last executing test programs: 3.154180068s ago: executing program 3 (id=233): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1280001000002020000000000080005007a010401a80016002000034004020000035c0461c900004f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c811dc0c1cd706ff2f41398d8e7369039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x20014000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0d, &(0x7f0000000400)={0x0, 0xc890, 0x2000, 0x2}, 0x0, 0x0) 3.053574718s ago: executing program 3 (id=234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8000}, 0x9c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x21a0}}, 0x850) futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x1, @loopback, 0x68}], 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x33eb4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xe0) 2.885654524s ago: executing program 0 (id=241): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 2.884812514s ago: executing program 2 (id=243): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "9e25a2275ee12db22b4a4b1f0efba8e672e2ff2b4037f0f50c6f47d12a011a4b60f6275283911cc9f17388ae51159a05932f709e01eaf24f6142387647937bd1", 0x19}, 0x48, 0xfffffffffffffff8) (async) r1 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="fe87eed49197c35b5b9dd23cfc9c7237dd113d7d0923ccb4dccffac5e31842737ba3b9", 0x23, 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="73c39971fb5d014d7985d28ccfbbf74f6f9838a566259358eedc2f5df7ded9f1e45abed85be392e72f9ff4b4596a35b68d317ed51904c1c9f0974c12febe2284b486c983e594d5115cae93fa427e94464e7d154b952435e7b01347b81dc63c3f669aa3507e81ad45ff369e6cb74c4d0ec06516f573e3305704b154aaba55c0942592cedaedf364192390f036f2cd2218491778440cae9e78e01f30f7e2329c37ad3b835688f536d33ce4801786431d3c8c5ad16f4ae98cd3e379163cac4e7909ec1fa60156336b524546c1249281d209b108d0a9f6b3afbf4bea8396f06ae431", 0xe0}, {&(0x7f0000000200)="e2f17a54845b6128b3df1bdec88c68195327f2e2e49fe094236e030fcde6467c8a9127b494b32ec435551a3a62725cc1d5", 0x31}, {&(0x7f0000000240)="389479ccf4f02a20bf45533b10e9456a184833dd68a8887a6baed8dfa0037891716d960deaf53ebaf0822105101c96986aadf4da7616321126fee845fc18d69c360b2648c950b1695578e3d9a5a8f9748c743d2b1faefcef36d9eb00780aea0c5da8bedd73dc86f0d8a4f79bd70e31d44ccb3075bc81355f98be5860", 0x7c}, {&(0x7f00000002c0)="4749b106272b45c97196930c9c0c9f4ac82a102e76845c434269e39511bcd751fd392825ae40d1725d2e14b0cc82d6a1ca2a4a27fa80cb6c2bd8106068efc997655f326bbc440a4b6ffa4b5856ebbe40670f18409ece3ecaf5e03fc2085d2ec9d3bd4810936e7c466fd69fc01a1e1358919e9295a8406444a3adf2896edb6cbfd9e0dfff4dd230fd01ad447188010d4d1989a7db4bf6f50b7681b66da5bfa2050e5b8cd0e12f7d428e0e9b1f76e08af5c8f2b3a50c557e7110995125163b7681b9a3d164a82887b71285e99859405a1a2415bbddb318854800d8", 0xda}], 0x4, r1) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) keyctl$get_persistent(0x16, r2, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_getrule={0x1c, 0x22, 0x0, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x20, 0xe, 0xe, 0x0, 0x0, 0x4}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x9755a3810194e34}, 0x40080) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="a9d2558fdd4e8fcd998ac50ed7111f27a124e0540306b2", 0x17}, {&(0x7f0000000640)="7eb5bc0d64732a713c61da3cca47e84f973af78a6abcb483c14a5c", 0x1b}, {&(0x7f0000000680)="b4729dd36dd967d348c97b588d3ff7e0cdb0a7632b166cd2969afd42c21985e1ab6eb564d652b88e88d1a343a608452b29c0718535549996460b42ab79f39dac7038c7d4ed0f3fd20a8768769801bf9f0f33e84b743aa8b9be8e58a68dc9b7fb6384f51ce4adf7ca410e511b132f87a2ee4d002aa561a5", 0x77}], 0x3, &(0x7f0000000740)=[@hoplimit={{0x14, 0x29, 0x34, 0xf994}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5f, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}}}, @hopopts={{0xe8, 0x29, 0x36, {0x2b, 0x19, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x96}, @ra, @generic={0x3, 0x75, "a6cc94c54344e5382c80f0e14f9ec6354f09f98c0fc897acfdf40606d1ca779c112a9dc2bab65ef03689535d7436438ae4e52e2cc3fd520b0c00d9be1ccc25a512f9af0656bb7c8d4f457e600db4d27a5023ff07ba32abda92d286f6640b6cfd7b882dbffc3b31804fa81c663d0bf66c1f69cafa43"}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x200}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0xfff, [0x49, 0x100000001, 0x0, 0x9e]}}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x16, 0x0, '\x00', [@pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8000}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4a}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7a}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x1e8}, 0x20000010) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000980)={0x8, r3, 'id0\x00'}) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000000a00)) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa4, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4e8c0317}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x94}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x2) r5 = openat(r4, &(0x7f0000000bc0)='./file0\x00', 0x100, 0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000c00)={0x0, @in6={{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1}}, 0x7fffffff, 0x9, 0x5, 0x72e, 0x20, 0x4, 0x7f}, &(0x7f0000000cc0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000d00)={r6, 0x9}, 0x8) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x24}}, 0x48045) (async) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x180, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x60d}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd554}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfdb}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa6b2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40005}, 0x24000004) (async) keyctl$reject(0x13, r0, 0x100, 0x8000000000000000, r0) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001) (async) sendfile(r5, r3, &(0x7f0000001080)=0x1, 0x23c) (async) r7 = add_key(&(0x7f00000011c0)='rxrpc_s\x00', &(0x7f0000001200)={'syz', 0x3}, &(0x7f0000001240)="2ef8859dc0ef365c1d66d001916777bc45fc51b5d3ac3a9e83246c5b3e5e730c86fb7b1c22d3611352686792284b27ec585c81413f9d1dc6d51026187f15b2d9edb5af1ed52d40a05252700e35f707f8dd840c90007b199b8472caf808cc60d4b178b8494767951365ce4d6e5dfff574a2cecf1e0b60b94507d75085004c", 0x7e, r0) r8 = add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc2}, &(0x7f0000001140)={0x0, "8c2c384b0cac649f6f33edec7654efcf9c4595866d26ec8ef3971982c4e9bdcec05a93bedce5f407f6c058d25d76d40afffdb0b8c8d6fe57bf1571f2dd2c8460", 0x26}, 0x48, r7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001340)={'syztnl2\x00', &(0x7f00000012c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x7e, 0x36, 0x9af, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x7, 0x400, 0x4}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x17, 0x4, 0xd6, 0x0, 0x10024, 0xffffffffffffffff, 0x0, '\x00', r9, r5, 0x1, 0x2, 0x4, 0x0, @void, @value, @value=r4}, 0x50) (async) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000001400)={{0x908, 0x1ff}, 0x100, './file0\x00'}) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001540)=[{}, {}], &(0x7f0000001580)=0x10) (async) keyctl$get_keyring_id(0x0, r8, 0x9) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002780)={0x81, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x8, 0x1f, &(0x7f00000015c0)=@raw=[@call={0x85, 0x0, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x0, 0x1, 0x1, 0x2, 0x100}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0x2, 0x5, 0xa, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}], &(0x7f00000016c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001700)=""/4096, 0x41000, 0x21, '\x00', r9, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000002700)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002740)={0x1, 0xc, 0x3ff, 0x3}, 0x10, r11, r4, 0x0, &(0x7f00000027c0)=[r10, r5]}, 0x94) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000002980)={&(0x7f00000028c0), 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004044}, 0x20000000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 2.850483668s ago: executing program 2 (id=244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x3, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$isdn(0x22, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000044c0)=0x100000000) recvmmsg(r2, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/187, 0xbb}, {&(0x7f0000000180)=""/176, 0xb0}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/108, 0x6c}], 0x6, &(0x7f0000000400)=""/142, 0x8e}, 0xb80}, {{&(0x7f00000004c0)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000640)=""/225, 0xe1}, {&(0x7f0000000740)=""/108, 0x6c}, {&(0x7f00000007c0)=""/49, 0x31}, {&(0x7f0000000800)=""/84, 0x54}], 0x5, &(0x7f0000000900)=""/99, 0x63}, 0x2}, {{&(0x7f0000000980)=@nfc_llcp, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/19, 0x13}, {&(0x7f0000001a40)=""/188, 0xbc}, {&(0x7f0000001b00)=""/121, 0x79}, {&(0x7f0000001b80)=""/181, 0xb5}, {&(0x7f0000001c40)=""/253, 0xfd}, {&(0x7f0000001d40)=""/252, 0xfc}], 0x7, &(0x7f0000001ec0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002ec0)=@pppol2tpv3in6, 0x80, &(0x7f0000003400)=[{&(0x7f0000002f40)=""/147, 0x93}, {&(0x7f0000003000)=""/163, 0xa3}, {&(0x7f00000030c0)=""/41, 0x29}, {&(0x7f0000003100)=""/182, 0xb6}, {&(0x7f00000031c0)=""/155, 0x9b}, {&(0x7f0000003280)=""/125, 0x7d}, {&(0x7f0000003300)=""/200, 0xc8}], 0x7, &(0x7f0000003480)=""/247, 0xf7}, 0x40}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003580)=""/100, 0x64}, {&(0x7f0000003600)=""/241, 0xf1}, {&(0x7f0000003700)=""/117, 0x75}], 0x3, &(0x7f00000037c0)=""/188, 0xbc}, 0x554d}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003880)=""/44, 0x2c}, {&(0x7f00000038c0)=""/216, 0xd8}, {&(0x7f00000039c0)=""/95, 0x5f}, {&(0x7f0000003a40)=""/69, 0x45}], 0x4}, 0xe}, {{&(0x7f0000003b00)=@xdp, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b80)=""/96, 0x60}, {&(0x7f0000003c00)=""/255, 0xff}, {&(0x7f0000003d00)=""/149, 0x95}, {&(0x7f0000003dc0)=""/55, 0x37}, {&(0x7f0000003e00)=""/138, 0x8a}, {&(0x7f0000003ec0)=""/79, 0x4f}], 0x6, &(0x7f0000003fc0)=""/198, 0xc6}, 0x1}, {{&(0x7f00000040c0)=@alg, 0x80, &(0x7f0000004240)=[{&(0x7f0000004140)=""/247, 0xf7}], 0x1}, 0x80}], 0x8, 0x40, &(0x7f0000004480)={0x0, 0x3938700}) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 2.535903579s ago: executing program 2 (id=249): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x80, 0x2, 