1732b39 R08: 0000000000000000 R09: 0000000000000000 [ 1162.749649][T27025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.749665][T27025] R13: 00007fe4e1916038 R14: 00007fe4e1915fa0 R15: 00007ffcb4e72b38 [ 1162.749694][T27025] [ 1162.749704][T27025] memory: usage 307200kB, limit 307200kB, failcnt 17196 [ 1162.830374][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1162.842323][T27025] memory+swap: usage 375476kB, limit 9007199254740988kB, failcnt 0 [ 1162.884530][T27029] lo speed is unknown, defaulting to 1000 [ 1162.887689][T27029] xfrm0 speed is unknown, defaulting to 1000 [ 1162.889670][T27025] kmem: usage 300780kB, limit 9007199254740988kB, failcnt 0 [ 1162.978969][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1163.011054][T27025] Memory cgroup stats for /syz3: [ 1163.074830][T27025] cache 4272128 [ 1163.085716][T27025] rss 2207744 [ 1163.094815][T27025] shmem 4268032 [ 1163.107799][T27029] lo speed is unknown, defaulting to 1000 [ 1163.117938][T27025] mapped_file 417792 [ 1163.121999][T27031] siw: device registration error -23 [ 1163.127578][T27025] dirty 0 [ 1163.131261][T27025] writeback 0 [ 1163.135329][T27025] workingset_refault_anon 734 [ 1163.146801][T27030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6915'. [ 1163.153046][T27025] workingset_refault_file 45921 [ 1163.170660][T27037] lo speed is unknown, defaulting to 1000 [ 1163.182351][T27025] swap 69914624 [ 1163.198274][T27030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6915'. [ 1163.198438][T27025] swapcached 97964032 [ 1163.243700][T27025] pgpgin 1417933 [ 1163.245630][T27037] xfrm0 speed is unknown, defaulting to 1000 [ 1163.247609][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1163.267620][T27025] pgpgout 1416328 [ 1163.271421][T27025] pgfault 1197930 [ 1163.278283][T27025] pgmajfault 198 [ 1163.282290][T27035] lo speed is unknown, defaulting to 1000 [ 1163.286186][T27025] inactive_anon 1445888 [ 1163.304186][T27025] active_anon 929792 [ 1163.341031][T27025] inactive_file 0 [ 1163.344809][T27025] active_file 4096 [ 1163.348566][T27025] unevictable 4194304 [ 1163.363569][T27025] hierarchical_memory_limit 314572800 [ 1163.395836][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1163.403421][T27025] hierarchical_memsw_limit 9223372036854771712 [ 1163.410158][T27025] total_cache 4272128 [ 1163.425042][T27025] total_rss 2207744 [ 1163.429652][T27025] total_shmem 4268032 [ 1163.433656][T27025] total_mapped_file 417792 [ 1163.449151][T27025] total_dirty 0 [ 1163.452879][T27025] total_writeback 0 [ 1163.456708][T27025] total_workingset_refault_anon 734 [ 1163.480507][T27037] lo speed is unknown, defaulting to 1000 [ 1163.481579][T27025] total_workingset_refault_file 45921 [ 1163.491109][T27035] xfrm0 speed is unknown, defaulting to 1000 [ 1163.491824][T27025] total_swap 69914624 [ 1163.524205][T27025] total_swapcached 97964032 [ 1163.534785][T27025] total_pgpgin 1417933 [ 1163.538955][T27025] total_pgpgout 1416328 [ 1163.547785][T27025] total_pgfault 1197930 [ 1163.556327][T27025] total_pgmajfault 198 [ 1163.565065][T27025] total_inactive_anon 1445888 [ 1163.577021][T27025] total_active_anon 929792 [ 1163.584302][T27025] total_inactive_file 0 [ 1163.591916][T27025] total_active_file 4096 [ 1163.597212][T27025] total_unevictable 4194304 [ 1163.607075][T27025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6914,pid=27024,uid=0 [ 1163.624592][T27025] Memory cgroup out of memory: Killed process 27025 (syz.3.6914) total-vm:94292kB, anon-rss:1420kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1163.675660][T27035] lo speed is unknown, defaulting to 1000 [ 1163.824044][T27047] lo speed is unknown, defaulting to 1000 [ 1163.830252][T27047] xfrm0 speed is unknown, defaulting to 1000 [ 1163.881307][T27047] lo speed is unknown, defaulting to 1000 [ 1165.869409][T27082] netlink: 'syz.3.6928': attribute type 39 has an invalid length. [ 1166.802955][T27084] syz.3.6929 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1166.820777][T27084] CPU: 0 UID: 0 PID: 27084 Comm: syz.3.6929 Tainted: G W syzkaller #0 PREEMPT(full) [ 1166.820812][T27084] Tainted: [W]=WARN [ 1166.820821][T27084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1166.820901][T27084] Call Trace: [ 1166.820911][T27084] [ 1166.820922][T27084] __dump_stack+0x1d/0x30 [ 1166.821016][T27084] dump_stack_lvl+0x95/0xd0 [ 1166.821082][T27084] dump_stack+0x15/0x1b [ 1166.821105][T27084] dump_header+0x80/0x240 [ 1166.821131][T27084] oom_kill_process+0x295/0x350 [ 1166.821230][T27084] out_of_memory+0x97d/0xb80 [ 1166.821260][T27084] try_charge_memcg+0x62e/0xa10 [ 1166.821315][T27084] obj_cgroup_charge_pages+0x23/0xc0 [ 1166.821386][T27084] __memcg_kmem_charge_page+0x9e/0x170 [ 1166.821529][T27084] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1166.821561][T27084] alloc_pages_mpol+0xb3/0x260 [ 1166.821599][T27084] alloc_pages_noprof+0x8f/0x130 [ 1166.821676][T27084] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1166.821725][T27084] __kvmalloc_node_noprof+0x3d4/0x650 [ 1166.821759][T27084] ? futex_hash_allocate+0x190/0x9d0 [ 1166.821843][T27084] ? futex_hash_allocate+0x190/0x9d0 [ 1166.821884][T27084] futex_hash_allocate+0x190/0x9d0 [ 1166.821993][T27084] ? cap_task_prctl+0x13f/0x6e0 [ 1166.822048][T27084] futex_hash_prctl+0xd8/0xf0 [ 1166.822078][T27084] __se_sys_prctl+0xa3d/0x13f0 [ 1166.822163][T27084] __x64_sys_prctl+0x67/0x80 [ 1166.822190][T27084] x64_sys_call+0x2533/0x3020 [ 1166.822276][T27084] do_syscall_64+0x12c/0x370 [ 1166.822325][T27084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.822360][T27084] RIP: 0033:0x7fe4e169c629 [ 1166.822399][T27084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.822421][T27084] RSP: 002b:00007fe4e00ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1166.822590][T27084] RAX: ffffffffffffffda RBX: 00007fe4e1915fa0 RCX: 00007fe4e169c629 [ 1166.822605][T27084] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1166.822620][T27084] RBP: 00007fe4e1732b39 R08: 0000000000000000 R09: 0000000000000000 [ 1166.822638][T27084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.822656][T27084] R13: 00007fe4e1916038 R14: 00007fe4e1915fa0 R15: 00007ffcb4e72b38 [ 1166.822686][T27084] [ 1166.822737][T27084] memory: usage 307200kB, limit 307200kB, failcnt 17319 [ 1167.079285][T27084] memory+swap: usage 375476kB, limit 9007199254740988kB, failcnt 0 [ 1167.087569][T27084] kmem: usage 300724kB, limit 9007199254740988kB, failcnt 0 [ 1167.110716][T27084] Memory cgroup stats for /syz3: [ 1167.110901][T27084] cache 4268032 [ 1167.120566][T27084] rss 2211840 [ 1167.123951][T27084] shmem 4268032 [ 1167.127705][T27084] mapped_file 413696 [ 1167.131689][T27084] dirty 0 [ 1167.134767][T27084] writeback 0 [ 1167.138385][T27084] workingset_refault_anon 734 [ 1167.143178][T27084] workingset_refault_file 45921 [ 1167.148102][T27084] swap 69914624 [ 1167.151929][T27084] swapcached 97964032 [ 1167.156033][T27084] pgpgin 1418101 [ 1167.159898][T27084] pgpgout 1416496 [ 1167.163555][T27084] pgfault 1198384 [ 1167.167348][T27084] pgmajfault 200 [ 1167.171865][T27084] inactive_anon 1101824 [ 1167.176035][T27084] active_anon 1277952 [ 1167.180593][T27084] inactive_file 0 [ 1167.184777][T27084] active_file 0 [ 1167.193735][T27084] unevictable 4194304 [ 1167.198101][T27084] hierarchical_memory_limit 314572800 [ 1167.207195][T27084] hierarchical_memsw_limit 9223372036854771712 [ 1167.213934][T27084] total_cache 4268032 [ 1167.218299][T27084] total_rss 2211840 [ 1167.222156][T27084] total_shmem 4268032 [ 1167.226561][T27084] total_mapped_file 413696 [ 1167.231081][T27084] total_dirty 0 [ 1167.234884][T27084] total_writeback 0 [ 1167.242106][T27084] total_workingset_refault_anon 734 [ 1167.248150][T27084] total_workingset_refault_file 45921 [ 1167.256339][T27084] total_swap 69914624 [ 1167.260351][T27084] total_swapcached 97964032 [ 1167.271617][T27088] lo speed is unknown, defaulting to 1000 [ 1167.277575][T27084] total_pgpgin 1418101 [ 1167.281667][T27084] total_pgpgout 1416496 [ 1167.285836][T27084] total_pgfault 1198384 [ 1167.291088][T27084] total_pgmajfault 200 [ 1167.295192][T27084] total_inactive_anon 1101824 [ 1167.300079][T27084] total_active_anon 1277952 [ 1167.305361][T27089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6930'. [ 1167.314456][T27084] total_inactive_file 0 [ 1167.318794][T27084] total_active_file 0 [ 1167.323117][T27084] total_unevictable 4194304 [ 1167.327648][T27084] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6929,pid=27083,uid=0 [ 1167.343294][T27084] Memory cgroup out of memory: Killed process 27083 (syz.3.6929) total-vm:94292kB, anon-rss:1424kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1167.360878][T27088] xfrm0 speed is unknown, defaulting to 1000 [ 1167.367021][T27089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6930'. [ 1167.404894][ T50] net_ratelimit: 27 callbacks suppressed [ 1167.404915][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1167.424509][T27088] lo speed is unknown, defaulting to 1000 [ 1167.433875][T27090] siw: device registration error -23 [ 1167.533505][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1167.566399][T27088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6930'. [ 1167.575743][T27088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6930'. [ 1167.651028][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1167.780418][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1167.918210][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1167.933749][T27104] 9p: Bad value for 'rfdno' [ 1167.964239][T27104] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1168.035647][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1168.051863][T27108] netlink: 'syz.6.6937': attribute type 83 has an invalid length. [ 1168.063219][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 1168.063234][ T28] audit: type=1400 audit(3919537792.244:3031): avc: denied { read } for pid=27107 comm="syz.6.6937" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1168.096825][ T28] audit: type=1400 audit(3919537792.272:3032): avc: denied { open } for pid=27107 comm="syz.6.6937" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1168.164628][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1168.186026][ T3311] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1168.202810][ T3311] CPU: 1 UID: 0 PID: 3311 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 1168.202925][ T3311] Tainted: [W]=WARN [ 1168.202967][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1168.202991][ T3311] Call Trace: [ 1168.203001][ T3311] [ 1168.203012][ T3311] __dump_stack+0x1d/0x30 [ 1168.203048][ T3311] dump_stack_lvl+0x95/0xd0 [ 1168.203091][ T3311] dump_stack+0x15/0x1b [ 1168.203181][ T3311] dump_header+0x80/0x240 [ 1168.203213][ T3311] oom_kill_process+0x295/0x350 [ 1168.203236][ T3311] out_of_memory+0x97d/0xb80 [ 1168.203315][ T3311] try_charge_memcg+0x62e/0xa10 [ 1168.203437][ T3311] __mem_cgroup_charge+0x65/0x150 [ 1168.203549][ T3311] filemap_add_folio+0x110/0x350 [ 1168.203615][ T3311] __filemap_get_folio_mpol+0x326/0x680 [ 1168.203649][ T3311] filemap_fault+0x486/0xb90 [ 1168.203687][ T3311] __do_fault+0xbc/0x200 [ 1168.203728][ T3311] handle_mm_fault+0x11d7/0x3020 [ 1168.203833][ T3311] ? vma_start_read+0x1c7/0x2c0 [ 1168.203871][ T3311] do_user_addr_fault+0x62f/0x1050 [ 1168.203912][ T3311] ? trace_page_fault_user+0x1f/0xe0 [ 1168.203945][ T3311] exc_page_fault+0x62/0xa0 [ 1168.203983][ T3311] asm_exc_page_fault+0x26/0x30 [ 1168.204011][ T3311] RIP: 0033:0x7f8ae3b2a6b4 [ 1168.204029][ T3311] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 [ 1168.204109][ T3311] RSP: 002b:00007fff427afb90 EFLAGS: 00010202 [ 1168.204129][ T3311] RAX: 0000001b33724000 RBX: 0000000000000dda RCX: 000000000010fba8 [ 1168.204148][ T3311] RDX: 0000000001499ef6 RSI: 00007fff427afc20 RDI: 0000000000000001 [ 1168.204165][ T3311] RBP: 00007fff427afbcc R08: 0000000004e96775 R09: 7fffffffffffffff [ 1168.204202][ T3311] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 1168.204277][ T3311] R13: 00000000000927c0 R14: 000000000010f9e5 R15: 00007fff427afc20 [ 1168.204342][ T3311] [ 1168.204388][ T3311] memory: usage 307200kB, limit 307200kB, failcnt 3894 [ 1168.313628][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1168.318998][ T3311] memory+swap: usage 357984kB, limit 9007199254740988kB, failcnt 0 [ 1168.422392][ T3311] kmem: usage 288736kB, limit 9007199254740988kB, failcnt 0 [ 1168.429771][ T3311] Memory cgroup stats for /syz1: [ 1168.430165][ T3311] cache 17244160 [ 1168.439336][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1168.447053][ T3311] rss 1032192 [ 1168.450418][ T3311] shmem 17244160 [ 1168.454305][ T3311] mapped_file 28672 [ 1168.458276][ T3311] dirty 0 [ 1168.461277][ T3311] writeback 0 [ 1168.467551][ T3311] workingset_refault_anon 2766 [ 1168.472432][ T3311] workingset_refault_file 13158 [ 1168.497582][ T3311] swap 52002816 [ 1168.510264][ T3311] swapcached 62550016 [ 1168.514282][ T3311] pgpgin 1014853 [ 1168.518063][ T3311] pgpgout 1010238 [ 1168.521839][ T3311] pgfault 876630 [ 1168.525465][ T3311] pgmajfault 433 [ 1168.529120][ T3311] inactive_anon 17321984 [ 1168.533493][ T3311] active_anon 1581056 [ 1168.537579][ T3311] inactive_file 0 [ 1168.542135][ T3311] active_file 0 [ 1168.559500][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1168.590641][T27118] No such timeout policy "syz1" [ 1168.681031][T27122] SET target dimension over the limit! [ 1168.899562][T27126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6942'. [ 1169.034357][ T3311] unevictable 0 [ 1169.037910][ T3311] hierarchical_memory_limit 314572800 [ 1169.043350][ T3311] hierarchical_memsw_limit 9223372036854771712 [ 1169.049646][ T3311] total_cache 17244160 [ 1169.053755][ T3311] total_rss 1032192 [ 1169.057581][ T3311] total_shmem 17244160 [ 1169.061852][ T3311] total_mapped_file 28672 [ 1169.066289][ T3311] total_dirty 0 [ 1169.069783][ T3311] total_writeback 0 [ 1169.073717][ T3311] total_workingset_refault_anon 2766 [ 1169.079092][ T3311] total_workingset_refault_file 13158 [ 1169.086539][ T3311] total_swap 52002816 [ 1169.090595][ T3311] total_swapcached 62550016 [ 1169.095982][ T3311] total_pgpgin 1014853 [ 1169.100236][ T3311] total_pgpgout 1010238 [ 1169.104414][ T3311] total_pgfault 876630 [ 1169.108984][ T3311] total_pgmajfault 433 [ 1169.113170][ T3311] total_inactive_anon 17321984 [ 1169.119714][ T3311] total_active_anon 1581056 [ 1169.124343][ T3311] total_inactive_file 0 [ 1169.128711][ T3311] total_active_file 0 [ 1169.132810][ T3311] total_unevictable 0 [ 1169.137125][ T3311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6931,pid=27091,uid=0 [ 1169.173205][T27126] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6942'. [ 1169.188471][ T3311] Memory cgroup out of memory: Killed process 27091 (syz.1.6931) total-vm:94292kB, anon-rss:1420kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1169.257275][T27128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6943'. [ 1170.586203][T27153] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6950'. [ 1170.609442][T27153] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6950'. [ 1170.629212][T27153] loop6: detected capacity change from 0 to 512 [ 1170.688611][T27153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.711091][T27153] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.729570][ T28] audit: type=1400 audit(3919537794.732:3033): avc: denied { setattr } for pid=27152 comm="syz.6.6950" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1170.773460][T22515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.811478][T27166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6953'. [ 1172.110944][ T28] audit: type=1400 audit(3919537796.032:3034): avc: denied { write } for pid=27188 comm="syz.6.6960" path="socket:[135157]" dev="sockfs" ino=135157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1172.754309][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1172.782486][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 1172.782520][ T3317] Tainted: [W]=WARN [ 1172.782527][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1172.782543][ T3317] Call Trace: [ 1172.782549][ T3317] [ 1172.782558][ T3317] __dump_stack+0x1d/0x30 [ 1172.782591][ T3317] dump_stack_lvl+0x95/0xd0 [ 1172.782630][ T3317] dump_stack+0x15/0x1b [ 1172.782660][ T3317] dump_header+0x80/0x240 [ 1172.782689][ T3317] oom_kill_process+0x295/0x350 [ 1172.782735][ T3317] out_of_memory+0x97d/0xb80 [ 1172.782790][ T3317] try_charge_memcg+0x62e/0xa10 [ 1172.782841][ T3317] __mem_cgroup_charge+0x65/0x150 [ 1172.782873][ T3317] filemap_add_folio+0x110/0x350 [ 1172.782958][ T3317] __filemap_get_folio_mpol+0x326/0x680 [ 1172.782983][ T3317] filemap_fault+0x486/0xb90 [ 1172.783021][ T3317] __do_fault+0xbc/0x200 [ 1172.783106][ T3317] handle_mm_fault+0x11d7/0x3020 [ 1172.783142][ T3317] ? vma_start_read+0x1c7/0x2c0 [ 1172.783177][ T3317] do_user_addr_fault+0x62f/0x1050 [ 1172.783221][ T3317] ? trace_page_fault_user+0x1f/0xe0 [ 1172.783272][ T3317] exc_page_fault+0x62/0xa0 [ 1172.783353][ T3317] asm_exc_page_fault+0x26/0x30 [ 1172.783493][ T3317] RIP: 0033:0x7fdbd196a6b4 [ 1172.783509][ T3317] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 [ 1172.783532][ T3317] RSP: 002b:00007ffdd722a950 EFLAGS: 00010206 [ 1172.783553][ T3317] RAX: 0000001b33624000 RBX: 0000000000001103 RCX: 0000000000110b48 [ 1172.783567][ T3317] RDX: 0000000005dc8e5e RSI: 00007ffdd722a9e0 RDI: 0000000000000001 [ 1172.783580][ T3317] RBP: 00007ffdd722a98c R08: 00000000165c2ad7 R09: 7fffffffffffffff [ 1172.783595][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 1172.783609][ T3317] R13: 00000000000927c0 R14: 0000000000110c8c R15: 00007ffdd722a9e0 [ 1172.783637][ T3317] [ 1172.783646][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 6578 [ 1172.857138][ T30] net_ratelimit: 31 callbacks suppressed [ 1172.857156][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1172.862877][ T3317] memory+swap: usage 312000kB, limit 9007199254740988kB, failcnt 0 [ 1173.002930][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1173.003675][ T3317] kmem: usage 227152kB, limit 9007199254740988kB, failcnt 0 [ 1173.017658][ T3317] Memory cgroup stats for /syz0: [ 1173.017930][ T3317] cache 64688128 [ 1173.026493][ T3317] rss 1351680 [ 1173.030122][ T3317] shmem 64688128 [ 1173.033823][ T3317] mapped_file 0 [ 1173.037385][ T3317] dirty 0 [ 1173.040459][ T3317] writeback 0 [ 1173.043841][ T3317] workingset_refault_anon 1705 [ 1173.048683][ T3317] workingset_refault_file 15182 [ 1173.053850][ T3317] swap 4915200 [ 1173.057331][ T3317] swapcached 14118912 [ 1173.061692][ T3317] pgpgin 1227866 [ 1173.065375][ T3317] pgpgout 1211723 [ 1173.069115][ T3317] pgfault 1244188 [ 1173.073236][ T3317] pgmajfault 329 [ 1173.076990][ T3317] inactive_anon 327680 [ 1173.081230][ T3317] active_anon 65794048 [ 1173.088058][ T3317] inactive_file 0 [ 1173.091838][ T3317] active_file 0 [ 1173.097097][ T3317] unevictable 0 [ 1173.100648][ T3317] hierarchical_memory_limit 314572800 [ 1173.106322][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 1173.112603][ T3317] total_cache 64688128 [ 1173.128812][ T3317] total_rss 1351680 [ 1173.132729][ T3317] total_shmem 64688128 [ 1173.137253][ T3317] total_mapped_file 0 [ 1173.143810][ T3317] total_dirty 0 [ 1173.151976][ T3317] total_writeback 0 [ 1173.156379][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1173.164635][ T3317] total_workingset_refault_anon 1705 [ 1173.174676][T27204] random: crng reseeded on system resumption [ 1173.178272][ T28] audit: type=1400 audit(3919537797.023:3035): avc: denied { read } for pid=27203 comm="syz.6.6965" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1173.180890][ T3317] total_workingset_refault_file 15182 [ 1173.229801][T27204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27204 comm=syz.6.6965 [ 1173.242867][T27204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=27204 comm=syz.6.6965 [ 1173.255935][ T3317] total_swap 4915200 [ 1173.259894][ T3317] total_swapcached 14118912 [ 1173.267998][ T3317] total_pgpgin 1227866 [ 1173.270627][ T28] audit: type=1400 audit(3919537797.023:3036): avc: denied { open } for pid=27203 comm="syz.6.6965" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1173.274710][T27204] Restarting kernel threads ... [ 1173.297091][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1173.302186][ T3317] total_pgpgout 1211723 [ 1173.317620][ T3317] total_pgfault 1244188 [ 1173.322132][ T3317] total_pgmajfault 329 [ 1173.328224][ T3317] total_inactive_anon 327680 [ 1173.334087][ T3317] total_active_anon 65794048 [ 1173.339430][T27204] Done restarting kernel threads. [ 1173.344595][ T3317] total_inactive_file 0 [ 1173.351727][ T3317] total_active_file 0 [ 1173.370170][ T3317] total_unevictable 0 [ 1173.376737][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6963,pid=27195,uid=0 [ 1173.380900][ T28] audit: type=1400 audit(3919537797.117:3037): avc: denied { ioctl } for pid=27203 comm="syz.6.6965" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1173.396648][ T3317] Memory cgroup out of memory: Killed process 27195 (syz.0.6963) total-vm:94292kB, anon-rss:1412kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1173.460798][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1173.522249][ T28] audit: type=1326 audit(3919537797.164:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27203 comm="syz.6.