last executing test programs: 16.983218171s ago: executing program 4 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18, r1}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0xffdd}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000002c0)={0x18, 0x0, {0x5, @multicast, 'ip_vti0\x00'}}, 0x1e) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) r9 = msgget$private(0x0, 0x100) msgsnd(r9, &(0x7f0000003900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) msgctl$IPC_SET(r9, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x17}, 0x0, 0x0, 0x1, 0x1414, 0x10041, 0x9, 0xffffffffffffffc9, 0x8, 0x8582, 0x6}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r11, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) ioctl$sock_ifreq(r10, 0x891a, &(0x7f0000000100)={'batadv_slave_1\x00', @ifru_data=&(0x7f0000000040)="4150034d686b54d740897f482a6e276c19ce29fbc7a7dfeb8a779872a83a03fa"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f0000000080)) 16.810281585s ago: executing program 4 (id=48): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) r2 = timerfd_create(0x6, 0x80800) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x310, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xc}, {0x8, 0x8}, {0xfffe, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008080) timerfd_gettime(r2, &(0x7f0000000040)) 16.117705611s ago: executing program 4 (id=52): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r4 = getpid() mq_notify(r0, &(0x7f00000002c0)={0x0, 0x3c, 0x1, @tid=r4}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") 15.546267917s ago: executing program 4 (id=58): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@usrquota}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet6(0xa, 0x1, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x121c00, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/136, 0x88}, {0x0}, {&(0x7f0000000200)=""/222, 0xde}, {0x0}, {0x0}], 0x5, 0x5, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000bfb8a3b6117617520000000400000000003b3d1fe3d85f02cb4694827aa36f062e41a6f2b24b8887b39c8c18e61fbda03874a7ac02e3b8a8b8b6a956911d7a75511f3b83659d52e9177a503b536d349cac71ee39d918c16d50f186488a1bc4d141a7a4d04d09c85694f09e5dc09499b8e2dbd305ccbb6faf", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES16=0x0, @ANYRESHEX=r1], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000a56ed8936607f22cf8ffffffb70300000800"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) bind$can_raw(r5, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 15.12744284s ago: executing program 4 (id=65): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_wait(r2, &(0x7f0000004140)=[{}], 0x1, 0x4000005) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) setpriority(0x2, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000003000080000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="0a00000004000000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d494a68af8e25a798b4363e7dd78e1d5638507caa45c8c09c4c6e76bd088e9644c7e8f56d64929e46bd4d9deb210c9fb5137f1c9c811c5aff288ef0e19361664fc4240756815a585a3a59aad7f02b7d3e54533131192214c9df7eea277638a19cbd703e2589c6789bd96cbfa0f86e4d9edc841117a63b084724f5e87e84aee99796e36786df5da85d7ef09d5759da5c6acdd27a88c28432f73339d8c95973d7881336e377e57637623fd01ea82996c7c9489c6d9f5d54b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) write$cgroup_subtree(r5, 0x0, 0xfe33) r9 = getpgrp(0xffffffffffffffff) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r9, r10, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x20, &(0x7f0000000180)={&(0x7f0000000080)=""/45, 0x2d, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0x8000, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000003020d9801fc2582121f2f8c3a9617b6402ef9681fc996c74e89c469c1ece57a714104d0f0fac9308acd3097a77d9fcc9dcdefafe26dbd00fdc821561a85abc9f3d8f4d95c9ea07bb1bb8e6cf4a65a4260bdb4cf983cb838229fcbb081632b866d39c9e1449901136f6b9eade6c4b35525e5b07635104fc393095fe555868f3fd2904639425d27aeb9644660aa054a883d74f0afaf0289e22ed0ba4f41246c5d395bbcb19238eeb2702d92bc9fffaf57c9c414ea15f8333f074dc", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000001000000000001000000181100007a1a234efb6778f4f432b58caa6bb43b2e6500faab23e6ca1797a5ab771f79de90485778d4bb3c5e4056f208183e5409fb05b429c72f14c515a4f6483a2d36f7cbad34b34767d8a717586189f3", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r12}, 0x10) 14.770207299s ago: executing program 32 (id=72): r0 = epoll_create1(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000003000080000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="0a00000004000000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d494a68af8e25a798b4363e7dd78e1d5638507caa45c8c09c4c6e76bd088e9644c7e8f56d64929e46bd4d9deb210c9fb5137f1c9c811c5aff288ef0e19361664fc4240756815a585a3a59aad7f02b7d3e54533131192214c9df7eea277638a19cbd703e2589c6789bd96cbfa0f86e4d9edc841117a63b084724f5e87e84aee99796e36786df5da85d7ef09d5759da5c6acdd27a88c28432f73339d8c95973d7881336e377e57637623fd01ea82996c7c9489c6d9f5d54b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) write$cgroup_subtree(r5, 0x0, 0xfe33) r9 = getpgrp(0xffffffffffffffff) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r9, r10, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x20, &(0x7f0000000180)={&(0x7f0000000080)=""/45, 0x2d, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0x8000, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000003020d9801fc2582121f2f8c3a9617b6402ef9681fc996c74e89c469c1ece57a714104d0f0fac9308acd3097a77d9fcc9dcdefafe26dbd00fdc821561a85abc9f3d8f4d95c9ea07bb1bb8e6cf4a65a4260bdb4cf983cb838229fcbb081632b866d39c9e1449901136f6b9eade6c4b35525e5b07635104fc393095fe555868f3fd2904639425d27aeb9644660aa054a883d74f0afaf0289e22ed0ba4f41246c5d395bbcb19238eeb2702d92bc9fffaf57c9c414ea15f8333f074dc", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000001000000000001000000181100007a1a234efb6778f4f432b58caa6bb43b2e6500faab23e6ca1797a5ab771f79de90485778d4bb3c5e4056f208183e5409fb05b429c72f14c515a4f6483a2d36f7cbad34b34767d8a717586189f3", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r12}, 0x10) 12.948832476s ago: executing program 1 (id=89): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xffff7ffffffffffd}, 0x18) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x457) 12.877425652s ago: executing program 1 (id=90): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x5, [@union={0x5, 0x6, 0x0, 0x5, 0x1, 0x9, [{0xc, 0x5, 0x1}, {0x10, 0x1, 0xffffffff}, {0x10, 0x1, 0x8}, {0x8, 0x800003, 0xf}, {0x7, 0x4, 0x401}, {0x4, 0x3, 0x1000}]}, @ptr={0x10}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x1, [{0xe, 0x5, 0xa239eee}, {0xe, 0x5}, {0x9, 0x4, 0x3}, {0xe, 0x4, 0x10}]}]}, {0x0, [0x0, 0x6f, 0x61]}}, &(0x7f0000000040)=""/25, 0xd1, 0x19, 0x1, 0xfffffff8}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000008400000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) set_mempolicy(0x1, 0x0, 0x4) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r6, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1400) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000820000008600000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = dup(r3) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100003042dbd", @ANYRES32=0x0, @ANYBLOB="00080000075005002800128008000100677470001c000280080003000700000008000700dfffdf0105000500"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$l2tp6(r8, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002060103000063dd03292ee3aa6b00025844020073792890949c2346fc890300686173683a69702c6d6163000500040000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r10, 0x0, 0x25, &(0x7f0000000000)={@multicast2, @broadcast, @broadcast}, 0xc) dup3(r1, r9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) socket$netlink(0x10, 0x3, 0x0) 12.02576275s ago: executing program 1 (id=105): r0 = open(&(0x7f0000000000)='./bus\x00', 0x545742, 0xc0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x1c, r3, 0x1, 0x20, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000940)='\xc1_w\xb0\xd2O\xadT\r\xc5\xbe(\xb87\x95\b\xa4\\\t\xaa\x11\x1dVc\x86\x9d&\xae\xbc\x1e\r\xae\x0e\x89\xbe\x8b/\ar\xc3\xd5\xc6\x9di$\xe8f\xeb\\\xd8\x95\xe6\xda\x9c0\xe8\x1f}<\x12Vt\xb2Grk0\x8a\xc1\x02&\x06n\x00\xa4\'C\xc4\xfaR\xdaO\xb3\xdc\xe1\xe3\x88a^\xd2\xf3\xabj\xad\xa2B\xf5\xfe\x0e:XL\xff>\'z\xa0\xaa\xfe\'\xd9^ C\xc5\xc2-\am\xa8\xd2\xd86{G\x1bd\x8f\xc8x\x84V\x8e\x14Eiw\xdf\x1a\xacW\x19\xe9\xda\x82\xa3v\x18\xc8\x03\xff\xe7\a\x7f\x85\xfe\xbc\xc9\xd6u\x85a\xda\xa5 #Q\b\x8e\xcc\x9dYvB\xef\xb2\x1a\xed\x85\xde\xb40;&;[\xd4\x1d\x10\xb7\xb8#\x8aO^\rO\th\x04\xc7&v^\x88\xd6\xf9N\f\xee\x1d\xa3\xc8\x1c\x83s\xaar\x14\xd7\xf1\xb5\xd2]\xd0w,\xb7RKQG`\xcfk\xc3\xfe|N\x96\xf3\x19o\xd5)\xae;p\xa1\xb1\xcb\xf2\xa5\xdb\xf8\xb20m\x13\x85\xa6e\xfc\xaa2\x05K\x12RUh\x01e\xb1U\x82\n\xd1\xd5\x97J\x1d\xe6\x00\x10\x86\x11\xd2\x9a\x80\xa0\xef\xbe2\x04[g\xd5v\x99u\xd18~i\x157v\xee\xfc.\x97ji\xb6\xcd\vt\xcb,\xc44\xe0#\x9d\xf2\xc1Xm\\\xc4\xef)\xe2\xf1I;\x7f\xc3\xd8~v\x7fg\xdf\x02\x10\xc4]\x88\xdb\xc8\x8aO\xe2\x8fS\xdfk#\xd1\xf0\xdcf0\xef\xa3\xe4O\xfa\n\xdc5\xd2c\xcd\xedbc\xe9\x8dFV\x13;\x82U\xef\xaaX \xad\\z\x9b\x05\xaa#\x13[\xbc\xc3=\xfa\xe8P\xb0\xf6\x1b.