0x8b4}, &(0x7f0000000240), &(0x7f0000000300)) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 2.260415856s ago: executing program 1 (id=254): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @local}, &(0x7f0000000200)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @local}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r1, 0xf94c1e8fb1efe225, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c0}, 0x800) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x52, 0x7, 0xed, 0x4, 0x67, @mcast2, @mcast2, 0x8000, 0x40, 0x100, 0x2}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r3, 0x0}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f0000002500)=""/4098, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x33) 2.260186096s ago: executing program 1 (id=255): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000a00fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 2.259290326s ago: executing program 2 (id=256): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000880)={[{@nomblk_io_submit}, {@debug}, {@errors_continue}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@jqfmt_vfsv1}, {@acl}, {@jqfmt_vfsv1}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf251800"], 0x60}}, 0x4024000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) r8 = socket(0x2, 0x3, 0x103) sendmmsg$inet(r8, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x2, 0x480c4) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000008c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) unshare(0x22020400) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10}, &(0x7f0000000300), &(0x7f00000003c0)=r11}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') 2.197693382s ago: executing program 1 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc75700"}}, 0x48}}, 0x0) 2.175342965s ago: executing program 1 (id=258): socket(0xa, 0x3, 0xfffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000}, 0x18) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x23, 0x501}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610061000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x2f) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.140801408s ago: executing program 3 (id=259): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc14000000110001000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x50, r0, 0xcbb1d000) ioctl$sock_ifreq(0xffffffffffffffff, 0x8949, &(0x7f0000000000)={'bond0\x00', @ifru_names='erspan0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000040)={0x7f, 0xe990, 0x6417, 0x5}) 2.057658606s ago: executing program 1 (id=260): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) acct(0x0) 2.057389266s ago: executing program 0 (id=261): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x446, 0xfffffffffffff24c, 0x3, 0x3b08, 0x8, 0x4a6e695e, 0x9}, &(0x7f0000000200)={0xc, 0x5, 0x8be9, 0x401, 0x2, 0x8, 0x8, 0xffffffffffff8000}, &(0x7f0000000280)={0x0, 0x1, 0x6, 0x3ff, 0x7ff, 0x8001, 0x1}, &(0x7f0000000380)={r2, r3+60000000}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x6]}, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 2.02387128s ago: executing program 1 (id=263): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xffffffffffffffd0}, 0x80) socket$pppoe(0x18, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) getdents64(r6, &(0x7f0000000100)=""/34, 0x22) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.966885076s ago: executing program 4 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70800000000156a48672b274453b22e14c387915910007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000000)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r4 = gettid() tkill(r4, 0x2c) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, &(0x7f0000000080)='\x00'/10, 0xa, 0x800, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = getuid() r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x14, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES32=r8, @ANYBLOB="000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000952b77a0862038dd861e187134e86e66cefdfff2794f0dee0000eeaa6066a5b5b72ffc798dadc741cabcb8e30fc0003f7acc61e665324cf6810aaf7b434a724b880f6e7354a346672f00a67242d82297eba5af0830d908972a87deb60fed14b412a7620cfe1a4a5bd9da5467f973bcb4366deda712e9f0011277345417da013e0870f1765731a5662141469e89bc2aafa6c554"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}, 0x1, 0x0, 0x0, 0x40}, 0x24008854) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000001000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d0000000014000280080002000100000008000100020000001400036ceab3a6595a2e61fd007866726d300000"], 0x58}}, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r7, 0x0, 0x1000) 1.743961937s ago: executing program 0 (id=265): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0xa, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x10fffe, {0x0, 0x0, 0x74, 0x0, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(r6, r7, 0x8f5, 0x100000000000008) 1.605309081s ago: executing program 4 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_script(r2, &(0x7f0000002880), 0x290) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600001785"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x80}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0xfffffffffffffe8d, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x0, 0xfc5, 0x0, 0x25dfdbfc, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040844) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x296, &(0x7f0000000900)="$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") open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00r'], 0x92280) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x121) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[], 0x412680) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) sendmmsg$unix(r9, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r9]}}], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r9]}}], 0x18, 0x40810}}], 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x10036}, {0x7, 0x9}, {0xa, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x40091) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.51793239s ago: executing program 4 (id=267): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400002, 0x0) recvmsg(r1, &(0x7f0000000940)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000280)=""/142, 0x8e}, {&(0x7f0000000340)=""/241, 0xf1}, {0x0}, {0x0}, {&(0x7f0000000780)=""/232, 0xe8}], 0x6, &(0x7f0000000900)=""/20, 0x14}, 0x40000103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e20, 0x8, 0x4e21, 0x2, 0x2, 0x80, 0xa0, 0x8, r0}, {0x10, 0x9, 0x3, 0x8, 0x2483, 0x9, 0x1, 0xf}, {0x1712abfa, 0x63, 0x100000001, 0x1}, 0x4, 0x6e6bb5, 0x2, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d2, 0x2b}, 0x2, @in6=@mcast2, 0x0, 0x2, 0x0, 0x4, 0x6, 0x6, 0x4}}, 0xe8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/pid_for_children\x00') syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x188, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0xfffe, 0x5, 0x3, 0x1, 0x100}}, {0x4}}, {{0x1c, 0x1, {0x9, 0xa7, 0x400, 0xd92, 0x1, 0xd4, 0x9, 0x8}}, {0x14, 0x2, [0x3, 0x9, 0x379, 0x101, 0x2, 0x3, 0x2308, 0x3]}}, {{0x1c, 0x1, {0x9, 0xa1, 0x8, 0x7, 0x1, 0x1, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x6, 0xc, 0xd7, 0x5837, 0x1, 0x4, 0x47, 0x6}}, {0x10, 0x2, [0x3, 0x2, 0xd, 0x10, 0x9082, 0x0]}}, {{0x1c, 0x1, {0x4, 0xa, 0x7ff, 0x0, 0x0, 0x4, 0xad, 0x7}}, {0x12, 0x2, [0x9, 0x7, 0x7f, 0x2, 0xff0, 0x0, 0x7fff]}}, {{0x1c, 0x1, {0x80, 0xe, 0x5, 0x700, 0x2, 0xb, 0x4, 0x6}}, {0x10, 0x2, [0x5, 0x3, 0x9a, 0x5f, 0x3d1, 0x8]}}, {{0x1c, 0x1, {0x9, 0x7, 0x4, 0x6c2, 0x2, 0x6, 0x5, 0x6}}, {0x10, 0x2, [0x8, 0xfffa, 0x5, 0x2, 0x8, 0x8]}}, {{0x1c, 0x1, {0x7, 0x0, 0x6, 0x7, 0x2, 0x0, 0x5, 0x3}}, {0xa, 0x2, [0xf1, 0x3, 0x400]}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18) 1.21181201s ago: executing program 2 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc75700"}}, 0x48}}, 0x0) 842.634696ms ago: executing program 0 (id=269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000002000)=ANY=[@ANYRESOCT, @ANYBLOB="9ddf3eee0e5f0bb7c1"], 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa0, 0x8, 0x83c5, 0x2a, 0x2, 0x1, 0xfffffffa}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) 789.555362ms ago: executing program 0 (id=270): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 443.442306ms ago: executing program 2 (id=271): mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r6, 0x80047456, 0x0) r7 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0xa458, 0x2, 0x2, 0x20f}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000000)={r7}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) 397.466511ms ago: executing program 0 (id=272): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x8, 0x9, &(0x7f0000000300)="e75163b3c5e217aca4a1346ef47fd6c471b9c5dcd132736b14ae01426ce5169b833dfe55d5c66dba2dede72af04e92479432f519ee380afeea23534c26f1aa7fcd7eaf87"}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ftruncate(r1, 0x2007ffc) r2 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f00000001c0)={0x3ff, 0x2}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000034e400000000000000000500010006000c0900020073797a3100000000050005001500000011000300686173683a69702c706f727400"/76], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000003c0)='rxrpc_tx_ack\x00', r4, 0x0, 0x100}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) setgid(0x0) sched_setscheduler(0x0, 0x2, 0x0) 392.480921ms ago: executing program 4 (id=273): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccffe07a000000ad6e911b51818462b4", 0x27}, {&(0x7f00000018c0)='+', 0x1}], 0x2}, 0x0) 298.45227ms ago: executing program 3 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 277.278842ms ago: executing program 4 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x14000}, 0x0) 256.321585ms ago: executing program 3 (id=276): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000570000005700000003000000010000000600000f0300000003000000760a00000100000004000000000000000400000001a9000000100000050000000300000006000000030000000100000000000000420d000002000000080000000500000047a72700000000"], &(0x7f00000002c0)=""/85, 0x73, 0x55, 0x1, 0xa1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.44282ms ago: executing program 3 (id=277): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 0s