last executing test programs: 6.804537275s ago: executing program 2 (id=537): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff7}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x8b\x00') r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYRESOCT=r0], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='selinux_audited\x00', r3, 0x0, 0x100000001}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ipv6={@local, @loopback, [0xffffffff, 0xffffffff, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x3a, 0x5, 0x1, 0x2}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc004, &(0x7f0000000300)={[{@lazytime}]}, 0x1, 0x509, &(0x7f0000001780)="$eJzs3U9sI1cZAPBvJn+cTdMmhR4AFbqUQkGrtRNvG1W9UE4VQpUQPXLYhsSJothxFDulCXvIHrkjUYkTnDhzQOKA1BN3JA5w41IOSAVWoAaJg5HH49T5442VJvY2/v2kkd/My8z3XkbznveLdl4AY+t2RBxGxHREvBMR8/nxJN/ijc7W/rmPHz1YPXr0YDWJVuvtfyZZfftY9JzT9lR+zZmI+MGbET9KTgX9U0Rj/2BrpVqt7OaHSs3aTqmxf3B3s7ayUdmobJfLy0vLi6/de7V8ZX19ofabj25FxO9/9+UP/3j4rZ+0mzWX1/X24yp1uj51HKdtMiK+dx3BRmAi78/0ZU6+1ElcpTQiPhcRL2bP/3xMZHfzpJO36dtDbB0AcB1arflozffuAwA3XZrlwJK0mOcC5iJNi8VODu+5mE2r9Ubzznp9b3utkytbiKl0fbNaWcxzhQsxlaxvTlaWsnJ3v1opn9q/FxHPRsTPCrey/eJqvbo2yi8+ADDGnjo1//+n0Jn/AYAbbuaTYmGU7QAAhmdm1A0AAIbO/A8A48f8DwDjx/wPAOPH/A8A48f8DwBj5ftvvdXeWkf5+6/X3t3f26q/e3et0tgq1vZWi6v13Z3iRr2+kb2zp3bR9ar1+s7SK7H3XqlZaTRLjf2D+7X63nbzfvZe7/uVqaH0CgB4nGdf+OAvSUQcvn4r26Lnff8XztXPX3frgOuUjroBwMhMjLoBwMicXe0LGBfy8UDPEr0Pew7PnCmc9v5Al0+tGwpPnpe/+Cny/8Bnmvw/jK/L5f99l4ebQP4fxlerlVjzHwDGjBw/kFxQ3/v3/8VWz85gf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAG2ku25K0mK8FPhdpWixGPB0RCzGVrG9WK4sR8UxE/LkwVWjvL0WEdYMA4LMs/XuSr//18vxLc6drpwv/LWSfEfHjX7z98/dWms3dpYjp5F/Hx5vv58fLo2g/AHCR7jzdnce7Pn70YLW7DbM9H32ns7hoO+5RvnVqJmMy+5zJcg2z/07y/Y7295WJK4h/+DAivnBe/5MsN7KQr3x6On479tNDjZ+eiJ9mdZ3P9u/i81fQFhg3H7THnzfOe/7SuJ19nv/8z2Qj1KfXHf+Ozox/6fH4N9Fn/Ls9aIxX/vDdMwdb8526hxFfmow46l68Z/zpxk/6xH9pwPh/ff4rL/ara/3yeBg/1f/kRKxSs7ZTauwf3N2srWxUNirb5fLy0vLia/deLZeyHHWpm6k+6x+v33mmX/x2/2fjvN9/kt/5/v3/+oD9/9X/3vnhVx8T/5tfO//+P/eY+O058RsDxl+Z/e1Mv7p2/LU+/b/o/t8ZMP6HfztYG/BHAYAhaOwfbK1Uq5Xd6y6klz09+2duRAx4VhJxOITudAqFX//0zWHFusZCPBnNUHiSCqMemYDr9slDP+qWAAAAAAAAAAAAAAAA/QzjvxONuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//6/izpQ=") fallocate(0xffffffffffffffff, 0x1, 0x8a5, 0x1001f0) recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00'}) socket$netlink(0x10, 0x3, 0x0) 5.667385993s ago: executing program 2 (id=543): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x4]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d13154"], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x2) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='[\\)[*!}\x00', 0xfffffffffffffffe) r8 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="580020e745a912fe05b95815235436e2f40a0000", @ANYRES16=r8, @ANYBLOB="01002abd7000fcd3df250100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004100}, 0x24040840) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x63, 0x6, 0x50704, 0x1, 0x3, '\x00', 0x0, r3, 0x5, 0x0, 0x0, 0x5, @void, @value, @value=r4}, 0x50) 5.127597976s ago: executing program 2 (id=547): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendfile(r4, r4, 0x0, 0x40000f63c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c40002000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082cbd7000fcdbdf250800000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000001c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="08000000000000000000000007020000f8ffffffb7030000083a2600b704800000000000050000000100"/52], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r10}, 0x10) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 4.59798305s ago: executing program 1 (id=560): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff7}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x8b\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000100)=0x5, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='selinux_audited\x00', r2, 0x0, 0x100000001}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ipv6={@local, @loopback, [0xffffffff, 0xffffffff, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x3a, 0x5, 0x1, 0x2}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc004, &(0x7f0000000300)={[{@lazytime}]}, 0x1, 0x509, &(0x7f0000001780)="$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") fallocate(0xffffffffffffffff, 0x1, 0x8a5, 0x1001f0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00'}) socket$netlink(0x10, 0x3, 0x0) 4.593403199s ago: executing program 2 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a00", @ANYRES32=r5], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c000000180001000000000a001400fe04ff0600000000"], 0x1c}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) write$selinux_load(r10, &(0x7f0000000000)=ANY=[], 0x44f0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) open$dir(0x0, 0x5c3400, 0x1c) 4.278193891s ago: executing program 1 (id=551): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mq_open(&(0x7f0000000000)='kfree\x00', 0x40, 0x11, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xe83a}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x555) r6 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') pread64(r8, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000040)={r7}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e3, &(0x7f0000000180)={r7, r10}) 3.619314136s ago: executing program 2 (id=553): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r6 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r7, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r8 = inotify_init() inotify_add_watch(r8, &(0x7f00000005c0)='./file0\x00', 0x44000c93) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) 3.614512856s ago: executing program 3 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000140)={'vlan0\x00', 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000a00)='./file0\x00', 0x1008908, &(0x7f0000001540)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c6c69657488fadba46c6ffd2e6285b66e4870784b8517df1de60af401dc8d60a9c0d00c518912c6061e4bb15055edd399de51ab7e35f05a9e026ea4b86750c1ef0750c3ffc60f5e472f86e402213b5ce15ebd7ae1efff224b85357df7292518ab814916bc4ebae6430d62075630e4ad0000000000000000057bd795f422bee333252ca9d3e6fa1161fa13f3371b024257f9fce08dd2668cd23bb9a57a4eca6705ac15059090063b"], 0x1, 0x9cf, &(0x7f0000000a40)="$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") setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44001}, 0x20004800) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2404c140) write$cgroup_subtree(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r6], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1000000000000}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b004a1f000000000000000007009457f884a8dab90400010001000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="02000000010000000400000000000000000000000010000000000000"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000080)="ad64ad985fc86a0ed2d6fff67b150fa7b9b8be4da2faec05d70bc6b9aaeaf200b42fe264973a23bd469ef9c917c085", &(0x7f00000000c0)=""/39, &(0x7f0000000100)="2bc3cf2f66ebc7dd363c228a4f4486cda3d22977ce2481b7ca092de985de2d96a8397ea7f0647ce5c2c2fc12321bdd6600b0a3d1361fa21d71b3f73fefc8896f97abab59da7f949c0ca8510a809cd6c675b6c01471fd", &(0x7f0000000300)="54690d1cf31252273d07f2e00c0da1f3ce535420df86c72fe8f49d5f4aa1a59f136f108172bfc69452ef78d049f867b146b11c47238aac3d8308932deac05a8829306ab8e78ced900e7581db840444b9d6485e1ed91a4512260063049af24cd1040d6dfdf0f70b3381cc09bec98141e873117fc786a10ad47f913bb99e832905c9c8af", 0x8, r8, 0x4}, 0x38) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 3.405549697s ago: executing program 1 (id=554): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000003c0)=""/46, 0x2e}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) r8 = socket(0x10, 0x80003, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r9 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r9, 0x400, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22103, 0x6) fcntl$setlease(r9, 0x400, 0x1) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4a, &(0x7f0000000080)=0x15af, 0x4) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pidfd_send_signal(0xffffffffffffffff, 0x34, &(0x7f0000000300)={0x2e, 0x5, 0x8}, 0x0) 3.04781181s ago: executing program 4 (id=556): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative'}}}]}) ioctl$EVIOCGREP(r2, 0x80084524, 0x0) close(r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x80}, @in6={0xa, 0x4e23, 0x8, @mcast1, 0x9d}], 0x38) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7) fchown(r3, 0x0, 0xee01) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000"], 0x50) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:sendmail_exec_t:s0\x00', 0x25, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket(0x28, 0x5, 0x40005) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "2d1b228ddbcbeb3b", "125c2b383f5cae83637e9674608276919c8da6d9bb71d92f31fbb014711d772b", "f47262bb", "344faf4b67056082"}, 0x38) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r6, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r8, 0x0, 0x11, 0x801afd) 3.04704081s ago: executing program 1 (id=570): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80) syz_open_dev$usbmon(&(0x7f0000000f40), 0x795, 0x101800) close(r1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sync() sync() getrusage(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sync() sync() sync() sync() sync() getrusage(0x0, &(0x7f0000000400)) r3 = fsmount(r0, 0x0, 0x86) fchdir(r3) r4 = open(&(0x7f0000000200)='./file2\x00', 0x48800, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff5e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 2.676168143s ago: executing program 3 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x4, 0x4002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) r6 = dup2(r4, r5) fcntl$setown(r4, 0x8, r3) r7 = socket$inet(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x20000000) tkill(r3, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2c, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x18) futimesat(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES32=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r11) 2.553722083s ago: executing program 1 (id=559): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x27, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000980)={0x2c, &(0x7f00000007c0)={0x20, 0x7, 0xc9, {0xc9, 0x21, "bee8a7f98bc4da45e92e98d66528de67de73216e6d1a74e055354107262ea3f0ed4cb583f16efaba343fd7da3360e178ba34a32559ffe79f697c94300124956d1a6318fffda67f3ecd54b116f92b34efb6b42aee3d2fc670ed5fb07c9e73c6be0a03e722dba55dc48472b4014e22a34837b4b730173f384d5f74be50e29ddb70d87a99da0351d0e1d60c51af7d5b0af27f16dd097e74238cb93c53cc96a6da4e76bb46d3866f4e5d1865f92ff0afcf529d7581247f5ef6c9ded7492c87a675f67bfee33596fb00"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f00000008c0)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x8, 0xbc, "892e45f8", "73d8871f"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0x0, 0x2, 0xc, 0x9, 0x1ff}}}, &(0x7f0000000e00)={0x84, &(0x7f00000009c0)={0x40, 0xf, 0x75, "389719a7dc82e4dbc6aa99f7f959828aa8d3d477ff8c02e62ef5292e0714f88bb3ef2254bc9827971c019f68e93c459033637c0ea1a492b79542ceed7394b92e483d5fac108fd6ad04ae24fbd8d9524c70762e368001a9f38fb5df95d1652c3cfb80cd921dac6a3ac674ce93e522871fccb0b6333a"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000f80)=ANY=[@ANYBLOB="2000040000080021620a03ab7f75f4114a67911199afc05cf0987e15e9f82e620f7b4d8a60c8d78bd2237832698855402340396ae759bf433e9eb1ee69d41af5812298724d5855ae309e70df5b86505f7472b577527afa09f2db1affd32a7a263656"], &(0x7f0000000b40)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000b80)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "3904"}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000c40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, "1859"}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000000d40)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0x47}, &(0x7f0000000dc0)={0x40, 0x21, 0x1, 0x7}}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x19c, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x64, 0x14, {{'cmac(aes)\x00'}, 0xc0, 0x0, "e80c857b65087dea03da4c290569c738c39dac5defb806ba"}}]}, 0x19c}}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r9) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) fchdir(r8) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x440, 0x12, 0x100, 0x70bd27, 0x25dfdbff, {0x2c, 0xf8, 0x95, 0x6, {0x4e22, 0x4e24, [0xf44, 0x9, 0xe7a3, 0x9c], [0x0, 0xa43, 0x8, 0x3], 0x0, [0x600, 0x9e62]}, 0xfffffff2, 0x6cd313c8}, [@INET_DIAG_REQ_BYTECODE={0x90, 0x1, "917d1c866a79b07a35cf0e32175e070ced9a3e8b5a03d8fdf2522dd8257263bb29694633acf1051837c49af63d78d7e6dd6a78ed90d09ed3ee6337a3aa03f80596afe6485eebf9bbb2694952eaf780c2aa182183bcbc9dd533dfef23699927c387d7d79ab6f4657ff840623cde5a9159f6effdee31ddd563d339245808ce5638dcf152b4ca09458b1d44036e"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "d7beedbffaf22054f36dd4cd6b07211de9c1b966127249acaf9b45722699928d3a553d8f0606eae98ec65e3ff6f6c93857e725fef5687057d751b2ad95eb2d198ef84f6bc52a305d903bba04301661527cd51f9caf1d2689dd77ac2f0e41b88923c7feac19d252a6d11ec8f343b1eafaba7d67e9c9d02bf2505729d7710aed8f06f17f85c03d5ab147a65e2a1d8ef4692eac0da6af72a21cba5be66245ef"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "98c52f10edbe9ee9eca526f80856d8eeb254968fcc873687f9ba6bb6c225ef932aa24996778030b43a3d021d951160f3e1c02261e4609bba9707b76733ca157d0e8e900544f95f9112919ee9145d89ae445d0733ce541f87eb84e1e23ddcbc399569a4ba5bec3c81ffaf16fcc488bea9e1012ee0db908307d50b6b140c01e44dab6e29a817871686435313e1efa45b3138000476563aad4a557ef7ed3d715952684571565de6bf6515598fdf7674abf04183ac487f737fd13cc68a463122bd004a4fed30e6ad46db2ff7cd58d782e54388a595f51552320bd44e11"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "742055c6b032f3608b713c1488f730ad519f36610bbee249e95b271357d8cedcf056bb31d59d16489e41f22747d5c9b969701c469a863c0f3bfd6569cc732578713265997c2d72148b37873c2d9f9f0d607258c98fdf38c028d740a8f01438f0d3124f390ad3fe76c071fe9adfbc1a9645532afc82713777effb17d7a42e278132c13ed67958178c8134c72a9bc8b6f447d3ed0c46e3bd44a9c8388081"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "034429abca5de342aec3f54acca4af8be4f5e1a7df394311cf20823094"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "0482327049a1087b"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "0870103714f7679d6334a6e261d8a0b55441ead85de47307eb88cf7393fc9dcb2b206d74c18508ae1511eb4a728e24bb749229019e8669ec96c552650ecbf8a7795ec8de8da4ff3464f3bd5bddae2f711c10eff9ab3cd8fc33f488ec037a3432de05ab58002865ba25f4ef9b0c0f423b0f8ec9eef935b8e2d0b63df6a36483bcc3549e7c021b3d78bcb25fdd6811baff27b9fdc6b49105ecb596c3ab93f0cdaa206c19ee2418f07896ba54dfc65641e99b6b5edc9ee8046eb093e07c18c28dc50c0152d1"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "f3593edd4b6e3dfa1efb46c75e49e074251ca175c57e9effc1b281c4160dc34004d95da9f3854486f3397e23576e58"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "7deee6f4886314ad26"}]}, 