\xe6p_\x95U\xd3\xba\x93\r-\xff:\x9c\xa3\x98]\xd2\x00\x84\x9b\xe9\xaa$\x9f\xbf\xbb\x05J1\xf3g\xc2\x81\x1a\xa6\xd00\x9fE\x99)-\x96\xba\x9d\fC\xd0\"\xe7b\x81\'\x99\xfb\xa2z\xa3\xf9\xde\xb4;H\xdb\x97\xde\xb8\xe7\xe00x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000700)={[{@data_journal}, {@resgid}, {@nodioread_nolock}, {@nombcache}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x582, &(0x7f0000001f80)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r10, &(0x7f0000002440)=ANY=[@ANYBLOB="08000000020003000b"], 0x0) 11.805886888s ago: executing program 1 (id=109): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@usrquota}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet6(0xa, 0x1, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x121c00, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/136, 0x88}, {0x0}, {&(0x7f0000000200)=""/222, 0xde}, {0x0}, {0x0}], 0x5, 0x5, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000bfb8a3b6117617520000000400000000003b3d1fe3d85f02cb4694827aa36f062e41a6f2b24b8887b39c8c18e61fbda03874a7ac02e3b8a8b8b6a956911d7a75511f3b83659d52e9177a503b536d349cac71ee39d918c16d50f186488a1bc4d141a7a4d04d09c85694f09e5dc09499b8e2dbd305ccbb6faf", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES16=0x0, @ANYRESHEX=r1], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000a56ed8936607f22cf8ffffffb70300000800"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) bind$can_raw(r5, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 11.486856504s ago: executing program 1 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x10001}, 0x18) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r1, 0x3, {0x0, r0}, 0x6, 0x1, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 11.268204491s ago: executing program 1 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e"]) 11.237867124s ago: executing program 33 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e"]) 2.638541907s ago: executing program 2 (id=371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0, 0x0, 0xffff7ffffffffffd}, 0x18) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x457) 2.638036187s ago: executing program 2 (id=372): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r0, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) 2.566210773s ago: executing program 2 (id=373): socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x5, 0x3, 0x0, 0xff, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xda) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) 1.882687438s ago: executing program 6 (id=394): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0xc0800) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x61, 0x17735c32, 0x8, 0x4, 0x8, 0x81}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%-010d \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x3, 0x7f, 0x4, 0x2000, r1, 0x4abd, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x22, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc47, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xa3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000400)=""/41, 0x41000, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x4, 0xffff, 0xd4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[r1, r1, r3, r1], &(0x7f00000004c0)=[{0x4, 0x4, 0xb}], 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000240)='objagg_destroy\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='svcrdma_sq_post_err\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) ioctl$FICLONE(r3, 0x40049409, r4) prlimit64(0x0, 0x3, &(0x7f0000000680)={0x39a, 0x4}, &(0x7f00000006c0)) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000740)={'gre0\x00', r6, 0x1, 0x7800, 0x9, 0x2, {{0x19, 0x4, 0x2, 0x3, 0x64, 0x66, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@noop, @lsrr={0x83, 0xb, 0xe7, [@broadcast, @private=0xa010102]}, @rr={0x7, 0x7, 0x9f, [@remote]}, @lsrr={0x83, 0x23, 0x15, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102, @multicast2, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @empty]}, @cipso={0x86, 0x1a, 0x3, [{0x7, 0xb, "73de85da9855b411b7"}, {0x2, 0x9, "5b7c04b4435145"}]}]}}}}}) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000880)={0x3, 0x0, 0x2, 0x3, 0x1, 0x0, [{0x92, 0x3, 0xffffffffffffffff, '\x00', 0x400}]}) r8 = fcntl$getown(r4, 0x9) prlimit64(r8, 0x5, &(0x7f0000000900)={0x8, 0x535}, &(0x7f0000000940)) syz_clone3(&(0x7f0000001b40)={0x2021800, &(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00), {0x19}, &(0x7f0000000a40)=""/129, 0x81, &(0x7f0000000b00)=""/4096, &(0x7f0000001b00)=[r8, r8, r8, r8, r8, r8, 0x0, r8, r8], 0x9}, 0x58) r10 = syz_clone3(&(0x7f0000002dc0)={0x120280000, &(0x7f0000001bc0), &(0x7f0000001c00), &(0x7f0000001c40), {0x2e}, &(0x7f0000001c80)=""/4096, 0x1000, &(0x7f0000002c80)=""/245, &(0x7f0000002d80)=[r8, r8], 0x2, {r7}}, 0x58) kcmp(r9, r10, 0x1, r5, r5) r11 = signalfd4(r7, &(0x7f0000002e40)={[0x7]}, 0x8, 0x80000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ec0), r7) sendmsg$NL80211_CMD_SET_QOS_MAP(r11, &(0x7f0000002fc0)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x7c, r12, 0x302, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x14}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x2}, {0x9, 0x5}, {0x81, 0x7}, {0x2, 0x4}, {0x0, 0x7}, {0xb, 0x4}, {0x5d, 0x1}, {0x5, 0x4}, {0x7, 0x5}, {0xf, 0x2}, {0x5, 0x1}, {0x5, 0x1}, {0xd, 0x4}, {0x7f, 0x5}, {0x3, 0x4}, {0x9, 0x5}, {0xf, 0x7}, {0xcf, 0x6}, {0xf2, 0x6}, {0x0, 0x5}], "34a7632b3a8d0354"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x1}, {0x3, 0x6}, {0xb7}, {0x9, 0x2}, {0xf9}, {0x2, 0x6}, {0x81, 0x3}, {0xf1, 0x1}, {0x3, 0x2}, {0x7e, 0x7}, {0x5, 0x2}, {0x81, 0x6}, {0x1, 0x1}, {0xd6}], "b8ea04c8a92e5784"}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000003040)={'team0\x00', 0x0}) r14 = accept$nfc_llcp(r11, &(0x7f0000003080), &(0x7f0000003100)=0x60) sendmsg$nl_route_sched(r11, &(0x7f0000003780)={&(0x7f0000003000), 0xc, &(0x7f0000003740)={&(0x7f0000003140)=@newchain={0x49c, 0x64, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xffff, 0x6}, {0xfff3, 0xfff3}, {0xb, 0xfffa}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x460, 0x2, [@TCA_BPF_ACT={0x45c, 0x1, [@m_connmark={0x120, 0x12, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7e19, 0x8, 0x4, 0xe, 0x7f}, 0x65f7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x1, 0x0, 0x3}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x20000000, 0x9, 0x8e}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xfffffffe, 0x0, 0x2, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x8, 0x7d, 0x7ff}, 0xff3f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x2, 0x80, 0x4}, 0x8f5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xa37, 0x7, 0x180f, 0x10001}, 0x5}}]}, {0x2b, 0x6, "42239f57963da154c88117e7a1659a6f1adef293cbd6dd5af6381e4488ebf02754be6a56d201af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xf0, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0x2, 0x9, 0x4}, 0x1}}]}, {0xa4, 0x6, "73dcd9f7f91f8392740ce227775a6a3231bff07fddfcad916c6cec84a0658a2197fc45c7b5a5a72ce773c743c7efb2f16914c13fa86592da32c99fa5bd29a4b03fc7c57ea24da8fbe4c92fe3fecd1fd99979219d0952e3da72bdec4ad78f9bde3dc75d929e62f3245eea72e2a8425cbb916632586d95ac4a467a8fb7029b1d2d6b5f2cd8d984e77f17645300aa4cfecac2e11de0dd044be1f926e3fbbf77b57e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x16c, 0x4, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfa3bd}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xc1000, 0x3, 0xffffffffffffffff, 0x8, 0x8001}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0xf2, 0x6, "f3f4d2d81256a34394cdaec9bdcc08acd6e859b2bb42ba70420aae01fcdcb36d63bd90d6b66f59372fd5f0059dcceb13be9d0756d9696148de6f4e89463a1a911170c781626ee1f8a7fd39fa6c40543eab668526b336d4f3a2bbf4749f3b96cb8b7b77a5e1199fe3a833c241800a060d2cb9ff3ef0d3a11a51bb6d0f8eb290e132723727750579f63b3e628e54de51ef433b16985780c3ca220449272d5f6620b00bc51ce214faaba7ff5289bcfa18b24f292d6686ccd611cf7c503a058873bf48172f34a6eb011720843d1c96a57df73af4bd3b7aec6a5a47bf0c22f996f138a6a903cff555508bf1f56825088a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xdc, 0x9, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x1, 0xa, 0x4}, {0x40, 0xa3, 0x3, 0x7fff}, {0x8001, 0x2a, 0x7, 0x10001}, {0xff9c, 0xd9, 0x0, 0x8}, {0x9, 0x5, 0x2, 0x5}, {0xf, 0x4, 0x55, 0xff}, {0x23d6, 0x5, 0x0, 0xd86}, {0x939, 0x3, 0x1, 0x18000}, {0x7, 0xf7, 0x4, 0x2d8e}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r14}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x545a, 0x3, 0x5, 0x1, 0x80}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0x29, 0x6, "26521c700d986669abe1a02b0701ddd98e351241ef36d5bd043ee18bf702ae7557812b598e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x7}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x4001}, 0x4001) syz_usb_connect$cdc_ncm(0x2, 0x9c, &(0x7f00000037c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x2, 0x0, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a3663ea532a1"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3ff, 0x9, 0x8}, {0x6, 0x24, 0x1a, 0xff, 0x15}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xb, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0xf2, 0x9, 0x7c, 0x200, 0xb}, @obex={0x5, 0x24, 0x15, 0x5}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0xf1, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x7, 0x9}}}}}}}]}}, &(0x7f0000003900)={0xa, &(0x7f0000003880)={0xa, 0x6, 0x200, 0x7, 0x7, 0x9, 0x40, 0x6}, 0x19, &(0x7f00000038c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "baf960daebe063f3291b5f80410c936c"}]}}) fsopen(&(0x7f0000003940)='smb3\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.296963415s ago: executing program 2 (id=397): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.249810809s ago: executing program 0 (id=399): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.186759334s ago: executing program 0 (id=401): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0, 0x0, 0xffff7ffffffffffd}, 0x18) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x457) 1.165995416s ago: executing program 0 (id=402): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.131251348s ago: executing program 2 (id=404): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 1.130025618s ago: executing program 6 (id=405): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$kcm(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) 1.064024604s ago: executing program 0 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0) 1.052041715s ago: executing program 2 (id=408): socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x5, 0x3, 0x0, 0xff, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xda) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) 1.007561488s ago: executing program 5 (id=409): r0 = open(&(0x7f0000000000)='./bus\x00', 0x545742, 0xc0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x1c, r3, 0x1, 0x20, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000940)='\xc1_w\xb0\xd2O\xadT\r\xc5\xbe(\xb87\x95\b\xa4\\\t\xaa\x11\x1dVc\x86\x9d&\xae\xbc\x1e\r\xae\x0e\x89\xbe\x8b/\ar\xc3\xd5\xc6\x9di$\xe8f\xeb\\\xd8\x95\xe6\xda\x9c0\xe8\x1f}<\x12Vt\xb2Grk0\x8a\xc1\x02&\x06n\x00\xa4\'C\xc4\xfaR\xdaO\xb3\xdc\xe1\xe3\x88a^\xd2\xf3\xabj\xad\xa2B\xf5\xfe\x0e:XL\xff>\'z\xa0\xaa\xfe\'\xd9^ C\xc5\xc2-\am\xa8\xd2\xd86{G\x1bd\x8f\xc8x\x84V\x8e\x14Eiw\xdf\x1a\xacW\x19\xe9\xda\x82\xa3v\x18\xc8\x03\xff\xe7\a\x7f\x85\xfe\xbc\xc9\xd6u\x85a\xda\xa5 #Q\b\x8e\xcc\x9dYvB\xef\xb2\x1a\xed\x85\xde\xb40;&;[\xd4\x1d\x10\xb7\xb8#\x8aO^\rO\th\x04\xc7&v^\x88\xd6\xf9N\f\xee\x1d\xa3\xc8\x1c\x83s\xaar\x14\xd7\xf1\xb5\xd2]\xd0w,\xb7RKQG`\xcfk\xc3\xfe|N\x96\xf3\x19o\xd5)\xae;p\xa1\xb1\xcb\xf2\xa5\xdb\xf8\xb20m\x13\x85\xa6e\xfc\xaa2\x05K\x12RUh\x01e\xb1U\x82\n\xd1\xd5\x97J\x1d\xe6\x00\x10\x86\x11\xd2\x9a\x80\xa0\xef\xbe2\x04[g\xd5v\x99u\xd18~i\x157v\xee\xfc.\x97ji\xb6\xcd\vt\xcb,\xc44\xe0#\x9d\xf2\xc1Xm\\\xc4\xef)\xe2\xf1I;\x7f\xc3\xd8~v\x7fg\xdf\x02\x10\xc4]\x88\xdb\xc8\x8aO\xe2\x8fS\xdfk#\xd1\xf0\xdcf0\xef\xa3\xe4O\xfa\n\xdc5\xd2c\xcd\xedbc\xe9\x8dFV\x13;\x82U\xef\xaaX \xad\\z\x9b\x05\xaa#\x13[\xbc\xc3=\xfa\xe8P\xb0\xf6\x1b.\xe6p_\x95U\xd3\xba\x93\r-\xff:\x9c\xa3\x98]\xd2\x00\x84\x9b\xe9\xaa$\x9f\xbf\xbb\x05J1\xf3g\xc2\x81\x1a\xa6\xd00\x9fE\x99)-\x96\xba\x9d\fC\xd0\"\xe7b\x81\'\x99\xfb\xa2z\xa3\xf9\xde\xb4;H\xdb\x97\xde\xb8\xe7\xe00x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000700)={[{@data_journal}, {@resgid}, {@nodioread_nolock}, {@nombcache}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x582, &(0x7f0000001f80)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r10, &(0x7f0000002440)=ANY=[@ANYBLOB="08000000020003000b"], 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r12 = socket$packet(0x11, 0x2, 0x300) bind$packet(r12, &(0x7f0000000300)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) r13 = io_uring_setup(0x560d, &(0x7f0000000680)={0x0, 0xb586, 0x2, 0xfffffffe, 0x3bd}) close_range(r13, 0xffffffffffffffff, 0x0) 1.007222558s ago: executing program 0 (id=410): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$caif_stream(0x25, 0x1, 0x0) syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==") fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)="536c2f15", 0x4}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$pppl2tp(0x18, 0x1, 0x1) pwrite64(0xffffffffffffffff, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) 938.355264ms ago: executing program 3 (id=412): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xffff7ffffffffffd}, 0x18) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x457) 846.305451ms ago: executing program 3 (id=413): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f", 0x15}], 0x1}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 826.514233ms ago: executing program 3 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, 0x0, 0x0, 0x7c00, 0x0, 0x3) 680.252355ms ago: executing program 3 (id=415): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 585.640492ms ago: executing program 3 (id=416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) fsopen(&(0x7f0000000000)='zonefs\x00', 0x1) 292.641296ms ago: executing program 3 (id=417): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x43) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r1, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = semget(0x0, 0x2, 0x82) semop(r3, &(0x7f0000000040)=[{0x0, 0x2}, {0x2, 0x8, 0x800}, {0x3, 0xc6b, 0x1400}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) socket$rds(0x15, 0x5, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0xfd45}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) fchown(r8, 0x0, 0x0) 250.91615ms ago: executing program 6 (id=418): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632", 0x25, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 220.103872ms ago: executing program 6 (id=419): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x44080) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043) 151.744497ms ago: executing program 5 (id=420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/power/pm_wakeup_irq', 0x141000, 0x20) finit_module(r1, 0x0, 0x3) 117.05809ms ago: executing program 6 (id=421): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0xfffffffffffffffc) r1 = syz_open_procfs(0x0, 0x0) unlinkat(r1, 0x0, 0x200) 116.45154ms ago: executing program 0 (id=422): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0xffff, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unshare(0x26000400) 112.045191ms ago: executing program 5 (id=423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 99.415632ms ago: executing program 6 (id=424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x84, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x3, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 72.204984ms ago: executing program 5 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, 0x0, 0x0, 0x7c00, 0x0, 0x3) 2.125579ms ago: executing program 5 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0xffdd}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x17}, 0x0, 0x0, 0x1, 0x1414, 0x10041, 0x9, 0xffffffffffffffc9, 0x8, 0x8582, 0x6}) 0s ago: executing program 5 (id=427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 36.064946][ T29] audit: type=1400 audit(1756496244.004:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 36.066291][ T3294] cgroup: Unknown subsys name 'net' [ 36.087818][ T29] audit: type=1400 audit(1756496244.004:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.115275][ T29] audit: type=1400 audit(1756496244.034:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.272709][ T3294] cgroup: Unknown subsys name 'cpuset' [ 36.279414][ T3294] cgroup: Unknown subsys name 'rlimit' [ 36.430689][ T29] audit: type=1400 audit(1756496244.364:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.456379][ T29] audit: type=1400 audit(1756496244.364:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.477071][ T29] audit: type=1400 audit(1756496244.364:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.489091][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.497559][ T29] audit: type=1400 audit(1756496244.364:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.526882][ T29] audit: type=1400 audit(1756496244.364:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.551868][ T29] audit: type=1400 audit(1756496244.364:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.553445][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.575211][ T29] audit: type=1400 audit(1756496244.444:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 38.462262][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 38.498273][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 38.584533][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.591805][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.599084][ T3305] bridge_slave_0: entered allmulticast mode [ 38.605691][ T3305] bridge_slave_0: entered promiscuous mode [ 38.614759][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.622012][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.629243][ T3305] bridge_slave_1: entered allmulticast mode [ 38.635843][ T3305] bridge_slave_1: entered promiscuous mode [ 38.649635][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 38.659113][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 38.701128][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.708472][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.715872][ T3306] bridge_slave_0: entered allmulticast mode [ 38.722772][ T3306] bridge_slave_0: entered promiscuous mode [ 38.740820][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.753933][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.761548][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.768960][ T3306] bridge_slave_1: entered allmulticast mode [ 38.775413][ T3306] bridge_slave_1: entered promiscuous mode [ 38.792046][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.814058][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 38.850928][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.858115][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.865345][ T3314] bridge_slave_0: entered allmulticast mode [ 38.871925][ T3314] bridge_slave_0: entered promiscuous mode [ 38.879961][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.897647][ T3305] team0: Port device team_slave_0 added [ 38.903632][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.910774][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.917998][ T3314] bridge_slave_1: entered allmulticast mode [ 38.924565][ T3314] bridge_slave_1: entered promiscuous mode [ 38.932078][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.956242][ T3305] team0: Port device team_slave_1 added [ 38.979334][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.994601][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.001927][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.009744][ T3304] bridge_slave_0: entered allmulticast mode [ 39.016611][ T3304] bridge_slave_0: entered promiscuous mode [ 39.034517][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.044615][ T3306] team0: Port device team_slave_0 added [ 39.053231][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.060395][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.068010][ T3304] bridge_slave_1: entered allmulticast mode [ 39.074709][ T3304] bridge_slave_1: entered promiscuous mode [ 39.081180][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.088306][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.114792][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.126798][ T3306] team0: Port device team_slave_1 added [ 39.148278][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.155450][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.181610][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.224205][ T3314] team0: Port device team_slave_0 added [ 39.230091][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.237443][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.245297][ T3310] bridge_slave_0: entered allmulticast mode [ 39.252242][ T3310] bridge_slave_0: entered promiscuous mode [ 39.259464][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.266633][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.274004][ T3310] bridge_slave_1: entered allmulticast mode [ 39.280593][ T3310] bridge_slave_1: entered promiscuous mode [ 39.288097][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.303155][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.310153][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.336353][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.348452][ T3314] team0: Port device team_slave_1 added [ 39.362060][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.376967][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.384165][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.410365][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.442842][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.460592][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.467710][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.494026][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.507124][ T3305] hsr_slave_0: entered promiscuous mode [ 39.513423][ T3305] hsr_slave_1: entered promiscuous mode [ 39.520580][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.537196][ T3304] team0: Port device team_slave_0 added [ 39.544603][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.551784][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.577882][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.602236][ T3304] team0: Port device team_slave_1 added [ 39.621330][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.628471][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.654638][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.666197][ T3310] team0: Port device team_slave_0 added [ 39.690482][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.697778][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.724097][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.735822][ T3310] team0: Port device team_slave_1 added [ 39.760048][ T3314] hsr_slave_0: entered promiscuous mode [ 39.766243][ T3314] hsr_slave_1: entered promiscuous mode [ 39.772284][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 39.778023][ T3314] Cannot create hsr debugfs directory [ 39.793382][ T3306] hsr_slave_0: entered promiscuous mode [ 39.799570][ T3306] hsr_slave_1: entered promiscuous mode [ 39.805564][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 39.811321][ T3306] Cannot create hsr debugfs directory [ 39.828428][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.835516][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.861655][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.873536][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.880507][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.906851][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.975639][ T3304] hsr_slave_0: entered promiscuous mode [ 39.981848][ T3304] hsr_slave_1: entered promiscuous mode [ 39.988046][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 39.993939][ T3304] Cannot create hsr debugfs directory [ 40.014984][ T3310] hsr_slave_0: entered promiscuous mode [ 40.021129][ T3310] hsr_slave_1: entered promiscuous mode [ 40.027293][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 40.033079][ T3310] Cannot create hsr debugfs directory [ 40.196271][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.205484][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.216909][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.227902][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.250845][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.269346][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.281635][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.294870][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.331152][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.342132][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.351174][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.362238][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.399672][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.408724][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.420295][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.430894][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.445247][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.452826][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.482386][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.494124][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.509903][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.517166][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.531341][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.542619][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.549804][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.560811][ T792] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.567993][ T792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.580873][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.590271][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.602217][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.612555][ T792] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.619805][ T792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.714751][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.751058][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.767687][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.787759][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.801362][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.813793][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.822396][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.832184][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.839439][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.863392][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.870488][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.880645][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.888110][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.905960][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.913179][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.926498][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.936631][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.943817][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.958179][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.968797][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.006851][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.014085][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.095280][ T3305] veth0_vlan: entered promiscuous mode [ 41.115562][ T3305] veth1_vlan: entered promiscuous mode [ 41.140904][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.183924][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.195872][ T3305] veth0_macvtap: entered promiscuous mode [ 41.208168][ T3305] veth1_macvtap: entered promiscuous mode [ 41.232678][ T3314] veth0_vlan: entered promiscuous mode [ 41.240589][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.253741][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.271968][ T3314] veth1_vlan: entered promiscuous mode [ 41.281616][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.309627][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.329627][ T139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.345991][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 41.346029][ T29] audit: type=1400 audit(1756496249.284:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.UOH3PQ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.357187][ T3314] veth0_macvtap: entered promiscuous mode [ 41.384234][ T29] audit: type=1400 audit(1756496249.284:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.406873][ T29] audit: type=1400 audit(1756496249.284:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.UOH3PQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.432661][ T29] audit: type=1400 audit(1756496249.284:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.437744][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.454722][ T29] audit: type=1400 audit(1756496249.284:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.UOH3PQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.465847][ T3314] veth1_macvtap: entered promiscuous mode [ 41.490197][ T29] audit: type=1400 audit(1756496249.284:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.UOH3PQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.504754][ T3306] veth0_vlan: entered promiscuous mode [ 41.523566][ T29] audit: type=1400 audit(1756496249.284:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.536157][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.555794][ T3460] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.581211][ T3306] veth1_vlan: entered promiscuous mode [ 41.599647][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.608003][ T29] audit: type=1400 audit(1756496249.494:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.634808][ T3306] veth0_macvtap: entered promiscuous mode [ 41.637778][ T29] audit: type=1400 audit(1756496249.494:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.646768][ T3306] veth1_macvtap: entered promiscuous mode [ 41.677075][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.705914][ T29] audit: type=1400 audit(1756496249.624:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.723610][ T3460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.761053][ T3304] veth0_vlan: entered promiscuous mode [ 41.769351][ T3460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.779476][ T3304] veth1_vlan: entered promiscuous mode [ 41.803563][ T3460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.816257][ T3460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.840153][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.853538][ T3310] veth0_vlan: entered promiscuous mode [ 41.860353][ T3304] veth0_macvtap: entered promiscuous mode [ 41.870846][ T3310] veth1_vlan: entered promiscuous mode [ 41.886265][ T3304] veth1_macvtap: entered promiscuous mode [ 41.898527][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.921294][ T3310] veth0_macvtap: entered promiscuous mode [ 41.945076][ T3310] veth1_macvtap: entered promiscuous mode [ 41.951905][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.967016][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.981187][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.990297][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.002358][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.017528][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.034578][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.052849][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.063386][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.075035][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.097900][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.114667][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.137548][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.156010][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.186992][ T3493] loop4: detected capacity change from 0 to 512 [ 42.188827][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.193944][ T3493] ======================================================= [ 42.193944][ T3493] WARNING: The mand mount option has been deprecated and [ 42.193944][ T3493] and is ignored by this kernel. Remove the mand [ 42.193944][ T3493] option from the mount to silence this warning. [ 42.193944][ T3493] ======================================================= [ 42.207588][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.329306][ T3496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.343534][ T3496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.351578][ T3493] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5: bg 0: block 5: invalid block bitmap [ 42.355744][ T3504] loop2: detected capacity change from 0 to 128 [ 42.367542][ T3493] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 42.381090][ T3493] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5: invalid indirect mapped block 3 (level 2) [ 42.394833][ T3493] EXT4-fs (loop4): 2 truncates cleaned up [ 42.395260][ T3493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.396485][ T3493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.405422][ T3504] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.437485][ T3504] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.499613][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.835467][ T3519] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.842984][ T3521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 42.857070][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.869207][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.896556][ T3519] loop0: detected capacity change from 0 to 8192 [ 42.975071][ T3519] ext4: Unknown parameter '-' [ 43.090274][ T3535] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 43.106255][ T3532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 43.115395][ T3532] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 43.262042][ T3549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 43.354931][ T3549] loop0: detected capacity change from 0 to 512 [ 43.364912][ T3549] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 43.391768][ T3549] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.399561][ T3549] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.23: bg 0: block 16: invalid block bitmap [ 43.414095][ T3549] EXT4-fs (loop0): Remounting filesystem read-only [ 43.420912][ T3549] EXT4-fs (loop0): 1 truncate cleaned up [ 43.427446][ T3549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.467929][ T3552] bond1: entered promiscuous mode [ 43.473432][ T3552] bond1: entered allmulticast mode [ 43.481186][ T3552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.501128][ T3552] bond1 (unregistering): Released all slaves [ 43.508922][ T3549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.559585][ T3556] loop0: detected capacity change from 0 to 512 [ 43.595502][ T3556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.622560][ T3556] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.646691][ T3561] loop4: detected capacity change from 0 to 512 [ 43.647290][ T3556] mmap: syz.0.25 (3556) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.677845][ T3561] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.26: bg 0: block 5: invalid block bitmap [ 43.703594][ T3561] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 43.723402][ T3561] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.26: invalid indirect mapped block 3 (level 2) [ 43.755749][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.757803][ T3561] EXT4-fs (loop4): 2 truncates cleaned up [ 43.774975][ T3561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.788990][ T3561] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.888709][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 44.819975][ T3586] netlink: 288 bytes leftover after parsing attributes in process `syz.1.31'. [ 45.211443][ T3593] loop1: detected capacity change from 0 to 1024 [ 45.418757][ T3593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.438443][ T3593] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.454789][ T3593] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.473625][ T3593] EXT4-fs (loop1): Remounting filesystem read-only [ 45.527425][ T3593] syz.1.35 (3593) used greatest stack depth: 9480 bytes left [ 45.654435][ T3608] syz.4.39 uses obsolete (PF_INET,SOCK_PACKET) [ 45.671113][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.678622][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.693314][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.722887][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 45.754990][ T3614] loop4: detected capacity change from 0 to 512 [ 45.783610][ T3614] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.42: bg 0: block 5: invalid block bitmap [ 45.798815][ T3606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.826847][ T3614] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 45.840395][ T3614] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.42: invalid indirect mapped block 3 (level 2) [ 45.857697][ T3614] EXT4-fs (loop4): 2 truncates cleaned up [ 45.866963][ T3614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.880703][ T3614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.967690][ T3624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 46.020108][ T51] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.032604][ T51] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.043974][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.44'. [ 46.072146][ T51] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.094225][ T51] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.443952][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 46.443973][ T29] audit: type=1400 audit(1756496254.384:486): avc: denied { write } for pid=3631 comm="syz.3.47" path="socket:[5151]" dev="sockfs" ino=5151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 46.646109][ T29] audit: type=1400 audit(1756496254.584:487): avc: denied { bind } for pid=3660 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.693149][ T3662] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 46.713819][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 46.886585][ T3633] loop3: detected capacity change from 0 to 32768 [ 46.911616][ T3646] can: request_module (can-proto-0) failed. [ 46.932846][ T3666] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 46.950377][ T3671] loop4: detected capacity change from 0 to 512 [ 46.961509][ T3498] loop3: p1 p3 < > [ 46.975105][ T3633] loop3: p1 p3 < > [ 46.986556][ T3666] loop2: detected capacity change from 0 to 512 [ 47.004007][ T3666] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.017435][ T3666] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.028143][ T3671] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.52: bg 0: block 5: invalid block bitmap [ 47.052523][ T3674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.53'. [ 47.067914][ T3671] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 47.078016][ T3666] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.51: invalid indirect mapped block 4294967295 (level 0) [ 47.135416][ T3671] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.52: invalid indirect mapped block 3 (level 2) [ 47.162151][ T3666] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.51: invalid indirect mapped block 4294967295 (level 1) [ 47.191441][ T29] audit: type=1400 audit(1756496255.114:488): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.234682][ T3671] EXT4-fs (loop4): 2 truncates cleaned up [ 47.241142][ T3666] EXT4-fs (loop2): 1 orphan inode deleted [ 47.247160][ T3666] EXT4-fs (loop2): 1 truncate cleaned up [ 47.263610][ T3671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.296789][ T3666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.300360][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 47.319644][ T29] audit: type=1400 audit(1756496255.254:489): avc: denied { read } for pid=3680 comm="syz.1.55" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.341743][ T29] audit: type=1400 audit(1756496255.254:490): avc: denied { open } for pid=3680 comm="syz.1.55" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.343167][ T3678] SELinux: ebitmap: truncated map [ 47.373522][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 47.384349][ T3678] SELinux: failed to load policy [ 47.390353][ T3671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.392390][ T3666] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.51: iget: bad extra_isize 46 (inode size 256) [ 47.419327][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 47.430715][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 47.469123][ T29] audit: type=1400 audit(1756496255.284:491): avc: denied { load_policy } for pid=3677 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 47.489320][ T29] audit: type=1400 audit(1756496255.314:492): avc: denied { ioctl } for pid=3679 comm="syz.0.56" path="socket:[5212]" dev="sockfs" ino=5212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.507310][ T3693] loop4: detected capacity change from 0 to 512 [ 47.513902][ T29] audit: type=1400 audit(1756496255.314:493): avc: denied { bind } for pid=3679 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.526106][ T3693] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.575815][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.578209][ T3696] loop3: detected capacity change from 0 to 512 [ 47.606268][ T29] audit: type=1326 audit(1756496255.454:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ccfcebe9 code=0x7ffc0000 [ 47.606310][ T29] audit: type=1326 audit(1756496255.454:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ccfcebe9 code=0x7ffc0000 [ 47.672484][ T3696] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.59: bg 0: block 5: invalid block bitmap [ 47.686944][ T3693] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84fc018, mo2=0002] [ 47.686978][ T3696] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 47.687164][ T3696] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.59: invalid indirect mapped block 3 (level 2) [ 47.695128][ T3693] System zones: [ 47.714139][ T3699] sd 0:0:1:0: device reset [ 47.717086][ T3693] 0-2, 18-18, 34-34 [ 47.731018][ T3693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.735108][ T3699] SELinux: failed to load policy [ 47.743682][ T3693] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.752690][ T3696] EXT4-fs (loop3): 2 truncates cleaned up [ 47.777021][ T3696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.790808][ T3696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.888343][ T3713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 47.898435][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 47.969899][ T3717] loop3: detected capacity change from 0 to 512 [ 47.980210][ T3717] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.66: bg 0: block 5: invalid block bitmap [ 47.995438][ T3717] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 48.016866][ T3717] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.66: invalid indirect mapped block 3 (level 2) [ 48.031925][ T3717] EXT4-fs (loop3): 2 truncates cleaned up [ 48.038333][ T3717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.053645][ T3717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.103467][ T3708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.127406][ T3460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.143035][ T3723] atomic_op ffff88811acf3528 conn xmit_atomic 0000000000000000 [ 48.156438][ T3723] netlink: 'syz.3.68': attribute type 3 has an invalid length. [ 48.165906][ T3723] netlink: 48 bytes leftover after parsing attributes in process `syz.3.68'. [ 48.189708][ T3721] loop2: detected capacity change from 0 to 32768 [ 48.223151][ T3728] capability: warning: `syz.3.70' uses 32-bit capabilities (legacy support in use) [ 48.225469][ T3460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.244767][ T3721] loop2: p1 p3 < > [ 48.368009][ T3460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.397511][ T3732] loop0: detected capacity change from 0 to 1024 [ 48.404839][ T3732] EXT4-fs: Ignoring removed orlov option [ 48.427685][ T3460] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.438792][ T3732] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 48.500606][ T3742] loop2: detected capacity change from 0 to 1024 [ 48.504731][ T3749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 48.516029][ T3749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 48.537095][ T3749] loop1: detected capacity change from 0 to 1024 [ 48.565775][ T3742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.592804][ T3742] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.610217][ T3460] bridge_slave_1: left allmulticast mode [ 48.616058][ T3460] bridge_slave_1: left promiscuous mode [ 48.621810][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.641166][ T3749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.652278][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 48.665041][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 48.694670][ T3460] bridge_slave_0: left allmulticast mode [ 48.700587][ T3460] bridge_slave_0: left promiscuous mode [ 48.706436][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.743178][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.844432][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.859022][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.870095][ T3460] bond0 (unregistering): Released all slaves [ 48.930037][ T3460] hsr_slave_0: left promiscuous mode [ 48.937636][ T3773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 48.947620][ T3460] hsr_slave_1: left promiscuous mode [ 48.957481][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.957534][ T3773] netlink: 'syz.1.80': attribute type 10 has an invalid length. [ 48.963603][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.965148][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.989994][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.997855][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.017815][ T3460] veth1_macvtap: left promiscuous mode [ 49.024040][ T3460] veth0_macvtap: left promiscuous mode [ 49.029784][ T3460] veth1_vlan: left promiscuous mode [ 49.039905][ T3460] veth0_vlan: left promiscuous mode [ 49.153275][ T3789] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 49.260627][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 49.283367][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 49.643758][ T3773] team0 (unregistering): Port device team_slave_0 removed [ 49.675079][ T3773] team0 (unregistering): Port device team_slave_1 removed [ 49.714088][ T3789] ipvlan0: entered allmulticast mode [ 49.719509][ T3789] veth0_vlan: entered allmulticast mode [ 49.728147][ T3789] team0: Device ipvlan0 failed to register rx_handler [ 49.986342][ T3745] chnl_net:caif_netlink_parms(): no params data found [ 49.992666][ T3814] loop3: detected capacity change from 0 to 512 [ 50.042810][ T3814] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.85: bg 0: block 5: invalid block bitmap [ 50.076060][ T3814] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 50.091596][ T3814] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.85: invalid indirect mapped block 3 (level 2) [ 50.113345][ T3814] EXT4-fs (loop3): 2 truncates cleaned up [ 50.120072][ T3745] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.127424][ T3745] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.132502][ T3814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.134962][ T3745] bridge_slave_0: entered allmulticast mode [ 50.155417][ T3745] bridge_slave_0: entered promiscuous mode [ 50.176148][ T3814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.188410][ T3745] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.195683][ T3745] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.203405][ T3745] bridge_slave_1: entered allmulticast mode [ 50.210074][ T3745] bridge_slave_1: entered promiscuous mode [ 50.225886][ T3844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.90'. [ 50.280910][ T3745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.297789][ T3745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.336584][ T3745] team0: Port device team_slave_0 added [ 50.343902][ T3745] team0: Port device team_slave_1 added [ 50.362576][ T3745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.369782][ T3745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.396069][ T3745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.414268][ T3857] netlink: 44 bytes leftover after parsing attributes in process `syz.2.94'. [ 50.419431][ T3859] loop3: detected capacity change from 0 to 1024 [ 50.432240][ T3745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.437949][ T3859] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.439308][ T3745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.450286][ T3859] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.476202][ T3745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.505470][ T3745] hsr_slave_0: entered promiscuous mode [ 50.521321][ T3861] Zero length message leads to an empty skb [ 50.530519][ T3859] JBD2: no valid journal superblock found [ 50.536403][ T3859] EXT4-fs (loop3): Could not load journal inode [ 50.537456][ T3745] hsr_slave_1: entered promiscuous mode [ 50.550509][ T3745] debugfs: 'hsr0' already exists in 'hsr' [ 50.556322][ T3745] Cannot create hsr debugfs directory [ 50.617356][ T3859] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 50.705803][ T3873] 9pnet: Unknown protocol version 9 [ 50.766601][ T3877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.100'. [ 50.775729][ T3877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.100'. [ 50.823337][ T3877] loop3: detected capacity change from 0 to 1024 [ 50.864296][ T3745] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.879898][ T3877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.883216][ T3745] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.913706][ T3745] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.924386][ T3745] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.952235][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.975347][ T3863] loop2: detected capacity change from 0 to 32768 [ 51.022895][ T3762] loop2: p1 p3 < > [ 51.052889][ T3908] loop1: detected capacity change from 0 to 1024 [ 51.061453][ T3863] loop2: p1 p3 < > [ 51.067390][ T3908] EXT4-fs: Ignoring removed orlov option [ 51.123526][ T3908] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 51.149125][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 51.154509][ T3745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.170112][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.194251][ T3919] loop1: detected capacity change from 0 to 512 [ 51.200652][ T3745] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.208340][ T3919] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.230088][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 51.247506][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.262725][ T3919] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84fc018, mo2=0002] [ 51.301264][ T3919] System zones: 0-2, 18-18, 34-34 [ 51.326717][ T3919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.345190][ T792] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.352481][ T792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.396896][ T3911] loop0: detected capacity change from 0 to 32768 [ 51.400142][ T3919] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.405602][ T792] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.421119][ T792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.447286][ T3498] loop0: p1 p3 < > [ 51.462948][ T3911] loop0: p1 p3 < > [ 51.504708][ T3934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.524713][ T3934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.621159][ T3745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.755608][ T3939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.810204][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 51.810235][ T29] audit: type=1400 audit(1756496259.744:778): avc: denied { execmem } for pid=3971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.832304][ T3745] veth0_vlan: entered promiscuous mode [ 51.844392][ T3969] sd 0:0:1:0: device reset [ 51.869677][ T3745] veth1_vlan: entered promiscuous mode [ 51.888655][ T3745] veth0_macvtap: entered promiscuous mode [ 51.903833][ T3745] veth1_macvtap: entered promiscuous mode [ 51.916170][ T3745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.930218][ T3745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.944021][ T313] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.966451][ T139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.982999][ T29] audit: type=1400 audit(1756496259.914:779): avc: denied { mount } for pid=3745 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.986797][ T139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.054263][ T29] audit: type=1400 audit(1756496259.924:780): avc: denied { mounton } for pid=3745 comm="syz-executor" path="/root/syzkaller.xALsa9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 52.055147][ T139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.213469][ T29] audit: type=1400 audit(1756496260.144:781): avc: denied { module_load } for pid=4001 comm="gtp" path="/sys/power/pm_wakeup_irq" dev="sysfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 52.329546][ T29] audit: type=1326 audit(1756496260.264:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93562ebe9 code=0x7ffc0000 [ 52.352900][ T29] audit: type=1326 audit(1756496260.264:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93562ebe9 code=0x7ffc0000 [ 52.376279][ T29] audit: type=1326 audit(1756496260.264:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff93562ebe9 code=0x7ffc0000 [ 52.399782][ T29] audit: type=1326 audit(1756496260.264:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93562ebe9 code=0x7ffc0000 [ 52.423294][ T29] audit: type=1326 audit(1756496260.264:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff93562ebe9 code=0x7ffc0000 [ 52.446820][ T29] audit: type=1326 audit(1756496260.264:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93562ebe9 code=0x7ffc0000 [ 52.503751][ T4015] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 52.519051][ T4018] loop2: detected capacity change from 0 to 1024 [ 52.535241][ T4018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.549523][ T4015] loop0: detected capacity change from 0 to 512 [ 52.565186][ T3974] chnl_net:caif_netlink_parms(): no params data found [ 52.574251][ T4015] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.599795][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.600351][ T4015] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.140: invalid indirect mapped block 4294967295 (level 0) [ 52.623497][ T4015] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.140: invalid indirect mapped block 4294967295 (level 1) [ 52.638774][ T4015] EXT4-fs (loop0): 1 orphan inode deleted [ 52.644693][ T4015] EXT4-fs (loop0): 1 truncate cleaned up [ 52.655385][ T4015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.689661][ T4015] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.140: iget: bad extra_isize 46 (inode size 256) [ 52.690279][ T4028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.719433][ T4028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.766845][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.777888][ T3974] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.777935][ T3974] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.778124][ T3974] bridge_slave_0: entered allmulticast mode [ 52.778638][ T3974] bridge_slave_0: entered promiscuous mode [ 52.779650][ T3974] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.779680][ T3974] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.779815][ T3974] bridge_slave_1: entered allmulticast mode [ 52.780468][ T3974] bridge_slave_1: entered promiscuous mode [ 52.851830][ T3974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.876769][ T3974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.933628][ T3974] team0: Port device team_slave_0 added [ 52.949533][ T3974] team0: Port device team_slave_1 added [ 52.957967][ T4057] __nla_validate_parse: 4 callbacks suppressed [ 52.957987][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 52.986939][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.005524][ T3974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.012678][ T3974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.039601][ T3974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.069331][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.084717][ T3974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.092014][ T3974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.118028][ T3974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.135205][ T4067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 53.144441][ T4067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 53.161414][ T4067] loop0: detected capacity change from 0 to 1024 [ 53.197866][ T4067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.213081][ T4071] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 53.221949][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.249869][ T3974] hsr_slave_0: entered promiscuous mode [ 53.257909][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.269441][ T3974] hsr_slave_1: entered promiscuous mode [ 53.275923][ T3974] debugfs: 'hsr0' already exists in 'hsr' [ 53.281821][ T3974] Cannot create hsr debugfs directory [ 53.331493][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.368756][ T4083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 53.527836][ T51] bridge_slave_1: left allmulticast mode [ 53.533636][ T51] bridge_slave_1: left promiscuous mode [ 53.539373][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.582264][ T51] bridge_slave_0: left allmulticast mode [ 53.588035][ T51] bridge_slave_0: left promiscuous mode [ 53.594018][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.711502][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.727284][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.769515][ T4118] netlink: 'syz.5.179': attribute type 1 has an invalid length. [ 53.791559][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.810132][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.822857][ T51] bond0 (unregistering): Released all slaves [ 53.880795][ T51] hsr_slave_0: left promiscuous mode [ 53.904354][ T51] hsr_slave_1: left promiscuous mode [ 53.926140][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.933665][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.971492][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.979023][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.005292][ T51] veth1_macvtap: left promiscuous mode [ 54.021046][ T51] veth0_macvtap: left promiscuous mode [ 54.028154][ T51] veth1_vlan: left promiscuous mode [ 54.034871][ T51] veth0_vlan: left promiscuous mode [ 54.124194][ T4134] loop5: detected capacity change from 0 to 32768 [ 54.152230][ T4134] loop5: p1 p3 < > [ 54.215075][ T3974] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.262219][ T3974] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.272786][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 54.273892][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 54.303653][ T3974] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.323729][ T4148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 54.332827][ T4148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 54.353984][ T3974] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.399124][ T4148] loop0: detected capacity change from 0 to 1024 [ 54.459482][ T3974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.462104][ T4148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.482351][ T3974] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.492268][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.499402][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.518746][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.525862][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.586673][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.638646][ T3974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.649236][ T3974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.850903][ T3974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.873721][ T4216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 54.883242][ T4216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 54.943368][ T4216] loop0: detected capacity change from 0 to 1024 [ 54.959629][ T4226] loop5: detected capacity change from 0 to 1024 [ 54.978716][ T4226] EXT4-fs: Ignoring removed orlov option [ 55.003545][ T4216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.031313][ T4226] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 55.113922][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.247194][ T3974] veth0_vlan: entered promiscuous mode [ 55.283376][ T3974] veth1_vlan: entered promiscuous mode [ 55.341295][ T3974] veth0_macvtap: entered promiscuous mode [ 55.368140][ T3974] veth1_macvtap: entered promiscuous mode [ 55.396948][ T3974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.425037][ T3974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.449789][ T4290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.227'. [ 55.475314][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.504585][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.531440][ T4239] loop3: detected capacity change from 0 to 32768 [ 55.555556][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.582627][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.595313][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.605985][ T3498] loop3: p1 p3 < > [ 55.628996][ T4239] loop3: p1 p3 < > [ 55.636553][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.738094][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 55.738452][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 55.798884][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 55.801831][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 55.833760][ T4322] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 55.915830][ T4336] netlink: 36 bytes leftover after parsing attributes in process `syz.5.238'. [ 55.999140][ T4299] loop6: detected capacity change from 0 to 32768 [ 56.032443][ T3498] loop6: p1 p3 < > [ 56.044711][ T4299] loop6: p1 p3 < > [ 56.117222][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 56.128878][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 56.138731][ T4356] loop6: detected capacity change from 0 to 1024 [ 56.151234][ T4356] EXT4-fs: Ignoring removed orlov option [ 56.191137][ T4356] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 56.204632][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 56.221380][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 56.386124][ T4351] loop5: detected capacity change from 0 to 32768 [ 56.432301][ T3498] loop5: p1 p3 < > [ 56.439735][ T4351] loop5: p1 p3 < > [ 56.651334][ T4385] loop5: detected capacity change from 0 to 32768 [ 56.693032][ T4385] loop5: p1 p3 < > [ 56.979719][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 56.979740][ T29] audit: type=1326 audit(1756496264.914:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 57.017748][ T29] audit: type=1326 audit(1756496264.914:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 57.041476][ T29] audit: type=1326 audit(1756496264.914:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 57.065068][ T29] audit: type=1326 audit(1756496264.914:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 57.089316][ T29] audit: type=1326 audit(1756496264.914:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 57.112720][ T29] audit: type=1326 audit(1756496264.914:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 57.136799][ T29] audit: type=1326 audit(1756496264.914:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 57.161169][ T29] audit: type=1326 audit(1756496264.914:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 57.184736][ T29] audit: type=1326 audit(1756496264.914:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 57.208504][ T29] audit: type=1326 audit(1756496264.914:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 57.334479][ T4431] loop0: detected capacity change from 0 to 1024 [ 57.396957][ T4431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.452550][ T4449] netlink: 'syz.6.278': attribute type 1 has an invalid length. [ 57.456404][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.763665][ T4469] loop6: detected capacity change from 0 to 32768 [ 57.822791][ T3498] loop6: p1 p3 < > [ 57.835363][ T4469] loop6: p1 p3 < > [ 57.893226][ T4482] loop0: detected capacity change from 0 to 32768 [ 57.955230][ T3297] loop0: p1 p3 < > [ 57.962198][ T4482] loop0: p1 p3 < > [ 57.967745][ T4500] sd 0:0:1:0: device reset [ 58.109194][ T2994] loop0: p1 p3 < > [ 58.265583][ T4532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.275614][ T4532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.402856][ T2994] loop6: p1 p3 < > [ 58.408018][ T4537] __nla_validate_parse: 3 callbacks suppressed [ 58.408036][ T4537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.311'. [ 58.410021][ T4539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.313'. [ 58.414441][ T4537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.311'. [ 58.449259][ T4537] loop3: detected capacity change from 0 to 1024 [ 58.467838][ T2994] loop0: p1 p3 < > [ 58.474856][ T4537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.567697][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.614976][ T2994] loop0: p1 p3 < > [ 58.640653][ T4558] sd 0:0:1:0: device reset [ 58.678004][ T2994] loop6: p1 p3 < > [ 58.725768][ T2994] loop0: p1 p3 < > [ 58.855139][ T2994] loop6: p1 p3 < > [ 58.908918][ T2994] loop6: p1 p3 < > [ 58.958850][ T2994] loop6: p1 p3 < > [ 59.054985][ T4602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 59.077227][ T4600] netlink: 'syz.5.336': attribute type 1 has an invalid length. [ 59.151315][ T4606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.163002][ T4606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.181775][ T2994] loop0: p1 p3 < > [ 59.219182][ T2994] loop0: p1 p3 < > [ 59.428759][ T2994] loop0: p1 p3 < > [ 59.464834][ T4637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 59.504244][ T2994] loop0: p1 p3 < > [ 59.545189][ T4639] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 59.662405][ T4646] loop5: detected capacity change from 0 to 1024 [ 59.669331][ T4646] EXT4-fs: Ignoring removed orlov option [ 59.693299][ T4646] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 59.914106][ T2994] loop0: p1 p3 < > [ 60.042717][ T2994] loop0: p1 p3 < > [ 60.078819][ T2994] loop6: p1 p3 < > [ 60.117882][ T4672] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 60.175924][ T2994] loop0: p1 p3 < > [ 60.213985][ T2994] loop6: p1 p3 < > [ 60.219120][ T4676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.238282][ T4676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.249840][ T2994] loop6: p1 p3 < > [ 60.462800][ T4680] loop3: detected capacity change from 0 to 32768 [ 60.519964][ T3498] loop3: p1 p3 < > [ 60.526687][ T4680] loop3: p1 p3 < > [ 60.560869][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 60.571454][ T4702] netlink: 'syz.5.376': attribute type 1 has an invalid length. [ 60.671617][ T2994] loop3: p1 p3 < > [ 60.733172][ T4713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.381'. [ 60.742296][ T4713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.381'. [ 60.782527][ T4715] sd 0:0:1:0: device reset [ 60.809622][ T2994] loop3: p1 p3 < > [ 60.837197][ T2994] loop0: p1 p3 < > [ 60.884043][ T2994] loop3: p1 p3 < > [ 60.930969][ T2994] loop0: p1 p3 < > [ 60.957144][ T2994] loop3: p1 p3 < > [ 61.001983][ T2994] loop0: p1 p3 < > [ 61.037206][ T2994] loop0: p1 p3 < > [ 61.090540][ T2994] loop0: p1 p3 < > [ 61.150798][ T2994] loop6: p1 p3 < > [ 61.178409][ T2994] loop0: p1 p3 < > [ 61.207852][ T2994] loop6: p1 p3 < > [ 61.262112][ T4745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.291269][ T4745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.422469][ T4730] loop5: detected capacity change from 0 to 32768 [ 61.465687][ T3297] loop5: p1 p3 < > [ 61.487120][ T4730] loop5: p1 p3 < > [ 61.597238][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 61.608199][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 61.634358][ T4752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.396'. [ 61.643355][ T4752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.396'. [ 61.678198][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 61.681428][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 61.704958][ T4759] loop5: detected capacity change from 0 to 1024 [ 61.744538][ T4759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.801466][ T2994] loop0: p1 p3 < > [ 61.832782][ T2994] loop3: p1 p3 < > [ 61.872653][ T2994] loop0: p1 p3 < > [ 61.893036][ T3745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.907628][ T2994] loop0: p1 p3 < > [ 61.931761][ T4788] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 61.975857][ T2994] loop3: p1 p3 < > [ 61.993966][ T4799] sd 0:0:1:0: device reset [ 62.013177][ T2994] loop0: p1 p3 < > [ 62.036790][ T2994] loop6: p1 p3 < > [ 62.038125][ T4803] loop5: detected capacity change from 0 to 1024 [ 62.052826][ T4803] EXT4-fs: Ignoring removed orlov option [ 62.070407][ T2994] loop0: p1 p3 < > [ 62.078973][ T4803] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 62.107380][ T2994] loop3: p1 p3 < > [ 62.155602][ T2994] loop0: p1 p3 < > [ 62.268981][ T2994] loop3: p1 p3 < > [ 62.306462][ T2994] loop3: p1 p3 < > [ 62.324787][ T29] kauditd_printk_skb: 687 callbacks suppressed [ 62.324807][ T29] audit: type=1326 audit(1756496270.264:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 62.386757][ T2994] loop3: p1 p3 < > [ 62.421528][ T29] audit: type=1326 audit(1756496270.264:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 62.444976][ T29] audit: type=1326 audit(1756496270.264:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 62.468664][ T29] audit: type=1326 audit(1756496270.264:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 62.492177][ T29] audit: type=1326 audit(1756496270.264:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 62.516172][ T29] audit: type=1326 audit(1756496270.264:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 62.540295][ T29] audit: type=1326 audit(1756496270.264:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 62.563692][ T29] audit: type=1326 audit(1756496270.264:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 62.587220][ T29] audit: type=1326 audit(1756496270.264:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 62.610645][ T29] audit: type=1326 audit(1756496270.264:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac002ebe9 code=0x7ffc0000 [ 62.611961][ T2994] loop3: p1 p3 < > [ 62.690647][ T2994] loop0: p1 p3 < > [ 62.791602][ T2994] loop3: p1 p3 < > [ 62.856993][ T2994] loop3: p1 p3 < > [ 62.909473][ T2994] loop6: p1 p3 < > [ 62.945844][ T2994] loop0: p1 p3 < > [ 62.957715][ T2994] loop6: p1 p3 < > [ 62.984031][ T2994] loop6: p1 p3 < > [ 63.161715][ T3297] ================================================================== [ 63.169894][ T3297] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 63.177104][ T3297] [ 63.179458][ T3297] write to 0xffff88810465a3d4 of 4 bytes by task 3295 on cpu 0: [ 63.187367][ T3297] shmem_symlink+0x387/0x3d0 [ 63.192113][ T3297] vfs_symlink+0xd4/0x1e0 [ 63.196474][ T3297] do_symlinkat+0xc7/0x3c0 [ 63.200912][ T3297] __x64_sys_symlink+0x50/0x60 [ 63.205787][ T3297] x64_sys_call+0x23cc/0x2ff0 [ 63.210500][ T3297] do_syscall_64+0xd2/0x200 [ 63.215141][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.221053][ T3297] [ 63.223390][ T3297] read to 0xffff88810465a3d4 of 4 bytes by task 3297 on cpu 1: [ 63.230943][ T3297] fill_mg_cmtime+0x5b/0x260 [ 63.235588][ T3297] generic_fillattr+0x24a/0x340 [ 63.240481][ T3297] shmem_getattr+0x181/0x200 [ 63.245186][ T3297] vfs_getattr_nosec+0x143/0x1e0 [ 63.250161][ T3297] vfs_statx+0x113/0x390 [ 63.254539][ T3297] vfs_fstatat+0x115/0x170 [ 63.258985][ T3297] __se_sys_newfstatat+0x55/0x260 [ 63.264068][ T3297] __x64_sys_newfstatat+0x55/0x70 [ 63.269139][ T3297] x64_sys_call+0x135a/0x2ff0 [ 63.273828][ T3297] do_syscall_64+0xd2/0x200 [ 63.278350][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.284263][ T3297] [ 63.286594][ T3297] value changed: 0x065eaf45 -> 0x06770636 [ 63.292311][ T3297] [ 63.294678][ T3297] Reported by Kernel Concurrency Sanitizer on: [ 63.300862][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.310276][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.320337][ T3297] ================================================================== [ 63.389194][ T4907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.399349][ T4907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.639817][ T2994] loop0: p1 p3 < > [ 63.656094][ T2994] loop6: p1 p3 < > [ 63.669723][ T2994] loop3: p1 p3 < >