ago: executing program 4 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000030801e9ffffffffffffff000000000a14000480080006400000d69e08000a4000000afa06000240000600000500030006"], 0x38}, 0x1, 0x0, 0x0, 0x8a0}, 0x4040080) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f00000000c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) socket$caif_stream(0x25, 0x1, 0x0) syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==") fchdir(0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0x100000001}, 0x18) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r6, 0x0, 0xfffffeea) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000400)="536c2f15", 0x4}, {&(0x7f0000000b00)="41a667313b080065ba686084cc5e81f49839319c2ce8881fd47a46050000006663f118dfdd6435051c6605f2135234d56e3c81ac133405699f6d4ab7fdcc5dddfe9771d61e7e1f590f4fe1b8d79b10a76a9e9afb4d7278380000000000000000770dbcabebc66867515a92336cadf28cd4ba262608e92c66ae4e944e", 0x7c}], 0x2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace$getregs(0xc, r7, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000002040)=0x2, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r10, 0x1, 0xfffffffd}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 26.743433][ T29] audit: type=1400 audit(1760120048.751:62): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.766416][ T29] audit: type=1400 audit(1760120048.771:63): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.767282][ T3299] cgroup: Unknown subsys name 'net' [ 26.794225][ T29] audit: type=1400 audit(1760120048.801:64): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.907442][ T3299] cgroup: Unknown subsys name 'cpuset' [ 26.913552][ T3299] cgroup: Unknown subsys name 'rlimit' [ 27.024279][ T29] audit: type=1400 audit(1760120049.031:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.053030][ T29] audit: type=1400 audit(1760120049.031:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.073504][ T29] audit: type=1400 audit(1760120049.031:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.089848][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.093927][ T29] audit: type=1400 audit(1760120049.031:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.122727][ T29] audit: type=1400 audit(1760120049.061:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.146964][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.147646][ T29] audit: type=1400 audit(1760120049.061:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.179577][ T29] audit: type=1400 audit(1760120049.111:71): avc: denied { relabelto } for pid=3303 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.659096][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.747501][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.754566][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.761844][ T3315] bridge_slave_0: entered allmulticast mode [ 28.768210][ T3315] bridge_slave_0: entered promiscuous mode [ 28.787225][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.794300][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.801455][ T3315] bridge_slave_1: entered allmulticast mode [ 28.807898][ T3315] bridge_slave_1: entered promiscuous mode [ 28.820021][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 28.852711][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 28.866183][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.878552][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.903008][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.947950][ T3315] team0: Port device team_slave_0 added [ 28.961579][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.970174][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.977267][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.984365][ T3311] bridge_slave_0: entered allmulticast mode [ 28.990899][ T3311] bridge_slave_0: entered promiscuous mode [ 28.999966][ T3315] team0: Port device team_slave_1 added [ 29.016172][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.023241][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.030407][ T3311] bridge_slave_1: entered allmulticast mode [ 29.036691][ T3311] bridge_slave_1: entered promiscuous mode [ 29.071742][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.078814][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.085992][ T3310] bridge_slave_0: entered allmulticast mode [ 29.092436][ T3310] bridge_slave_0: entered promiscuous mode [ 29.110771][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.117731][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.143682][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.154503][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.161614][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.168880][ T3310] bridge_slave_1: entered allmulticast mode [ 29.175105][ T3310] bridge_slave_1: entered promiscuous mode [ 29.185305][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.194427][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.201521][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.208784][ T3317] bridge_slave_0: entered allmulticast mode [ 29.215261][ T3317] bridge_slave_0: entered promiscuous mode [ 29.221852][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.228829][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.254738][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.275104][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.284295][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.291373][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.298469][ T3317] bridge_slave_1: entered allmulticast mode [ 29.304835][ T3317] bridge_slave_1: entered promiscuous mode [ 29.335045][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.345348][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.369390][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.384255][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.398049][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.405096][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.412294][ T3314] bridge_slave_0: entered allmulticast mode [ 29.418774][ T3314] bridge_slave_0: entered promiscuous mode [ 29.425902][ T3311] team0: Port device team_slave_0 added [ 29.438533][ T3315] hsr_slave_0: entered promiscuous mode [ 29.444585][ T3315] hsr_slave_1: entered promiscuous mode [ 29.455350][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.462419][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.469539][ T3314] bridge_slave_1: entered allmulticast mode [ 29.475907][ T3314] bridge_slave_1: entered promiscuous mode [ 29.482805][ T3311] team0: Port device team_slave_1 added [ 29.493711][ T3317] team0: Port device team_slave_0 added [ 29.499909][ T3310] team0: Port device team_slave_0 added [ 29.506261][ T3317] team0: Port device team_slave_1 added [ 29.526711][ T3310] team0: Port device team_slave_1 added [ 29.546940][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.554017][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.579980][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.605627][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.614964][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.622000][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.647889][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.667649][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.674600][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.700563][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.712382][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.731550][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.738507][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.764512][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.777428][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.784408][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.810333][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.821290][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.828238][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.854131][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.884850][ T3311] hsr_slave_0: entered promiscuous mode [ 29.891063][ T3311] hsr_slave_1: entered promiscuous mode [ 29.897343][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 29.903056][ T3311] Cannot create hsr debugfs directory [ 29.930595][ T3314] team0: Port device team_slave_0 added [ 29.949684][ T3310] hsr_slave_0: entered promiscuous mode [ 29.955745][ T3310] hsr_slave_1: entered promiscuous mode [ 29.961617][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 29.967365][ T3310] Cannot create hsr debugfs directory [ 29.973439][ T3314] team0: Port device team_slave_1 added [ 30.008377][ T3317] hsr_slave_0: entered promiscuous mode [ 30.014319][ T3317] hsr_slave_1: entered promiscuous mode [ 30.020132][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 30.025846][ T3317] Cannot create hsr debugfs directory [ 30.034469][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.041451][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.067379][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.102433][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.109444][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.135351][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.200207][ T3314] hsr_slave_0: entered promiscuous mode [ 30.206401][ T3314] hsr_slave_1: entered promiscuous mode [ 30.212373][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 30.218131][ T3314] Cannot create hsr debugfs directory [ 30.300205][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.309057][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.320020][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.330853][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.371057][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.394120][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.402831][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.417281][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.449193][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.459205][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.473521][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.480954][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.489699][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.498591][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.506774][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.517314][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.531420][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.549835][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.565110][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.576166][ T2101] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.583286][ T2101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.591670][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.600479][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.609733][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.637858][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.644922][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.708951][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.718384][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.731523][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.744456][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.751622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.764212][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.780333][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.787404][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.802064][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.815278][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.825656][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.848556][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.855593][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.869354][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.886665][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.893737][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.910030][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.936319][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.947874][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.959170][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.981022][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.988194][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.997335][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.004388][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.014343][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.021538][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.035331][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.045291][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.052418][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.103421][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.113874][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.136781][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.159260][ T3315] veth0_vlan: entered promiscuous mode [ 31.166849][ T3315] veth1_vlan: entered promiscuous mode [ 31.235210][ T3315] veth0_macvtap: entered promiscuous mode [ 31.242655][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.257155][ T3317] veth0_vlan: entered promiscuous mode [ 31.264113][ T3315] veth1_macvtap: entered promiscuous mode [ 31.272437][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.285196][ T3317] veth1_vlan: entered promiscuous mode [ 31.305244][ T3317] veth0_macvtap: entered promiscuous mode [ 31.321527][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.331575][ T3311] veth0_vlan: entered promiscuous mode [ 31.338891][ T3317] veth1_macvtap: entered promiscuous mode [ 31.351834][ T3311] veth1_vlan: entered promiscuous mode [ 31.359227][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.379093][ T2101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.390363][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.402348][ T3311] veth0_macvtap: entered promiscuous mode [ 31.410025][ T3311] veth1_macvtap: entered promiscuous mode [ 31.419823][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.427081][ T2101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.443876][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.453402][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.462014][ T2101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.470999][ T2101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.493852][ T270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.509059][ T3314] veth0_vlan: entered promiscuous mode [ 31.515159][ T270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.531004][ T270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.546450][ T3314] veth1_vlan: entered promiscuous mode [ 31.559477][ T270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.570888][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.576287][ T270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.606168][ T3314] veth0_macvtap: entered promiscuous mode [ 31.619097][ T270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.636403][ T3314] veth1_macvtap: entered promiscuous mode [ 31.659678][ T3479] loop3: detected capacity change from 0 to 2048 [ 31.667561][ T270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683084][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.693463][ T270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.700790][ T3302] loop3: p2 p3 p7 [ 31.717554][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.746161][ T3479] loop3: p2 p3 p7 [ 31.748382][ T3310] veth0_vlan: entered promiscuous mode [ 31.755913][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 31.755993][ T29] audit: type=1400 audit(1760120053.761:106): avc: denied { ioctl } for pid=3484 comm="syz.0.1" path="socket:[3929]" dev="sockfs" ino=3929 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.794406][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.812303][ T29] audit: type=1400 audit(1760120053.771:107): avc: denied { read write } for pid=3478 comm="syz.3.4" name="loop3p3" dev="devtmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 31.835570][ T29] audit: type=1400 audit(1760120053.771:108): avc: denied { open } for pid=3478 comm="syz.3.4" path="/dev/loop3p3" dev="devtmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 31.858417][ T29] audit: type=1400 audit(1760120053.801:109): avc: denied { read } for pid=3484 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 31.886200][ T3310] veth1_vlan: entered promiscuous mode [ 31.903958][ T29] audit: type=1400 audit(1760120053.911:110): avc: denied { write } for pid=3484 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 31.940800][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.954556][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.972682][ T3310] veth0_macvtap: entered promiscuous mode [ 31.989630][ T3490] loop2: detected capacity change from 0 to 512 [ 31.999951][ T3490] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.013100][ T3490] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.028678][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.037283][ T3490] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.039258][ T3310] veth1_macvtap: entered promiscuous mode [ 32.056181][ T3490] EXT4-fs (loop2): 1 truncate cleaned up [ 32.062360][ T3490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.081745][ T3490] EXT4-fs error (device loop2): ext4_xattr_block_find:1874: inode #15: comm syz.2.6: corrupted xattr block 33: invalid header [ 32.095093][ T3490] EXT4-fs (loop2): Remounting filesystem read-only [ 32.102062][ T29] audit: type=1326 audit(1760120053.991:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4debeec9 code=0x7ffc0000 [ 32.125209][ T29] audit: type=1326 audit(1760120053.991:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4debeec9 code=0x7ffc0000 [ 32.148285][ T29] audit: type=1326 audit(1760120053.991:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb4debeec9 code=0x7ffc0000 [ 32.171395][ T29] audit: type=1326 audit(1760120053.991:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4debeec9 code=0x7ffc0000 [ 32.194464][ T29] audit: type=1326 audit(1760120053.991:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4debeec9 code=0x7ffc0000 [ 32.219484][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.231138][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.240125][ T3496] @: renamed from veth0_vlan (while UP) [ 32.254929][ T296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.274555][ T296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.302391][ T296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.311618][ T296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.480552][ T3506] loop1: detected capacity change from 0 to 512 [ 32.598474][ T3506] EXT4-fs (loop1): 1 orphan inode deleted [ 32.630092][ T3511] Zero length message leads to an empty skb [ 32.642350][ T3506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.660285][ T3506] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.669975][ T3511] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.702347][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 32.738496][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.783903][ T3519] loop1: detected capacity change from 0 to 512 [ 32.796041][ T3518] loop4: detected capacity change from 0 to 512 [ 32.837468][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.841580][ T3519] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.11: bad orphan inode 11862016 [ 32.857407][ T3518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.877268][ T3521] loop0: detected capacity change from 0 to 512 [ 32.892438][ T3519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.913525][ T3519] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.929167][ T3518] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.048680][ T3534] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #19: comm syz.1.11: corrupted inode contents [ 33.061310][ T3534] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #19: comm syz.1.11: mark_inode_dirty error [ 33.072966][ T3534] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #19: comm syz.1.11: corrupted inode contents [ 33.097143][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.117294][ T3534] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #19: comm syz.1.11: mark_inode_dirty error [ 33.125747][ T3531] loop2: detected capacity change from 0 to 8192 [ 33.156678][ T3531] ======================================================= [ 