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1173.584704][T27214] xt_nat: multiple ranges no longer supported [ 1173.591446][T27214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1173.598185][ T28] audit: type=1326 audit(3919537797.164:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27203 comm="syz.6.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1173.598796][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1173.629110][T27214] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1173.636898][T27214] audit: backlog limit exceeded [ 1173.665081][ T28] audit: type=1326 audit(3919537797.173:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27203 comm="syz.6.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1173.702295][ T28] audit: type=1326 audit(3919537797.173:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27203 comm="syz.6.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1173.726148][ T28] audit: type=1326 audit(3919537797.173:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27203 comm="syz.6.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1173.753526][ T28] audit: type=1326 audit(3919537797.332:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27210 comm="syz.0.6968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1173.777200][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1173.789051][ T28] audit: type=1326 audit(3919537797.332:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27210 comm="syz.0.6968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1173.905189][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1174.022312][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1175.316362][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1175.807276][T27231] lo speed is unknown, defaulting to 1000 [ 1175.814441][T27231] xfrm0 speed is unknown, defaulting to 1000 [ 1175.916130][T27231] lo speed is unknown, defaulting to 1000 [ 1176.154769][T27238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1177.274453][T27254] loop6: detected capacity change from 0 to 8192 [ 1177.428166][T27241] syz.3.6977 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1177.442499][T27241] CPU: 0 UID: 0 PID: 27241 Comm: syz.3.6977 Tainted: G W syzkaller #0 PREEMPT(full) [ 1177.442617][T27241] Tainted: [W]=WARN [ 1177.442628][T27241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1177.442646][T27241] Call Trace: [ 1177.442656][T27241] [ 1177.442706][T27241] __dump_stack+0x1d/0x30 [ 1177.442870][T27241] dump_stack_lvl+0x95/0xd0 [ 1177.442902][T27241] dump_stack+0x15/0x1b [ 1177.442934][T27241] dump_header+0x80/0x240 [ 1177.442992][T27241] oom_kill_process+0x295/0x350 [ 1177.443036][T27241] out_of_memory+0x97d/0xb80 [ 1177.443068][T27241] try_charge_memcg+0x62e/0xa10 [ 1177.443128][T27241] obj_cgroup_charge_pages+0x23/0xc0 [ 1177.443239][T27241] __memcg_kmem_charge_page+0x9e/0x170 [ 1177.443336][T27241] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1177.443381][T27241] alloc_pages_mpol+0xb3/0x260 [ 1177.443424][T27241] alloc_pages_noprof+0x8f/0x130 [ 1177.443462][T27241] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1177.443586][T27241] __kvmalloc_node_noprof+0x3d4/0x650 [ 1177.443681][T27241] ? futex_hash_allocate+0x190/0x9d0 [ 1177.443722][T27241] ? futex_hash_allocate+0x190/0x9d0 [ 1177.443804][T27241] futex_hash_allocate+0x190/0x9d0 [ 1177.443897][T27241] ? cap_task_prctl+0x13f/0x6e0 [ 1177.443927][T27241] futex_hash_prctl+0xd8/0xf0 [ 1177.443966][T27241] __se_sys_prctl+0xa3d/0x13f0 [ 1177.444009][T27241] __x64_sys_prctl+0x67/0x80 [ 1177.444124][T27241] x64_sys_call+0x2533/0x3020 [ 1177.444168][T27241] do_syscall_64+0x12c/0x370 [ 1177.444270][T27241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.444300][T27241] RIP: 0033:0x7fe4e169c629 [ 1177.444323][T27241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.444407][T27241] RSP: 002b:00007fe4e00ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1177.444429][T27241] RAX: ffffffffffffffda RBX: 00007fe4e1915fa0 RCX: 00007fe4e169c629 [ 1177.444444][T27241] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1177.444480][T27241] RBP: 00007fe4e1732b39 R08: 0000000000000000 R09: 0000000000000000 [ 1177.444499][T27241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1177.444517][T27241] R13: 00007fe4e1916038 R14: 00007fe4e1915fa0 R15: 00007ffcb4e72b38 [ 1177.444606][T27241] [ 1177.675821][T27241] memory: usage 307200kB, limit 307200kB, failcnt 17502 [ 1177.682833][T27241] memory+swap: usage 375476kB, limit 9007199254740988kB, failcnt 0 [ 1177.691145][T27241] kmem: usage 300772kB, limit 9007199254740988kB, failcnt 0 [ 1177.698496][T27241] Memory cgroup stats for /syz3: [ 1177.698776][T27241] cache 4272128 [ 1177.707782][T27241] rss 2215936 [ 1177.711282][T27241] shmem 4268032 [ 1177.714751][T27241] mapped_file 417792 [ 1177.718707][T27241] dirty 0 [ 1177.721945][T27241] writeback 0 [ 1177.725356][T27241] workingset_refault_anon 734 [ 1177.734932][T27241] workingset_refault_file 45922 [ 1177.739897][T27241] swap 69914624 [ 1177.743548][T27241] swapcached 97964032 [ 1177.747595][T27241] pgpgin 1419616 [ 1177.751186][T27241] pgpgout 1418009 [ 1177.755217][T27241] pgfault 1201806 [ 1177.758915][T27241] pgmajfault 200 [ 1177.762534][T27241] inactive_anon 917504 [ 1177.766879][T27241] active_anon 1466368 [ 1177.770918][T27241] inactive_file 0 [ 1177.774600][T27241] active_file 4096 [ 1177.778425][T27241] unevictable 4194304 [ 1177.782456][T27241] hierarchical_memory_limit 314572800 [ 1177.788620][T27241] hierarchical_memsw_limit 9223372036854771712 [ 1177.794853][T27241] total_cache 4272128 [ 1177.798924][T27241] total_rss 2215936 [ 1177.802851][T27241] total_shmem 4268032 [ 1177.806981][T27241] total_mapped_file 417792 [ 1177.811446][T27241] total_dirty 0 [ 1177.814966][T27241] total_writeback 0 [ 1177.818928][T27241] total_workingset_refault_anon 734 [ 1177.824181][T27241] total_workingset_refault_file 45922 [ 1177.829768][T27241] total_swap 69914624 [ 1177.833925][T27241] total_swapcached 97964032 [ 1177.838525][T27241] total_pgpgin 1419616 [ 1177.842870][T27241] total_pgpgout 1418009 [ 1177.847081][T27241] total_pgfault 1201806 [ 1177.851452][T27241] total_pgmajfault 200 [ 1177.855606][T27241] total_inactive_anon 917504 [ 1177.861517][T27241] total_active_anon 1466368 [ 1177.866307][T27241] total_inactive_file 0 [ 1177.870574][T27241] total_active_file 4096 [ 1177.875307][T27241] total_unevictable 4194304 [ 1177.881056][T27241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6977,pid=27240,uid=0 [ 1177.919259][T27241] Memory cgroup out of memory: Killed process 27240 (syz.3.6977) total-vm:94292kB, anon-rss:1420kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1178.181486][T26842] loop6: p1 < > p2 p4 < p5 > [ 1178.186207][T26842] loop6: partition table partially beyond EOD, truncated [ 1178.193521][T26842] loop6: p1 start 134217728 is beyond EOD, truncated [ 1178.200347][T26842] loop6: p2 size 591360 extends beyond EOD, truncated [ 1178.209287][T26842] loop6: p5 size 591360 extends beyond EOD, truncated [ 1178.223554][T27254] loop6: p1 < > p2 p4 < p5 > [ 1178.228321][T27254] loop6: partition table partially beyond EOD, truncated [ 1178.245209][T27254] loop6: p1 start 134217728 is beyond EOD, truncated [ 1178.255791][ T1668] net_ratelimit: 15 callbacks suppressed [ 1178.255808][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1178.273913][T27254] loop6: p2 size 591360 extends beyond EOD, truncated [ 1178.306042][T27254] loop6: p5 size 591360 extends beyond EOD, truncated [ 1178.349258][T27263] Ÿë: port 1(gretap0) entered blocking state [ 1178.386411][T27263] Ÿë: port 1(gretap0) entered disabled state [ 1178.388292][T27269] udevd[27269]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1178.394029][T27263] gretap0: entered allmulticast mode [ 1178.402623][T27071] udevd[27071]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1178.411240][T26842] udevd[26842]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1178.442456][T27272] __nla_validate_parse: 1 callbacks suppressed [ 1178.443288][T27272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6984'. [ 1178.468064][T27071] udevd[27071]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1178.468095][T26842] udevd[26842]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1178.473392][T27272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6984'. [ 1178.478150][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1178.505704][T27269] udevd[27269]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1178.651376][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1178.706715][T27284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6986'. [ 1178.713995][T27286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6996'. [ 1178.726502][T27286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6996'. [ 1178.768952][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1178.919087][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1178.938541][ T28] kauditd_printk_skb: 192 callbacks suppressed [ 1178.938603][ T28] audit: type=1400 audit(3919537802.411:3237): avc: denied { setattr } for pid=27283 comm="syz.6.6986" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.076680][T27284] netlink: 15 bytes leftover after parsing attributes in process `syz.6.6986'. [ 1179.090195][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1179.431843][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1179.599148][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1179.720373][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1179.780438][T27305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1179.838030][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1180.117712][T27314] lo speed is unknown, defaulting to 1000 [ 1180.124973][T27313] No such timeout policy "syz1" [ 1180.134930][T27314] xfrm0 speed is unknown, defaulting to 1000 [ 1180.249450][T27314] lo speed is unknown, defaulting to 1000 [ 1180.382145][T27314] loop6: detected capacity change from 0 to 512 [ 1180.439948][T27314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.488466][T27314] __find_get_block_slow() failed. block=144115188075855873, b_blocknr=1, b_state=0x00000019, b_size=4096, device loop6 blocksize: 4096 [ 1180.510275][T27314] grow_buffers: requested out-of-range block 144115188075855873 for device loop6 [ 1180.523021][T27314] EXT4-fs warning (device loop6): ext4_resize_fs:2018: can't read last block, resize aborted [ 1180.863967][T22515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.122551][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6998'. [ 1181.345211][T27345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7001'. [ 1181.354484][T27346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6998'. [ 1181.499127][T27345] netlink: 15 bytes leftover after parsing attributes in process `syz.4.7001'. [ 1181.661900][T27335] lo speed is unknown, defaulting to 1000 [ 1181.877323][T27352] SET target dimension over the limit! [ 1182.332178][T27335] xfrm0 speed is unknown, defaulting to 1000 [ 1182.528866][T27335] lo speed is unknown, defaulting to 1000 [ 1182.596830][T27364] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27364 comm=syz.0.7005 [ 1182.633111][T27364] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=27364 comm=syz.0.7005 [ 1182.665689][ T28] audit: type=1326 audit(3919537805.891:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27363 comm="syz.0.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1182.748169][ T28] audit: type=1326 audit(3919537805.891:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27363 comm="syz.0.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1182.812566][ T28] audit: type=1326 audit(3919537805.900:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27363 comm="syz.0.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1182.865566][ T28] audit: type=1326 audit(3919537805.900:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27363 comm="syz.0.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1182.892356][ T28] audit: type=1326 audit(3919537805.900:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27363 comm="syz.0.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1183.165769][T23952] lo speed is unknown, defaulting to 1000 [ 1183.633334][T18437] net_ratelimit: 24 callbacks suppressed [ 1183.633352][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1183.761508][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1183.898318][T27368] lo speed is unknown, defaulting to 1000 [ 1183.904769][T27368] xfrm0 speed is unknown, defaulting to 1000 [ 1183.911109][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1183.950806][T27368] lo speed is unknown, defaulting to 1000 [ 1183.959707][ T28] audit: type=1400 audit(3919537807.116:3243): avc: denied { setcheckreqprot } for pid=27385 comm="syz.6.7009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1183.980894][T27389] __nla_validate_parse: 4 callbacks suppressed [ 1183.980910][T27389] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7009'. [ 1183.996691][T27389] .70·: renamed from hsr0 [ 1184.002615][T27389] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1184.023921][T27389] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1184.045474][T27389] .70·: entered allmulticast mode [ 1184.060788][T27389] hsr_slave_0: entered allmulticast mode [ 1184.066553][T27389] hsr_slave_1: entered allmulticast mode [ 1184.095016][T27389] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1184.221152][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1184.338790][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1184.387806][T27396] No such timeout policy "syz1" [ 1184.456565][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1184.573943][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1184.586108][T27398] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7022'. [ 1184.702224][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1184.842143][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1185.795516][T27414] IPv6: sit6: Disabled Multicast RS [ 1185.801684][T27414] sit6: entered allmulticast mode [ 1186.018757][ T28] audit: type=1326 audit(3919537809.025:3244): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27418 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1186.104928][ T28] audit: type=1326 audit(3919537809.025:3245): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27418 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1186.130174][ T28] audit: type=1326 audit(3919537809.109:3246): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27418 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1186.189400][ T28] audit: type=1326 audit(3919537809.109:3247): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27418 comm="syz.0.7016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1187.992136][T27437] loop6: detected capacity change from 0 to 2048 [ 1188.956723][T27462] IPv6: NLM_F_CREATE should be specified when creating new route [ 1188.989955][T21988] net_ratelimit: 20 callbacks suppressed [ 1188.989989][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1189.073366][T27461] lo speed is unknown, defaulting to 1000 [ 1189.109623][T27461] xfrm0 speed is unknown, defaulting to 1000 [ 1189.170934][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1189.202473][T27461] lo speed is unknown, defaulting to 1000 [ 1189.288497][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1189.417966][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1189.476580][T27478] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1189.520017][T27478] bond0 (unregistering): Released all slaves [ 1189.566694][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1189.590873][T27485] No such timeout policy "syz1" [ 1189.648466][T27486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.684451][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1189.709483][T27486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.759235][ T28] audit: type=1400 audit(3919537812.532:3248): avc: denied { write } for pid=27473 comm="syz.6.7031" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1189.812363][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1189.951835][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1190.068998][T18437] bond7: (slave macvlan2): failed to get link speed/duplex [ 1190.187579][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1192.136699][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7038'. [ 1192.614645][T27516] IPv6: NLM_F_CREATE should be specified when creating new route [ 1192.669632][T27518] SET target dimension over the limit! [ 1192.803468][T27518] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7041'. [ 1192.816056][T27518] netlink: 260 bytes leftover after parsing attributes in process `syz.6.7041'. [ 1192.865983][T27524] lo speed is unknown, defaulting to 1000 [ 1192.872532][T27524] xfrm0 speed is unknown, defaulting to 1000 [ 1192.883622][ T28] audit: type=1400 audit(3919537815.460:3249): avc: denied { ioctl } for pid=27526 comm="syz.6.7045" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1193.044251][T23952] kernel write not supported for file bpf-map (pid: 23952 comm: kworker/0:2) [ 1193.051341][T27524] lo speed is unknown, defaulting to 1000 [ 1193.674210][T27537] No such timeout policy "syz1" [ 1193.798173][T27539] netlink: 'syz.4.7048': attribute type 1 has an invalid length. [ 1193.867315][T27539] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1193.912802][T27539] lo speed is unknown, defaulting to 1000 [ 1193.928754][T27539] xfrm0 speed is unknown, defaulting to 1000 [ 1194.044071][T27548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7050'. [ 1194.065584][T27539] lo speed is unknown, defaulting to 1000 [ 1194.355850][ T8092] net_ratelimit: 24 callbacks suppressed [ 1194.355866][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1194.484200][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1194.601775][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1194.719503][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1194.954518][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1195.082863][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1195.211335][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1195.365076][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1195.894772][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1196.545414][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1197.670182][T27584] syz.0.7058 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1197.686289][T27584] CPU: 1 UID: 0 PID: 27584 Comm: syz.0.7058 Tainted: G W syzkaller #0 PREEMPT(full) [ 1197.686374][T27584] Tainted: [W]=WARN [ 1197.686383][T27584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1197.686399][T27584] Call Trace: [ 1197.686407][T27584] [ 1197.686416][T27584] __dump_stack+0x1d/0x30 [ 1197.686476][T27584] dump_stack_lvl+0x95/0xd0 [ 1197.686563][T27584] dump_stack+0x15/0x1b [ 1197.686591][T27584] dump_header+0x80/0x240 [ 1197.686624][T27584] oom_kill_process+0x295/0x350 [ 1197.686678][T27584] out_of_memory+0x97d/0xb80 [ 1197.686709][T27584] try_charge_memcg+0x62e/0xa10 [ 1197.686756][T27584] obj_cgroup_charge_pages+0x23/0xc0 [ 1197.686860][T27584] __memcg_kmem_charge_page+0x9e/0x170 [ 1197.686967][T27584] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1197.687002][T27584] alloc_pages_mpol+0xb3/0x260 [ 1197.687032][T27584] alloc_pages_noprof+0x8f/0x130 [ 1197.687068][T27584] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1197.687157][T27584] __kvmalloc_node_noprof+0x3d4/0x650 [ 1197.687190][T27584] ? futex_hash_allocate+0x190/0x9d0 [ 1197.687259][T27584] ? futex_hash_allocate+0x190/0x9d0 [ 1197.687310][T27584] futex_hash_allocate+0x190/0x9d0 [ 1197.687368][T27584] ? cap_task_prctl+0x13f/0x6e0 [ 1197.687395][T27584] futex_hash_prctl+0xd8/0xf0 [ 1197.687457][T27584] __se_sys_prctl+0xa3d/0x13f0 [ 1197.687499][T27584] __x64_sys_prctl+0x67/0x80 [ 1197.687536][T27584] x64_sys_call+0x2533/0x3020 [ 1197.687599][T27584] do_syscall_64+0x12c/0x370 [ 1197.687642][T27584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.687671][T27584] RIP: 0033:0x7fdbd1a9c629 [ 1197.687692][T27584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.687773][T27584] RSP: 002b:00007fdbd04f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1197.687807][T27584] RAX: ffffffffffffffda RBX: 00007fdbd1d15fa0 RCX: 00007fdbd1a9c629 [ 1197.687826][T27584] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1197.687839][T27584] RBP: 00007fdbd1b32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1197.687851][T27584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.687864][T27584] R13: 00007fdbd1d16038 R14: 00007fdbd1d15fa0 R15: 00007ffdd722a5e8 [ 1197.687892][T27584] [ 1197.687901][T27584] memory: usage 307200kB, limit 307200kB, failcnt 6687 [ 1197.927329][T27584] memory+swap: usage 312000kB, limit 9007199254740988kB, failcnt 0 [ 1197.935360][T27584] kmem: usage 242624kB, limit 9007199254740988kB, failcnt 0 [ 1197.944639][T27584] Memory cgroup stats for /syz0: [ 1197.944966][T27584] cache 64688128 [ 1197.953922][T27584] rss 1355776 [ 1197.957224][T27584] shmem 64688128 [ 1197.961300][T27584] mapped_file 0 [ 1197.964835][T27584] dirty 0 [ 1197.967808][T27584] writeback 0 [ 1197.971441][T27584] workingset_refault_anon 1705 [ 1197.976219][T27584] workingset_refault_file 17233 [ 1197.981341][T27584] swap 4915200 [ 1197.984789][T27584] swapcached 14118912 [ 1197.988878][T27584] pgpgin 1264367 [ 1197.992757][T27584] pgpgout 1248223 [ 1197.996415][T27584] pgfault 1277949 [ 1198.000065][T27584] pgmajfault 334 [ 1198.004021][T27584] inactive_anon 65806336 [ 1198.008301][T27584] active_anon 319488 [ 1198.012636][T27584] inactive_file 0 [ 1198.016291][T27584] active_file 0 [ 1198.019837][T27584] unevictable 0 [ 1198.023727][T27584] hierarchical_memory_limit 314572800 [ 1198.029150][T27584] hierarchical_memsw_limit 9223372036854771712 [ 1198.035679][T27584] total_cache 64688128 [ 1198.039794][T27584] total_rss 1355776 [ 1198.043629][T27584] total_shmem 64688128 [ 1198.048160][T27584] total_mapped_file 0 [ 1198.052406][T27584] total_dirty 0 [ 1198.056928][T27584] total_writeback 0 [ 1198.060854][T27584] total_workingset_refault_anon 1705 [ 1198.066577][T27584] total_workingset_refault_file 17233 [ 1198.072041][T27584] total_swap 4915200 [ 1198.075968][T27584] total_swapcached 14118912 [ 1198.081672][T27584] total_pgpgin 1264367 [ 1198.085777][T27584] total_pgpgout 1248223 [ 1198.090198][T27584] total_pgfault 1277949 [ 1198.094418][T27584] total_pgmajfault 334 [ 1198.098773][T27584] total_inactive_anon 65806336 [ 1198.103578][T27584] total_active_anon 319488 [ 1198.108129][T27584] total_inactive_file 0 [ 1198.112708][T27584] total_active_file 0 [ 1198.116709][T27584] total_unevictable 0 [ 1198.121818][T27584] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7058,pid=27583,uid=0 [ 1198.136797][T27584] Memory cgroup out of memory: Killed process 27583 (syz.0.7058) total-vm:94292kB, anon-rss:1416kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1198.248984][T27597] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7062'. [ 1198.271029][T27597] bond4: (slave macvlan3): Releasing backup interface [ 1198.289064][T27597] macvlan3 (unregistering): left allmulticast mode [ 1198.319387][T27597] bond0 (unregistering): Released all slaves [ 1198.335306][T27598] No such timeout policy "syz1" [ 1198.866110][T27611] netlink: 'syz.6.7064': attribute type 1 has an invalid length. [ 1198.874287][T27611] netlink: 5 bytes leftover after parsing attributes in process `syz.6.7064'. [ 1198.901065][T27611] lo speed is unknown, defaulting to 1000 [ 1198.907515][T27611] xfrm0 speed is unknown, defaulting to 1000 [ 1198.954266][T27611] lo speed is unknown, defaulting to 1000 [ 1199.321152][T27620] IPv6: sit8: Disabled Multicast RS [ 1199.328009][T27620] sit8: entered allmulticast mode [ 1201.333335][T27626] net_ratelimit: 21 callbacks suppressed [ 1201.333350][T27626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1201.358627][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1201.627877][T27632] syz.6.7069 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1201.644769][T27632] CPU: 1 UID: 0 PID: 27632 Comm: syz.6.7069 Tainted: G W syzkaller #0 PREEMPT(full) [ 1201.644808][T27632] Tainted: [W]=WARN [ 1201.644817][T27632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1201.644872][T27632] Call Trace: [ 1201.644879][T27632] [ 1201.644888][T27632] __dump_stack+0x1d/0x30 [ 1201.644920][T27632] dump_stack_lvl+0x95/0xd0 [ 1201.644946][T27632] dump_stack+0x15/0x1b [ 1201.644977][T27632] dump_header+0x80/0x240 [ 1201.645007][T27632] oom_kill_process+0x295/0x350 [ 1201.645034][T27632] out_of_memory+0x97d/0xb80 [ 1201.645056][T27632] try_charge_memcg+0x62e/0xa10 [ 1201.645110][T27632] obj_cgroup_charge_pages+0x23/0xc0 [ 1201.645150][T27632] __memcg_kmem_charge_page+0x9e/0x170 [ 1201.645185][T27632] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1201.645215][T27632] alloc_pages_mpol+0xb3/0x260 [ 1201.645296][T27632] alloc_pages_noprof+0x8f/0x130 [ 1201.645415][T27632] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1201.645552][T27632] __kvmalloc_node_noprof+0x3d4/0x650 [ 1201.645583][T27632] ? futex_hash_allocate+0x190/0x9d0 [ 1201.645637][T27632] ? futex_hash_allocate+0x190/0x9d0 [ 1201.645689][T27632] futex_hash_allocate+0x190/0x9d0 [ 1201.645782][T27632] ? cap_task_prctl+0x13f/0x6e0 [ 1201.645862][T27632] futex_hash_prctl+0xd8/0xf0 [ 1201.645896][T27632] __se_sys_prctl+0xa3d/0x13f0 [ 1201.645925][T27632] __x64_sys_prctl+0x67/0x80 [ 1201.646007][T27632] x64_sys_call+0x2533/0x3020 [ 1201.646089][T27632] do_syscall_64+0x12c/0x370 [ 1201.646134][T27632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.646164][T27632] RIP: 0033:0x7fa9b222c629 [ 1201.646186][T27632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.646254][T27632] RSP: 002b:00007fa9b0c7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1201.646279][T27632] RAX: ffffffffffffffda RBX: 00007fa9b24a5fa0 RCX: 00007fa9b222c629 [ 1201.646295][T27632] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1201.646308][T27632] RBP: 00007fa9b22c2b39 R08: 0000000000000000 R09: 0000000000000000 [ 1201.646398][T27632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.646411][T27632] R13: 00007fa9b24a6038 R14: 00007fa9b24a5fa0 R15: 00007ffe6e7e2008 [ 1201.646444][T27632] [ 1201.872850][T27632] memory: usage 307200kB, limit 307200kB, failcnt 826 [ 1201.880186][T27632] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1201.888352][T27632] kmem: usage 212460kB, limit 9007199254740988kB, failcnt 0 [ 1201.895804][T27632] Memory cgroup stats for /syz6: [ 1201.896394][T27632] cache 95535104 [ 1201.905252][T27632] rss 1474560 [ 1201.908752][T27632] shmem 95535104 [ 1201.912407][T27632] mapped_file 0 [ 1201.916048][T27632] dirty 0 [ 1201.920399][T27632] writeback 0 [ 1201.923836][T27632] workingset_refault_anon 0 [ 1201.928574][T27632] workingset_refault_file 0 [ 1201.933239][T27632] swap 0 [ 1201.936222][T27632] swapcached 0 [ 1201.939709][T27632] pgpgin 248571 [ 1201.943340][T27632] pgpgout 224886 [ 1201.947097][T27632] pgfault 259724 [ 1201.950772][T27632] pgmajfault 6 [ 1201.954287][T27632] inactive_anon 83144704 [ 1201.958613][T27632] active_anon 13864960 [ 1201.962854][T27632] inactive_file 0 [ 1201.966590][T27632] active_file 4096 [ 1201.970488][T27632] unevictable 0 [ 1201.974047][T27632] hierarchical_memory_limit 314572800 [ 1201.987719][T27632] hierarchical_memsw_limit 9223372036854771712 [ 1202.002516][T27632] total_cache 95535104 [ 1202.006699][T27632] total_rss 1474560 [ 1202.010736][T27632] total_shmem 95535104 [ 1202.014934][T27632] total_mapped_file 0 [ 1202.018950][T27632] total_dirty 0 [ 1202.022517][T27632] total_writeback 0 [ 1202.026401][T27632] total_workingset_refault_anon 0 [ 1202.031448][T27632] total_workingset_refault_file 0 [ 1202.038230][T27632] total_swap 0 [ 1202.041692][T27632] total_swapcached 0 [ 1202.045979][T27632] total_pgpgin 248571 [ 1202.050116][T27632] total_pgpgout 224886 [ 1202.054364][T27632] total_pgfault 259724 [ 1202.058481][T27632] total_pgmajfault 6 [ 1202.063127][T27632] total_inactive_anon 83144704 [ 1202.068171][T27632] total_active_anon 13864960 [ 1202.072779][T27632] total_inactive_file 0 [ 1202.077011][T27632] total_active_file 4096 [ 1202.081308][T27632] total_unevictable 0 [ 1202.085415][T27632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7021,pid=27439,uid=0 [ 1202.100822][T27632] Memory cgroup out of memory: Killed process 27439 (syz.6.7021) total-vm:100576kB, anon-rss:1420kB, file-rss:24896kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 1202.181656][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1202.309722][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1202.410697][ T28] audit: type=1326 audit(3919537824.375:3250): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.3.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e169c629 code=0x7ffc0000 [ 1202.434718][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1202.453110][ T28] audit: type=1326 audit(3919537824.375:3251): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.3.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e169c629 code=0x7ffc0000 [ 1202.555589][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1202.627147][T27658] netlink: 'syz.4.7077': attribute type 1 has an invalid length. [ 1202.635255][T27658] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7077'. [ 1202.673823][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1202.752088][ T28] audit: type=1326 audit(3919537824.375:3252): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.3.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fe4e169c629 code=0x7ffc0000 [ 1202.801416][ T28] audit: type=1326 audit(3919537824.440:3253): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.3.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e169c629 code=0x7ffc0000 [ 1202.825598][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1202.862275][ T28] audit: type=1326 audit(3919537824.440:3254): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.3.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e169c629 code=0x7ffc0000 [ 1203.007766][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1203.123378][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1203.384803][T27675] lo speed is unknown, defaulting to 1000 [ 1203.390929][T27675] xfrm0 speed is unknown, defaulting to 1000 [ 1203.453258][T27675] lo speed is unknown, defaulting to 1000 [ 1204.279752][T27681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7083'. [ 1204.289421][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7083'. [ 1204.978959][T27700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1205.286045][T27704] netlink: 15 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1205.888283][T27712] loop6: detected capacity change from 0 to 128 [ 1205.905341][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7088'. [ 1205.931712][T27710] lo speed is unknown, defaulting to 1000 [ 1205.938015][ T28] audit: type=1326 audit(3919537827.658:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1205.942432][T27712] loop6: detected capacity change from 0 to 512 [ 1205.970160][T27710] xfrm0 speed is unknown, defaulting to 1000 [ 1205.992856][ T28] audit: type=1326 audit(3919537827.658:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1206.031723][T27712] journal_path: Non-blockdev passed as './file2' [ 1206.042801][T27712] EXT4-fs: error: could not find journal device path [ 1206.091509][T27710] lo speed is unknown, defaulting to 1000 [ 1206.101483][ T28] audit: type=1326 audit(3919537827.658:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1206.108128][T27712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7088'. [ 1206.139921][T27712] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7088'. [ 1206.158628][ T28] audit: type=1326 audit(3919537827.658:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1206.191091][ T28] audit: type=1326 audit(3919537827.658:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1206.231960][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7088'. [ 1206.359377][T27721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7090'. [ 1206.439864][T27727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7090'. [ 1206.466005][T27731] SET target dimension over the limit! [ 1206.585490][ T5241] page_pool_release_retry() stalled pool shutdown: id 84, 50 inflight 363 sec [ 1206.640261][T27721] lo speed is unknown, defaulting to 1000 [ 1206.662000][T27721] xfrm0 speed is unknown, defaulting to 1000 [ 1207.555403][ T30] net_ratelimit: 15 callbacks suppressed [ 1207.555440][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1207.762563][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1207.823212][T27721] lo speed is unknown, defaulting to 1000 [ 1207.901128][T18429] bond7: (slave macvlan2): failed to get link speed/duplex [ 1208.469009][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1208.504063][T27752] loop6: detected capacity change from 0 to 2048 [ 1208.543675][T26842] loop6: p1 < > p3 [ 1208.553378][T26842] loop6: p3 size 134217728 extends beyond EOD, truncated [ 1208.606401][T18429] bond7: (slave macvlan2): failed to get link speed/duplex [ 1208.735742][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1208.755571][T27752] loop6: p1 < > p3 [ 1208.761445][T27752] loop6: p3 size 134217728 extends beyond EOD, truncated [ 1208.938433][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1209.136559][T27773] lo speed is unknown, defaulting to 1000 [ 1209.151667][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1209.170224][T27773] xfrm0 speed is unknown, defaulting to 1000 [ 1209.204638][T27779] loop6: detected capacity change from 0 to 512 [ 1209.420561][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1209.499561][T27779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1209.547585][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1209.642526][T27777] __find_get_block_slow() failed. block=144115188075855873, b_blocknr=1, b_state=0x00000011, b_size=4096, device loop6 blocksize: 4096 [ 1209.787377][T27777] grow_buffers: requested out-of-range block 144115188075855873 for device loop6 [ 1209.797265][T27793] bond20: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1209.907992][T27777] EXT4-fs warning (device loop6): ext4_resize_fs:2018: can't read last block, resize aborted [ 1209.923887][T27793] bond20 (unregistering): Released all slaves [ 1209.934078][T27773] lo speed is unknown, defaulting to 1000 [ 1209.999243][T27797] __nla_validate_parse: 5 callbacks suppressed [ 1209.999265][T27797] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7108'. [ 1210.042301][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 1210.042317][ T28] audit: type=1400 audit(3919537831.512:3396): avc: denied { create } for pid=27796 comm="syz.3.7108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1210.081135][ T28] audit: type=1400 audit(3919537831.540:3397): avc: denied { map } for pid=27796 comm="syz.3.7108" path="socket:[137941]" dev="sockfs" ino=137941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1210.116003][T22515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.416665][T27814] lo speed is unknown, defaulting to 1000 [ 1210.422725][T27814] xfrm0 speed is unknown, defaulting to 1000 [ 1210.449032][T27810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1210.481338][T27814] lo speed is unknown, defaulting to 1000 [ 1210.615385][T27810] lo speed is unknown, defaulting to 1000 [ 1210.633568][T27814] IPVS: You probably need to specify IP address on multicast interface. [ 1210.645155][T27814] IPVS: Error connecting to the multicast addr [ 1210.687041][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1210.696877][T27810] xfrm0 speed is unknown, defaulting to 1000 [ 1210.849553][T27818] bond9: entered allmulticast mode [ 1210.855189][T27818] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1210.874376][T27810] lo speed is unknown, defaulting to 1000 [ 1211.416670][T27837] loop6: detected capacity change from 0 to 2048 [ 1211.465029][T27837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.682242][T27843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7116'. [ 1211.691898][T27843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7116'. [ 1211.838019][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7114'. [ 1212.870311][T22515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.000454][T18429] net_ratelimit: 10 callbacks suppressed [ 1213.000477][T18429] bond7: (slave macvlan2): failed to get link speed/duplex [ 1213.269181][ T50] bond7: (slave macvlan2): failed to get link speed/duplex [ 1213.836669][T27882] loop6: detected capacity change from 0 to 512 [ 1214.876778][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1214.947558][T27882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.960227][T27882] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1215.010789][T18457] bond7: (slave macvlan2): failed to get link speed/duplex [ 1215.191893][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1215.406719][T22515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.416104][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1215.534116][T18429] bond7: (slave macvlan2): failed to get link speed/duplex [ 1215.652363][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1215.769172][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1215.844545][T27905] loop6: detected capacity change from 0 to 1024 [ 1215.859236][T27905] EXT4-fs: inline encryption not supported [ 1215.872080][T27905] EXT4-fs: Ignoring removed nobh option [ 1215.897444][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1215.907002][T27905] EXT4-fs: Ignoring removed bh option [ 1215.936464][T27905] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.197045][ T28] audit: type=1326 audit(3919537839.145:3398): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.1.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae3c5c629 code=0x7ffc0000 [ 1218.288252][ T28] audit: type=1326 audit(3919537839.219:3399): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.1.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae3c5c629 code=0x7ffc0000 [ 1218.356617][ T28] audit: type=1326 audit(3919537839.294:3400): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.1.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f8ae3c5c629 code=0x7ffc0000 [ 1218.389472][T22515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.538894][ T1668] net_ratelimit: 15 callbacks suppressed [ 1218.538913][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1218.554420][ T28] audit: type=1326 audit(3919537839.369:3401): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.1.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae3c5c629 code=0x7ffc0000 [ 1218.580329][ T28] audit: type=1326 audit(3919537839.500:3402): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27926 comm="syz.1.7128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae3c5c629 code=0x7ffc0000 [ 1218.631327][T27935] loop6: detected capacity change from 0 to 164 [ 1218.654238][ T28] audit: type=1400 audit(3919537839.565:3403): avc: denied { mount } for pid=27934 comm="syz.6.7133" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1218.690614][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1220.253967][T27943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1220.373444][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1220.584439][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1220.602386][T27945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7136'. [ 1220.657631][T27950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7138'. [ 1220.667585][T27950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7138'. [ 1220.698633][T27957] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1220.711268][T27954] netlink: 'syz.1.7137': attribute type 1 has an invalid length. [ 1220.719408][T27954] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7137'. [ 1220.772930][T27957] bond0 (unregistering): Released all slaves [ 1220.783426][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1220.791029][ T28] audit: type=1400 audit(3919537841.558:3404): avc: denied { unmount } for pid=22515 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1220.933273][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1221.019206][T27954] lo speed is unknown, defaulting to 1000 [ 1221.025422][T27954] xfrm0 speed is unknown, defaulting to 1000 [ 1221.050372][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1221.087009][T27954] lo speed is unknown, defaulting to 1000 [ 1221.242739][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1221.305400][ T28] audit: type=1400 audit(3919537842.044:3405): avc: denied { write } for pid=27968 comm="syz.6.7141" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1221.360352][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1221.637145][T27981] netlink: 'syz.0.7142': attribute type 27 has an invalid length. [ 1221.653640][T27981] bridge9: left promiscuous mode [ 1221.664133][T27981] bridge9: left allmulticast mode [ 1221.669358][T27981] ip6tnl4: left allmulticast mode [ 1221.679485][T27987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7145'. [ 1221.682773][T27981] bridge10: left promiscuous mode [ 1221.693713][T27981] bridge10: left allmulticast mode [ 1221.699365][T27981] bridge13: left promiscuous mode [ 1221.704696][T27981] bridge13: left allmulticast mode [ 1221.710829][T27981] macvtap1: left promiscuous mode [ 1221.716081][T27981] bond19: left promiscuous mode [ 1221.720959][T27981] bond19: left allmulticast mode [ 1221.726250][T27981] bridge19: left promiscuous mode [ 1221.731520][T27981] bridge19: left allmulticast mode [ 1221.783964][T27988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.848223][T23952] lo speed is unknown, defaulting to 1000 [ 1221.855596][T23952] syz0: Port: 1 Link ACTIVE [ 1222.552970][T28006] netlink: 'syz.3.7150': attribute type 27 has an invalid length. [ 1222.635974][T28006] ip6erspan0: left allmulticast mode [ 1222.642669][T28006] ip6gre1: left promiscuous mode [ 1222.649105][T28006] ip6gre1: left allmulticast mode [ 1222.655835][T28006] bridge23: left promiscuous mode [ 1222.660989][T28006] bridge23: left allmulticast mode [ 1222.666544][T28006] bridge24: left promiscuous mode [ 1222.671983][T28006] bridge24: left allmulticast mode [ 1222.677657][T28006] bond15: left promiscuous mode [ 1222.682636][T28006] bond15: left allmulticast mode [ 1222.691523][T28006] sit8: left allmulticast mode [ 1222.709040][ T5259] lo speed is unknown, defaulting to 1000 [ 1222.715898][T28014] loop6: detected capacity change from 0 to 512 [ 1222.746710][T28014] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.7152: corrupted inode contents [ 1222.753549][T28008] bridge0: port 1(dummy0) entered blocking state [ 1222.764886][T28008] bridge0: port 1(dummy0) entered listening state [ 1222.767655][T28014] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1222.772377][T28014] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #3: comm syz.6.7152: mark_inode_dirty error [ 1222.781448][T28014] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1222.792691][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1222.792710][ C0] EXT4-fs (loop6): initial error at time 3919537843: ext4_do_update_inode:5569: inode 3 [ 1222.792757][ C0] EXT4-fs (loop6): last error at time 3919537843: ext4_do_update_inode:5569: inode 3 [ 1222.838685][T28014] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.7152: corrupted inode contents [ 1222.860332][T28014] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1222.860597][T28014] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.7152: mark_inode_dirty error [ 1222.929041][T23952] lo speed is unknown, defaulting to 1000 [ 1222.939072][T28014] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1222.939433][T28014] Quota error (device loop6): write_blk: dquota write failed [ 1222.944342][T28006] gretap0: left allmulticast mode [ 1222.950410][T28014] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1222.958658][T28006] gretap0: left promiscuous mode [ 1222.964365][T28014] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7152: Failed to acquire dquot type 0 [ 1222.973514][T28006] Ÿë: port 1(gretap0) entered disabled state [ 1222.985316][T28014] loop6: lost filesystem error report for type 5 error -117 [ 1222.993913][T28014] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7152: corrupted inode contents [ 1223.024011][T28006] dummy0: left allmulticast mode [ 1223.032924][T28006] dummy0: left promiscuous mode [ 1223.038080][T28006] bridge0: port 1(dummy0) entered disabled state [ 1223.048756][T28006] bond14: (slave geneve3): Releasing backup interface [ 1223.126683][T28014] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1223.168135][T28014] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.7152: mark_inode_dirty error [ 1223.606450][T28033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7155'. [ 1223.618210][T28033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7155'. [ 1223.687828][T28014] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1223.716423][T28014] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7152: corrupted inode contents [ 1223.755045][T28014] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1223.755485][T28014] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.7152: mark_inode_dirty error [ 1223.808265][T28014] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1223.809116][T28014] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7152: corrupted inode contents [ 1223.840526][T28014] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1223.879164][T28040] netlink: 'syz.4.7156': attribute type 1 has an invalid length. [ 1223.924267][T28014] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1223.945840][T28014] loop6: lost filesystem error report for type 5 error -117 [ 1223.946155][T28014] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7152: corrupted inode contents [ 1223.966245][T21988] net_ratelimit: 14 callbacks suppressed [ 1223.966265][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1224.000945][T28014] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1224.001122][T28014] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.7152: mark_inode_dirty error [ 1224.027188][T28041] lo speed is unknown, defaulting to 1000 [ 1224.033543][T28041] xfrm0 speed is unknown, defaulting to 1000 [ 1224.043889][T28014] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1224.052810][T28014] loop6: lost filesystem error report for type 5 error -117 [ 1224.056329][T28040] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7156'. [ 1224.065733][T28014] EXT4-fs (loop6): 1 truncate cleaned up [ 1224.086885][T28014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1224.099710][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1224.107927][T28014] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1224.154765][T28041] lo speed is unknown, defaulting to 1000 [ 1224.253808][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1224.375489][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1224.492657][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1224.669799][T21988] bond7: (slave macvlan2): failed to get link speed/duplex [ 1224.792010][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1224.850150][ T30] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1224.892907][ T30] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 1224.909716][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1224.956327][T28056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1224.967521][T22515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.042636][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1225.171146][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1225.735015][T28063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7157'. [ 1225.937913][ T28] audit: type=1326 audit(3919537846.385:3406): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.4.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1225.962225][ T28] audit: type=1326 audit(3919537846.385:3407): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.4.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1226.001740][ T28] audit: type=1326 audit(3919537846.441:3408): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.4.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1226.025918][ T28] audit: type=1326 audit(3919537846.441:3409): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.4.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a89c629 code=0x7ffc0000 [ 1226.240947][T28084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7166'. [ 1226.251207][T28084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7166'. [ 1226.411202][T28090] xt_hashlimit: size too large, truncated to 1048576 [ 1228.527879][T28100] netlink: 'syz.6.7169': attribute type 1 has an invalid length. [ 1228.536228][T28100] netlink: 5 bytes leftover after parsing attributes in process `syz.6.7169'. [ 1228.558710][T28100] lo speed is unknown, defaulting to 1000 [ 1228.564965][T28100] xfrm0 speed is unknown, defaulting to 1000 [ 1228.644250][T28100] lo speed is unknown, defaulting to 1000 [ 1229.277397][T28121] loop6: detected capacity change from 0 to 1024 [ 1229.314580][T28121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.326732][T28121] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.346598][ T8092] net_ratelimit: 14 callbacks suppressed [ 1229.421869][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1229.455707][ T28] audit: type=1400 audit(3919537849.565:3410): avc: denied { rename } for pid=28120 comm="syz.6.7174" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1229.578324][ T30] bond7: (slave macvlan2): failed to get link speed/duplex [ 1229.860550][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1229.960785][T28135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7178'. [ 1230.311553][T22515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1230.324824][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1230.462862][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1230.656698][T28152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7181'. [ 1230.682721][ T8092] bond7: (slave macvlan2): failed to get link speed/duplex [ 1230.741804][T28153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7181'. [ 1230.890679][ T1668] bond7: (slave macvlan2): failed to get link speed/duplex [ 1231.079744][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1231.206376][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1231.334686][T21991] bond7: (slave macvlan2): failed to get link speed/duplex [ 1231.391633][ T28] audit: type=1326 audit(3919537851.482:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28160 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1231.441597][ T28] audit: type=1326 audit(3919537851.482:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28160 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdbd1a9c629 code=0x7ffc0000 [ 1231.495040][ T28] audit: type=1326 audit(3919537851.482:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28160 comm="syz.0.7183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1a9c629 code=0x0 [ 1233.019980][T28193] 9p: Bad value for 'rfdno' [ 1233.029688][T28193] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1233.146227][T28210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7193'. [ 1233.169753][T28210] macvlan0: entered promiscuous mode [ 1233.182904][T28210] macvlan0: entered allmulticast mode [ 1233.228605][T28210] veth0_virt_wifi: entered allmulticast mode [ 1233.247373][T28201] bridge_slave_1: left allmulticast mode [ 1233.258165][T28201] bridge_slave_1: left promiscuous mode [ 1233.268382][T28201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.370993][T28219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1233.450561][T28226] netlink: 'syz.1.7198': attribute type 27 has an invalid length. [ 1233.537292][T28226] vlan2: left promiscuous mode [ 1233.542131][T28226] bond5: left promiscuous mode [ 1233.546933][T28226] bridge5: left promiscuous mode [ 1233.594708][T28226] vlan2: left allmulticast mode [ 1233.599810][T28226] bond5: left allmulticast mode [ 1233.656602][T28226] bridge5: left allmulticast mode [ 1233.685796][T28226] ipip0: left promiscuous mode [ 1233.767167][T28226] bridge9: left promiscuous mode [ 1233.809262][T28226] bridge9: left allmulticast mode [ 1233.841743][T28226] bridge10: left promiscuous mode [ 1233.862467][T28226] bridge10: left allmulticast mode [ 1233.883744][T28226] bridge11: left promiscuous mode [ 1233.888921][T28226] bridge11: left allmulticast mode [ 1233.897503][T28226] bridge13: left promiscuous mode [ 1233.903149][T28226] bridge13: left allmulticast mode [ 1233.914431][T28226] bond9: left allmulticast mode [ 1233.991945][T28221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.147531][T18429] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.200744][T18429] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.209320][T18429] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.293775][T28245] lo speed is unknown, defaulting to 1000 [ 1234.299727][T18429] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.355092][T28245] xfrm0 speed is unknown, defaulting to 1000 [ 1234.746571][T28246] macvlan0: left allmulticast mode [ 1235.092711][T28246] lo speed is unknown, defaulting to 1000 [ 1235.098641][T28245] lo speed is unknown, defaulting to 1000 [ 1235.143445][T28246] xfrm0 speed is unknown, defaulting to 1000 [ 1235.847060][T28246] lo speed is unknown, defaulting to 1000 [ 1236.104510][ T28] audit: type=1400 audit(3919537855.888:3414): avc: denied { create } for pid=28276 comm="syz.1.7217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1236.125483][T28281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7209'. [ 1236.147527][T28278] loop6: detected capacity change from 0 to 2048 [ 1236.195623][T28286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7210'. [ 1236.225496][T26842] loop6: p1 p2 [ 1236.240861][T28278] loop6: p1 p2 [ 1236.250641][ T3000] loop6: p1 p2 [ 1237.773088][T28313] loop6: detected capacity change from 0 to 512 [ 1238.132065][T28313] EXT4-fs (loop6): 1 orphan inode deleted [ 1238.148736][T28313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1238.394159][ T28] audit: type=1326 audit(3919537858.030:3415): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28310 comm="syz.6.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1238.522699][ T28] audit: type=1326 audit(3919537858.049:3416): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28310 comm="syz.6.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1238.553700][ T28] audit: type=1326 audit(3919537858.058:3417): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28310 comm="syz.6.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1238.583921][ T28] audit: type=1326 audit(3919537858.133:3418): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28310 comm="syz.6.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1238.631348][ T28] audit: type=1326 audit(3919537858.133:3419): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28310 comm="syz.6.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b222c629 code=0x7ffc0000 [ 1238.928252][T28325] netlink: 'syz.0.7218': attribute type 27 has an invalid length. [ 1238.940338][T22515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.321425][T28336] loop6: detected capacity change from 0 to 512 [ 1239.409514][T28336] EXT4-fs (loop6): failed to initialize system zone (-117) [ 1239.467402][T28336] EXT4-fs (loop6): mount failed [ 1239.686389][ T6768] lo speed is unknown, defaulting to 1000 [ 1239.780728][T28334] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.815835][T28349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7219'. [ 1239.828824][T28330] syz.3.7220 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1239.865934][T28334] net_ratelimit: 14 callbacks suppressed [ 1239.865949][T28334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1239.887194][T28330] CPU: 1 UID: 0 PID: 28330 Comm: syz.3.7220 Tainted: G W syzkaller #0 PREEMPT(full) [ 1239.887251][T28330] Tainted: [W]=WARN [ 1239.887287][T28330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1239.887304][T28330] Call Trace: [ 1239.887360][T28330] [ 1239.887369][T28330] __dump_stack+0x1d/0x30 [ 1239.887481][T28330] dump_stack_lvl+0x95/0xd0 [ 1239.887558][T28330] dump_stack+0x15/0x1b [ 1239.887590][T28330] dump_header+0x80/0x240 [ 1239.887621][T28330] oom_kill_process+0x295/0x350 [ 1239.887645][T28330] out_of_memory+0x97d/0xb80 [ 1239.887724][T28330] try_charge_memcg+0x62e/0xa10 [ 1239.887775][T28330] obj_cgroup_charge_pages+0x23/0xc0 [ 1239.887806][T28330] __memcg_kmem_charge_page+0x9e/0x170 [ 1239.887915][T28330] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1239.887959][T28330] alloc_pages_mpol+0xb3/0x260 [ 1239.887995][T28330] alloc_pages_noprof+0x8f/0x130 [ 1239.888102][T28330] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1239.888211][T28330] __kvmalloc_node_noprof+0x3d4/0x650 [ 1239.888243][T28330] ? futex_hash_allocate+0x190/0x9d0 [ 1239.888281][T28330] ? futex_hash_allocate+0x190/0x9d0 [ 1239.888343][T28330] futex_hash_allocate+0x190/0x9d0 [ 1239.888379][T28330] ? cap_task_prctl+0x13f/0x6e0 [ 1239.888454][T28330] futex_hash_prctl+0xd8/0xf0 [ 1239.888493][T28330] __se_sys_prctl+0xa3d/0x13f0 [ 1239.888582][T28330] __x64_sys_prctl+0x67/0x80 [ 1239.888614][T28330] x64_sys_call+0x2533/0x3020 [ 1239.888728][T28330] do_syscall_64+0x12c/0x370 [ 1239.888778][T28330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.888807][T28330] RIP: 0033:0x7fe4e169c629 [ 1239.888827][T28330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.888911][T28330] RSP: 002b:00007fe4e00ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1239.888939][T28330] RAX: ffffffffffffffda RBX: 00007fe4e1915fa0 RCX: 00007fe4e169c629 [ 1239.888971][T28330] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1239.888988][T28330] RBP: 00007fe4e1732b39 R08: 0000000000000000 R09: 0000000000000000 [ 1239.889005][T28330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1239.889022][T28330] R13: 00007fe4e1916038 R14: 00007fe4e1915fa0 R15: 00007ffcb4e72b38 [ 1239.889102][T28330] [ 1239.889175][T28330] memory: usage 307200kB, limit 307200kB, failcnt 17702 [ 1239.993815][T28337] gretap0: left allmulticast mode [ 1240.030117][T28330] memory+swap: usage 375476kB, limit 9007199254740988kB, failcnt 0 [ 1240.143171][T28357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7223'. [ 1240.153304][T28337] gretap0: left promiscuous mode [ 1240.158854][T28337] Ÿë: port 1(gretap0) entered disabled state [ 1240.165339][T28330] kmem: usage 276424kB, limit 9007199254740988kB, failcnt 0 [ 1240.172696][T28330] Memory cgroup stats for /syz3: [ 1240.173030][T28330] cache 4268032 [ 1240.181845][T28330] rss 2400256 [ 1240.185202][T28330] shmem 4268032 [ 1240.193659][T28337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1240.213652][T28330] mapped_file 413696 [ 1240.217582][T28330] dirty 0 [ 1240.221211][T28330] writeback 0 [ 1240.224529][T28330] workingset_refault_anon 734 [ 1240.229999][T28333] lo speed is unknown, defaulting to 1000 [ 1240.236974][T28330] workingset_refault_file 47969 [ 1240.242240][T28330] swap 69914624 [ 1240.248924][T28354] lo speed is unknown, defaulting to 1000 [ 1240.248902][T28330] swapcached 97964032 [ 1240.249154][T28333] xfrm0 speed is unknown, defaulting to 1000 [ 1240.279649][T28330] pgpgin 1498550 [ 1240.293380][T28330] pgpgout 1496899 [ 1240.297212][T28330] pgfault 1266894 [ 1240.301114][T28330] pgmajfault 205 [ 1240.311854][T28330] inactive_anon 1114112 [ 1240.324125][T28330] active_anon 1454080 [ 1240.331513][T28360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7224'. [ 1240.343318][T28333] lo speed is unknown, defaulting to 1000 [ 1240.349329][T28330] inactive_file 0 [ 1240.357803][T28330] active_file 0 [ 1240.361357][T28330] unevictable 4194304 [ 1240.376376][T28330] hierarchical_memory_limit 314572800 [ 1240.387108][T28330] hierarchical_memsw_limit 9223372036854771712 [ 1240.395340][T28330] total_cache 4268032 [ 1240.399457][T28330] total_rss 2400256 [ 1240.403575][T28330] total_shmem 4268032 [ 1240.411189][T28330] total_mapped_file 413696 [ 1240.415754][T28330] total_dirty 0 [ 1240.419237][T28330] total_writeback 0 [ 1240.423863][T28330] total_workingset_refault_anon 734 [ 1240.459354][T28330] total_workingset_refault_file 47969 [ 1240.465343][T28330] total_swap 69914624 [ 1240.469390][T28330] total_swapcached 97964032 [ 1240.473913][T28330] total_pgpgin 1498550 [ 1240.478550][T28330] total_pgpgout 1496899 [ 1240.482887][T28330] total_pgfault 1266894 [ 1240.495588][T28330] total_pgmajfault 205 [ 1240.507343][T28365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7236'. [ 1240.516744][T28330] total_inactive_anon 1114112 [ 1240.521881][T28330] total_active_anon 1454080 [ 1240.526501][T28330] total_inactive_file 0 [ 1240.531051][T28330] total_active_file 0 [ 1240.535075][T28330] total_unevictable 4194304 [ 1240.539896][T28330] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7220,pid=28329,uid=0 [ 1240.577302][T28366] loop6: detected capacity change from 0 to 2048 [ 1240.584229][T28366] EXT4-fs: Ignoring removed orlov option [ 1240.600820][T28366] EXT4-fs: Ignoring removed oldalloc option [ 1240.614686][T28330] Memory cgroup out of memory: Killed process 28330 (syz.3.7220) total-vm:94292kB, anon-rss:1424kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1240.640451][T28366] EXT4-fs (loop6): filesystem too large to mount safely on this system [ 1240.737882][T28363] 9p: Bad value for 'rfdno' [ 1240.769844][T28363] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1240.954074][T28378] ================================================================== [ 1240.962219][T28378] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 1240.969995][T28378] [ 1240.972345][T28378] write to 0xffff888237d26668 of 1 bytes by task 28370 on cpu 1: [ 1240.980095][T28378] folios_put_refs+0x285/0x2d0 [ 1240.984895][T28378] folio_batch_move_lru+0x247/0x270 [ 1240.990135][T28378] folio_add_lru+0x149/0x1e0 [ 1240.994764][T28378] shmem_get_folio_gfp+0x7b0/0xd60 [ 1240.999924][T28378] shmem_fault+0xf6/0x250 [ 1241.004313][T28378] __do_fault+0xbc/0x200 [ 1241.008638][T28378] handle_mm_fault+0x11d7/0x3020 [ 1241.013634][T28378] __get_user_pages+0x1023/0x1ea0 [ 1241.018704][T28378] __mm_populate+0x242/0x390 [ 1241.023349][T28378] vm_mmap_pgoff+0x23b/0x2d0 [ 1241.027971][T28378] ksys_mmap_pgoff+0xc1/0x310 [ 1241.032710][T28378] x64_sys_call+0x14df/0x3020 [ 1241.037460][T28378] do_syscall_64+0x12c/0x370 [ 1241.042116][T28378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.048043][T28378] [ 1241.050385][T28378] read to 0xffff888237d26668 of 1 bytes by task 28378 on cpu 0: [ 1241.058038][T28378] __lru_add_drain_all+0x17e/0x450 [ 1241.063195][T28378] lru_cache_disable+0x1f/0x30 [ 1241.067996][T28378] __se_sys_mbind+0x6cb/0xde0 [ 1241.072704][T28378] __x64_sys_mbind+0x78/0x90 [ 1241.077318][T28378] x64_sys_call+0x2b72/0x3020 [ 1241.082031][T28378] do_syscall_64+0x12c/0x370 [ 1241.086679][T28378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.092604][T28378] [ 1241.094940][T28378] value changed: 0x01 -> 0x00 [ 1241.099631][T28378] [ 1241.101972][T28378] Reported by Kernel Concurrency Sanitizer on: [ 1241.108139][T28378] CPU: 0 UID: 0 PID: 28378 Comm: syz.4.7229 Tainted: G W syzkaller #0 PREEMPT(full) [ 1241.119103][T28378] Tainted: [W]=WARN [ 1241.122929][T28378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1241.133093][T28378] ==================================================================