0x440}}, 0x40011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r13 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r13, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_open_pts(0xffffffffffffffff, 0x1) 2.520901733s ago: executing program 4 (id=561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7d95, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) listen(r5, 0xfff) getpeername(r5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) creat(&(0x7f0000000300)='./cgroup\x00', 0x59) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x228000, 0x1000, 0x0, 0x4}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2.468777693s ago: executing program 0 (id=562): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c"], 0x65) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r11 = socket(0x40000000015, 0x805, 0x0) getsockopt(r11, 0x114, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x88) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 2.429993694s ago: executing program 2 (id=563): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r2 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$eJzs3c1vVF8ZAOD33nZoKYUBZaFGBRFFQ5h+AA1hI2w0hpCYEOPCBdR2aJrOME2nRFpJbJfuSSRxpX+COxcmrFy4c6c7N7gwQSUSauJizL0zbQf6Kf2YXzvPk9zee84Z5j1nhnPO3APTE0DXuhgRSxFxIiIeRUSxlZ+0jrjTPLLHvX/7fGLl7fOJJBqNB/9M8vIsL9r+TOZU6zn7fx4R34v4SbIxbn1hcWa8UinPtdJD89XZofrC4rXptJUzOjYyNnzr+s3RfWvrhepv33x3+t4Pf/+7r7z+09K3f5ZVa/AXp/Oy9nbsp2bTCzHYltcbEfcOIliH9Lb+/nD0ZL3tcxFxKe//xejJ300A4DhrNIrRKLanAYDjLrv/H4wkLbXWAgYjTUul5hre+RhIK7X6/NVi7emTycjXsM5GIX08XSkPt9YKz0YhydIj+fV6evSD9Ivy9Yg4FxEv+k7m5aWJWmWykx98AKCLnfpo/n/X15z/t/fucCoHAByc/k5XAAA4dOZ/AOg+5n8A6D7/x/zv24EAcEy4/weA7mP+B4Dus+P8v3w49QAADsUP7t/PjsZK8/dfr/6m7muT5fpMqfp0ojRRm5stTdVqU5VyaaLR2On5KrXa7MiNtWR9YfFhtfb0yfzD6er4VPlhuXCQjQEAduXchVd/ySb9pdsn8yPa9nIwV8Pxlna6AkDH9HS6AkDH+D4PdK9d3ONbBoBjbpMtej+w5X8RemnzVziqrnzR+j90q72s/1s7gKPt09b/v7Pv9QAOnzkculejkdjzHwC6jDV+YE///g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdajA/krSU7wW+lP1MS6WI0xFxNgrJ4+lKeTgizkTEn/sKfVl6pNOVBgD2KP170tr/60rx8mB7STEiTiT/6cuuT0TET3/14JfPxufn50ay/H+t5c+/bOUnjU41AgBYdWdjVj5Pj7bObTfy798+n1g9DrOKb+42NxfN4q60jmZJb/Tm5/4oRMTAv5NWuin7vNKzD/GXliPiC+vtf9YWYTBfA2nufPpx/Cz26QOIv/76fxw//SB+mpdl50L+Wnx+H+oC3ebV3eY42ep7WRdr9b80Lubnzft/fz5C7V02/mVjycqG8S9dG/96NsRP8j5/cS29fU3e3PjD9zdkNorNsuWIL/VuFj9Zi59sPv4WLu8ufPz1y1+9tFVZ49cRVzZt/+qO1NV8mB2ar84O1RcWr01Xx6fKU+Uno6NjI2PDt67fHB3K16ibP/+4WYx/3L56ZsvXZjliYIv4/du3P76xfbPX/Oa/j378tW3if+vrm7//57eJn82J39xl/PGBO1tu353Fn1xtf6G9ZMf3P67uFDhtnl7/bXFyl1UFAA5BfWFxZrxSKc/tcJF91tzpMS6O5kUsRezXE+aLEhHxWWhXl1ykse1jfvSJPbfTIxNw0NY7fadrAgAAAAAAAAAAAAAAbKW+sDjTd8Df1up0GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+/hcAAP//G4rEcQ==") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) shmdt(r2) 2.367082594s ago: executing program 4 (id=567): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=@newtaction={0xe68, 0x30, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffc, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x7, 0x0, 0x0, 0x8}, {0x0, 0x10, 0x0, 0x25}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4}, {}, {0x400, 0x0, 0x0, 0xa902}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x400, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x6, 0x0, 0xfffffffe}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x9, 0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5155}, {}, {0x6e5000cb, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x3, 0x2}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff2ff1}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x80}, {0xfffffffd}, {0x0, 0xfe}, {0x4, 0x0, 0x0, 0xfffffffe}, {}, {0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x100, 0xfffff7ff}, {0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {0x400, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {0x0, 0xfffffffe, 0x0, 0xb5}, {0x0, 0x2}, {0x0, 0x0, 0x81, 0x0, 0xfffffe00, 0x6a76d8f4}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x100000, 0x0, 0x8}, {0x9}, {0x9}, {0x0, 0x7fffffff}, {0x3}, {0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {0x0, 0x0, 0x1}, {0x0, 0xdd86}, {0xfffffffd}, {0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xf8, 0x80000000}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffe00}, {0x0, 0x80000}, {0x122}, {0x0, 0x8}, {0x80000000, 0x3, 0x6a}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x200}], [{}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {0x2}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0xe}, {0x4}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006b0000006b000000080000000f0000000000000803000000000000000100000d000000000000000001000000051000000000000700000000050000000200008f0300000005000000090000020400000004000000060000001eb4000055adec14be287b2edd46df80000000000000000300000000020000000200000007000000d920a61c0cadf0bd84c20f8b38cf6a306600878cc9cf4da36538402f46b9fca132f8690447183be3dc9c25ac"], &(0x7f0000000580)=""/141, 0x8c, 0x8d, 0x0, 0x200, 0x10000, @value=r1}, 0x28) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000825bd7000fedbdf2501000000000000000b000000000c001473797a3000001000ebc615255a0408568338c20cacc3b3d917805e60159b53bf812daf1f8f51c92465809500ceaf725103a6054e050347a996d88fa508f941aa22d46a77270dfcd079fbb13cf552582e9dbd13a3877ce1894d6b003adfe6198a9712a0851f057629be749dc8f37a"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40040) write$binfmt_script(r3, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r6) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0xc6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x3, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x8f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000540)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x1, '\x00', r9, 0x0, r2, 0x8, &(0x7f0000000740)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xd, 0x80000001, 0x531d11c5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x5, 0x1, 0x2, 0x3}, {0x5, 0x1, 0xa, 0x1}, {0x4, 0x5, 0x10, 0xb}, {0x2, 0x3, 0x6, 0x3}, {0x1, 0x3, 0x1, 0x3}], 0x10, 0xfffff5f6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="91100c000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.998400487s ago: executing program 0 (id=568): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\x00\x00\b\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000060000000000", @ANYBLOB, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$BLKGETZONESZ(0xffffffffffffffff, 0x80041284, &(0x7f0000000340)=0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x10144}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}, @in6={0xa, 0x4e21, 0x3400000, @dev={0xfe, 0x80, '\x00', 0x10}, 0xfffffffe}], 0x38) sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000040)=[{0x3ff, 0x3, 0x0, 0x9}, {0x401, 0x66, 0xe, 0x8}, {0xbec, 0x5, 0x8, 0xa}, {0x1, 0x3, 0x9, 0x80000000}, {0x7, 0x9, 0x77, 0x2}, {0x8, 0x1, 0xd}]}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f00000004c0)=@newneigh={0x48, 0x1c, 0x200, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NDA_MASTER={0x8, 0x9, 0x716c}, @NDA_LINK_NETNSID={0x8, 0xa, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.923749397s ago: executing program 4 (id=569): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mq_open(&(0x7f0000000000)='kfree\x00', 0x40, 0x11, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xe83a}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x555) r6 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') pread64(r8, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000040)={r7}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e3, &(0x7f0000000180)={r7, r10}) 1.886987167s ago: executing program 1 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018"], 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a9d0001050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$unix(0x1, 0x1, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0xfffffffffdfffff7}, 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79ab, 0x2, 0x2, 0x1df}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$evdev(r8, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="05072bbd7000ffdbdf2501"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000240)={0x1d, r12}, 0x10) 1.842915128s ago: executing program 3 (id=572): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff7}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x8b\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000100)=0x5, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='selinux_audited\x00', r2, 0x0, 0x100000001}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ipv6={@local, @loopback, [0xffffffff, 0xffffffff, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x3a, 0x5, 0x1, 0x2}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc004, &(0x7f0000000300)={[{@lazytime}]}, 0x1, 0x509, &(0x7f0000001780)="$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") fallocate(0xffffffffffffffff, 0x1, 0x8a5, 0x1001f0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00'}) socket$netlink(0x10, 0x3, 0x0) 1.49504678s ago: executing program 0 (id=573): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2014c00, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0x1, 0x4ec, &(0x7f0000001a00)="$eJzs3VFrHFsdAPD/TLK3aZvr5qLIteC9FxtJL9rd5MZ7G0RqBdGnglrfY0w2IWSTDdlNbULRFD+AIKKCTz75IvgBBOlHEKGg76JFEW31wQftyM5ObNPuJkuTZnXz+8HpnDNndv7nTLNnd3YOMwGcWe9ExI2IGImIdyOiXKxPizRfpPZ2jx/dXWynJLLs1l+TSIp1+/tql0cj4mJE7EXEWER87csR30xejNvc2V1bqNdrW0W52lrfrDZ3dq+uri+s1FZqG7OzMx/MXZt7f246Kxyrn5ci4voXH/7wez/70vVfffpbv5//85Vvt5v1uY922h0Ri8cK0ENn36X8WOxrH6OtVxFsAEaK/pQG3RAAAPoyGRGXI+IT+ff/cozk3+YAAACAYZJ9fjz+lURkAAAAwNBKI2I8krRSzPcdjzStVDpzeD8SF9J6o9n61HJje2OpXRcxEaV0ebVemy7mCk9EKWmXZ/L80/J7z5VnI+KNiPhB+Xxeriw26kuD/vEDAAAAzoiLbx88//9HOc3zAAAAwJCZ6FkAAAAAhoVTfgAAABh+zv8BAABgqH3l5s12yvaf4710e2d7rXH76lKtuVZZ316sLDa2NisrjcZKfs++9aP2V280Nj8TG9t3qq1as1Vt7uzOrze2N1rzqwcegQ0AAACcojfevv+7JCL2Pns+T1HcBxDggD8OugHASRoZdAOAgRkddAOAgSkduYURAoZdckR9z8k7vz75tgAAAK/G1MdevP7/WlF39G8DwP8zc30A4OxxdQ/OrpIZgHDmTXYW53rVj0WPSQB9X//PspdqGAAAcGLG85SkleJa4HikaaUS8Xr+WIBSsrxar01HxIci4rfl0rl2eSZ/ZXLknGEAAAAAAAAAAAAAAAAAAAAAAAAAoCPLksgAAACAoRaR/inJ7+YfMVWeHH/+94HXkn+W42FR+MmtH91ZaLW2Ztrr/1bO6yOi9eNi/XuZRwIAAADA/4DOeXqxnBl0awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNo8f3V3cT6cZ9y9fiIiJbvFHYyxfjkUpIi78PYnRZ16XRMTICcTfuxcRb3aLn8STLMsmilZ0i3/+FcefyA9N9/hpRFw8gfhwlt1vjz83ur3/0ngnX3Z//40W6bh6j3/pf8e/kR7jz+t9xrj04BfVnvHvRVwa7T7+7MdPesS/3Gf8b3x9d7dXXfbTiKmunz/JgVjV1vpmtbmze3V1fWGltlLbmJ2d+WDu2tz7c9PV5dV6rfi3a4zvf/yXTw7r/4Ue8SeO6P9kn/3/94M7jz7cyZa6xb9yufvn75s94qfFZ98ni3y7fmo/v9fJP+utn//mrcP6v9Sj/0f9/1/ps//vfvW7f+hzUwDgFDR3dtcW6vXa1iGZsT62kZE5Tib7Tufv8Xj76fny9OV2mA36sLx8JuKY++kxYJw7zdEJAAA4SU+/9A+6JQAAAAAAAAAAAAAAAAAAAHB2ncbdyJ6PuTeYrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOo/AQAA//+KZt0m") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x20000091) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r4, 0x1) r5 = socket$kcm(0xa, 0x3, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000b00)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x73}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000200)={[{@test_dummy_encryption_v1}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@orlov}, {@data_ordered, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") chdir(&(0x7f0000000040)='./file0\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x48) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') keyctl$unlink(0x9, r4, r4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1040240}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226397000fbdbdf2503b822280800070005000000240003000000000000000000ddffffff00000000000000000000000000000000e7a7217e0510550000000014000000000000ff0024000300a05ca84f6c9c8e3853e2fd7a080000000fa152600cb078fbeb4300"/123], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x800) 1.107075743s ago: executing program 0 (id=574): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="bcdfc45dd30325c315223f92e8f1a3246939bb7830b83eb36137b11cffe4a29d282859bf", 0x24}, {&(0x7f0000000580)="0a9ac28bd79d370e2ede297807b064710e185ad0e896c0ab9ba48964475b801a233873d0714c526add5d250e1c04e0574de6fc9e1330bafcd8798cc7f946160fe05d8bf937ed3ed2e1299dc4f210de232b0ee4ae43a21b4f094d2976ade6c57f01f409b094c81776817199a4877006f04c35bec8ff9ddf967ba89e1df784a10d1e79edacdf0efb2d1b29404a755e86734df3141c05a2679052020c075f115a57141108bae51201eadd72228fc5edd76a654649b4308ceef64dcd76f6bbbab403ca34998a04e7859e0997f188125095906eb0b5a24679597803b6", 0xda}, {&(0x7f00000002c0)="353d0d7864d7bbee6620728ac2e005b3e34e32317c69473a88af975092", 0x1d}, {&(0x7f0000000800)="19080dfc347157dbfb46132e161a9f79e43472b608c7445e96cb7bf62b97b30faeeac0d3d42c3eb85c862305b0011521509713f5f2b457643d9c5f84a15308d821a634c61f1c00a7b6aac0c1376036b5cb61a000ba35", 0x56}, {&(0x7f00000019c0)="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", 0x542}], 0x5, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x38, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="04000000"], 0x18, 0x40810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}}, {{0x0, 0x0, &(0x7f0000002ec0), 0x0, &(0x7f00000030c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x10}}], 0x50, 0x84}}], 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xcfdc}, 0x1a0fb94f25892cbe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001", @ANYRES64=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x2060600) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r8, 0x0, 0x0, 0x4}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x7, &(0x7f0000000280)={0x0, 0x3d, 0x1}, &(0x7f0000000300)=0x0) getpeername(r1, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000500)=0x80) timer_gettime(r10, &(0x7f0000000340)) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r9}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000680)={0x2004000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r9, r5}, 0xc) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) semget$private(0x0, 0x20000000102, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080)={[{@nobh}, {@bsdgroups}, {@data_err_ignore}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") 717.009945ms ago: executing program 0 (id=575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300446318348ac30aef9acf0216b2000a40000000060a010400000000000000000a0000090900020073797a320000000014000480100001800a00010072656469720000000900010073797a3100000000140000001100010000000000000000000e000017"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="577a29be4c834fe1", 0x8}], 0x1, 0x48, 0x3) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090000000000000000ff0200004a140001800500020001"], 0x28}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc14"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500009bf0c20d800042bed7014359b5043c0c2f211be630799ad4720d7fb42c6decd72a7799395d81c46ddafd93814700", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x0, 0x890) 683.070775ms ago: executing program 3 (id=576): socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xc8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe11) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x2006, 0x1, 0x403, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x10000) shutdown(r5, 0x0) connect$unix(r5, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = accept(r6, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000280)="a5", 0x1, 0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-5lx \x00'}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000001800038014000200000074"], 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 624.017216ms ago: executing program 4 (id=577): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000060000000000001811000000009bf8e7dc9059329ba11f68edec31c8bd05bca16252cf25cb117fb70bc2a3db0d8a5f1c32fda9eefc6454e2c37a24e9e6f4a42cf8e5c21d647639eaa35a98494980b601e6f2379a51e374fdc5cc", @ANYRES32=r2, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) kexec_load(0x3e00, 0x0, &(0x7f00000002c0), 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1eecb9ab", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf25170000003c0001801400020076657468315f766972745f7769666900140002006e696376663000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="04000180400001801400020067656e6576653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x40) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r7 = openat(0xffffffffffffffff, 0x0, 0x0, 0x18) r8 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="ff00000007fb000008000000", @ANYRES16, @ANYRESHEX]) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000001200"]) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, 0x0) 535.631036ms ago: executing program 3 (id=578): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x101842, 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1ff, 0x2}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)="0c1d308e2025b05eefc7f6f90a682da8bf4f6fd2cd4ef1ea04117ca55a9e5af86f67b0cb939b4e7afa4f15dcf2eddab81ea258f549a20aa4862ef87864e822bbdacb9e01b6116a46bee9007f38c9db6d8522e735060e0631aa865e02e915df89d45e0ca69fc6f0ce065d56d7f67cb49c3fd8fb95cbe7a0410226a4fb07d387762d196d7422d29e67e274dd1144d7e5fe4aacf6c0580066d15286bfb8c6e6843caa53ec1348b5039a3756bca528d62a8022810f86b1edfa7bb4d247a3fe72352c7423dd6b79c51d96a055ab81e6f9559fa952b60a0e713efe44968a6a963c59655c04dd08", 0xe4}, {&(0x7f0000000600)="1d0fc48560e4a4411dd7f3aa6500fd95d3396913953b9555aa9b61b1e5a117367daea1c1deba75e95d7f4b35c44625c9a965be3f7440016d9439396382aa4b2f31565e8f0ac07cdb7367f4161cbbe086e33d6dfcb86cb33c77a3f3ac70a01c5ef8b3628453ca194a84edd2f52e11ade1214ef51a6021", 0x76}, {&(0x7f0000000680)="9bb56c153a3f05ddea1ac589d4e08acb59c86b631009ae8645769412a9048352c2af6bed899c3f46804f7b4a677e912cbe9dd2e6eb0ff44fcc090a79dd02a2b9d1f5527e8f987b94d58d5461633beab136889b5a453c533f7d7fdc3bc63bb920f6f6e72440c6c0ef78c1cbde545175d515ad2cd8dcfcb61c4ecf42eba986194b3472875c660d5d", 0x87}, {&(0x7f0000000740)="4f237b2be035d74c2efafc43fe410ae30c6c38b03998527a0105d193b699ed2cb3bf8505b7df687dc529076e5d0d4c5793299d7b61c1bf27381db0c1d86798d56749a21631e788d8186300ce50164c6e9224c264c95960c2591d8fbfe4d02966e35d201789f609782bef5f967dbffaab02aae5e0fd57a21d601554c10bd1e844ee25c84e8831d70b873a632c2a09ee66c020272fd8f9320a94ffff5f84a9d65a5387ff84bda1f41ba5b5909340c67578c8df338a3a6cf85c9e88f75655b238cc884242b86f27dcb92a598d95ca251a348f3d7742c4be10422e3b21350a5a9dd357d3b87bd7f9f8", 0xe7}, {&(0x7f0000000840)="0be107c3161dbcd3b1dcc7a2ee82214faa7b6399912ce187c28e8563f72b32e05dcddeafd5caa0150aff678a88c35f76b0ffde3697c689354363315c196100b3f3cc0f6b6c35cfb131bb312c0346e93fee2404fe62f8d97a23f21b0b137532468feebf1cfe223ffe85fc7c8deb65e1afa577eb60dbd1cf77c80481a04c0b275a1a24931d3a3cfb1ff276c12557bb5dcd0696132b61bc8abd1fce3d7da3d8e1a63b1e6b718f28b92e2736e3c26b3b8e3285935d", 0xb3}, {&(0x7f0000000900)="70809c03a340ee492650df8542c116d312bf3a3cfb6095a08b45d2ef8cf428f9cc93f97e0e273eed8ab035d978a3a7532da922b4400bdd48ce65989372b440e0be641e010e1e877ba63e44cfbc4fd032e600d83bce99a964df154f4a288713926823514309863fc1680c5e9eca30a29ba6be89654756594aaac178d861b4", 0x7e}, {&(0x7f0000000240)="0350f4b19d12241ea5b3043f5bb574015070fc83275301864079b4bb872d38132303a69046d9301ec63ba441", 0x2c}, {&(0x7f0000000980)="e482013c3d4f7d9bd29953ec3ecb044d46ba2a653253da1960ddf2a3b8f644e73e0727019cd31b4e10f9eed1be8149edfb8124aa552aa31de4653b64a46083f4e52738818ffca4dbf5926713850446f7715c45591d6b9a839e8f00d6a9aaeffaa232e4665d03024867b610c3556b28f93033d6c43305d9c190ebdb4faf879f2ba4b173f7d5b1449f03df7141aa60e89578f6f8abe6171765823291c39c611a0000e693f7fb", 0xa5}, {&(0x7f0000000300)="7aa59dc87892a923bae58595ddc2b44e196fa990119d00dc719bad8c", 0x1c}], 0x9, &(0x7f0000000d40)=ANY=[@ANYBLOB="88000000000000000e010000ff030000f98c231084a3375643fe7ce8cd67a34614b3c1e0405f3fdabd5edc2f0c48b9cb48f67c19dfb491228177d2a5e90bc500cb497fc9fa7fc9429f3dd27faf2c271186a0357aaf7b2f66319b1396a46350ba91f0ba17399011ddd0d94fbccd1d816a585eb6351b0103c5fd3d2ab6189f2d3d56d759708c5cd2008b640d0c5d09095189403207de680cd0e06e256eb50c59dcf97f2570f408c8e6d93dc2a8b4456b2f02de35de43151c2b8fc3bd1d8d7eee80b1b7bb5c7bb780856a62ca3ca2d4ce9db089"], 0x88}, 0x40) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000140)="e9", 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001480)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @multicast2}], 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a0102000000000000000001"], 0xec}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000d00)={&(0x7f0000000580), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x50, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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") r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) socket$key(0xf, 0x3, 0x2) 534.945956ms ago: executing program 0 (id=579): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) io_uring_setup(0x22625, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa00000001000008004d1e00bb1a6fb0441c0fc10a01010100000005ac14d4e23e91431cf661080000000002004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000290781e83"], 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}, {0x2}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) 497.729937ms ago: executing program 3 (id=580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r3 = open(&(0x7f0000000000)='./file0\x00', 0x228001, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = gettid() r6 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmmsg$inet(r6, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000300)={@loopback, @empty, @dev}, &(0x7f0000000340)=0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f00000000c0)={0x8, 0x2, 'client0\x00', 0x7, "a72e4d63bc515a59", "7f42e1e396067740e0182ac6b9dcfe2f1897f395d794ee4ceb8d7d066a182639", 0x427, 0x80}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f00000004c0)={0x2, 0x5, 0x1, 'queue1\x00', 0x1}) tkill(r5, 0x7) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c91c, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") r8 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESDEC=r4], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x1, 0x4}, 0x8) 0s ago: executing program 4 (id=581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$kcm(0x2, 0x200000000000003, 0x106) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x6, 0x7, 0xb41d, 0x88, 0x6ab2, 0xaf2, 0x101, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r10, &(0x7f00000063c0)=""/1024, 0x400) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000001000020000000900020073797a32000000000900010073795930000000002400048020000180070001006374000014000280080001400000001308000240000000101400"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) accept(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) kernel console output (not intermixed with test programs): =syz.0.121 [ 48.230643][ T4079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'. [ 48.242359][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 48.317041][ T3004] loop3: p1 p3 < > [ 48.329551][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.343635][ T4027] syz.1.108 (4027) used greatest stack depth: 6328 bytes left [ 48.416586][ T4095] lo speed is unknown, defaulting to 1000 [ 48.438222][ T4095] lo speed is unknown, defaulting to 1000 [ 48.445150][ T4095] lo speed is unknown, defaulting to 1000 [ 48.456692][ T4095] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 48.462929][ T4094] loop4: detected capacity change from 0 to 128 [ 48.474439][ T4094] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.483502][ T4095] lo speed is unknown, defaulting to 1000 [ 48.496956][ T4098] netlink: 36 bytes leftover after parsing attributes in process `syz.3.123'. [ 48.506288][ T4094] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.512380][ T4095] lo speed is unknown, defaulting to 1000 [ 48.528432][ T4095] lo speed is unknown, defaulting to 1000 [ 48.535400][ T4095] lo speed is unknown, defaulting to 1000 [ 48.541801][ T4095] lo speed is unknown, defaulting to 1000 [ 48.563224][ T31] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.588569][ T4098] lo speed is unknown, defaulting to 1000 [ 48.610394][ T4098] lo speed is unknown, defaulting to 1000 [ 48.632667][ C1] hrtimer: interrupt took 67500 ns [ 48.642378][ T4093] infiniband syz!: set active [ 48.647182][ T4093] infiniband syz!: added team_slave_0 [ 48.702302][ T4093] RDS/IB: syz!: added [ 48.712405][ T4093] smc: adding ib device syz! with port count 1 [ 48.714728][ T4100] syzkaller1: entered promiscuous mode [ 48.719063][ T4093] smc: ib device syz! port 1 has no pnetid [ 48.731208][ T4100] syzkaller1: entered allmulticast mode [ 48.862009][ T3004] loop3: p1 p3 < > [ 49.107781][ T3004] loop3: p1 p3 < > [ 49.136612][ T4110] siw: device registration error -23 [ 49.153434][ T4114] loop7: detected capacity change from 0 to 16381 [ 49.222289][ T3004] loop3: p1 p3 < > [ 49.236356][ T4116] loop1: detected capacity change from 0 to 2048 [ 49.265293][ T4116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.292573][ T4118] syz.3.132 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.423192][ T3004] loop3: p1 p3 < > [ 49.455534][ T4124] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.469238][ T4129] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 49.478056][ T4129] netlink: 'syz.2.135': attribute type 4 has an invalid length. [ 49.484956][ T4124] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1900 with error 28 [ 49.485752][ T4129] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.135'. [ 49.498128][ T4124] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.498128][ T4124] [ 49.516812][ T4124] EXT4-fs (loop1): Total free blocks count 0 [ 49.522817][ T4124] EXT4-fs (loop1): Free/Dirty block details [ 49.528716][ T4124] EXT4-fs (loop1): free_blocks=2415919104 [ 49.534479][ T4124] EXT4-fs (loop1): dirty_blocks=1904 [ 49.539798][ T4124] EXT4-fs (loop1): Block reservation details [ 49.545808][ T4124] EXT4-fs (loop1): i_reserved_data_blocks=119 [ 49.614532][ T4132] netlink: 'syz.2.136': attribute type 3 has an invalid length. [ 49.640898][ T3004] loop3: p1 p3 < > [ 49.667234][ T4132] process 'syz.2.136' launched '/dev/fd/8' with NULL argv: empty string added [ 49.710831][ T4136] netlink: 20 bytes leftover after parsing attributes in process `gtp'. [ 49.725187][ T3004] loop3: p1 p3 < > [ 49.747559][ T4137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 49.767693][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.775175][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.783652][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.791051][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.803573][ T4139] lo speed is unknown, defaulting to 1000 [ 49.810007][ T4139] lo speed is unknown, defaulting to 1000 [ 49.961735][ T3004] loop3: p1 p3 < > [ 49.973954][ T4143] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 49.986131][ T4143] netlink: 'syz.3.140': attribute type 13 has an invalid length. [ 50.028197][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 50.029785][ T4143] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.129807][ T3422] lo speed is unknown, defaulting to 1000 [ 50.135985][ T3422] syz0: Port: 1 Link DOWN [ 50.143056][ T53] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.154511][ T53] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.163986][ T53] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.173193][ T53] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.193431][ T3004] loop3: p1 p3 < > [ 50.211039][ T4150] vlan2: entered promiscuous mode [ 50.216209][ T4150] vlan2: entered allmulticast mode [ 50.221374][ T4150] hsr_slave_1: entered allmulticast mode [ 50.266080][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 50.392776][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 50.398847][ T3606] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.675947][ T3422] hid_parser_main: 3316 callbacks suppressed [ 50.675959][ T3422] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 50.689704][ T3422] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 50.697346][ T3422] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 50.704929][ T3422] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 50.712586][ T3422] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 50.720182][ T3422] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 50.727701][ T3422] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 50.730287][ T4166] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 50.735124][ T3422] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 50.750154][ T3422] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 50.755246][ T36] lo speed is unknown, defaulting to 1000 [ 50.757620][ T3422] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 50.763293][ T36] syz2: Port: 1 Link DOWN [ 50.771816][ T3422] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 50.933761][ T4175] xt_hashlimit: max too large, truncated to 1048576 [ 50.941348][ T4175] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 50.952496][ T4179] loop1: detected capacity change from 0 to 512 [ 50.970268][ T4179] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.150: corrupted in-inode xattr: e_name out of bounds [ 50.975846][ T4180] lo speed is unknown, defaulting to 1000 [ 50.984622][ T4179] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.150: couldn't read orphan inode 15 (err -117) [ 50.990752][ T4180] lo speed is unknown, defaulting to 1000 [ 51.002440][ T4179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.068652][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.105094][ T4185] loop1: detected capacity change from 0 to 1024 [ 51.112435][ T4185] EXT4-fs: Ignoring removed orlov option [ 51.142307][ T4185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.149506][ T4176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.163319][ T4176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.181232][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 51.181284][ T29] audit: type=1326 audit(1762312794.482:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8da593df10 code=0x7ffc0000 [ 51.211168][ T29] audit: type=1326 audit(1762312794.482:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f8da593e417 code=0x7ffc0000 [ 51.234755][ T29] audit: type=1326 audit(1762312794.482:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8da593df10 code=0x7ffc0000 [ 51.258345][ T29] audit: type=1326 audit(1762312794.482:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 51.282008][ T29] audit: type=1326 audit(1762312794.482:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 51.305582][ T4190] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 51.317611][ T4190] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 51.322931][ T29] audit: type=1326 audit(1762312794.492:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 51.352937][ T29] audit: type=1326 audit(1762312794.492:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 51.376281][ T29] audit: type=1326 audit(1762312794.492:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 51.399613][ T29] audit: type=1326 audit(1762312794.492:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 51.423002][ T29] audit: type=1326 audit(1762312794.492:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4184 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 51.450794][ T4190] syz.2.152: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 51.465346][ T4190] CPU: 1 UID: 0 PID: 4190 Comm: syz.2.152 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.465376][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.465390][ T4190] Call Trace: [ 51.465396][ T4190] [ 51.465444][ T4190] __dump_stack+0x1d/0x30 [ 51.465466][ T4190] dump_stack_lvl+0xe8/0x140 [ 51.465529][ T4190] dump_stack+0x15/0x1b [ 51.465557][ T4190] warn_alloc+0x12b/0x1a0 [ 51.465596][ T4190] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 51.465631][ T4190] __vmalloc_node_range_noprof+0x9d/0xed0 [ 51.465734][ T4190] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 51.465842][ T4190] ? slow_avc_audit+0x104/0x140 [ 51.465881][ T4190] ? should_fail_ex+0x30/0x280 [ 51.465902][ T4190] ? xskq_create+0x36/0xe0 [ 51.465923][ T4190] vmalloc_user_noprof+0x7d/0xb0 [ 51.466025][ T4190] ? xskq_create+0x80/0xe0 [ 51.466046][ T4190] xskq_create+0x80/0xe0 [ 51.466066][ T4190] xsk_init_queue+0x95/0xf0 [ 51.466090][ T4190] xsk_setsockopt+0x3f5/0x640 [ 51.466113][ T4190] ? __pfx_xsk_setsockopt+0x10/0x10 [ 51.466200][ T4190] __sys_setsockopt+0x184/0x200 [ 51.466279][ T4190] __x64_sys_setsockopt+0x64/0x80 [ 51.466389][ T4190] x64_sys_call+0x20ec/0x3000 [ 51.466417][ T4190] do_syscall_64+0xd2/0x200 [ 51.466437][ T4190] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.466552][ T4190] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 51.466580][ T4190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.466599][ T4190] RIP: 0033:0x7f83179ff6c9 [ 51.466634][ T4190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.466650][ T4190] RSP: 002b:00007f831645f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 51.466669][ T4190] RAX: ffffffffffffffda RBX: 00007f8317c55fa0 RCX: 00007f83179ff6c9 [ 51.466747][ T4190] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 51.466758][ T4190] RBP: 00007f8317a81f91 R08: 0000000000000004 R09: 0000000000000000 [ 51.466769][ T4190] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.466828][ T4190] R13: 00007f8317c56038 R14: 00007f8317c55fa0 R15: 00007fff48a17288 [ 51.466845][ T4190] [ 51.466854][ T4190] Mem-Info: [ 51.574765][ T4188] dummy0: entered promiscuous mode [ 51.575057][ T4190] active_anon:27988 inactive_anon:2423 isolated_anon:0 [ 51.575057][ T4190] active_file:10480 inactive_file:2378 isolated_file:0 [ 51.575057][ T4190] unevictable:0 dirty:249 writeback:0 [ 51.575057][ T4190] slab_reclaimable:3374 slab_unreclaimable:40234 [ 51.575057][ T4190] mapped:32091 shmem:21791 pagetables:1425 [ 51.575057][ T4190] sec_pagetables:0 bounce:0 [ 51.575057][ T4190] kernel_misc_reclaimable:0 [ 51.575057][ T4190] free:1782175 free_pcp:71486 free_cma:0 [ 51.736184][ T4190] Node 0 active_anon:111060kB inactive_anon:9692kB active_file:41920kB inactive_file:9560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121880kB dirty:1092kB writeback:0kB shmem:86060kB kernel_stack:3664kB pagetables:5708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 51.763883][ T4190] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 51.793529][ T4190] lowmem_reserve[]: 0 2881 7859 7859 [ 51.798824][ T4190] Node 0 DMA32 free:2946628kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 51.830102][ T4190] lowmem_reserve[]: 0 0 4978 4978 [ 51.835179][ T4190] Node 0 Normal free:4183184kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105608kB inactive_anon:9692kB active_file:41920kB inactive_file:9560kB unevictable:0kB writepending:1092kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:272432kB local_pcp:123676kB free_cma:0kB [ 51.868735][ T4190] lowmem_reserve[]: 0 0 0 0 [ 51.873255][ T4190] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 51.885938][ T4190] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946628kB [ 51.902064][ T4190] Node 0 Normal: 1135*4kB (UME) 498*8kB (UM) 282*16kB (UM) 149*32kB (UM) 121*64kB (UM) 86*128kB (UM) 76*256kB (UME) 43*512kB (UM) 41*1024kB (UME) 22*2048kB (UM) 981*4096kB (UM) = 4183244kB [ 51.920821][ T4190] Node 0 hugepages_total=7 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 51.930112][ T4190] 33031 total pagecache pages [ 51.934804][ T4190] 15 pages in swap cache [ 51.939052][ T4190] Free swap = 117760kB [ 51.943226][ T4190] Total swap = 124996kB [ 51.947384][ T4190] 2097051 pages RAM [ 51.951232][ T4190] 0 pages HighMem/MovableOnly [ 51.955934][ T4190] 81086 pages reserved [ 51.978937][ T3004] loop3: p1 p3 < > [ 51.994652][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.013041][ T3004] loop3: p1 p3 < > [ 52.087813][ T4204] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 52.365046][ T4220] __nla_validate_parse: 6 callbacks suppressed [ 52.365062][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 52.381762][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 52.424018][ T4222] loop1: detected capacity change from 0 to 512 [ 52.431552][ T4222] EXT4-fs: Ignoring removed i_version option [ 52.437680][ T4222] EXT4-fs: Ignoring removed bh option [ 52.465927][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.478788][ T4222] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.550485][ T4226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 52.552431][ T4217] loop4: detected capacity change from 0 to 8192 [ 52.636349][ T1701] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.644378][ T4227] Bluetooth: hci0: Frame reassembly failed (-90) [ 52.674012][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.861756][ T3004] loop3: p1 p3 < > [ 52.861797][ T4229] serio: Serial port ptm3 [ 52.884371][ T3004] loop3: p1 p3 < > [ 52.896499][ T4238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 52.974019][ T4241] netlink: 'syz.0.168': attribute type 12 has an invalid length. [ 52.981826][ T4241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.168'. [ 52.984626][ T4238] infiniband syû: set down [ 52.995265][ T4238] infiniband syû: added bond_slave_0 [ 53.039551][ T4238] RDS/IB: syû: added [ 53.045450][ T4238] smc: adding ib device syû with port count 1 [ 53.051735][ T4238] smc: ib device syû port 1 has no pnetid [ 53.220747][ T4246] capability: warning: `syz.0.169' uses 32-bit capabilities (legacy support in use) [ 53.264860][ T4248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.414604][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 53.537039][ T3004] loop3: p1 p3 < > [ 53.610220][ T4264] loop1: detected capacity change from 0 to 512 [ 53.648936][ T4252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 53.662443][ T4264] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.694883][ T4264] EXT4-fs (loop1): 1 truncate cleaned up [ 53.701153][ T4264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.734047][ T4258] lo speed is unknown, defaulting to 1000 [ 53.740666][ T4258] lo speed is unknown, defaulting to 1000 [ 53.843809][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.857152][ T4269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.175'. [ 53.999076][ T4269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 54.090271][ T4258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 54.109086][ T4279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4279 comm=syz.1.178 [ 54.288292][ T4281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.353365][ T4286] loop1: detected capacity change from 0 to 4096 [ 54.354216][ T4285] bridge_slave_0: left promiscuous mode [ 54.365478][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.366748][ T4286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.385505][ T4285] bridge_slave_1: left allmulticast mode [ 54.391202][ T4285] bridge_slave_1: left promiscuous mode [ 54.397443][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.420362][ T4286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.465891][ T3004] loop3: p1 p3 < > [ 54.491247][ T4285] bond0: (slave bond_slave_0): Releasing backup interface [ 54.514516][ T4292] ieee802154 phy1 wpan1: encryption failed: -22 [ 54.574475][ T4285] bond0: (slave bond_slave_1): Releasing backup interface [ 54.576063][ T4299] vhci_hcd: invalid port number 96 [ 54.586942][ T4299] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 54.601905][ T4285] team0: Port device team_slave_0 removed [ 54.623077][ T4302] netlink: 'syz.1.181': attribute type 6 has an invalid length. [ 54.633864][ T4285] team0: Port device team_slave_1 removed [ 54.654544][ T4285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.661941][ T4285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.678808][ T4285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.686597][ T4285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.715328][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.865318][ T4285] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.869733][ T4321] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 55.877499][ T4321] netlink: 'syz.4.185': attribute type 4 has an invalid length. [ 55.891639][ T3004] loop3: p1 p3 < > [ 55.956497][ T3004] loop3: p1 p3 < > [ 56.015401][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.135104][ T4326] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 56.150369][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.163880][ T4326] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.193251][ T4326] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 56.209220][ T29] kauditd_printk_skb: 588 callbacks suppressed [ 56.209233][ T29] audit: type=1326 audit(56.181:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.2.189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83179ff6c9 code=0x0 [ 56.210768][ T4326] batadv0: entered promiscuous mode [ 56.210786][ T4326] batadv0: entered allmulticast mode [ 56.218407][ T4326] bond0: (slave batadv0): Releasing backup interface [ 56.244716][ T29] audit: type=1326 audit(56.221:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 56.245222][ T29] audit: type=1326 audit(56.221:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 56.245402][ T29] audit: type=1326 audit(56.221:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 56.245742][ T29] audit: type=1326 audit(56.221:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 56.245875][ T29] audit: type=1326 audit(56.221:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 56.247405][ T29] audit: type=1326 audit(56.221:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 56.247703][ T29] audit: type=1326 audit(56.221:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 56.248953][ T29] audit: type=1326 audit(56.221:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 56.250620][ T4326] bridge0: port 3(batadv0) entered blocking state [ 56.250716][ T4326] bridge0: port 3(batadv0) entered disabled state [ 56.267278][ T29] audit: type=1326 audit(56.241:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 56.330882][ T1701] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 56.330963][ T1701] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 56.427168][ T4349] loop4: detected capacity change from 0 to 1024 [ 56.429308][ T4349] EXT4-fs (loop4): unsupported inode size: 143 [ 56.429327][ T4349] EXT4-fs (loop4): blocksize: 1024 [ 56.480907][ T3004] loop3: p1 p3 < > [ 56.521620][ T4357] x_tables: duplicate underflow at hook 3 [ 56.658937][ T4360] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 57.056619][ T4370] x_tables: duplicate underflow at hook 3 [ 57.136667][ T4392] netlink: 'syz.2.194': attribute type 2 has an invalid length. [ 57.157284][ T4392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=4392 comm=syz.2.194 [ 57.186143][ T4390] loop4: detected capacity change from 0 to 512 [ 57.227885][ T4390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 57.263666][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.281298][ T4395] netlink: 'syz.2.195': attribute type 1 has an invalid length. [ 57.304570][ T4408] loop4: detected capacity change from 0 to 512 [ 57.309422][ T4408] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 57.482967][ T3004] loop3: p1 p3 < > [ 57.488947][ T4422] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.525637][ T3004] loop3: p1 p3 < > [ 57.562324][ T4427] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 57.621852][ T4422] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.653977][ T4436] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 57.683211][ T4436] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 57.690956][ T4436] __nla_validate_parse: 17 callbacks suppressed [ 57.690970][ T4436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.201'. [ 57.742478][ T4422] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.837817][ T4451] ip6t_srh: unknown srh match flags 4000 [ 57.867411][ T3004] loop3: p1 p3 < > [ 57.925147][ T4422] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.959233][ T4466] ip6t_srh: unknown srh match flags 4000 [ 58.001394][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 58.106731][ T1701] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.116819][ T4475] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 58.124574][ T4475] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 58.132225][ T4475] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.207'. [ 58.162924][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 58.188948][ T1701] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.209536][ T1701] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.242068][ T1701] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.393559][ T4488] program syz.3.208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.463699][ T4490] loop4: detected capacity change from 0 to 512 [ 58.472884][ T4480] program syz.3.208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.495405][ T4490] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.211: missing EA_INODE flag [ 58.560423][ T4490] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.211: error while reading EA inode 12 err=-117 [ 58.583380][ T4490] EXT4-fs (loop4): 1 orphan inode deleted [ 58.591092][ T4490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.616665][ T3004] loop3: p1 p3 < > [ 58.779114][ T4504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 58.779338][ T4506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.814271][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.824853][ T4506] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 58.848044][ T4509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.215'. [ 58.878808][ T4508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.943473][ T4509] batadv0: entered promiscuous mode [ 58.948720][ T4509] batadv0: entered allmulticast mode [ 58.954982][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 58.967308][ T4509] bond0: (slave batadv0): Releasing backup interface [ 58.995123][ T4509] bridge0: port 1(batadv0) entered blocking state [ 59.001595][ T4509] bridge0: port 1(batadv0) entered disabled state [ 59.089875][ T4523] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.221'. [ 59.144244][ T4524] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.216108][ T4526] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 59.235521][ T4524] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.308604][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 59.317936][ T4529] veth0_macvtap: left promiscuous mode [ 59.355398][ T4524] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.406403][ T4524] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.441024][ T4538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.453249][ T53] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 59.462538][ T53] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 59.494655][ T53] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.510996][ T53] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.532919][ T53] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.571397][ T53] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.824735][ T4551] program syz.0.226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.846370][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 59.886870][ T4562] program syz.0.226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.936639][ T3004] loop3: p1 p3 < > [ 60.370303][ T4601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.387468][ T4601] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 60.401859][ T4601] batadv0: entered promiscuous mode [ 60.407125][ T4601] batadv0: entered allmulticast mode [ 60.413787][ T4601] bond0: (slave batadv0): Releasing backup interface [ 60.422441][ T4601] bridge0: port 2(batadv0) entered blocking state [ 60.429693][ T4601] bridge0: port 2(batadv0) entered disabled state [ 60.452615][ T4603] x_tables: duplicate underflow at hook 3 [ 60.499433][ T53] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 60.508680][ T53] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 60.647880][ T4615] ip6t_srh: unknown srh match flags 4000 [ 60.663761][ T4615] loop4: detected capacity change from 0 to 512 [ 60.667466][ T4616] x_tables: duplicate underflow at hook 3 [ 60.671035][ T4615] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.761860][ T3004] loop3: p1 p3 < > [ 60.778426][ T4620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.802597][ T3004] loop3: p1 p3 < > [ 61.129250][ T3004] loop3: p1 p3 < > [ 61.199444][ T4625] program syz.4.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.212772][ T29] kauditd_printk_skb: 1077 callbacks suppressed [ 61.212785][ T29] audit: type=1326 audit(61.171:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 61.241858][ T29] audit: type=1326 audit(61.171:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 61.264595][ T29] audit: type=1326 audit(61.171:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 61.287226][ T29] audit: type=1326 audit(61.171:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 61.289454][ T4631] program syz.4.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.309861][ T29] audit: type=1326 audit(61.171:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 61.341598][ T29] audit: type=1326 audit(61.171:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 61.364255][ T29] audit: type=1326 audit(61.171:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 61.386939][ T29] audit: type=1326 audit(61.171:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 61.409677][ T29] audit: type=1326 audit(61.171:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 61.432290][ T29] audit: type=1326 audit(61.171:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c616bf6c9 code=0x7ffc0000 [ 61.459404][ T4632] validate_nla: 8 callbacks suppressed [ 61.459498][ T4632] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 61.570605][ T3004] loop3: p1 p3 < > [ 61.625588][ T3004] loop3: p1 p3 < > [ 61.632044][ T4644] netlink: 'syz.4.247': attribute type 10 has an invalid length. [ 61.680941][ T4648] netlink: 'syz.4.247': attribute type 10 has an invalid length. [ 61.693801][ T4644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.735771][ T4644] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 61.751676][ T4648] batadv0: entered promiscuous mode [ 61.757471][ T4648] batadv0: entered allmulticast mode [ 61.796604][ T4648] bond0: (slave batadv0): Releasing backup interface [ 61.823938][ T4652] netlink: 'syz.2.246': attribute type 6 has an invalid length. [ 61.854910][ T4648] bridge0: port 3(batadv0) entered blocking state [ 61.861371][ T4648] bridge0: port 3(batadv0) entered disabled state [ 61.902262][ T4646] x_tables: duplicate underflow at hook 3 [ 61.982822][ T53] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 61.992048][ T53] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 62.054931][ T3004] loop3: p1 p3 < > [ 62.145716][ T4666] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 62.153511][ T4666] netlink: 'syz.1.250': attribute type 4 has an invalid length. [ 62.229992][ T4669] loop4: detected capacity change from 0 to 1024 [ 62.240159][ T4669] EXT4-fs: Ignoring removed bh option [ 62.275734][ T4671] SELinux: ebitmap: truncated map [ 62.284337][ T4669] EXT4-fs: inline encryption not supported [ 62.289502][ T4673] x_tables: duplicate underflow at hook 3 [ 62.302819][ T4671] SELinux: failed to load policy [ 62.308389][ T4669] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.332747][ T4669] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 62.935988][ T4669] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.252: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.072681][ T4669] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.252: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.101615][ T4669] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.252: Failed to acquire dquot type 0 [ 63.113295][ T3004] loop3: p1 p3 < > [ 63.132205][ T4680] __nla_validate_parse: 4 callbacks suppressed [ 63.132220][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 63.152462][ T4680] syz.0.256: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 63.167240][ T4680] CPU: 1 UID: 0 PID: 4680 Comm: syz.0.256 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.167272][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.167284][ T4680] Call Trace: [ 63.167367][ T4680] [ 63.167374][ T4680] __dump_stack+0x1d/0x30 [ 63.167395][ T4680] dump_stack_lvl+0xe8/0x140 [ 63.167416][ T4680] dump_stack+0x15/0x1b [ 63.167439][ T4680] warn_alloc+0x12b/0x1a0 [ 63.167488][ T4680] ? __rcu_read_unlock+0x4f/0x70 [ 63.167550][ T4680] __vmalloc_node_range_noprof+0x9d/0xed0 [ 63.167580][ T4680] ? __futex_wait+0x1fa/0x260 [ 63.167607][ T4680] ? __pfx_futex_wake_mark+0x10/0x10 [ 63.167639][ T4680] ? __rcu_read_unlock+0x4f/0x70 [ 63.167664][ T4680] ? avc_has_perm_noaudit+0x1b1/0x200 [ 63.167689][ T4680] ? should_fail_ex+0x30/0x280 [ 63.167722][ T4680] ? xskq_create+0x36/0xe0 [ 63.167747][ T4680] vmalloc_user_noprof+0x7d/0xb0 [ 63.167776][ T4680] ? xskq_create+0x80/0xe0 [ 63.167800][ T4680] xskq_create+0x80/0xe0 [ 63.167894][ T4680] xsk_init_queue+0x95/0xf0 [ 63.167919][ T4680] xsk_setsockopt+0x3f5/0x640 [ 63.167940][ T4680] ? __pfx_xsk_setsockopt+0x10/0x10 [ 63.167959][ T4680] __sys_setsockopt+0x184/0x200 [ 63.168021][ T4680] __x64_sys_setsockopt+0x64/0x80 [ 63.168052][ T4680] x64_sys_call+0x20ec/0x3000 [ 63.168080][ T4680] do_syscall_64+0xd2/0x200 [ 63.168140][ T4680] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.168175][ T4680] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.168269][ T4680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.168293][ T4680] RIP: 0033:0x7f0c0c20f6c9 [ 63.168311][ T4680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.168332][ T4680] RSP: 002b:00007f0c0ac6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 63.168419][ T4680] RAX: ffffffffffffffda RBX: 00007f0c0c465fa0 RCX: 00007f0c0c20f6c9 [ 63.168434][ T4680] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 63.168447][ T4680] RBP: 00007f0c0c291f91 R08: 0000000000000004 R09: 0000000000000000 [ 63.168462][ T4680] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.168532][ T4680] R13: 00007f0c0c466038 R14: 00007f0c0c465fa0 R15: 00007fff111b2dc8 [ 63.168554][ T4680] [ 63.168562][ T4680] Mem-Info: [ 63.217152][ T4680] active_anon:26291 inactive_anon:2460 isolated_anon:0 [ 63.217152][ T4680] active_file:10519 inactive_file:2586 isolated_file:0 [ 63.217152][ T4680] unevictable:36 dirty:61 writeback:32 [ 63.217152][ T4680] slab_reclaimable:3421 slab_unreclaimable:41218 [ 63.217152][ T4680] mapped:29374 shmem:20188 pagetables:1406 [ 63.217152][ T4680] sec_pagetables:0 bounce:0 [ 63.217152][ T4680] kernel_misc_reclaimable:0 [ 63.217152][ T4680] free:1839099 free_pcp:8591 free_cma:0 [ 63.290348][ T4669] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 63.295021][ T4680] Node 0 active_anon:105512kB inactive_anon:9840kB active_file:42076kB inactive_file:10692kB unevictable:28kB isolated(anon):0kB isolated(file):0kB mapped:117496kB dirty:244kB writeback:128kB shmem:80752kB kernel_stack:3680kB pagetables:5856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 63.317432][ T4669] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.252: mark_inode_dirty error [ 63.321731][ T4680] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 63.350831][ T3004] loop3: p1 p3 < > [ 63.357825][ T4680] lowmem_reserve[]: 0 2881 7859 7859 [ 63.357866][ T4680] Node 0 DMA32 free:2946628kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 63.398577][ T4669] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 63.441376][ T4680] lowmem_reserve[]: 0 0 4978 4978 [ 63.441421][ T4680] Node 0 Normal free:4394280kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108412kB inactive_anon:9840kB active_file:42076kB inactive_file:10692kB unevictable:28kB writepending:372kB zspages:0kB present:5242880kB managed:5098240kB mlocked:28kB bounce:0kB free_pcp:30396kB local_pcp:11436kB free_cma:0kB [ 63.598957][ T4669] EXT4-fs (loop4): 1 orphan inode deleted [ 63.608787][ T4680] lowmem_reserve[]: 0 0 0 0 [ 63.608853][ T4680] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) [ 63.614989][ T53] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.619182][ T4680] 1*2048kB (M) 3*4096kB [ 63.636954][ T3004] loop3: p1 p3 < > [ 63.642738][ T4680] (M) = 15360kB [ 63.654291][ T4680] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946628kB [ 63.657203][ T53] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 63.670356][ T4680] Node 0 Normal: 1118*4kB (UME) 646*8kB (UME) 373*16kB (UME) 394*32kB (UME) 278*64kB (UME) 218*128kB (UM) 126*256kB (UME) 117*512kB (UM) 89*1024kB (UME) 44*2048kB (UM) 988*4096kB (UM) = 4394168kB [ 63.701207][ T4680] Node 0 hugepages_total=7 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 63.709839][ T4669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.710540][ T4680] 33341 total pagecache pages [ 63.727633][ T4680] 38 pages in swap cache [ 63.731885][ T4680] Free swap = 117568kB [ 63.736098][ T4680] Total swap = 124996kB [ 63.740306][ T4680] 2097051 pages RAM [ 63.744151][ T4680] 0 pages HighMem/MovableOnly [ 63.748836][ T4680] 81086 pages reserved [ 63.800691][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.809409][ T4682] Bluetooth: hci0: Frame reassembly failed (-90) [ 63.941126][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.950589][ T3314] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 63.965559][ T3314] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 63.975450][ T3314] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 63.990717][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 64.000709][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 64.021093][ T3004] loop3: p1 p3 < > [ 64.057591][ T4693] lo speed is unknown, defaulting to 1000 [ 64.065517][ T4693] lo speed is unknown, defaulting to 1000 [ 64.143578][ T4703] netlink: 'syz.4.264': attribute type 10 has an invalid length. [ 64.173390][ T4704] netlink: 'syz.3.263': attribute type 6 has an invalid length. [ 64.179708][ T4703] batadv0: left allmulticast mode [ 64.186168][ T4703] batadv0: left promiscuous mode [ 64.191347][ T4703] bridge0: port 3(batadv0) entered disabled state [ 64.193960][ T4705] netlink: 'syz.4.264': attribute type 10 has an invalid length. [ 64.205563][ T4705] netlink: 40 bytes leftover after parsing attributes in process `syz.4.264'. [ 64.234713][ T4703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.250151][ T4703] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 64.259044][ T4705] batadv0: entered promiscuous mode [ 64.264275][ T4705] batadv0: entered allmulticast mode [ 64.302422][ T4705] bond0: (slave batadv0): Releasing backup interface [ 64.316644][ T4705] bridge0: port 3(batadv0) entered blocking state [ 64.323169][ T4705] bridge0: port 3(batadv0) entered disabled state [ 64.411725][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 64.430162][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 64.438994][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 64.451759][ T4699] netlink: 14 bytes leftover after parsing attributes in process `syz.2.262'. [ 64.514532][ T4715] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 64.515266][ T3004] loop3: p1 p3 < > [ 64.815007][ T4718] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 64.835647][ T4718] team0: Port device dummy0 added [ 64.836394][ T3004] loop3: p1 p3 < > [ 64.849100][ T4718] team0: Port device dummy0 removed [ 64.859097][ T4718] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.930752][ T4720] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 64.977032][ T3004] loop3: p1 p3 < > [ 65.081613][ T4726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=4726 comm=syz.3.270 [ 65.100795][ T4726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.270'. [ 65.112221][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 65.277936][ T3004] loop3: p1 p3 < > [ 65.463172][ T4739] loop4: detected capacity change from 0 to 512 [ 65.832743][ T3606] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.723417][ T4738] syz.4.273 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 66.737485][ T4738] CPU: 0 UID: 0 PID: 4738 Comm: syz.4.273 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.737588][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.737601][ T4738] Call Trace: [ 66.737608][ T4738] [ 66.737616][ T4738] __dump_stack+0x1d/0x30 [ 66.737643][ T4738] dump_stack_lvl+0xe8/0x140 [ 66.737667][ T4738] dump_stack+0x15/0x1b [ 66.737684][ T4738] dump_header+0x81/0x220 [ 66.737702][ T4738] oom_kill_process+0x342/0x400 [ 66.737761][ T4738] out_of_memory+0x979/0xb80 [ 66.737823][ T4738] try_charge_memcg+0x610/0xa10 [ 66.737862][ T4738] obj_cgroup_charge_pages+0xa6/0x150 [ 66.737883][ T4738] __memcg_kmem_charge_page+0x9f/0x170 [ 66.737912][ T4738] __alloc_frozen_pages_noprof+0x188/0x360 [ 66.737953][ T4738] alloc_pages_mpol+0xb3/0x260 [ 66.737973][ T4738] ? alloc_pages_noprof+0xf4/0x130 [ 66.738001][ T4738] alloc_pages_noprof+0x90/0x130 [ 66.738092][ T4738] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 66.738145][ T4738] __kvmalloc_node_noprof+0x483/0x670 [ 66.738185][ T4738] ? ip_set_alloc+0x24/0x30 [ 66.738251][ T4738] ? ip_set_alloc+0x24/0x30 [ 66.738287][ T4738] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 66.738324][ T4738] ip_set_alloc+0x24/0x30 [ 66.738351][ T4738] hash_netiface_create+0x282/0x740 [ 66.738486][ T4738] ? __pfx_hash_netiface_create+0x10/0x10 [ 66.738535][ T4738] ip_set_create+0x3cc/0x970 [ 66.738563][ T4738] nfnetlink_rcv_msg+0x4c6/0x590 [ 66.738615][ T4738] netlink_rcv_skb+0x123/0x220 [ 66.738717][ T4738] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 66.738748][ T4738] nfnetlink_rcv+0x167/0x16c0 [ 66.738778][ T4738] ? kmem_cache_free+0xe4/0x3d0 [ 66.738849][ T4738] ? __kfree_skb+0x109/0x150 [ 66.738886][ T4738] ? nlmon_xmit+0x4f/0x60 [ 66.738909][ T4738] ? consume_skb+0x49/0x150 [ 66.738974][ T4738] ? nlmon_xmit+0x4f/0x60 [ 66.739004][ T4738] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 66.739063][ T4738] ? __dev_queue_xmit+0x1200/0x2000 [ 66.739093][ T4738] ? __dev_queue_xmit+0x182/0x2000 [ 66.739131][ T4738] ? ref_tracker_free+0x37d/0x3e0 [ 66.739187][ T4738] ? __netlink_deliver_tap+0x4dc/0x500 [ 66.739289][ T4738] netlink_unicast+0x5c0/0x690 [ 66.739326][ T4738] netlink_sendmsg+0x58b/0x6b0 [ 66.739352][ T4738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.739419][ T4738] __sock_sendmsg+0x145/0x180 [ 66.739448][ T4738] ____sys_sendmsg+0x31e/0x4e0 [ 66.739493][ T4738] ___sys_sendmsg+0x17b/0x1d0 [ 66.739525][ T4738] __x64_sys_sendmsg+0xd4/0x160 [ 66.739547][ T4738] x64_sys_call+0x191e/0x3000 [ 66.739625][ T4738] do_syscall_64+0xd2/0x200 [ 66.739715][ T4738] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.739741][ T4738] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.739815][ T4738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.739837][ T4738] RIP: 0033:0x7f4c616bf6c9 [ 66.739888][ T4738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.739910][ T4738] RSP: 002b:00007f4c600dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.739966][ T4738] RAX: ffffffffffffffda RBX: 00007f4c61916180 RCX: 00007f4c616bf6c9 [ 66.739979][ T4738] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 66.739991][ T4738] RBP: 00007f4c61741f91 R08: 0000000000000000 R09: 0000000000000000 [ 66.740005][ T4738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.740020][ T4738] R13: 00007f4c61916218 R14: 00007f4c61916180 R15: 00007ffde5921658 [ 66.740042][ T4738] [ 66.740048][ T4738] memory: usage 307200kB, limit 307200kB, failcnt 78 [ 67.086305][ T4738] memory+swap: usage 374924kB, limit 9007199254740988kB, failcnt 0 [ 67.094297][ T4738] kmem: usage 306752kB, limit 9007199254740988kB, failcnt 0 [ 67.101576][ T4738] Memory cgroup stats for /syz4: [ 67.101758][ T4738] cache 180224 [ 67.110064][ T4738] rss 0 [ 67.112845][ T4738] shmem 0 [ 67.116055][ T4738] mapped_file 176128 [ 67.120252][ T4738] dirty 176128 [ 67.123939][ T4738] writeback 0 [ 67.127447][ T4738] workingset_refault_anon 16 [ 67.132084][ T4738] workingset_refault_file 0 [ 67.136614][ T4738] swap 69541888 [ 67.140086][ T4738] swapcached 77824 [ 67.143838][ T4738] pgpgin 43915 [ 67.147358][ T4738] pgpgout 43850 [ 67.151050][ T4738] pgfault 25050 [ 67.154558][ T4738] pgmajfault 3 [ 67.157942][ T4738] inactive_anon 36864 [ 67.161927][ T4738] active_anon 40960 [ 67.165798][ T4738] inactive_file 184320 [ 67.169875][ T4738] active_file 4096 [ 67.173675][ T4738] unevictable 0 [ 67.177158][ T4738] hierarchical_memory_limit 314572800 [ 67.182550][ T4738] hierarchical_memsw_limit 9223372036854771712 [ 67.188750][ T4738] total_cache 180224 [ 67.192781][ T4738] total_rss 0 [ 67.196095][ T4738] total_shmem 0 [ 67.199563][ T4738] total_mapped_file 176128 [ 67.204001][ T4738] total_dirty 176128 [ 67.207927][ T4738] total_writeback 0 [ 67.211756][ T4738] total_workingset_refault_anon 16 [ 67.216894][ T4738] total_workingset_refault_file 0 [ 67.221937][ T4738] total_swap 69541888 [ 67.225978][ T4738] total_swapcached 77824 [ 67.230327][ T4738] total_pgpgin 43915 [ 67.234248][ T4738] total_pgpgout 43850 [ 67.238230][ T4738] total_pgfault 25050 [ 67.242222][ T4738] total_pgmajfault 3 [ 67.246165][ T4738] total_inactive_anon 36864 [ 67.250706][ T4738] total_active_anon 40960 [ 67.255072][ T4738] total_inactive_file 184320 [ 67.259657][ T4738] total_active_file 4096 [ 67.264004][ T4738] total_unevictable 0 [ 67.267994][ T4738] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.273,pid=4729,uid=0 [ 67.282566][ T4738] Memory cgroup out of memory: Killed process 4729 (syz.4.273) total-vm:92180kB, anon-rss:1140kB, file-rss:26576kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 67.450423][ T4738] syz.4.273 (4738) used greatest stack depth: 6072 bytes left [ 67.478658][ T4750] bridge1: entered promiscuous mode [ 67.483936][ T4750] bridge1: entered allmulticast mode [ 67.490872][ T4750] team0: Port device bridge1 added [ 67.513852][ T4750] bridge0: port 3(team0) entered blocking state [ 67.520175][ T4750] bridge0: port 3(team0) entered disabled state [ 67.526555][ T4750] team0: entered allmulticast mode [ 67.531700][ T4750] team_slave_0: entered allmulticast mode [ 67.537492][ T4750] team_slave_1: entered allmulticast mode [ 67.544861][ T4750] team0: entered promiscuous mode [ 67.549896][ T4750] team_slave_0: entered promiscuous mode [ 67.555668][ T4750] team_slave_1: entered promiscuous mode [ 67.561895][ T4750] bridge0: port 3(team0) entered blocking state [ 67.568182][ T4750] bridge0: port 3(team0) entered forwarding state [ 67.657415][ T29] kauditd_printk_skb: 840 callbacks suppressed [ 67.657494][ T29] audit: type=1326 audit(2000000000.520:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 67.984801][ T29] audit: type=1326 audit(2000000000.750:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 68.008283][ T29] audit: type=1326 audit(2000000000.750:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 68.031529][ T29] audit: type=1326 audit(2000000000.750:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 68.054939][ T29] audit: type=1326 audit(2000000000.750:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 68.078326][ T29] audit: type=1326 audit(2000000000.750:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 68.101622][ T29] audit: type=1326 audit(2000000000.750:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 68.124965][ T29] audit: type=1326 audit(2000000000.760:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 68.148401][ T29] audit: type=1326 audit(2000000000.760:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 68.171780][ T29] audit: type=1326 audit(2000000000.760:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 68.202975][ T4759] __nla_validate_parse: 4 callbacks suppressed [ 68.202991][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 68.230874][ T4755] lo speed is unknown, defaulting to 1000 [ 68.263765][ T4755] lo speed is unknown, defaulting to 1000 [ 68.306796][ T4739] EXT4-fs: error -4 creating inode table initialization thread [ 68.317001][ T4739] EXT4-fs (loop4): mount failed [ 68.491091][ T4767] validate_nla: 2 callbacks suppressed [ 68.491110][ T4767] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 68.544168][ T4767] team0: Port device dummy0 added [ 68.566976][ T4768] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 68.604380][ T4768] team0: Port device dummy0 removed [ 68.614256][ T4768] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 68.670298][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 68.679121][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 68.723100][ T4764] netlink: 14 bytes leftover after parsing attributes in process `syz.1.281'. [ 68.849084][ T4774] vhci_hcd: invalid port number 96 [ 68.854266][ T4774] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 69.434269][ T4795] lo speed is unknown, defaulting to 1000 [ 69.440938][ T4795] lo speed is unknown, defaulting to 1000 [ 69.654861][ T4800] netlink: 'syz.3.286': attribute type 10 has an invalid length. [ 69.683612][ T4800] netlink: 'syz.3.286': attribute type 10 has an invalid length. [ 69.691366][ T4800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.286'. [ 69.797354][ T4803] loop4: detected capacity change from 0 to 512 [ 69.822028][ T4803] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=,fsuuid=2e07,errors=continue) failed with errno=-22 [ 70.002315][ T4803] loop4: detected capacity change from 0 to 128 [ 70.068051][ T4803] bio_check_eod: 78 callbacks suppressed [ 70.068066][ T4803] syz.4.287: attempt to access beyond end of device [ 70.068066][ T4803] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 70.163730][ T4803] syz.4.287: attempt to access beyond end of device [ 70.163730][ T4803] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 70.629419][ T4819] x_tables: duplicate underflow at hook 3 [ 70.757541][ T4819] loop4: detected capacity change from 0 to 512 [ 70.873447][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 70.890689][ T4823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.915229][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 71.047250][ T4819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.103231][ T4819] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.216196][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.269211][ T4823] can: request_module (can-proto-0) failed. [ 71.304444][ T4840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.296'. [ 71.423899][ T4846] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 71.424796][ T4845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.436343][ T4846] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 71.469375][ T4846] siw: device registration error -23 [ 71.499319][ T4848] netlink: 'syz.4.299': attribute type 39 has an invalid length. [ 71.553805][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 71.862336][ T4848] lo speed is unknown, defaulting to 1000 [ 72.078496][ T4848] lo speed is unknown, defaulting to 1000 [ 73.462799][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 73.462818][ T29] audit: type=1400 audit(2000000006.320:5812): avc: denied { write } for pid=4863 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.658042][ T4866] netlink: 56 bytes leftover after parsing attributes in process `syz.1.304'. [ 73.806292][ T29] audit: type=1326 audit(2000000007.665:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 73.906735][ T4869] tmpfs: Unknown parameter 'mÂLave' [ 73.919972][ T4862] netlink: 'syz.2.301': attribute type 21 has an invalid length. [ 73.951874][ T29] audit: type=1326 audit(2000000007.695:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 73.975418][ T29] audit: type=1326 audit(2000000007.695:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 73.975523][ T4862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.301'. [ 73.999025][ T29] audit: type=1326 audit(2000000007.695:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 74.008043][ T4862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.301'. [ 74.031164][ T29] audit: type=1326 audit(2000000007.695:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 74.031200][ T29] audit: type=1326 audit(2000000007.695:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 74.031232][ T29] audit: type=1326 audit(2000000007.695:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 74.031348][ T29] audit: type=1326 audit(2000000007.695:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 74.105245][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 74.109932][ T29] audit: type=1326 audit(2000000007.695:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da593f6c9 code=0x7ffc0000 [ 74.326638][ T4880] siw: device registration error -23 [ 74.330594][ T4895] bridge0: port 3(batadv0) entered disabled state [ 74.343209][ T4895] bridge_slave_0: left allmulticast mode [ 74.348008][ T4893] 9pnet: Could not find request transport: fd rejected, failed to enable media [ 96.175731][ T5506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 96.246761][ T5501] siw: device registration error -23 [ 96.390462][ T5511] team0: left allmulticast mode [ 96.395407][ T5511] team_slave_0: left allmulticast mode [ 96.400917][ T5511] team_slave_1: left allmulticast mode [ 96.406541][ T5511] team0: left promiscuous mode [ 96.411319][ T5511] team_slave_0: left promiscuous mode [ 96.416883][ T5511] team_slave_1: left promiscuous mode [ 96.422853][ T5511] bridge0: port 3(team0) entered disabled state [ 96.476588][ T5511] bridge0: port 2(batadv0) entered disabled state [ 96.484766][ T5515] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 96.492507][ T5515] __nla_validate_parse: 2 callbacks suppressed [ 96.492520][ T5515] netlink: 2 bytes leftover after parsing attributes in process `syz.2.478'. [ 96.512167][ T5511] bridge_slave_0: left allmulticast mode [ 96.518111][ T5511] bridge_slave_0: left promiscuous mode [ 96.523805][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.536016][ T5511] bond0: (slave bond_slave_0): Releasing backup interface [ 96.556483][ T5516] netlink: 'syz.2.478': attribute type 7 has an invalid length. [ 96.566717][ T5511] bond0: (slave bond_slave_1): Releasing backup interface [ 96.591180][ T5511] team0: Port device team_slave_0 removed [ 96.601683][ T5511] team0: Port device team_slave_1 removed [ 96.611062][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.618490][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.628079][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.636214][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.647769][ T5511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 96.673005][ T3369] syz!: Port: 1 Link DOWN [ 96.678511][ T5515] team0: entered promiscuous mode [ 96.691017][ T5515] bridge0: port 1(team0) entered blocking state [ 96.697419][ T5515] bridge0: port 1(team0) entered disabled state [ 96.730231][ T5515] team0: entered allmulticast mode [ 96.748177][ T5515] bridge0: port 1(team0) entered blocking state [ 96.754512][ T5515] bridge0: port 1(team0) entered forwarding state [ 96.766750][ T41] bridge0: port 1(team0) entered disabled state [ 96.797063][ T5520] xt_check_table_hooks: 2 callbacks suppressed [ 96.797197][ T5520] x_tables: duplicate underflow at hook 3 [ 96.866262][ T5520] loop4: detected capacity change from 0 to 512 [ 96.902695][ T5520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.990025][ T5526] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.006223][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 97.078582][ T5527] lo speed is unknown, defaulting to 1000 [ 97.099625][ T5531] x_tables: duplicate underflow at hook 3 [ 97.104369][ T5527] lo speed is unknown, defaulting to 1000 [ 97.127947][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 97.150506][ T5531] loop4: detected capacity change from 0 to 512 [ 97.384534][ T5531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 97.414135][ T5533] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 97.452369][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 97.634220][ T5549] siw: device registration error -23 [ 97.669650][ T5553] x_tables: duplicate underflow at hook 3 [ 98.408273][ T5545] loop4: detected capacity change from 0 to 512 [ 98.572072][ T5545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.638892][ T5560] netlink: 156 bytes leftover after parsing attributes in process `syz.1.499'. [ 98.672414][ T5560] netlink: 156 bytes leftover after parsing attributes in process `syz.1.499'. [ 98.814733][ T5572] syzkaller0: entered promiscuous mode [ 98.820235][ T5572] syzkaller0: entered allmulticast mode [ 98.842251][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.846134][ T5572] tipc: Started in network mode [ 98.856210][ T5572] tipc: Node identity 6623cf932f52, cluster identity 4711 [ 98.863506][ T5572] tipc: Enabled bearer , priority 0 [ 98.907802][ T5571] tipc: Resetting bearer [ 98.935083][ T5571] tipc: Disabling bearer [ 99.030557][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 99.167714][ T5592] x_tables: duplicate underflow at hook 3 [ 99.219684][ T5582] x_tables: duplicate underflow at hook 3 [ 99.258664][ T5589] loop4: detected capacity change from 0 to 32768 [ 99.315411][ T5589] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 99.321031][ T5589] loop4: p1 start 460800 is beyond EOD, truncated [ 99.327486][ T5589] loop4: p2 size 83886080 extends beyond EOD, truncated [ 99.337071][ T5589] loop4: p5 start 460800 is beyond EOD, truncated [ 99.343549][ T5589] loop4: p6 size 83886080 extends beyond EOD, truncated [ 99.500522][ T5599] lo speed is unknown, defaulting to 1000 [ 99.507368][ T5599] lo speed is unknown, defaulting to 1000 [ 99.587778][ T5603] x_tables: duplicate underflow at hook 3 [ 99.815941][ T29] kauditd_printk_skb: 1269 callbacks suppressed [ 99.815962][ T29] audit: type=1326 audit(99.794:11315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 99.845030][ T29] audit: type=1326 audit(99.794:11316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 99.866756][ T5605] x_tables: duplicate underflow at hook 3 [ 99.885165][ T29] audit: type=1326 audit(99.844:11317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 99.907977][ T29] audit: type=1326 audit(99.844:11318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 99.931387][ T29] audit: type=1326 audit(99.844:11319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 99.954310][ T29] audit: type=1326 audit(99.844:11320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 99.977237][ T29] audit: type=1326 audit(99.844:11321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 99.999967][ T29] audit: type=1326 audit(99.844:11322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 100.022665][ T29] audit: type=1326 audit(99.844:11323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 100.045286][ T29] audit: type=1326 audit(99.844:11324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0c20f6c9 code=0x7ffc0000 [ 100.156776][ T5612] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.167475][ T5615] loop4: detected capacity change from 0 to 1024 [ 100.181317][ T5615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.199314][ T5614] netlink: 4 bytes leftover after parsing attributes in process `'. [ 100.207901][ T5614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.217380][ T5614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.226042][ T5614] bridge0: port 3(batadv0) entered disabled state [ 100.238122][ T5612] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.320757][ T5612] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.357788][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.388653][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 100.414008][ T5625] netlink: 156 bytes leftover after parsing attributes in process `syz.4.503'. [ 100.428614][ T5625] netlink: 156 bytes leftover after parsing attributes in process `syz.4.503'. [ 100.448731][ T5623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 100.463376][ T5612] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.608995][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.685813][ T5631] siw: device registration error -23 [ 100.799567][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.817151][ T5638] x_tables: duplicate underflow at hook 3 [ 100.853689][ T5634] lo speed is unknown, defaulting to 1000 [ 100.873323][ T5634] lo speed is unknown, defaulting to 1000 [ 100.902738][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.933721][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.147497][ T5642] x_tables: duplicate underflow at hook 3 [ 101.179412][ T5647] x_tables: duplicate underflow at hook 3 [ 101.226548][ T5647] loop4: detected capacity change from 0 to 512 [ 101.305609][ T5647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.390128][ T5655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.490090][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.508225][ T5655] __nla_validate_parse: 2 callbacks suppressed [ 101.508242][ T5655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 101.764356][ T5661] netlink: 4 bytes leftover after parsing attributes in process `'. [ 101.847068][ T5662] geneve2: entered promiscuous mode [ 101.865777][ T1701] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.883990][ T1701] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.905911][ T1701] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.914339][ T1701] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.063660][ T5667] netlink: 156 bytes leftover after parsing attributes in process `syz.0.520'. [ 102.077259][ T5668] loop4: detected capacity change from 0 to 1024 [ 102.083027][ T5667] netlink: 156 bytes leftover after parsing attributes in process `syz.0.520'. [ 102.090155][ T5668] ext4: Unknown parameter 'uid<00000000000000000000' [ 102.108537][ T5668] netlink: 20 bytes leftover after parsing attributes in process `gtp'. [ 102.173256][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 102.189932][ T5669] netlink: 4 bytes leftover after parsing attributes in process `'. [ 102.293661][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 102.567156][ T5687] x_tables: duplicate underflow at hook 3 [ 102.900268][ T5683] loop4: detected capacity change from 0 to 512 [ 103.336255][ T5683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.418395][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.488053][ T5692] x_tables: duplicate underflow at hook 3 [ 103.496379][ T5693] loop4: detected capacity change from 0 to 512 [ 103.656952][ T5701] x_tables: duplicate underflow at hook 3 [ 103.718464][ T5705] geneve3: entered promiscuous mode [ 103.724529][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.744215][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.763704][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.772749][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.990781][ T5710] netlink: 156 bytes leftover after parsing attributes in process `syz.3.533'. [ 103.999817][ T5710] netlink: 156 bytes leftover after parsing attributes in process `syz.3.533'. [ 104.732673][ T5733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.921062][ T29] kauditd_printk_skb: 662 callbacks suppressed [ 104.921078][ T29] audit: type=1326 audit(104.894:11987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 104.950104][ T29] audit: type=1326 audit(104.894:11988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 104.972414][ T29] audit: type=1326 audit(104.894:11989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 105.000024][ T5734] x_tables: duplicate underflow at hook 3 [ 105.074573][ T29] audit: type=1326 audit(104.974:11990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 105.096859][ T29] audit: type=1326 audit(104.974:11991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 105.119185][ T29] audit: type=1326 audit(104.974:11992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 105.127442][ T5739] tmpfs: Bad value for 'mpol' [ 105.141719][ T29] audit: type=1326 audit(104.974:11993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 105.168748][ T29] audit: type=1326 audit(104.974:11994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 105.176480][ T5739] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 105.191059][ T29] audit: type=1326 audit(105.014:11995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 105.222999][ T29] audit: type=1326 audit(105.014:11996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83179ff6c9 code=0x7ffc0000 [ 105.450843][ T5741] x_tables: duplicate underflow at hook 3 [ 105.618931][ T5741] loop4: detected capacity change from 0 to 512 [ 105.682239][ T5747] lo speed is unknown, defaulting to 1000 [ 105.683776][ T5741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.689150][ T5747] lo speed is unknown, defaulting to 1000 [ 105.743620][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.786874][ T5753] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.868673][ T5753] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.975587][ T5753] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.055716][ T5753] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.076496][ T5755] x_tables: duplicate underflow at hook 3 [ 106.155402][ T53] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.174745][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.190591][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.221499][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.683642][ T5776] loop4: detected capacity change from 0 to 512 [ 106.715340][ T5776] EXT4-fs (loop4): too many log groups per flexible block group [ 106.730695][ T5776] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 106.737813][ T5776] EXT4-fs (loop4): mount failed [ 106.863936][ T5784] __nla_validate_parse: 8 callbacks suppressed [ 106.863950][ T5784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 106.969930][ T5782] x_tables: duplicate underflow at hook 3 [ 107.816757][ T5812] : renamed from vlan0 [ 107.837033][ T5811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.566'. [ 107.962776][ T5819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.025391][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 108.215009][ T5829] loop4: detected capacity change from 0 to 128 [ 108.384850][ T5833] tmpfs: Bad value for 'mpol' [ 108.959761][ T5846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.968793][ T5846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.996736][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 109.007860][ T5852] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 109.038714][ T5848] siw: device registration error -23 [ 109.055096][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 109.075192][ T5857] loop4: detected capacity change from 0 to 512 [ 109.172420][ T5855] lo speed is unknown, defaulting to 1000 [ 109.179479][ T5855] lo speed is unknown, defaulting to 1000 [ 109.224373][ T5857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.269995][ T5857] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 109.311497][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 109.457963][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.836637][ T5876] netlink: 4 bytes leftover after parsing attributes in process `'. [ 109.937991][ T5850] syz.2.563 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 109.948711][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz.2.563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.948738][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.948749][ T5850] Call Trace: [ 109.948755][ T5850] [ 109.948761][ T5850] __dump_stack+0x1d/0x30 [ 109.948786][ T5850] dump_stack_lvl+0xe8/0x140 [ 109.948832][ T5850] dump_stack+0x15/0x1b [ 109.948929][ T5850] dump_header+0x81/0x220 [ 109.948949][ T5850] oom_kill_process+0x342/0x400 [ 109.948982][ T5850] out_of_memory+0x979/0xb80 [ 109.949018][ T5850] try_charge_memcg+0x610/0xa10 [ 109.949073][ T5850] charge_memcg+0x51/0xc0 [ 109.949094][ T5850] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 109.949121][ T5850] __read_swap_cache_async+0x17b/0x2d0 [ 109.949218][ T5850] swap_cluster_readahead+0x262/0x3c0 [ 109.949254][ T5850] swapin_readahead+0xde/0x6f0 [ 109.949355][ T5850] ? __htab_map_lookup_elem+0x129/0x150 [ 109.949383][ T5850] ? __rcu_read_unlock+0x4f/0x70 [ 109.949411][ T5850] ? __rcu_read_unlock+0x4f/0x70 [ 109.949475][ T5850] ? swap_cache_get_folio+0x277/0x280 [ 109.949574][ T5850] do_swap_page+0x2ae/0x2370 [ 109.949599][ T5850] ? _raw_spin_unlock+0x26/0x50 [ 109.949621][ T5850] ? finish_task_switch+0xad/0x2b0 [ 109.949644][ T5850] ? __pfx_default_wake_function+0x10/0x10 [ 109.949776][ T5850] handle_mm_fault+0x9a5/0x2be0 [ 109.949805][ T5850] ? vma_start_read+0x141/0x1f0 [ 109.949842][ T5850] do_user_addr_fault+0x630/0x1080 [ 109.949875][ T5850] ? fpregs_restore_userregs+0xe2/0x1d0 [ 109.949956][ T5850] ? switch_fpu_return+0xe/0x20 [ 109.949993][ T5850] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.950084][ T5850] exc_page_fault+0x62/0xa0 [ 109.950110][ T5850] asm_exc_page_fault+0x26/0x30 [ 109.950150][ T5850] RIP: 0033:0x7f83178d120e [ 109.950167][ T5850] Code: e9 47 cf 12 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d eb 0d 38 00 00 89 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85 [ 109.950188][ T5850] RSP: 002b:00007fff48a17380 EFLAGS: 00010202 [ 109.950207][ T5850] RAX: 00007f8317c55fa0 RBX: 00007f8317c55fa0 RCX: 0000000000000026 [ 109.950221][ T5850] RDX: 0000000000000001 RSI: 00007f8317c56038 RDI: 0000000000000009 [ 109.950240][ T5850] RBP: 00007f8317c57da0 R08: 0000000000000001 R09: 0000000000000026 [ 109.950253][ T5850] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000001aceb [ 109.950341][ T5850] R13: 00007f8317c56090 R14: ffffffffffffffff R15: 00007fff48a17500 [ 109.950360][ T5850] [ 109.950367][ T5850] memory: usage 307200kB, limit 307200kB, failcnt 387 [ 110.195861][ T5850] memory+swap: usage 307768kB, limit 9007199254740988kB, failcnt 0 [ 110.203778][ T5850] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 110.211067][ T5850] Memory cgroup stats for /syz2: [ 110.212114][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 110.212130][ T29] audit: type=1326 audit(110.184:12573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm=8B exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5d74ef6c9 code=0x7ffc0000 [ 110.297842][ T5873] x_tables: duplicate underflow at hook 3 [ 110.306438][ T5871] loop4: detected capacity change from 0 to 32768 [ 110.314663][ T5850] cache 0 [ 110.317644][ T5850] rss 0 [ 110.320420][ T5850] shmem 0 [ 110.323479][ T5850] mapped_file 0 [ 110.324606][ T29] audit: type=1326 audit(110.224:12574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm=8B exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d74ef6c9 code=0x7ffc0000 [ 110.326944][ T5850] dirty 0 [ 110.349035][ T29] audit: type=1326 audit(110.224:12575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm=8B exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd5d74ef6c9 code=0x7ffc0000 [ 110.351925][ T5850] writeback 0 [ 110.351933][ T5850] workingset_refault_anon 137 [ 110.351941][ T5850] workingset_refault_file 968 [ 110.351948][ T5850] swap 581632 [ 110.351955][ T5850] swapcached 0 [ 110.351961][ T5850] pgpgin 87669 [ 110.351967][ T5850] pgpgout 87669 [ 110.351974][ T5850] pgfault 79554 [ 110.351981][ T5850] pgmajfault 105 [ 110.373952][ T29] audit: type=1326 audit(110.234:12576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm=8B exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d74ef6c9 code=0x7ffc0000 [ 110.377205][ T5850] inactive_anon 0 [ 110.377216][ T5850] active_anon 0 [ 110.381878][ T29] audit: type=1326 audit(110.234:12577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm=8B exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5d74ef6c9 code=0x7ffc0000 [ 110.386550][ T5850] inactive_file 0 [ 110.386560][ T5850] active_file 0 [ 110.389842][ T29] audit: type=1326 audit(110.234:12578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm=8B exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d74ef6c9 code=0x7ffc0000 [ 110.393217][ T5850] unevictable 0 [ 110.393227][ T5850] hierarchical_memory_limit 314572800 [ 110.393244][ T5850] hierarchical_memsw_limit 9223372036854771712 [ 110.396613][ T29] audit: type=1326 audit(110.234:12579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm=8B exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5d74ef6c9 code=0x7ffc0000 [ 110.400052][ T5850] total_cache 0 [ 110.400062][ T5850] total_rss 0 [ 110.403532][ T29] audit: type=1326 audit(110.234:12580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm=8B exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d74ef6c9 code=0x7ffc0000 [ 110.407050][ T5850] total_shmem 0 [ 110.407060][ T5850] total_mapped_file 0 [ 110.429059][ T29] audit: type=1326 audit(110.244:12581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm=8B exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd5d74ef6c9 code=0x7ffc0000 [ 110.432684][ T5850] total_dirty 0 [ 110.436151][ T29] audit: type=1326 audit(110.244:12582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm=8B exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d74ef6c9 code=0x7ffc0000 [ 110.458028][ T5850] total_writeback 0 [ 110.611194][ T5850] total_workingset_refault_anon 137 [ 110.616388][ T5850] total_workingset_refault_file 968 [ 110.621574][ T5850] total_swap 581632 [ 110.625382][ T5850] total_swapcached 0 [ 110.629259][ T5850] total_pgpgin 87669 [ 110.633139][ T5850] total_pgpgout 87669 [ 110.637103][ T5850] total_pgfault 79554 [ 110.641114][ T5850] total_pgmajfault 105 [ 110.645170][ T5850] total_inactive_anon 0 [ 110.649307][ T5850] total_active_anon 0 [ 110.653274][ T5850] total_inactive_file 0 [ 110.657461][ T5850] total_active_file 0 [ 110.661415][ T5850] total_unevictable 0 [ 110.665450][ T5850] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.72,pid=3870,uid=0 [ 110.679827][ T5850] Memory cgroup out of memory: Killed process 3870 (syz.2.72) total-vm:95872kB, anon-rss:1176kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 110.714496][ T5871] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 110.719853][ T5871] loop4: p1 start 460800 is beyond EOD, truncated [ 110.726323][ T5871] loop4: p2 size 83886080 extends beyond EOD, truncated [ 110.757091][ T5871] loop4: p5 start 460800 is beyond EOD, truncated [ 110.763712][ T5871] loop4: p6 size 83886080 extends beyond EOD, truncated [ 110.786487][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 110.795448][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 110.807339][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 110.867835][ T5899] netlink: 'syz.3.578': attribute type 39 has an invalid length. [ 110.926455][ T5897] program syz.4.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.940812][ T5897] program syz.4.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.991102][ T5850] syz.2.563 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 111.001917][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz.2.563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.001948][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.001966][ T5850] Call Trace: [ 111.001972][ T5850] [ 111.002020][ T5850] __dump_stack+0x1d/0x30 [ 111.002041][ T5850] dump_stack_lvl+0xe8/0x140 [ 111.002063][ T5850] dump_stack+0x15/0x1b [ 111.002085][ T5850] dump_header+0x81/0x220 [ 111.002183][ T5850] oom_kill_process+0x342/0x400 [ 111.002211][ T5850] out_of_memory+0x979/0xb80 [ 111.002306][ T5850] try_charge_memcg+0x610/0xa10 [ 111.002336][ T5850] charge_memcg+0x51/0xc0 [ 111.002385][ T5850] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 111.002428][ T5850] __read_swap_cache_async+0x17b/0x2d0 [ 111.002453][ T5850] swap_cluster_readahead+0x362/0x3c0 [ 111.002508][ T5850] swapin_readahead+0xde/0x6f0 [ 111.002532][ T5850] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 111.002576][ T5850] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 111.002726][ T5850] ? __rcu_read_unlock+0x4f/0x70 [ 111.002817][ T5850] ? swap_cache_get_folio+0x277/0x280 [ 111.002894][ T5850] do_swap_page+0x2ae/0x2370 [ 111.002930][ T5850] ? css_rstat_updated+0xb7/0x240 [ 111.002950][ T5850] ? __pfx_default_wake_function+0x10/0x10 [ 111.002980][ T5850] handle_mm_fault+0x9a5/0x2be0 [ 111.003012][ T5850] ? vma_start_read+0x141/0x1f0 [ 111.003051][ T5850] do_user_addr_fault+0x630/0x1080 [ 111.003080][ T5850] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 111.003171][ T5850] exc_page_fault+0x62/0xa0 [ 111.003198][ T5850] asm_exc_page_fault+0x26/0x30 [ 111.003223][ T5850] RIP: 0033:0x7f83178deebf [ 111.003239][ T5850] Code: b7 03 00 00 4c 8b 52 38 49 89 d0 4c 03 52 18 c6 47 4e 01 8b 52 04 48 89 fb 48 89 d0 49 8d 14 d2 49 39 50 28 0f 82 b5 03 00 00 44 24 1e 01 45 31 ff 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 [ 111.003259][ T5850] RSP: 002b:00007fff48a17310 EFLAGS: 00010246 [ 111.003324][ T5850] RAX: 000000000007ffff RBX: 00007f8318785720 RCX: 0000000000000001 [ 111.003338][ T5850] RDX: 00007f8317867000 RSI: 0000000000000009 RDI: 00007f8318785720 [ 111.003350][ T5850] RBP: 00007f8317c56038 R08: 00007f8317c56038 R09: 0000000000000026 [ 111.003364][ T5850] R10: 00007f8317467008 R11: 0000000000000293 R12: 0000000000000001 [ 111.003379][ T5850] R13: 0000000000000000 R14: ffffffffffffffff R15: 00007fff48a17500 [ 111.003399][ T5850] [ 111.036314][ T5365] udevd[5365]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 111.038315][ T5850] memory: usage 307200kB, limit 307200kB, failcnt 617 [ 111.050824][ T5910] udevd[5910]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 111.051730][ T5850] memory+swap: usage 307592kB, limit 9007199254740988kB, failcnt 0 [ 111.058124][ T5489] udevd[5489]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 111.061189][ T5850] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 111.073179][ T5490] udevd[5490]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 111.076992][ T5850] Memory cgroup stats for /syz2: [ 111.289514][ T5850] cache 0 [ 111.297476][ T5850] rss 0 [ 111.300250][ T5850] shmem 0 [ 111.303415][ T5850] mapped_file 0 [ 111.306881][ T5850] dirty 0 [ 111.309829][ T5850] writeback 0 [ 111.313192][ T5850] workingset_refault_anon 153 [ 111.317874][ T5850] workingset_refault_file 983 [ 111.322599][ T5850] swap 401408 [ 111.325981][ T5850] swapcached 0 [ 111.329365][ T5850] pgpgin 87700 [ 111.332812][ T5850] pgpgout 87700 [ 111.336282][ T5850] pgfault 79571 [ 111.339760][ T5850] pgmajfault 119 [ 111.343442][ T5850] inactive_anon 0 [ 111.347133][ T5850] active_anon 0 [ 111.350604][ T5850] inactive_file 0 [ 111.354323][ T5850] active_file 0 [ 111.357786][ T5850] unevictable 0 [ 111.361245][ T5850] hierarchical_memory_limit 314572800 [ 111.366711][ T5850] hierarchical_memsw_limit 9223372036854771712 [ 111.372915][ T5850] total_cache 0 [ 111.376418][ T5850] total_rss 0 [ 111.379754][ T5850] total_shmem 0 [ 111.383268][ T5850] total_mapped_file 0 [ 111.387233][ T5850] total_dirty 0 [ 111.390748][ T5850] total_writeback 0 [ 111.394589][ T5850] total_workingset_refault_anon 153 [ 111.399789][ T5850] total_workingset_refault_file 983 [ 111.405056][ T5850] total_swap 401408 [ 111.408867][ T5850] total_swapcached 0 [ 111.412880][ T5850] total_pgpgin 87700 [ 111.416798][ T5850] total_pgpgout 87700 [ 111.420780][ T5850] total_pgfault 79571 [ 111.424801][ T5850] total_pgmajfault 119 [ 111.428875][ T5850] total_inactive_anon 0 [ 111.433130][ T5850] total_active_anon 0 [ 111.436589][ T5940] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.437112][ T5850] total_inactive_file 0 [ 111.437124][ T5850] total_active_file 0 [ 111.437133][ T5850] total_unevictable 0 [ 111.456637][ T5850] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.563,pid=5850,uid=0 [ 111.471187][ T5850] Memory cgroup out of memory: Killed process 5850 (syz.2.563) total-vm:96116kB, anon-rss:1264kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 111.492720][ T5851] ================================================================== [ 111.500830][ T5851] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 111.510676][ T5851] [ 111.513001][ T5851] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 111.521070][ T5851] tick_do_update_jiffies64+0x113/0x1c0 [ 111.526642][ T5851] tick_nohz_handler+0x7f/0x2d0 [ 111.531521][ T5851] __hrtimer_run_queues+0x20f/0x5a0 [ 111.536732][ T5851] hrtimer_interrupt+0x21a/0x460 [ 111.541689][ T5851] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 111.547610][ T5851] sysvec_apic_timer_interrupt+0x6f/0x80 [ 111.553267][ T5851] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.559263][ T5851] __tsan_read8+0xfc/0x190 [ 111.563709][ T5851] bpf_trace_run2+0xf5/0x1c0 [ 111.568327][ T5851] __traceiter_kfree+0x2e/0x50 [ 111.573094][ T5851] kfree+0x351/0x400 [ 111.577003][ T5851] shrink_lruvec+0x2a5/0x1b50 [ 111.581691][ T5851] shrink_node+0x686/0x2120 [ 111.586209][ T5851] do_try_to_free_pages+0x3f6/0xcd0 [ 111.591418][ T5851] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 111.597325][ T5851] try_charge_memcg+0x383/0xa10 [ 111.602197][ T5851] charge_memcg+0x51/0xc0 [ 111.606544][ T5851] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 111.612532][ T5851] __read_swap_cache_async+0x17b/0x2d0 [ 111.617999][ T5851] swap_cluster_readahead+0x362/0x3c0 [ 111.623380][ T5851] swapin_readahead+0xde/0x6f0 [ 111.628154][ T5851] do_swap_page+0x2ae/0x2370 [ 111.632769][ T5851] handle_mm_fault+0x9a5/0x2be0 [ 111.637642][ T5851] do_user_addr_fault+0x3fe/0x1080 [ 111.642778][ T5851] exc_page_fault+0x62/0xa0 [ 111.647296][ T5851] asm_exc_page_fault+0x26/0x30 [ 111.652156][ T5851] __get_user_8+0x14/0x30 [ 111.656508][ T5851] exit_robust_list+0x31/0x280 [ 111.661290][ T5851] futex_exit_release+0xe0/0x130 [ 111.666252][ T5851] exit_mm_release+0x1a/0x30 [ 111.670860][ T5851] exit_mm+0x38/0x180 [ 111.674817][ T5851] do_exit+0x417/0x15c0 [ 111.678948][ T5851] do_group_exit+0xff/0x140 [ 111.683423][ T5851] get_signal+0xe58/0xf70 [ 111.687728][ T5851] arch_do_signal_or_restart+0x96/0x440 [ 111.693250][ T5851] exit_to_user_mode_loop+0x77/0x110 [ 111.698514][ T5851] do_syscall_64+0x1d6/0x200 [ 111.703095][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.708962][ T5851] [ 111.711263][ T5851] read to 0xffffffff868099c0 of 8 bytes by task 5851 on cpu 0: [ 111.718779][ T5851] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 111.725003][ T5851] count_shadow_nodes+0x6a/0x230 [ 111.729915][ T5851] do_shrink_slab+0x63/0x680 [ 111.734486][ T5851] shrink_slab+0x448/0x760 [ 111.738882][ T5851] shrink_node+0x6c3/0x2120 [ 111.743362][ T5851] do_try_to_free_pages+0x3f6/0xcd0 [ 111.748538][ T5851] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 111.754410][ T5851] try_charge_memcg+0x383/0xa10 [ 111.759238][ T5851] obj_cgroup_charge_pages+0xa6/0x150 [ 111.764586][ T5851] __memcg_kmem_charge_page+0x9f/0x170 [ 111.770021][ T5851] __alloc_frozen_pages_noprof+0x188/0x360 [ 111.775800][ T5851] alloc_pages_mpol+0xb3/0x260 [ 111.780538][ T5851] alloc_pages_noprof+0x90/0x130 [ 111.785451][ T5851] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 111.791236][ T5851] __kvmalloc_node_noprof+0x483/0x670 [ 111.796590][ T5851] ip_set_alloc+0x24/0x30 [ 111.800899][ T5851] hash_netiface_create+0x282/0x740 [ 111.806075][ T5851] ip_set_create+0x3cc/0x970 [ 111.810641][ T5851] nfnetlink_rcv_msg+0x4c6/0x590 [ 111.815558][ T5851] netlink_rcv_skb+0x123/0x220 [ 111.820301][ T5851] nfnetlink_rcv+0x167/0x16c0 [ 111.824953][ T5851] netlink_unicast+0x5c0/0x690 [ 111.829696][ T5851] netlink_sendmsg+0x58b/0x6b0 [ 111.834434][ T5851] __sock_sendmsg+0x145/0x180 [ 111.839088][ T5851] ____sys_sendmsg+0x31e/0x4e0 [ 111.843835][ T5851] ___sys_sendmsg+0x17b/0x1d0 [ 111.848488][ T5851] __x64_sys_sendmsg+0xd4/0x160 [ 111.853311][ T5851] x64_sys_call+0x191e/0x3000 [ 111.857964][ T5851] do_syscall_64+0xd2/0x200 [ 111.862440][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.868307][ T5851] [ 111.870606][ T5851] value changed: 0x00000000ffffb62d -> 0x00000000ffffb62e [ 111.877684][ T5851] [ 111.879986][ T5851] Reported by Kernel Concurrency Sanitizer on: [ 111.886108][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz.2.563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.895713][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.905743][ T5851] ================================================================== [ 111.977055][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 111.986015][ T5942] netlink: 312 bytes leftover after parsing attributes in process `syz.4.581'.