33.156678][ T3531] WARNING: The mand mount option has been deprecated and [ 33.156678][ T3531] and is ignored by this kernel. Remove the mand [ 33.156678][ T3531] option from the mount to silence this warning. [ 33.156678][ T3531] ======================================================= [ 33.200429][ T3534] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #19: comm syz.1.11: mark inode dirty (error -117) [ 33.236845][ T3534] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 33.312762][ T3538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.334667][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.399388][ T3541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 33.412664][ T3541] bridge0: entered promiscuous mode [ 33.418277][ T3541] macsec1: entered promiscuous mode [ 33.424678][ T3541] bridge0: port 3(macsec1) entered blocking state [ 33.431217][ T3541] bridge0: port 3(macsec1) entered disabled state [ 33.438330][ T3541] macsec1: entered allmulticast mode [ 33.443638][ T3541] bridge0: entered allmulticast mode [ 33.449934][ T3541] macsec1: left allmulticast mode [ 33.455004][ T3541] bridge0: left allmulticast mode [ 33.463768][ T3541] bridge0: left promiscuous mode [ 33.841695][ T3552] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 33.849480][ T3552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20'. [ 33.887850][ T3552] team0: Port device geneve1 added [ 33.995993][ T3559] netlink: 'syz.2.22': attribute type 13 has an invalid length. [ 34.048941][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.056315][ T3559] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.105736][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.115853][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.169527][ T3538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.181649][ T52] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.191731][ T52] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.201159][ T52] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.210279][ T52] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.236820][ T3562] loop3: detected capacity change from 0 to 512 [ 34.245081][ T3562] mmap: syz.3.23 (3562): VmData 17641472 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 34.291504][ T3567] loop1: detected capacity change from 0 to 512 [ 34.307838][ T3567] EXT4-fs (loop1): too many log groups per flexible block group [ 34.315652][ T3567] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 34.322932][ T3567] EXT4-fs (loop1): mount failed [ 34.387683][ T3570] netlink: 76 bytes leftover after parsing attributes in process `syz.1.25'. [ 34.670932][ T3538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.682224][ T3575] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27'. [ 34.691089][ T3575] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27'. [ 34.729215][ T3538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.766798][ T3577] loop0: detected capacity change from 0 to 2048 [ 34.783762][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.796347][ T3304] loop0: p2 p3 p7 [ 34.800534][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.813258][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.817667][ T3577] loop0: p2 p3 p7 [ 34.822040][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.885835][ T3579] loop4: detected capacity change from 0 to 512 [ 34.910877][ T3581] SELinux: policydb version 114266998 does not match my version range 15-35 [ 34.929267][ T3581] SELinux: failed to load policy [ 34.946524][ T3579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.988999][ T3579] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.025854][ T3579] syz.4.29 (3579) used greatest stack depth: 9600 bytes left [ 35.036422][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.082471][ T3591] loop4: detected capacity change from 0 to 512 [ 35.131491][ T3591] EXT4-fs: dax option not supported [ 35.233454][ T3593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34'. [ 35.254219][ T3593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 35.262990][ T3593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34'. [ 35.289484][ T3601] loop3: detected capacity change from 0 to 1024 [ 35.311038][ T3601] EXT4-fs: Ignoring removed orlov option [ 35.482894][ T3612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 35.686735][ T3630] loop2: detected capacity change from 0 to 2048 [ 35.715596][ T3601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.758293][ T3304] loop2: p1 < > p4 [ 35.768586][ T3304] loop2: p4 size 8388608 extends beyond EOD, truncated [ 35.779202][ T3630] loop2: p1 < > p4 [ 35.783588][ T3630] loop2: p4 size 8388608 extends beyond EOD, truncated [ 35.795300][ T3630] EXT4-fs (loop2p1): unable to read superblock [ 35.859554][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.907494][ T3648] bridge0: entered promiscuous mode [ 35.926481][ T3652] mmap: syz.2.44 (3652) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.933897][ T3648] macsec1: entered promiscuous mode [ 35.957721][ T3648] bridge0: port 3(macsec1) entered blocking state [ 35.964261][ T3648] bridge0: port 3(macsec1) entered disabled state [ 36.015835][ T3648] macsec1: entered allmulticast mode [ 36.021278][ T3648] bridge0: entered allmulticast mode [ 36.043506][ T3648] macsec1: left allmulticast mode [ 36.048665][ T3648] bridge0: left allmulticast mode [ 36.083046][ T3678] loop0: detected capacity change from 0 to 512 [ 36.094472][ T3678] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 36.107581][ T3648] bridge0: left promiscuous mode [ 36.115419][ T3683] SELinux: security_context_str_to_sid (O*3!L;(x?8>${S7#!g.&[n٦9P9\ETWq3H*8YYLGR!I*' C) failed with errno=-22 [ 36.139599][ T3662] loop3: detected capacity change from 0 to 512 [ 36.147696][ T3678] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.45: iget: bad extended attribute block 851968 [ 36.169563][ T3678] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.45: couldn't read orphan inode 15 (err -117) [ 36.182429][ T3662] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 36.197134][ T3662] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.46: iget: bad extended attribute block 851968 [ 36.223503][ T3678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.229161][ T3662] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.46: couldn't read orphan inode 15 (err -117) [ 36.257521][ T3662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.901571][ T3785] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 36.916499][ T3785] SELinux: failed to load policy [ 36.922588][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.937537][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.995636][ T3796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.015206][ T3802] loop2: detected capacity change from 0 to 2048 [ 37.022695][ T3796] netlink: 'syz.3.53': attribute type 4 has an invalid length. [ 37.044457][ T3807] loop1: detected capacity change from 0 to 2048 [ 37.052743][ T3304] loop2: p1 p2 p3 [ 37.062976][ T3802] loop2: p1 p2 p3 [ 37.101622][ T3302] loop1: p2 p3 p7 [ 37.132143][ T3807] loop1: p2 p3 p7 [ 37.252728][ T3834] loop0: detected capacity change from 0 to 128 [ 37.265255][ T3833] loop3: detected capacity change from 0 to 512 [ 37.276343][ T3833] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.283273][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 37.283285][ T29] audit: type=1400 audit(1760120059.281:381): avc: denied { mounton } for pid=3831 comm="syz.3.59" path="/15/file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.332520][ T3833] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.382384][ T29] audit: type=1400 audit(1760120059.331:382): avc: denied { mount } for pid=3832 comm="syz.0.60" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.404260][ T29] audit: type=1326 audit(1760120059.381:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f67eeec9 code=0x7ffc0000 [ 37.427425][ T29] audit: type=1326 audit(1760120059.381:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f67eeec9 code=0x7ffc0000 [ 37.450758][ T29] audit: type=1326 audit(1760120059.381:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41f67eeec9 code=0x7ffc0000 [ 37.474175][ T29] audit: type=1326 audit(1760120059.381:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f67eeec9 code=0x7ffc0000 [ 37.497574][ T29] audit: type=1326 audit(1760120059.381:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41f67eeec9 code=0x7ffc0000 [ 37.521083][ T29] audit: type=1326 audit(1760120059.391:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f67eeec9 code=0x7ffc0000 [ 37.544454][ T29] audit: type=1326 audit(1760120059.391:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41f67eeec9 code=0x7ffc0000 [ 37.567616][ T29] audit: type=1326 audit(1760120059.391:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f67eeec9 code=0x7ffc0000 [ 37.595612][ T3833] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.59: iget: bogus i_mode (2355) [ 37.609890][ T3834] syz.0.60: attempt to access beyond end of device [ 37.609890][ T3834] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 37.619776][ T3833] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.59: couldn't read orphan inode 15 (err -117) [ 37.641038][ T3833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.677749][ T3833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.855004][ T3851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.869502][ T3847] loop2: detected capacity change from 0 to 128 [ 38.039434][ T3852] loop0: detected capacity change from 0 to 512 [ 38.049226][ T3852] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 38.142969][ T3865] macvtap0: refused to change device tx_queue_len [ 38.152021][ T3860] __nla_validate_parse: 2 callbacks suppressed [ 38.152032][ T3860] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.67'. [ 38.188166][ T3852] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.63: iget: bad extended attribute block 851968 [ 38.207650][ T3852] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.63: couldn't read orphan inode 15 (err -117) [ 38.270101][ T3870] loop4: detected capacity change from 0 to 512 [ 38.276740][ T3852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.307837][ T3870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.344287][ T3870] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.372612][ T3885] atomic_op ffff88811accc128 conn xmit_atomic 0000000000000000 [ 38.385640][ T3885] loop1: detected capacity change from 0 to 512 [ 38.406696][ T3870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'. [ 38.449737][ T3903] loop2: detected capacity change from 0 to 2048 [ 38.458307][ T3903] EXT4-fs: Ignoring removed nobh option [ 38.464007][ T3903] ext3: Unknown parameter 'func' [ 38.542897][ T3910] loop1: detected capacity change from 0 to 1024 [ 38.560893][ T3910] EXT4-fs: Ignoring removed nobh option [ 38.580472][ T3910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.638928][ T3919] loop2: detected capacity change from 0 to 2048 [ 38.730170][ T3304] loop2: p2 p3 p7 [ 38.735152][ T3930] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 38.803063][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.805992][ T3919] loop2: p2 p3 p7 [ 38.816116][ T3912] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.70: bg 0: block 64: padding at end of block bitmap is not set [ 38.816718][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.945551][ T3936] loop0: detected capacity change from 0 to 1024 [ 38.988019][ T3935] netlink: '+}[@': attribute type 30 has an invalid length. [ 38.999819][ T3945] loop0: detected capacity change from 0 to 256 [ 39.010550][ T3935] netlink: '+}[@': attribute type 6 has an invalid length. [ 39.018574][ T3935] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 39.023280][ T3945] FAT-fs (loop0): Directory bread(block 64) failed [ 39.027072][ T3935] netlink: '+}[@': attribute type 2 has an invalid length. [ 39.027250][ T3935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=3935 comm=+}[@ [ 39.056798][ T3945] FAT-fs (loop0): Directory bread(block 65) failed [ 39.075012][ T3945] FAT-fs (loop0): Directory bread(block 66) failed [ 39.081833][ T3945] FAT-fs (loop0): Directory bread(block 67) failed [ 39.092185][ T3945] FAT-fs (loop0): Directory bread(block 68) failed [ 39.110800][ T3945] FAT-fs (loop0): Directory bread(block 69) failed [ 39.119854][ T3945] FAT-fs (loop0): Directory bread(block 70) failed [ 39.161596][ T3945] FAT-fs (loop0): Directory bread(block 71) failed [ 39.168827][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.183429][ T3945] FAT-fs (loop0): Directory bread(block 72) failed [ 39.190359][ T3945] FAT-fs (loop0): Directory bread(block 73) failed [ 39.267367][ T3981] infiniband syz!: set active [ 39.272112][ T3981] infiniband syz!: added team_slave_0 [ 39.301173][ T3983] process 'syz.0.87' launched './file1' with NULL argv: empty string added [ 39.333720][ T3987] FAULT_INJECTION: forcing a failure. [ 39.333720][ T3987] name failslab, interval 1, probability 0, space 0, times 1 [ 39.346384][ T3987] CPU: 0 UID: 0 PID: 3987 Comm: syz.0.88 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.346409][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 39.346425][ T3987] Call Trace: [ 39.346430][ T3987] [ 39.346436][ T3987] __dump_stack+0x1d/0x30 [ 39.346494][ T3987] dump_stack_lvl+0xe8/0x140 [ 39.346539][ T3987] dump_stack+0x15/0x1b [ 39.346553][ T3987] should_fail_ex+0x265/0x280 [ 39.346582][ T3987] should_failslab+0x8c/0xb0 [ 39.346609][ T3987] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 39.346742][ T3987] ? __get_vm_area_node+0x106/0x1d0 [ 39.346767][ T3987] __get_vm_area_node+0x106/0x1d0 [ 39.346801][ T3987] __vmalloc_node_range_noprof+0x28c/0xed0 [ 39.346913][ T3987] ? n_tty_open+0x1b/0xf0 [ 39.347011][ T3987] ? klist_next+0x2f/0x220 [ 39.347041][ T3987] ? klist_dec_and_del+0xba/0x270 [ 39.347072][ T3987] ? klist_next+0x1c2/0x220 [ 39.347129][ T3987] ? class_find_device+0x24d/0x2a0 [ 39.347154][ T3987] ? __pfx_device_match_devt+0x10/0x10 [ 39.347217][ T3987] ? n_tty_open+0x1b/0xf0 [ 39.347285][ T3987] vzalloc_noprof+0x82/0xc0 [ 39.347315][ T3987] ? n_tty_open+0x1b/0xf0 [ 39.347337][ T3987] n_tty_open+0x1b/0xf0 [ 39.347406][ T3987] tty_ldisc_setup+0x80/0x220 [ 39.347515][ T3987] tty_init_dev+0x183/0x330 [ 39.347531][ T3987] ptmx_open+0xda/0x240 [ 39.347558][ T3987] chrdev_open+0x2eb/0x3a0 [ 39.347589][ T3987] do_dentry_open+0x646/0xa20 [ 39.347666][ T3987] ? __pfx_chrdev_open+0x10/0x10 [ 39.347690][ T3987] vfs_open+0x37/0x1e0 [ 39.347719][ T3987] path_openat+0x1c5e/0x2170 [ 39.347798][ T3987] ? path_openat+0x1bf8/0x2170 [ 39.347813][ T3987] ? _parse_integer_limit+0x170/0x190 [ 39.347904][ T3987] do_filp_open+0x109/0x230 [ 39.347934][ T3987] file_open_name+0xfa/0x120 [ 39.348019][ T3987] __se_sys_acct+0xeb/0x530 [ 39.348057][ T3987] __x64_sys_acct+0x1f/0x30 [ 39.348100][ T3987] x64_sys_call+0x2f3a/0x3000 [ 39.348155][ T3987] do_syscall_64+0xd2/0x200 [ 39.348180][ T3987] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.348225][ T3987] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.348250][ T3987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.348312][ T3987] RIP: 0033:0x7f41f67eeec9 [ 39.348329][ T3987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.348349][ T3987] RSP: 002b:00007f41f5257038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 39.348370][ T3987] RAX: ffffffffffffffda RBX: 00007f41f6a45fa0 RCX: 00007f41f67eeec9 [ 39.348382][ T3987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 39.348396][ T3987] RBP: 00007f41f5257090 R08: 0000000000000000 R09: 0000000000000000 [ 39.348436][ T3987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.348447][ T3987] R13: 00007f41f6a46038 R14: 00007f41f6a45fa0 R15: 00007fff0dc801a8 [ 39.348463][ T3987] [ 39.630762][ T3987] syz.0.88: vmalloc error: size 8904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 39.645458][ T3987] CPU: 0 UID: 0 PID: 3987 Comm: syz.0.88 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.645483][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 39.645497][ T3987] Call Trace: [ 39.645503][ T3987] [ 39.645510][ T3987] __dump_stack+0x1d/0x30 [ 39.645533][ T3987] dump_stack_lvl+0xe8/0x140 [ 39.645571][ T3987] dump_stack+0x15/0x1b [ 39.645664][ T3987] warn_alloc+0x12b/0x1a0 [ 39.645760][ T3987] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 39.645794][ T3987] ? klist_next+0x2f/0x220 [ 39.645960][ T3987] ? klist_dec_and_del+0xba/0x270 [ 39.646005][ T3987] ? klist_next+0x1c2/0x220 [ 39.646055][ T3987] ? class_find_device+0x24d/0x2a0 [ 39.646082][ T3987] ? __pfx_device_match_devt+0x10/0x10 [ 39.646143][ T3987] ? n_tty_open+0x1b/0xf0 [ 39.646168][ T3987] vzalloc_noprof+0x82/0xc0 [ 39.646201][ T3987] ? n_tty_open+0x1b/0xf0 [ 39.646303][ T3987] n_tty_open+0x1b/0xf0 [ 39.646329][ T3987] tty_ldisc_setup+0x80/0x220 [ 39.646490][ T3987] tty_init_dev+0x183/0x330 [ 39.646507][ T3987] ptmx_open+0xda/0x240 [ 39.646534][ T3987] chrdev_open+0x2eb/0x3a0 [ 39.646564][ T3987] do_dentry_open+0x646/0xa20 [ 39.646659][ T3987] ? __pfx_chrdev_open+0x10/0x10 [ 39.646683][ T3987] vfs_open+0x37/0x1e0 [ 39.646717][ T3987] path_openat+0x1c5e/0x2170 [ 39.646739][ T3987] ? path_openat+0x1bf8/0x2170 [ 39.646760][ T3987] ? _parse_integer_limit+0x170/0x190 [ 39.646817][ T3987] do_filp_open+0x109/0x230 [ 39.646847][ T3987] file_open_name+0xfa/0x120 [ 39.646889][ T3987] __se_sys_acct+0xeb/0x530 [ 39.646952][ T3987] __x64_sys_acct+0x1f/0x30 [ 39.646980][ T3987] x64_sys_call+0x2f3a/0x3000 [ 39.647006][ T3987] do_syscall_64+0xd2/0x200 [ 39.647031][ T3987] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.647094][ T3987] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.647118][ T3987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.647142][ T3987] RIP: 0033:0x7f41f67eeec9 [ 39.647158][ T3987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.647178][ T3987] RSP: 002b:00007f41f5257038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 39.647203][ T3987] RAX: ffffffffffffffda RBX: 00007f41f6a45fa0 RCX: 00007f41f67eeec9 [ 39.647218][ T3987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 39.647244][ T3987] RBP: 00007f41f5257090 R08: 0000000000000000 R09: 0000000000000000 [ 39.647254][ T3987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.647264][ T3987] R13: 00007f41f6a46038 R14: 00007f41f6a45fa0 R15: 00007fff0dc801a8 [ 39.647284][ T3987] [ 39.903985][ T3987] Mem-Info: [ 39.907110][ T3987] active_anon:9516 inactive_anon:0 isolated_anon:13 [ 39.907110][ T3987] active_file:8817 inactive_file:2266 isolated_file:0 [ 39.907110][ T3987] unevictable:0 dirty:1564 writeback:0 [ 39.907110][ T3987] slab_reclaimable:3156 slab_unreclaimable:30639 [ 39.907110][ T3987] mapped:32046 shmem:3304 pagetables:1086 [ 39.907110][ T3987] sec_pagetables:0 bounce:0 [ 39.907110][ T3987] kernel_misc_reclaimable:0 [ 39.907110][ T3987] free:1875910 free_pcp:11193 free_cma:0 [ 39.952332][ T3987] Node 0 active_anon:38064kB inactive_anon:0kB active_file:35268kB inactive_file:9064kB unevictable:0kB isolated(anon):52kB isolated(file):0kB mapped:128184kB dirty:6256kB writeback:0kB shmem:13216kB kernel_stack:3840kB pagetables:4344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 39.979762][ T3987] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 40.010102][ T3987] lowmem_reserve[]: 0 2883 7862 7862 [ 40.015499][ T3987] Node 0 DMA32 free:2949156kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 40.046878][ T3987] lowmem_reserve[]: 0 0 4978 4978 [ 40.051958][ T3987] Node 0 Normal free:4539124kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38296kB inactive_anon:0kB active_file:35268kB inactive_file:9064kB unevictable:0kB writepending:6236kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:40716kB local_pcp:6220kB free_cma:0kB [ 40.085015][ T3987] lowmem_reserve[]: 0 0 0 0 [ 40.089566][ T3987] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 40.102286][ T3987] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949156kB [ 40.104130][ T3997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 40.118339][ T3987] Node 0 Normal: 13*4kB (U) 3*8kB (U) 1*16kB (M) 3*32kB (UME) 1*64kB (E) 4*128kB (UME) 1*256kB (U) 1*512kB (U) 3*1024kB (UME) 2*2048kB (UM) [ 40.127427][ T3981] RDS/IB: syz!: added [ 40.127427][ T3987] 1106*4096kB (UM) = 4538876kB [ 40.150565][ T3987] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 40.159988][ T3987] 14383 total pagecache pages [ 40.164675][ T3987] 0 pages in swap cache [ 40.168853][ T3987] Free swap = 124996kB [ 40.173166][ T3987] Total swap = 124996kB [ 40.177355][ T3987] 2097051 pages RAM [ 40.181180][ T3987] 0 pages HighMem/MovableOnly [ 40.185846][ T3987] 80479 pages reserved [ 40.189998][ T3987] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 40.198207][ T3997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.205623][ T3997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.236160][ T3997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.243812][ T3997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.352869][ T4008] netlink: 256 bytes leftover after parsing attributes in process `syz.2.93'. [ 40.527487][ T4025] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.543492][ T4027] netlink: 72 bytes leftover after parsing attributes in process `syz.3.99'. [ 40.552350][ T4027] netlink: 72 bytes leftover after parsing attributes in process `syz.3.99'. [ 40.570035][ T4025] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.571811][ T4019] netlink: 'syz.2.96': attribute type 13 has an invalid length. [ 40.614102][ T4029] bridge0: entered promiscuous mode [ 40.619391][ T4029] macsec1: entered promiscuous mode [ 40.625498][ T4029] bridge0: port 3(macsec1) entered blocking state [ 40.632222][ T4029] bridge0: port 3(macsec1) entered disabled state [ 40.638896][ T4029] macsec1: entered allmulticast mode [ 40.644180][ T4029] bridge0: entered allmulticast mode [ 40.650119][ T4029] macsec1: left allmulticast mode [ 40.655161][ T4029] bridge0: left allmulticast mode [ 40.660661][ T4029] bridge0: left promiscuous mode [ 40.687133][ T4025] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.809967][ T4025] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.830026][ T4037] netlink: 72 bytes leftover after parsing attributes in process `syz.1.102'. [ 40.839024][ T4037] netlink: 72 bytes leftover after parsing attributes in process `syz.1.102'. [ 40.910664][ T4041] loop2: detected capacity change from 0 to 128 [ 40.947580][ T3963] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.955824][ T3963] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.994470][ T3963] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.005773][ T4041] syz.2.104: attempt to access beyond end of device [ 41.005773][ T4041] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 41.019428][ T3963] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.054444][ T4044] loop1: detected capacity change from 0 to 512 [ 41.065967][ T4044] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 41.086028][ T4044] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.105: iget: bad extended attribute block 851968 [ 41.109586][ T4044] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.105: couldn't read orphan inode 15 (err -117) [ 41.131332][ T4044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.222355][ T4059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 41.240202][ T4061] loop2: detected capacity change from 0 to 128 [ 41.254193][ T4061] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.266508][ T4059] team0: Port device team_slave_1 removed [ 41.279943][ T4063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.288240][ T4061] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.399700][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.453370][ T4075] loop2: detected capacity change from 0 to 2048 [ 41.499207][ T4075] loop2: p2 p3 p7 [ 41.525276][ T4079] loop3: detected capacity change from 0 to 128 [ 41.583900][ T4079] syz.3.118: attempt to access beyond end of device [ 41.583900][ T4079] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 41.691772][ C0] hrtimer: interrupt took 39974 ns [ 41.803734][ T4095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.828727][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.850527][ T4095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.886793][ T4097] netlink: 'syz.3.124': attribute type 10 has an invalid length. [ 41.896738][ T4106] loop2: detected capacity change from 0 to 128 [ 41.903428][ T4103] loop1: detected capacity change from 0 to 512 [ 41.930419][ T4095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.973943][ T4113] loop3: detected capacity change from 0 to 128 [ 42.014340][ T4095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.027156][ T4113] syz.3.130: attempt to access beyond end of device [ 42.027156][ T4113] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 42.095617][ T3975] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.114965][ T3975] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.151562][ T3975] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.170820][ T3975] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.189174][ T4124] loop1: detected capacity change from 0 to 1024 [ 42.217831][ T4124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.254758][ T4124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.302684][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 42.302698][ T29] audit: type=1400 audit(1760120065.311:700): avc: denied { mount } for pid=4133 comm="syz.3.137" name="/" dev="ramfs" ino=5920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.440148][ T4134] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 42.452764][ T29] audit: type=1400 audit(1760120065.461:701): avc: denied { remove_name } for pid=4123 comm="syz.1.134" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.496396][ T29] audit: type=1400 audit(1760120065.461:702): avc: denied { rename } for pid=4123 comm="syz.1.134" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.541051][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.619414][ T29] audit: type=1326 audit(1760120065.631:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 42.643591][ T29] audit: type=1326 audit(1760120065.631:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 42.644347][ T4142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4142 comm=syz.1.140 [ 42.666974][ T29] audit: type=1326 audit(1760120065.631:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 42.702550][ T29] audit: type=1326 audit(1760120065.631:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 42.726096][ T29] audit: type=1326 audit(1760120065.631:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 42.749524][ T29] audit: type=1326 audit(1760120065.631:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 42.772950][ T29] audit: type=1326 audit(1760120065.631:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 42.832238][ T4148] loop1: detected capacity change from 0 to 512 [ 42.858394][ T4148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.871254][ T4148] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.896656][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.200697][ T4173] loop3: detected capacity change from 0 to 128 [ 43.245360][ T4180] netlink: 'syz.0.156': attribute type 5 has an invalid length. [ 43.253075][ T4180] __nla_validate_parse: 9 callbacks suppressed [ 43.253087][ T4180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 43.298956][ T4182] netlink: 9 bytes leftover after parsing attributes in process `syz.2.157'. [ 43.330012][ T4182] gretap0: entered promiscuous mode [ 43.350563][ T4180] ip6gretap0: entered promiscuous mode [ 43.356075][ T4180] macsec1: entered promiscuous mode [ 43.367989][ T4180] ip6gretap0: left promiscuous mode [ 43.380659][ T4182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'. [ 43.389580][ T4182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'. [ 43.509116][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.517483][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.526648][ T4190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.591765][ T4197] loop1: detected capacity change from 0 to 1024 [ 43.613149][ T4202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 43.631426][ T4197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.654173][ T4197] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.693091][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.164353][ T4247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'. [ 44.199444][ T4247] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 44.199444][ T4247] The task syz.2.175 (4247) triggered the difference, watch for misbehavior. [ 44.217194][ T4247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'. [ 56.200073][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 56.200088][ T29] audit: type=1326 audit(1760120079.211:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 56.200973][ T4260] loop3: detected capacity change from 0 to 128 [ 56.245080][ T23] IPVS: starting estimator thread 0... [ 56.256980][ T29] audit: type=1326 audit(1760120079.211:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 56.274712][ T4260] syz.3.183: attempt to access beyond end of device [ 56.274712][ T4260] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 56.280306][ T29] audit: type=1326 audit(1760120079.221:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 56.316765][ T29] audit: type=1326 audit(1760120079.221:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 56.317530][ T4254] loop1: detected capacity change from 0 to 1024 [ 56.340144][ T29] audit: type=1326 audit(1760120079.221:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 56.369622][ T29] audit: type=1326 audit(1760120079.221:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 56.376971][ T4262] IPVS: using max 2256 ests per chain, 112800 per kthread [ 56.392896][ T29] audit: type=1326 audit(1760120079.221:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 56.408648][ T4254] EXT4-fs: Ignoring removed nobh option [ 56.423436][ T29] audit: type=1326 audit(1760120079.221:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 56.428994][ T4254] EXT4-fs: Ignoring removed bh option [ 56.452090][ T29] audit: type=1326 audit(1760120079.221:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 56.480735][ T29] audit: type=1326 audit(1760120079.221:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5eeba9eec9 code=0x7ffc0000 [ 56.481872][ T4254] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 56.517751][ T4258] 9pnet_fd: Insufficient options for proto=fd [ 56.518282][ T4266] netlink: 72 bytes leftover after parsing attributes in process `syz.0.185'. [ 56.529318][ T4254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.532844][ T4266] netlink: 72 bytes leftover after parsing attributes in process `syz.0.185'. [ 56.613303][ T4275] loop4: detected capacity change from 0 to 164 [ 56.634163][ T4275] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 56.645483][ T4278] loop3: detected capacity change from 0 to 128 [ 56.646248][ T4275] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4275 comm=syz.4.189 [ 56.664255][ T4275] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4275 comm=syz.4.189 [ 56.786413][ T4288] loop3: detected capacity change from 0 to 512 [ 56.804744][ T4288] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.193: EA inode hash validation failed [ 56.817661][ T4288] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.193: corrupted inode contents [ 56.829791][ T4288] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #15: comm syz.3.193: mark_inode_dirty error [ 56.841346][ T4288] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.193: corrupted inode contents [ 56.854656][ T4288] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.193: mark_inode_dirty error [ 56.874674][ T4288] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.193: mark inode dirty (error -117) [ 56.887477][ T4288] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 56.896577][ T4288] EXT4-fs (loop3): 1 orphan inode deleted [ 56.903333][ T4288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.913976][ T4294] bridge: RTM_NEWNEIGH with invalid ether address [ 56.934506][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.014348][ T4306] capability: warning: `syz.3.200' uses deprecated v2 capabilities in a way that may be insecure [ 57.058439][ T4310] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 57.080845][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.091423][ T4306] syz.3.200 (4306) used greatest stack depth: 8984 bytes left [ 57.207142][ T4323] loop1: detected capacity change from 0 to 512 [ 57.214073][ T4323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.223922][ T4323] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.207: invalid block [ 57.246813][ T4323] EXT4-fs (loop1): Remounting filesystem read-only [ 57.253805][ T4323] EXT4-fs (loop1): 2 truncates cleaned up [ 57.259943][ T4323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.273360][ T4323] EXT4-fs (loop1): shut down requested (2) [ 57.280146][ T4323] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 57.289038][ T4323] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 57.313061][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.327868][ T4336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 57.382292][ T4344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4344 comm=syz.2.214 [ 57.428709][ T4341] loop4: detected capacity change from 0 to 8192 [ 57.477760][ T4341] vfat: Unknown parameter '18446744073709551615' [ 57.571258][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 58.091193][ T4385] tmpfs: Bad value for 'mpol' [ 58.099477][ T4386] tmpfs: Bad value for 'mpol' [ 58.130642][ T4385] loop4: detected capacity change from 0 to 2048 [ 58.177873][ T4385] loop4: p1 < > p4 [ 58.182590][ T4385] loop4: p4 size 8388608 extends beyond EOD, truncated [ 58.313208][ T4332] udevd[4332]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.324580][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 58.356742][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 58.368117][ T4332] udevd[4332]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.425401][ T4399] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 58.668928][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.676787][ T1039] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.745654][ T4423] fido_id[4423]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.823000][ T4431] netlink: 'syz.4.247': attribute type 6 has an invalid length. [ 58.921013][ T4435] netlink: 'syz.3.234': attribute type 4 has an invalid length. [ 58.929068][ T4435] netlink: 17 bytes leftover after parsing attributes in process `syz.3.234'. [ 58.992347][ T4434] syzkaller0: entered promiscuous mode [ 58.997853][ T4434] syzkaller0: entered allmulticast mode [ 59.044086][ T4437] loop2: detected capacity change from 0 to 128 [ 59.069106][ T4438] binfmt_misc: register: failed to install interpreter file ./file0 [ 59.193985][ T4437] syz.2.249: attempt to access beyond end of device [ 59.193985][ T4437] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 59.295997][ T4455] unsupported nla_type 52263 [ 59.334391][ T4457] loop2: detected capacity change from 0 to 1024 [ 59.346225][ T4457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.368848][ T4457] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 59.391345][ T4457] System zones: 0-1, 3-12 [ 59.399821][ T4463] netlink: 256 bytes leftover after parsing attributes in process `gtp'. [ 59.402333][ T4457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.443558][ T4457] netlink: 76 bytes leftover after parsing attributes in process `syz.2.256'. [ 59.509329][ T4471] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.577797][ T4472] bridge0: entered promiscuous mode [ 59.577829][ T4472] macsec1: entered promiscuous mode [ 59.578622][ T4472] bridge0: port 3(macsec1) entered blocking state [ 59.578733][ T4472] bridge0: port 3(macsec1) entered disabled state [ 59.578820][ T4472] macsec1: entered allmulticast mode [ 59.578914][ T4472] bridge0: entered allmulticast mode [ 59.579401][ T4472] macsec1: left allmulticast mode [ 59.579414][ T4472] bridge0: left allmulticast mode [ 59.579837][ T4472] bridge0: left promiscuous mode [ 59.589798][ T4471] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.639318][ T4479] loop4: detected capacity change from 0 to 512 [ 59.641027][ T4471] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.642244][ T4479] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.649202][ T4479] EXT4-fs (loop4): 1 truncate cleaned up [ 59.649792][ T4479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.694050][ T4471] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.784558][ T3963] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.784694][ T3963] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.784757][ T3963] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.784901][ T3963] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.813754][ T4482] netlink: 7 bytes leftover after parsing attributes in process `syz.4.264'. [ 59.813846][ T4482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.264'. [ 59.813873][ T4482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.264'. [ 59.916669][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.993635][ T4490] loop4: detected capacity change from 0 to 512 [ 60.011036][ T4490] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000054fe) [ 60.349510][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.337128][ T4516] vlan2: entered allmulticast mode [ 61.370122][ T4518] netlink: set zone limit has 8 unknown bytes [ 61.856984][ T4523] ================================================================== [ 61.865176][ T4523] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 61.872305][ T4523] [ 61.874625][ T4523] write to 0xffff8881042d4b90 of 8 bytes by task 4512 on cpu 0: [ 61.882256][ T4523] shmem_fallocate+0x221/0x840 [ 61.887022][ T4523] vfs_fallocate+0x3b3/0x400 [ 61.891614][ T4523] madvise_vma_behavior+0x1920/0x1cf0 [ 61.896993][ T4523] madvise_do_behavior+0x5b7/0x970 [ 61.902109][ T4523] do_madvise+0x10e/0x190 [ 61.906442][ T4523] __x64_sys_madvise+0x64/0x80 [ 61.911214][ T4523] x64_sys_call+0x1f1a/0x3000 [ 61.915888][ T4523] do_syscall_64+0xd2/0x200 [ 61.920389][ T4523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.926282][ T4523] [ 61.928600][ T4523] read to 0xffff8881042d4b90 of 8 bytes by task 4523 on cpu 1: [ 61.936131][ T4523] shmem_fault+0x90/0x250 [ 61.940656][ T4523] __do_fault+0xb9/0x200 [ 61.944905][ T4523] handle_mm_fault+0xf78/0x2be0 [ 61.949775][ T4523] __get_user_pages+0x102a/0x1ed0 [ 61.954804][ T4523] __mm_populate+0x243/0x3a0 [ 61.959429][ T4523] vm_mmap_pgoff+0x232/0x2e0 [ 61.964041][ T4523] ksys_mmap_pgoff+0xc2/0x310 [ 61.968736][ T4523] x64_sys_call+0x14a3/0x3000 [ 61.973415][ T4523] do_syscall_64+0xd2/0x200 [ 61.977922][ T4523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.983835][ T4523] [ 61.986153][ T4523] value changed: 0x0000000000000000 -> 0xffffc9000255fb58 [ 61.993252][ T4523] [ 61.995571][ T4523] Reported by Kernel Concurrency Sanitizer on: [ 62.001714][ T4523] CPU: 1 UID: 0 PID: 4523 Comm: syz.0.272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.011341][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.021393][ T4523] ================================================================== [ 62.057497][ T29] kauditd_printk_skb: 738 callbacks suppressed [ 62.057508][ T29] audit: type=1400 audit(1760120085.071:1529): avc: denied { write } for pid=4524 comm="syz.4.278" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.116417][ T4525] loop4: detected capacity change from 0 to 32768 [ 62.119399][ T4528] __nla_validate_parse: 9 callbacks suppressed [ 62.119413][ T4528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.278'. [ 62.146399][ T29] audit: type=1400 audit(1760120085.121:1530): avc: denied { mount } for pid=4524 comm="syz.4.278" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.168217][ T29] audit: type=1326 audit(1760120085.121:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb676caeec9 code=0x7ffc0000 [ 62.191628][ T29] audit: type=1326 audit(1760120085.121:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb676c4af79 code=0x7ffc0000 [ 62.214843][ T29] audit: type=1326 audit(1760120085.121:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb676caeec9 code=0x7ffc0000 [ 62.238159][ T29] audit: type=1326 audit(1760120085.121:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb676caeec9 code=0x7ffc0000 [ 62.261514][ T29] audit: type=1326 audit(1760120085.121:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb676caeec9 code=0x7ffc0000 [ 62.284805][ T29] audit: type=1326 audit(1760120085.121:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb676caeec9 code=0x7ffc0000 [ 62.308162][ T29] audit: type=1326 audit(1760120085.121:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb676caeec9 code=0x7ffc0000 [ 62.331459][ T29] audit: type=1326 audit(1760120085.121:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb676caeec9 code=0x7ffc0000 [ 62.387964][ T4525] loop4: p1 p3 < > [ 62.443519][ T4332] udevd[4332]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 62.455015][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory