last executing test programs: 12m49.29222519s ago: executing program 32 (id=208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) ptrace$getregs(0x67a0259ac2b5bfa0, r3, 0x9, &(0x7f0000000740)=""/243) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='global_dirty_state\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xfe4f, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), 0x0}, 0x20) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) modify_ldt$read(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_procfs(0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x922, 0x12) 10m23.993919914s ago: executing program 2 (id=2159): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r4, 0x0, 0xbf5, 0x2000402) write$cgroup_devices(r4, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x9) fallocate(0xffffffffffffffff, 0x10, 0x1, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="a2", 0x1}, {&(0x7f00000000c0)}, {&(0x7f0000000240)="23df28e3222f63d015af25fcbf0dd82bfc679d424d8fca559fefe665aec9d72ee80fa297e98eaf254645b10d0e578fb136d3df97aaa1d302403c43e9b4d28d91c9986bde58d8ad0819ea2b90ff8ff00c1f7938b98a0563e77b3ff6714f47a10da76059491fe642b29c57f6cb5fbf34a5c6c093edfaddfe49524f1d60983e4c3aa9196630daf175df8144bbd998612d7b9fdc0c217c0c296251fd8564b96946548e8add075c99d1bced204777ceff01000090f58d2b97807584fb489b17940b2163f89be6422becfad801380e3a417877c320f9ebb2a1983025a2531ca782c335d960fbe6a5073e30081f82cf4b8d798c30", 0xf1}, {&(0x7f00000018c0)="e16db643757616315756da124cf73ce67a84b385c68d980c6ac2bfe10488d295e96b5bc1909ad155fb05e5bb00631a5ec0a30cf4294e020ea461b2b05be809d3b2162801d55fbf9215b9b2598cb42dea69529624bb2f08d517884c1e056c3588133bc021105b49c9b4323ee0f581e5b37e2a1e80a675eb5dfe0e12ce6a9c1ec73f20348a0a485842837d095bbdf107d4599f3d804c4e6af472ee2b7780be0d444f9d3fcc6dacd36dd046afeaba49dfcf19da1996b44339a69774f44a19720d73c277418791ec7d7361483b3c7e6a6bdefd06a0b1a96cd23227fb42ee086fc6ab3b9e4fba74ee135177dcc86f79d263dcbb6b9793f0fe3034eaf46a6c53d9332b838f2ec4cf33d0e8be7e2784f54fc436dc5f12726ecca8f901c2113c1eb73e0236c484c2229f446ed73c7567bded76dc1e71b6f39f57326524440e023e49f547c371972de8242143a28ebfa75d892635e217a11b965e21cd7208fb600b8700d3e6a21570b5c001099f457970fe2e4f57b7770bd5d1355708d68d5d3b4893c43243487fbd6f8dda9a27d63cfadd0d330755ef457acfbb566699132f3f2f9d88b2762ca17dbc8f371fc7ff7ff410eb9d651cfca659b6983cd3fdc052cf63f2036ad57cc195d6aab589ee38829caa72bc2c5a042adedf88b8dd3295ed02fc115865bbfb50f301c7cd6a707335ec076f9fa09cb07ed0fe30c8abb3a557674c86f3dfe9e4cde8907662ea9e3048f9f730e08fc5544c1ce416ab9ef3db276815ebddf0cd5cd5966db768bf8e0de37435ba9e802e23bf5cc35aad7eb04fb33987b7d9297eb6a2db96f273dae8e87ae86339309a4e01a1a04d6af36dd11b1af0e78c8d08a3995a1692ad8f78234d1b4857486d7b589a27dbfe4dcd6ccc5e277ef9d0c338c213389b70a28a530ebb485e9e62f284d54f3da90c729b7efcda8798e2e7e0e61d7ef01bda8f4e6b204c6dbcf35c87f1040c515dadc5644fa7141e85604573b1a1dd1eb6b40062f1053ba0475048a68194f3fc680ac208b4970007ed38c93afb4c8e8f342737ca3b5a3cf1abf303e6b104f97c9c416bbb3f589bebb5ab15b3ef3edb7dec7cd29d98f1629012b02b550db9037b812cca1cfa5e937b626b04a4a20707dcde08628a0ce72f17a5d380c9daf66e0d7e033fe990bad1fbece4fb65d91f7ddd344bd6ac255b78bf2d0bea939494154a92dac7265dce5254cec19665b32a7cc671d41d53b2ebf8a0103facc26967b60bc9e33aa7913a35893a00964ba43fdd5c497a42bca4a841c6e56c6fade1aa7807d7f3a307af981dbe86a793a9b5f56d7d25cd2eb63d0cbb81e522081dc3fdbf9a877afb5dc0741bac7943f4306d94197c061daece049421841cb3b09d2b28adb3efeb0c09397e6376e8db147be9ca13b16cf5e45c2f8bd4fbe5fa6cd090ea92095ff07d9e634f8a7b20487cb55cdea677392b798b833fd890fba0497ad0ebe4343485b9a59a594331f305b3952b897b98512ce1530b32e02f25d52731ffa731e6bc66c03fbda2d53113b62be585d646610e46d0a95a04f0be035b839c028a9e4edc6414825fcbb2e00cb3ffc97d7862fedb083cb1c48e174c4cffa1262a087699aa887fbc468d1361b5fb1c9c90c53d4c78804cf9359e1ea9bef49e167ac7ff3920a328c16df45c7a4d9c45982b984d549dca677eef98130522c0d72ef7b7970eca90c19b875927ab6971af11c15c58d52c340974800d906403c1b06f8808bbf57a54eb1b9a63bc9f7ded76e95f3f61482391766017f5c7c1154bcd98503807bcbdde9063590a126dddccda52ee0fdbaee3ee3fe9beafbc466f7ccf6eba692f0324fe90c832975d5df14014fa1cad0a9be934e7aaabd5f98b823cab35291e86e4a3143496eb0c39ce68ee0f237e8d36660df431fc99f9938024179dddea7e52e2a27a010f02f6efa56a180f72dade088acbae01ad73c15cc59038090c8380f4e32aa5253610570979b751a4442d32e554a20d128ba375a5b83536c5f793fed3bb50b86adcb4069a0a8db95a7836f8a53385f74f4e1ce5b48986382fd92c41e3df2e65f0c44c42ede2c7b8258b58747d08e2e7e373877ff937eb16341879776722b966db9baeb597ca64990d55af65650470bd1190c3dc29a10bec9a5894d846393cc79825f834b44e69a9f4828ebeb52d89ec94ce70148bf78fe6ea9d50ada96228de4b005dda5c368964ac3d02d4e53621d2cc955d541b7911a1de3f23c960f986f63e20290f4ce26697b794ff3dd0f2d988716421bf071fc8d4bf9f0e109695568a92954c2375b3c8a0ccf9bc91f58b0e1b05854fda86ea46b393df5ebf133d0f84549c06b6f350ca44ce3496ff1946100cf93169f1872f4fdf83a3eb5f18a1bb634cd02e78a7b96f601c4acdda5fe2012162c4e0a4c59d6611565c02d44681979a79af1acfc5c03c8601ac528e40bee86b16b553648e39e268df5093cf0e289161a32a019ae1af3308b3c4deb6c4e0a205601139cd5f55bf02b0871cae9f85a8987f7e841f57773d5184c6f1e12de403a34588bd0c3ad60e41d7ec3a25cc80bd4a871b2898c0f5693ef7acfaa883d5973252cc0ded3e5ff73ad33545bdc9608b0ced67f919f39867888a3e7e8412848afd565516f1d1612d333008cd07f98dd06aebca6e342de5eca327aeaee9be798496735044086ae430970e8662eb941a8a9fe4381cac38772b5aadb08c685afc71f72f0071ff42768c757af8521ce3bc5a44a2e43da3bfef1d5e03013122c52595ec5fe6c9c1f8cbd00c3e06c920bd025c033064bad04a2fb67584303a0a5f12309847ec71769456f84593852d46726a640ea1260c5ddd468b86ad0c827923b036a4ed47a0a65316e5f8ff46c2b27115980de11418d4d7ed0f1a7ae77fc2e1257df8e79b6438a9ddaf6d2ab108d4c05c49f46892caabee018f33cc3061b82eae67a1be0e9b22cfac0b9d57702361cb3c3b73cd0182a5b8a2f9058f839babc2391e9c9db14322bbff8502e01e16c5be4e4b23234f8aca3f3a0a22b6bec68334837a65385cdffa2bbcccd640775c574ce758cf96d12ba13ef348ddd5115a4822b6ed5635428c37264a19099ad079ed62e0f3af185910bee1a80d440a7935220ebc44cba9c4a445c287c3ddfe1111c7b71cb02881ab0a3e75c06c9c06fa97bfaccc1e61887f3f41bb90e24a54e3ef4d476e9785344ea364c65e9bc6792984468c82775d3f0b17948c2c260e29986b9b1adf1382741bbf475fc2770142cd2122947336fbd1c2b8dd713dff65767dbbc64378bff6a7016b29f9e564b11a7d404893a9c75fa9bcf659e4d06a6e845f006fe1c0100bcbbfa97cd102b5bf623627e8416d429c8507cee2fa78a5a98cac323a316ad29d1b21d19b9af95009c8d20044a9c1f290abe15cc4a04d7be20ef0e49303f2ce018160f4a0f095fbc4823a20df2de419ab9ca3bf6900362e1c121ace24a9adc3dbbe2e5c80d08dd2a44719558b71edde49052e4ae11f0fdc3d4dd7802fb0df26309617f8d12bae2aeb8bacfbd0413bb22479c6b47423a6587b2369e62cd9366b0399a52c78b9e6eb8ffae14c494ab966c686a64ee6db53d415bfcc456703e7c71a417daed783aa8b290f5aba31c0b0cb73683eddb7132fcfb5080ceede25f07766608c93030c28b38496b1881ad8741107e31877ff80f12bf73647c3b3b2f7b76986b619d49f6f57177b06d824201764fd526c65fc93b7fab40525e999fdda7b24b09ddba6cf0a9220900c6e1360ae62b9397f5a7a7849667bbbd0a6c0a0f2b55a22768c4bc63081481270a813416b938c101c83c34cfc335335a69ceb1c6958e6ad1e49780cf93bbda0adc5905ec74a608c0251177f558fb3c35ede14dabc10019990f8891c293192fc145ab5b22a445f8c7512248df7856b62e70448b79a0b48f5a467f3676c832d8c7eb109e2c78da14526dd53c2d2f0856073ceae2a3d697e1f9664308ee998de8ff4ef542447b270dee5c2705e4787893b2122724e71d94d1f727d53787fccd5b09fcb9aab445200e69fcd4e93ee72076786ffd0896ff94655877d3e5e1cb8a520bb8e50352a54f7749e4aa601c57e80afe6a2f3033399d91911b3c5be0ab93d8227487d0c33d54ce7697a4de4cf70099d4cd2b18c1fa50abba4a85360ddfb81f8fc18396a68525f1619cf701b309e05a712e089d352765f4cb99954c601bb958a5c8fde595f05dded7b0143f0b1a3c86ad2e8f6fb306565815d9deb10d05f5885c3a387d6cc4dbce2f55499d7980b4083e1a75ea7802cc5c0801502ba89bb07a682c7312cd045a8ecb40e682a958996485ba35bb7a5a24bcfa1a6ade19476389eb6ff3f9b09876fad6a78843f6b27e5b51023a0334b774888d7b6ed1f8932133636f164ae01955213d3e6a0f9d0fbf03e97cba5d01747eca5131886357f7e6de8b4d04989f0367feda36d58913232777266229137fd4496742275cd518cef8ddb6a1863a4cea60217f6c9c6f58dc0c14970066d6e849a36d97a6c8775975306ba2567ab269e26882333a429458bd432c9bbafcb3022d1d81530ed6fe07347190c803700a1384fc9cbb2b52c0cc1b6c1bb73f58cb9d483b57bc922d04e83d133d4d8e548a55eea9ee4dcd81635774b1b282c8444798b2670336e401ac958e01eb02cf4e8c93b0d3ce2434461feeddcf1ae426de49a85b7f2c6362c1a61655329440eec012201062f4d21b82603714839967ccad9fcac0a20ffa5f394ad70fd23f910c5d6ca78aa04be9bfb44e4a4f494fa3a7ea9feb94a8bf77bc74e0d7cfe886ff0a1ae6c5eb88c128266da592504dfe0b662fb87f36e561651d3fc412910c16c61bb47d8ea6e227b3693d415d9162aaefddc66d47d1bc57495494146c1637161150bb1b1c08481d5a7c90076e89fba8dbaf5f11b1fe47c10a0710245fe31f4ed570ce4f5851946765fd7ef355ef4f700ae743a333a1268db7f777437c5ff38e803f002c08f216a1ff61607a0be8c6f80a78a72684a68a6438d2f38f331f844174165eeaccbeb3d8902df5c4b685e883191b6c83a3f9b59f57c980b63b983664d3d21c743a063a56ec77a1dcb052ebdfb2c04e7328867878deb0cc9f663c9cdfc3a04a0a54969ec16543fcb2db9b08104a06e6d57f73e6b85d39db5cda0ab9a17c26cab7a4361374005e3f1e4971246e3124b58540ea9872db830486fcf5ea395e0f6fe040e621cc08ed61267680fc6d28f01ef925033f7fa3224b25d47ec4c60a0628b686ad02f995b36421242b2a1092dbbdcc8f8ac2a95ee2dfe7ff455876e5d047fe1529fd11f7ef903357876a35b10e843e2391b8d69ec2d287b24eccf6119111908da3c2a5fa4456c02f78649a9ee715e865ac5fae58c7d8b9ef3c54795e753b0118fd38cd9e7b775c3c763c200c60c96107ea4006e7772bfcf92826b09689157018a09660baba9a5cd1a7a3ed943cada9bc655de6e9198c8a09d380296e175aa451c264b6465014240427ef2f9807e7e2cccba9c5b576f09240dd861adf98937a8643320afca359ca3aa925add85a607303136286d6d1f445738c05654cf136e595a3df7a9e6df34b9b709f42060b9f2ab0e2f62c2b4238483658c08d79766cc673d55f192f576095751dce787de496044b2f5c7aa60aa43bf11ca2191aadb273a8085beacfcc8862484d4353ed1588b7350a8b523f37a3b2c4639e2051657c12d515c97c4fdc04201924e9acd3e80e696249fb1bfa8e68c2e6569e85fb49f221e0adc9ba1ae8cf3733dae52018ad86ecff50be32c4beafd73f5bc50190cab", 0x1000}, {&(0x7f0000000100)="c51b604566a71ec389831a7da2c59114f3e4e6831fe06acc536341ca458a69bc3175d4849838872d0db9", 0x2a}, {&(0x7f0000000180)="ddf4aec36ad9939df473398695345f6f2a49170a439f3ab3ba71829509f263c2c47743be299d48d599552610e097fe4ce9a793d7a4f0e78aeb4a85f6bc8359b745f6c0e2cae3b5b0d6978385062e24015f3c14fb", 0x54}, {&(0x7f0000000340)="7f", 0x1}], 0x7, 0x0, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)=ANY=[], 0x0) 10m22.964164912s ago: executing program 2 (id=2172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b742f12af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x699, &(0x7f0000000140)="$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") write$binfmt_script(r2, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10m22.775565733s ago: executing program 2 (id=2173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b742f12af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x699, &(0x7f0000000140)="$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") write$binfmt_script(r2, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10m22.698843633s ago: executing program 2 (id=2174): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000001e00)='./file0\x00', 0x4000377) socket$nl_route(0x10, 0x3, 0x0) inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000a40)=""/39, 0x27) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000001c0)='.\x00', 0x4000423) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') getdents(r4, &(0x7f0000000dc0)=""/4106, 0x100a) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000014000780080012400006000008000840000000370d000300686173683a6e657400000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x5c}}, 0x8800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r7, 0x0, 0x80}, 0x18) sync_file_range(r8, 0x9, 0xfffffffffffffff9, 0x3) r9 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) 10m22.542587874s ago: executing program 2 (id=2178): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') 10m22.457309755s ago: executing program 2 (id=2181): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x8, 0x10140, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000080000000001000000000e1ffffff00"/28], 0x48) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0000, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setuid(0xee00) r8 = semget$private(0x0, 0x6, 0x0) semctl$SETVAL(r8, 0x4, 0x10, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r9, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r11, &(0x7f00000008c0)="23f0431a77"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r11, &(0x7f00000008c0)="23f0431a77"}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r12, 0x5309, 0x0) 10m7.398496902s ago: executing program 33 (id=2181): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x8, 0x10140, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000080000000001000000000e1ffffff00"/28], 0x48) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0000, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setuid(0xee00) r8 = semget$private(0x0, 0x6, 0x0) semctl$SETVAL(r8, 0x4, 0x10, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r9, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r11, &(0x7f00000008c0)="23f0431a77"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r11, &(0x7f00000008c0)="23f0431a77"}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r12, 0x5309, 0x0) 9m10.079170871s ago: executing program 1 (id=2973): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0xb3233, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") 9m9.453000155s ago: executing program 1 (id=2980): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000c80), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x6, 0x0, 0x80, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$caif_stream(0x25, 0x1, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 9m9.421106376s ago: executing program 1 (id=2981): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0xb3233, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x401, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x200, 0x100) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ppoll(&(0x7f0000000300)=[{r5, 0x16df511ff949d0af}, {r4, 0x3231}, {r6, 0x400}, {r7}], 0x4, &(0x7f0000000340)={0x77359400}, 0x0, 0x0) accept(r5, 0x0, 0x0) 9m8.541201732s ago: executing program 1 (id=2987): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) 9m5.798588272s ago: executing program 1 (id=3005): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 9m5.594035154s ago: executing program 1 (id=3007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) mq_unlink(&(0x7f0000000000)='\x00') 8m50.390020439s ago: executing program 34 (id=3007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) mq_unlink(&(0x7f0000000000)='\x00') 6m21.499558242s ago: executing program 0 (id=4757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001811ff00000000000000000000000000000000ff0200000000986f000000014f194e2000189078040000000b0000000000010000000000"], 0x52) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r4 = socket(0x1, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x100}, &(0x7f0000000180)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r6 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x3, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu<=0||!') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 6m21.451315102s ago: executing program 0 (id=4758): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 6m21.426594132s ago: executing program 0 (id=4759): r0 = syz_open_dev$usbmon(0x0, 0x7, 0x0) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_h:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYBLOB="082a6dba7d9870aec42d87d9272fe8e229333c518c212daa625bf99a7a363ee1edf9ca8da53d4189f67f81db81a4a9058972bef1639c3cac6cea8cfa685243e32f5a58c659aa6ff4192dbd56bf32339190e055fd288e65ea7b", @ANYRESOCT=r2, @ANYRES16=r1, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x4011002) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) 6m20.530432758s ago: executing program 0 (id=4766): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r0 = syz_io_uring_setup(0xbda, &(0x7f0000000080)={0x0, 0x356e, 0x800, 0x800001, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m20.426858969s ago: executing program 0 (id=4767): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000002740)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, &(0x7f0000002780)=0x4, 0x1ff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES32=r1], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x20) poll(&(0x7f0000000400)=[{r6, 0x904f}, {r6, 0xf264}], 0x2, 0x11ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x30, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r10 = io_uring_setup(0x6c19, &(0x7f00000004c0)={0x0, 0xfc0, 0x4, 0x1, 0x3bf}) r11 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa6e4, 0x4, 0xfffffffe, 0x2e8, 0x0, r10}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) r15 = accept4$x25(0xffffffffffffffff, &(0x7f0000000680)={0x9, @remote}, &(0x7f00000006c0)=0x12, 0x80800) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x24, 0x0, @fd=r15, 0x100, 0x0, 0x48, 0x0, 0x1, {0x0, r14}}) io_uring_enter(r11, 0x4ca8, 0x37b1, 0x3c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r18, r17, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) 6m19.759154223s ago: executing program 0 (id=4772): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 6m19.758693883s ago: executing program 35 (id=4772): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 5m53.775009022s ago: executing program 6 (id=5068): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = open(&(0x7f0000000380)='./file1\x00', 0x64843, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28ee3d29", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf25080000001400080064756d6d793000"/34], 0x28}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x80, r5, 0xf0f, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4b}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xc5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xe}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_UDP_DPORT={0xfffffffffffffd6e, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) nanosleep(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000010101030000000000000000020000000c00198008000100ad0400002400018014000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x0) msgget$private(0x0, 0x31) 5m53.515819204s ago: executing program 6 (id=5071): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000000000000fab149c73d85efda720adf7e1a4114bf95f1862dd2657a69dfd950b7d9b6088ad6103cdece6b3c4f94e93cec33f729c9b1057bb0fb01f1ce461670f5f8cf05600425ba7a96ca5a71dd9e4498f2e8d5528f4c71fe673fbff54b22a3056c3c60f6f7bb47a4a34bd1fdf19430970063088a750d4336285f33411fa64744a4c8b762c082d4175f0cec73006e0c8588548c7e89f452b1e4de00000000000042993603e86ebab27dfb75a85c79402d24f73060171deb42d0049deb779858a86b11dd5f990d9348244c5f61e00200389a31d38bff5eddaa9620ff1316f3f8732c301dd62ad139894baa60c1d335b86620b45030f40b62348ccc65da73d2ddab22d2d440954e6e400605bab8530928eff77066861c3bb3b0fe425d62711fed7ac8ca65966f112a365ee6468c783eeb574c468a908ff3817bdc7431b18e6aa6b86712d958775b48603bd28c00c09d57b3c5c062db46329743627bdb3022fb84b700d2ed147a8ede0c2dfd5b18194cc512e95dce7450ac12416bd8ad9db30de028b250a0e9508899da9248cc5b5ed7f525aa1469f81d5d1eac230cc1b305f13c88b2ed1c5d9e42526af2c0a9f78b9c03a799fcb07b89133f543436d110137e00"/460], 0x1cc, 0x800) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000900)={[{@nolazytime}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5d}}, {@noauto_da_alloc}, {@block_validity}, {@oldalloc}, {@nodioread_nolock}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000008c0)='net/connector\x00') setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socket$kcm(0x29, 0x5, 0x0) 5m52.523036101s ago: executing program 6 (id=5078): r0 = syz_open_dev$usbmon(0x0, 0x7, 0x0) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_h:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYBLOB="082a6dba7d9870aec42d87d9272fe8e229333c518c212daa625bf99a7a363ee1edf9ca8da53d4189f67f81db81a4a9058972bef1639c3cac6cea8cfa685243e32f5a58c659aa6ff4192dbd56bf32339190e055fd288e65ea7b", @ANYRESOCT=r2, @ANYRES16=r1, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x4011002) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) 5m51.514510518s ago: executing program 6 (id=5085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) preadv(r0, &(0x7f0000002c40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000003100)=""/4101, 0x1005}, {&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000540)=""/109, 0x6d}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f00000005c0)=""/196, 0xc4}], 0x7, 0x2e, 0x81) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0x3, 0xc, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfff}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000002cc0)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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") r3 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0) write$bt_hci(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d00)=ANY=[@ANYBLOB="af32648586f4229a62b0f11b797427ecae6085d34bd0b310b80d83a43d06327d458248005d56e1d70609009251db7848e388e46f78efb06ac79c4c6d648181c7fb11c584e83e1223b717400b5b21221e7a11bfb79f1660c631ba4d162caf56aabcba15de096672", @ANYRES16=0x0, @ANYBLOB="a1ab27bd7000fdffffff32000000080017015700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x200040d0}, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002e40)=ANY=[@ANYRESHEX=r5, @ANYRES16=r6, @ANYBLOB="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"], 0x8c8}, 0x1, 0x0, 0x0, 0x4800}, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) fcntl$setown(r0, 0x8, r7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = inotify_init1(0x800) inotify_add_watch(r8, &(0x7f0000000140)='./cgroup\x00', 0x24) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') 5m51.389862639s ago: executing program 6 (id=5086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) mount$9p_tcp(0x0, &(0x7f0000001040)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=tcp']) (fail_nth: 3) 5m42.366979101s ago: executing program 6 (id=5151): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r1) keyctl$search(0xa, r1, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r0) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) 5m42.330927891s ago: executing program 36 (id=5151): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r1) keyctl$search(0xa, r1, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r0) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) 5m17.663138371s ago: executing program 5 (id=5420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1) 5m17.659786462s ago: executing program 5 (id=5421): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/11, 0xbb, 0xb, 0x0, 0x1e}, 0x28) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pause() rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) 5m16.758079748s ago: executing program 5 (id=5434): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x842080, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000ac0)={'syztnl2\x00', r1, 0x0, 0x40, 0xff, 0x7, {{0x23, 0x4, 0x1, 0x18, 0x8c, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@noop, @timestamp={0x44, 0xc, 0x51, 0x0, 0xa, [0x9, 0x5]}, @timestamp_prespec={0x44, 0x54, 0x6a, 0x3, 0x3, [{@local, 0xfffffffe}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x386}, {@local, 0x13}, {@broadcast, 0xc}, {@multicast2, 0x2}, {@multicast1, 0x3}, {@local, 0x7f}, {@multicast2, 0x7}, {@multicast1, 0x4}]}, @timestamp_addr={0x44, 0x14, 0xb1, 0x1, 0xa, [{@remote, 0x5}, {@multicast1, 0x7fff}]}]}}}}}) pidfd_send_signal(r0, 0x29, &(0x7f0000000100)={0x20, 0x10, 0x13c}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRESHEX=r2, @ANYRESDEC], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="88201d2aaf1c72431744263f9e187b3a5e6e2026d9460c8be619597a77c97d9f48b337f77b01752e813239319de60e586b85528a9c19a1612eea0ea422fdea48660ffd1ff58256dfb91ae4a8346ff2f35cbfb6cefb22c734069b8af25a81b58439030f87732e69e649836dc33194134245b61a1a5d855dfd253580b770c944cb774a7d1bb4883eaf513a345a848000ef795f5f59", @ANYRESHEX=r2, @ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffff8f) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x1ffffffffffffffd}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 5m16.595077259s ago: executing program 5 (id=5435): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xffffffffffff8001}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="cb31e5963531a92d3ebb44434d4fdf6b2679a26a5561ad0b84e2d4f9116d8755e8d29892d256b51d89a9ca5c9586310f6872f2a1acf46eddcd3a7a5c49990c9e6209e38b9b0eec74533aeb343340555fb96f479d29681ac4d6d7d83e080b13aef9031c6967e8e186d0cb2c544c173eed8318587d98c085eef88810d0f8130d00329f56561b987799143b577960d0c990a2e682c27de8416a330aaafd88298a89a7b2c1fa79d9cb7e4d31a87ec1d5899ad9084efaf50d42c3dd89bddb4dcf40924f3dfc67032eeb32430815a0e17b529b9ee3c8b074afe506fe554497dfa68ea3", @ANYRES16, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRESDEC=r4, @ANYRES8=r4, @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x13, r2, 0xc2228000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r7}, 0x18) r8 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003130000002cbd7040ef531d3d3aa5ea0409ddca9f1b5cfcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000200"], 0x98}, 0x1, 0x7}, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r9, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() syz_clone(0x4220000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 5m16.302733421s ago: executing program 5 (id=5436): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008050}, 0x20044001) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m16.071563742s ago: executing program 5 (id=5442): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setresgid(0x0, 0x0, 0x0) 5m15.960554533s ago: executing program 37 (id=5442): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setresgid(0x0, 0x0, 0x0) 2.058590925s ago: executing program 9 (id=7990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (fail_nth: 3) 1.653836698s ago: executing program 9 (id=7993): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x20, 0x0) 1.635403519s ago: executing program 9 (id=7994): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1.607477519s ago: executing program 9 (id=7995): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0xa, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c0000800800034000000002"], 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.39672921s ago: executing program 3 (id=8000): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000040)={&(0x7f0000000d00)="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", 0xfffffffffffffeb0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) unshare(0x2040400) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 1.316648691s ago: executing program 3 (id=8003): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@orlov}, {@nodioread_nolock}, {@dioread_lock}, {@barrier}, {@dioread_lock}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140), 0x0, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 1.278905671s ago: executing program 4 (id=8004): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000840)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xdbQ1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xffffffffffffff09}}]}, 0x30}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4855}, 0x24000052) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 895.233303ms ago: executing program 3 (id=8014): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:var_run_t:s0\x00', 0x1f, 0x2) 894.290824ms ago: executing program 8 (id=8015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000006680)='/sys/power/wakeup_count', 0x60801, 0x12) write$P9_RWRITE(r3, &(0x7f00000066c0)={0xb, 0x77, 0x2, 0x2f1}, 0xb) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'tunl0\x00', 0x800}) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) unshare(0x64000680) 805.801464ms ago: executing program 4 (id=8016): socket$inet6(0xa, 0x3, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f00000004c0)="20ed9e644c28a73697633ed7b3b269e2aab6d7337f8891fdd7c02a59dbc28577cdc7c11b4d524928e3861ef63cfde460d7f897bfdb23ab501d4194e93b5f0ce804873afacad558a44fd981d26afd1dcc6cd6635c7856290e51ee5c5b9c9d68d7f73ccb907496f074098d46e46a09a8b0ca4311c3e766083ae5ad98fc6e16a5faf96d31f8e8f266ad587add36699b31132dc065abe101d90dca0b0954c5b6042bcdce6bea125f2aa3397d2480f3e988bfea32afb5a01c67f90f", &(0x7f0000000580)=""/179, &(0x7f0000000640)="664b76b3c62333f42ee61bcb2f14869d506ef9ed7b282a038df6c295d82a025d4a40c9cb36616dfbd05b8f8b1c5234479c2c0cac5c6ef1c87da859038526184dffd3f6221ac2191276ef0ec1ea09bd4bc5b18423d1fbf9042ad5222665db10e699aa0475b598f60db8754150e33e2db1a09addb1439457ef4b3ea062635585c1c705128a3587528fa6df5e538b2a937d", &(0x7f0000000700)="0d0e319fd603f14312b18a1550752bfd60bbe68162fbec944a686b2ce70fef88b014a237e9effba28de5433f02a9856704d8ba15556bc13e0ca5521c81a471a426de24eaaab8763516805bdd7f230d212cb8e80c2dcc3a2687bc228cf987a49743a16a90d88278f107b3655a05a7c18e2f70304d2e20ddac72f1dbd74cd1ffab493458ef87eae5afbefdcb6701a25d0c25f466e7a01687b9452b3b832abb5c116580", 0x200, r0}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0xf) r4 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)='6', 0x1}], 0x1}}], 0x1, 0x24088804) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x9, 0x1}, 0xc) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 772.914795ms ago: executing program 4 (id=8017): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5643, 0x7}, &(0x7f0000000040)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000700)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000cae7cb86ba23e72683eda0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f877549c60080000000000000b57a5025ccca9e00360db7010067e006dcdf63951f214ed64ad0feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xdc}], 0x1}, 0x0) stat(&(0x7f0000002d00)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002dc0)=ANY=[@ANYBLOB="2100000005000000010000800500000000040000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04007b9d5c0000040000000000000000000004000000000000000000"], 0x50) syz_usbip_server_init(0x2) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x20004010}}, {{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000029c0)="68bd0bf15aa6520131451efadfc2b7770380c723b0b66f5215b21cc0bcb4bf37cea3bc689c09a3f28fa2e78bcda0c79af6561aecdf21265e01e6dea024cd2c9431526cad9bf8fa0601b072fb9a36b586d71eb75bf4dd1936f804bbc77e3a5873419bd5a53d225e11888df5c43f455ffb845a99faf20d77cf7649f80bd310a590beff0bef0999318e5030cd6fa30828fbce8cc76420c8875e7decd27e6bb3e7b928ce7baf5e1841b612e5b35fd7dec472fae77d750d16c9b9f585c0c7aed8edea45b170550ca5e50aa9d7b48b406a7e7328e07218e603503c2fe5f6d42fdd71ec78b6ba25c4", 0xe5}, {&(0x7f00000004c0)="18058ecc9437f667", 0x8}, {&(0x7f0000000500)="a39475335de9a8033561415339eb599291fe6359bbe4dd2937400cc555dfa400845279da2d0f01eecd4e616dd3854aeb9733b0fbaed7bbb121c91619db2490d9fda6c2dc87715a9f6ff17f857cba783e69cd4d49ccc7b072fe6d7916c5a34b872ff83a895e1e53aaf96a28463fb7f8cd0716b3b508f176358ed38ba7dfa4ddd0b0cc31cddb3a5668", 0x88}], 0x3, 0x0, 0x0, 0x8801}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000600)="0299e07ce73867d063cf2278fe10f7f7ab89d53252b2361697fe7b67802562537521a616edaa620cfbc5f275a1f799e6f0504296f3b72008fe2f662cba39051fb89d26102b1a835b848f66a0571e01d594d18ffb6b80566a321ccea1b49b28f9192d0d3a37574b2dc8ffbbe9b1bf32793c8c4299983064d47a7e2a84f610f438259b2f5bc1ee24", 0x87}, {&(0x7f0000001980)="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", 0x1000}], 0x3, &(0x7f0000002ac0)=ANY=[@ANYBLOB="1c000000180000100100000001000000", @ANYRESHEX=r5, @ANYRES8=r3, @ANYRES64, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}, {{&(0x7f0000000880)=@file={0x146494149b180497, './file0\x00'}, 0x6e, &(0x7f0000002980)=[{&(0x7f0000000900)="3f10e6e554e8a717eb820f7cd121e685ce0bf499b27e33ac97a45663a40550d30c1c2e863b5b2824732e901a6563edde1e9cbd43b372c8e000076d2f571e", 0x3e}], 0x1, &(0x7f0000002e40), 0x0, 0x20044040}}, {{&(0x7f0000002f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000002fc0)="2cdc725de54f0706e8ae7f0089955ac3a0f7e4537e2a5e2e3303ff045a7e4c3474f70068e973a7c6259fd215d2b079d1e7903112e92820de95a99f14e3ab23c3408e3b04c7bedf2a854592730e56cce2a3079417684dc77a4f294df6182c927d4be847073dec9133a977aca33836c507d2107f57c5ccd88b96a69a62d6f1e118ccd9f52652b19bcb71f2147ea48424d5ccb5cfca7a34d6", 0x97}, {&(0x7f0000003080)="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", 0xfb}, {&(0x7f0000003180)="f86f292cd9579a1863435b74f9698a6bf339b330dcf5d13dde9e75ccfa9b776ff512ceecd5b4049b92346a6e66e1607e27351fbbc0ffb0e3c34d2322a0d348a69a26e2fa58a61a00f7b9a4d7e9ec1fafa25f689645cbe64847cc5a8534344206b72cf649ed6d94199ac226e4febbaea11008e4750a330dbcc4c1338a4b2c401ec31acc10c652f78962b5126af53102392bd35b0629acb1a5e7c3d52d5d5b507dfb97bff80b64a197f63c89b47a039018116a8c0c76888cac09b649c9de0d595f4acbc0315dda43", 0xc7}, {&(0x7f0000003280)="70e9f587f0c150c4363b644fb8d199bb1c7ce0249710af037f01cf4b69e1e8c0aac807c0d218712a777d0a0b0a6945dc3118fec26e5f3641cfa9a3f7ae46bb54fd46e7ec65f10d8ae23783a6393e20f75ac3c1c1e4d9944030cc5c6e721c2625a6b2b88ccf20e6a2b607229bbcd6ab118b2f3a3f6df625c197f5ac", 0x7b}, {&(0x7f0000003300)="bcb87475d43c9eba98aea4877e7d7ce6b6c6841e0cbf5164aa0bac1f931a6d1df6e724d840cf3cb1627e24fbfe5ba4925e1efaf1ff56d9f0f05fd83b206c23d27019248a4944ebca61b56a752820fe9604f1f4a08e4daa556db83ce914ac2a1078874c6dc807bd8b52747df9cf90d7da6d88db786b7d4ddc929ad1a29d", 0x7d}], 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x4008054}}], 0x5, 0x4c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0xfff7, 0x6}, &(0x7f0000000100)=0x8) 757.256715ms ago: executing program 3 (id=8018): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000840)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xdbQ1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xe}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x9, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x6}, {0x1, 0x7, 0x10, 0x6, 0xe, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x6d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 393.359447ms ago: executing program 9 (id=8022): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xb, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000840)=0x63ba, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000080)=0x1, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x8000}], 0x1, 0x40002002, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x14, 0x11, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x19, 0x0, @fd_index, 0x5, 0x0, 0x8, 0x0, 0x1}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x1, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffeff, 0x89c3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r13}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/unix\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 317.933707ms ago: executing program 7 (id=8024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 190.979319ms ago: executing program 7 (id=8025): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 160.436598ms ago: executing program 7 (id=8026): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xf}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) getdents64(r2, &(0x7f0000000000)=""/146, 0x92) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@empty}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r10], 0x40}}, 0x4008054) 62.539919ms ago: executing program 7 (id=8027): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) close(0xffffffffffffffff) 17.23869ms ago: executing program 7 (id=8028): socket$inet6(0xa, 0x3, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f00000004c0)="20ed9e644c28a73697633ed7b3b269e2aab6d7337f8891fdd7c02a59dbc28577cdc7c11b4d524928e3861ef63cfde460d7f897bfdb23ab501d4194e93b5f0ce804873afacad558a44fd981d26afd1dcc6cd6635c7856290e51ee5c5b9c9d68d7f73ccb907496f074098d46e46a09a8b0ca4311c3e766083ae5ad98fc6e16a5faf96d31f8e8f266ad587add36699b31132dc065abe101d90dca0b0954c5b6042bcdce6bea125f2aa3397d2480f3e988bfea32afb5a01c67f90f", &(0x7f0000000580)=""/179, &(0x7f0000000640)="664b76b3c62333f42ee61bcb2f14869d506ef9ed7b282a038df6c295d82a025d4a40c9cb36616dfbd05b8f8b1c5234479c2c0cac5c6ef1c87da859038526184dffd3f6221ac2191276ef0ec1ea09bd4bc5b18423d1fbf9042ad5222665db10e699aa0475b598f60db8754150e33e2db1a09addb1439457ef4b3ea062635585c1c705128a3587528fa6df5e538b2a937d", &(0x7f0000000700)="0d0e319fd603f14312b18a1550752bfd60bbe68162fbec944a686b2ce70fef88b014a237e9effba28de5433f02a9856704d8ba15556bc13e0ca5521c81a471a426de24eaaab8763516805bdd7f230d212cb8e80c2dcc3a2687bc228cf987a49743a16a90d88278f107b3655a05a7c18e2f70304d2e20ddac72f1dbd74cd1ffab493458ef87eae5afbefdcb6701a25d0c25f466e7a01687b9452b3b832abb5c116580", 0x200, r0}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0xf) r4 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)='6', 0x1}], 0x1}}], 0x1, 0x24088804) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x9, 0x1}, 0xc) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afa63530db6dd493f28fd98872219ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0db0a0000004413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466ffffffff0000000047778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fdc4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 4.04668ms ago: executing program 7 (id=8029): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x2}, 0x1000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x109) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000580)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000002a00)={0x89, 0x201, '\x00', [@generic={0x2, 0x1000, "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"}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x1018) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f00000001c0)) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r6, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r0, r0, 0x14, 0x200c, 0x0, @value=r3}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) connect$netlink(r10, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x840}, 0xc) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r13 = syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x40) ioctl$BLKCLOSEZONE(r13, 0x40101287, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {0x0, 0xffef}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8008014}, 0x4000) 0s ago: executing program 8 (id=8030): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000043fbf4e2c007886618d82daed6ce0000000095f9ff0003000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$kcm(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @mcast2, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000580)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x6, @remote}, 0x2a, {0x2, 0x4e22, @empty}, 'macsec0\x00'}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) exit(0xffff) r3 = epoll_create1(0x80000) epoll_wait(r3, &(0x7f0000000180)=[{}], 0x1, 0xbf7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000010}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb3}, 0x50) kernel console output (not intermixed with test programs): x7f [ 774.600723][T12937] RIP: 0033:0x7f157fdef6c9 [ 774.600742][T12937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.600765][T12937] RSP: 002b:00007f157e857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.600824][T12937] RAX: ffffffffffffffda RBX: 00007f1580045fa0 RCX: 00007f157fdef6c9 [ 774.600839][T12937] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000005 [ 774.600853][T12937] RBP: 00007f157e857090 R08: 0000000000000000 R09: 0000000000000000 [ 774.600867][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.600881][T12937] R13: 00007f1580046038 R14: 00007f1580045fa0 R15: 00007ffe123b9d48 [ 774.601001][T12937] [ 774.926630][T12945] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7566'. [ 774.960167][T12946] loop9: detected capacity change from 0 to 128 [ 775.145422][T12950] lo speed is unknown, defaulting to 1000 [ 775.191310][T12946] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 775.202160][T12946] vfat filesystem being mounted at /464/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 775.478063][T12990] lo speed is unknown, defaulting to 1000 [ 775.568387][T13018] loop9: detected capacity change from 0 to 512 [ 775.592429][T13018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 775.642621][T13023] lo speed is unknown, defaulting to 1000 [ 775.653183][T12987] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7572'. [ 775.673758][T13018] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.684610][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 775.684628][ T29] audit: type=1326 audit(6442452232.678:71820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77a5cadf10 code=0x7ffc0000 [ 775.727067][ T29] audit: type=1326 audit(6442452232.718:71821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f77a5cae417 code=0x7ffc0000 [ 775.750914][ T29] audit: type=1326 audit(6442452232.718:71822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77a5cadf10 code=0x7ffc0000 [ 775.774553][ T29] audit: type=1326 audit(6442452232.718:71823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 775.798346][ T29] audit: type=1326 audit(6442452232.718:71824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 775.821971][ T29] audit: type=1326 audit(6442452232.718:71825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 775.845622][ T29] audit: type=1326 audit(6442452232.718:71826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 775.869245][ T29] audit: type=1326 audit(6442452232.718:71827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 775.892894][ T29] audit: type=1326 audit(6442452232.718:71828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 775.916606][ T29] audit: type=1326 audit(6442452232.718:71829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 776.179362][T13057] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7576'. [ 776.278377][T13066] loop7: detected capacity change from 0 to 128 [ 776.285130][T13064] loop8: detected capacity change from 0 to 512 [ 776.365026][T13066] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 776.374303][T13064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 776.388589][T13066] vfat filesystem being mounted at /292/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 776.409909][T13064] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.423400][T13066] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 776.431299][T13066] FAT-fs (loop7): Filesystem has been set read-only [ 776.450503][T13066] syz.7.7581: attempt to access beyond end of device [ 776.450503][T13066] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 776.533430][T13082] lo speed is unknown, defaulting to 1000 [ 776.722540][T13111] loop8: detected capacity change from 0 to 128 [ 776.774668][T13111] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 776.843332][T13111] vfat filesystem being mounted at /564/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 776.887297][T13123] loop7: detected capacity change from 0 to 512 [ 776.894874][T13123] EXT4-fs: Invalid want_extra_isize 93 [ 776.974037][T13108] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 776.981913][T13108] FAT-fs (loop8): Filesystem has been set read-only [ 777.002811][T13128] loop9: detected capacity change from 0 to 512 [ 777.009465][T13108] syz.8.7583: attempt to access beyond end of device [ 777.009465][T13108] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 777.020473][T13128] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 777.044890][T13128] EXT4-fs (loop9): 1 truncate cleaned up [ 777.064883][T13147] FAULT_INJECTION: forcing a failure. [ 777.064883][T13147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.078059][T13147] CPU: 1 UID: 0 PID: 13147 Comm: syz.8.7587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 777.078103][T13147] Tainted: [W]=WARN [ 777.078112][T13147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 777.078126][T13147] Call Trace: [ 777.078171][T13147] [ 777.078180][T13147] __dump_stack+0x1d/0x30 [ 777.078205][T13147] dump_stack_lvl+0xe8/0x140 [ 777.078228][T13147] dump_stack+0x15/0x1b [ 777.078271][T13147] should_fail_ex+0x265/0x280 [ 777.078298][T13147] should_fail+0xb/0x20 [ 777.078318][T13147] should_fail_usercopy+0x1a/0x20 [ 777.078391][T13147] strncpy_from_user+0x25/0x230 [ 777.078424][T13147] ? io_getxattr_prep+0x129/0x200 [ 777.078458][T13147] ? __kmalloc_cache_noprof+0x3b4/0x4a0 [ 777.078555][T13147] import_xattr_name+0x22/0x70 [ 777.078590][T13147] io_getxattr_prep+0x14f/0x200 [ 777.078629][T13147] io_submit_sqes+0x5ef/0x1060 [ 777.078756][T13147] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 777.078850][T13147] ? 0xffffffff81000000 [ 777.078869][T13147] ? __rcu_read_unlock+0x4f/0x70 [ 777.078943][T13147] ? get_pid_task+0x96/0xd0 [ 777.078969][T13147] ? proc_fail_nth_write+0x13b/0x160 [ 777.079002][T13147] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 777.079042][T13147] ? vfs_write+0x7e8/0x960 [ 777.079155][T13147] ? __rcu_read_unlock+0x4f/0x70 [ 777.079185][T13147] ? __fget_files+0x184/0x1c0 [ 777.079289][T13147] ? fput+0x8f/0xc0 [ 777.079315][T13147] __x64_sys_io_uring_enter+0x78/0x90 [ 777.079358][T13147] x64_sys_call+0x2df0/0x3000 [ 777.079434][T13147] do_syscall_64+0xd2/0x200 [ 777.079470][T13147] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 777.079499][T13147] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 777.079534][T13147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.079623][T13147] RIP: 0033:0x7f362fd5f6c9 [ 777.079642][T13147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.079740][T13147] RSP: 002b:00007f362e7bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 777.079760][T13147] RAX: ffffffffffffffda RBX: 00007f362ffb5fa0 RCX: 00007f362fd5f6c9 [ 777.079773][T13147] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000004 [ 777.079786][T13147] RBP: 00007f362e7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 777.079803][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.079820][T13147] R13: 00007f362ffb6038 R14: 00007f362ffb5fa0 R15: 00007ffe146f1818 [ 777.079918][T13147] [ 777.375647][T13134] macvlan1: entered promiscuous mode [ 777.415192][T13134] ipvlan0: entered promiscuous mode [ 777.440327][T13134] ipvlan0: left promiscuous mode [ 777.463454][T13134] macvlan1: left promiscuous mode [ 777.511926][T13152] netem: incorrect ge model size [ 777.516997][T13152] netem: change failed [ 777.758368][T13175] loop3: detected capacity change from 0 to 128 [ 777.772004][T13175] vfat filesystem being mounted at /428/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 778.123760][T13184] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 778.135594][T13184] SELinux: failed to load policy [ 778.712221][T13194] hub 2-0:1.0: USB hub found [ 778.729712][T13194] hub 2-0:1.0: 8 ports detected [ 778.916908][T13198] lo speed is unknown, defaulting to 1000 [ 779.114089][T13215] loop8: detected capacity change from 0 to 128 [ 779.154486][T13215] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 779.204291][T13215] ext2 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.341020][T13215] syzkaller0: entered promiscuous mode [ 779.346652][T13215] syzkaller0: entered allmulticast mode [ 779.861461][T13239] loop7: detected capacity change from 0 to 512 [ 779.869340][T13239] EXT4-fs: Ignoring removed mblk_io_submit option [ 779.877633][T13239] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 779.890880][T13239] EXT4-fs (loop7): 1 truncate cleaned up [ 779.897334][T13239] EXT4-fs mount: 15 callbacks suppressed [ 779.897349][T13239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.914298][T13233] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7602'. [ 779.944613][T13239] FAULT_INJECTION: forcing a failure. [ 779.944613][T13239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.957838][T13239] CPU: 0 UID: 0 PID: 13239 Comm: syz.7.7604 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 779.957880][T13239] Tainted: [W]=WARN [ 779.957890][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 779.957903][T13239] Call Trace: [ 779.957974][T13239] [ 779.957991][T13239] __dump_stack+0x1d/0x30 [ 779.958021][T13239] dump_stack_lvl+0xe8/0x140 [ 779.958062][T13239] dump_stack+0x15/0x1b [ 779.958084][T13239] should_fail_ex+0x265/0x280 [ 779.958114][T13239] should_fail+0xb/0x20 [ 779.958130][T13239] should_fail_usercopy+0x1a/0x20 [ 779.958158][T13239] strncpy_from_user+0x25/0x230 [ 779.958201][T13239] path_setxattrat+0xeb/0x310 [ 779.958297][T13239] __x64_sys_lsetxattr+0x71/0x90 [ 779.958326][T13239] x64_sys_call+0x287b/0x3000 [ 779.958352][T13239] do_syscall_64+0xd2/0x200 [ 779.958384][T13239] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 779.958414][T13239] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 779.958461][T13239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.958490][T13239] RIP: 0033:0x7f157fdef6c9 [ 779.958576][T13239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.958602][T13239] RSP: 002b:00007f157e857038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 779.958628][T13239] RAX: ffffffffffffffda RBX: 00007f1580045fa0 RCX: 00007f157fdef6c9 [ 779.958645][T13239] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 779.958662][T13239] RBP: 00007f157e857090 R08: 0000000000000001 R09: 0000000000000000 [ 779.958677][T13239] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 779.958725][T13239] R13: 00007f1580046038 R14: 00007f1580045fa0 R15: 00007ffe123b9d48 [ 779.958750][T13239] [ 780.302066][T13247] loop9: detected capacity change from 0 to 256 [ 780.497975][T13247] FAT-fs (loop9): Directory bread(block 64) failed [ 780.504777][T13247] FAT-fs (loop9): Directory bread(block 65) failed [ 780.511396][T13247] FAT-fs (loop9): Directory bread(block 66) failed [ 780.563845][T13247] FAT-fs (loop9): Directory bread(block 67) failed [ 780.571426][ T2513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.584902][T13247] FAT-fs (loop9): Directory bread(block 68) failed [ 780.591782][T13247] FAT-fs (loop9): Directory bread(block 69) failed [ 780.592220][T25985] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.603768][T13247] FAT-fs (loop9): Directory bread(block 70) failed [ 780.640245][T13247] FAT-fs (loop9): Directory bread(block 71) failed [ 780.647006][T13257] loop7: detected capacity change from 0 to 512 [ 780.654515][T13247] FAT-fs (loop9): Directory bread(block 72) failed [ 780.661388][T13257] EXT4-fs: Invalid want_extra_isize 93 [ 780.687524][T13259] lo speed is unknown, defaulting to 1000 [ 780.795484][T13247] FAT-fs (loop9): Directory bread(block 73) failed [ 781.068605][T13247] vfat filesystem being mounted at /472/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 781.088629][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 781.088644][ T29] audit: type=1400 audit(6442452238.078:71961): avc: denied { module_load } for pid=13246 comm="syz.9.7605" path="/472/file0/file0" dev="loop9" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 781.119090][T13247] syz.9.7605: attempt to access beyond end of device [ 781.119090][T13247] loop9: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 781.133211][T13247] syz.9.7605: attempt to access beyond end of device [ 781.133211][T13247] loop9: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 781.197801][T13286] macvlan1: entered promiscuous mode [ 781.204224][T13286] ipvlan0: entered promiscuous mode [ 781.228443][T13286] ipvlan0: left promiscuous mode [ 781.236811][T13286] macvlan1: left promiscuous mode [ 781.651720][T13306] loop3: detected capacity change from 0 to 1024 [ 781.661547][T13314] FAULT_INJECTION: forcing a failure. [ 781.661547][T13314] name failslab, interval 1, probability 0, space 0, times 0 [ 781.674277][T13314] CPU: 0 UID: 0 PID: 13314 Comm: syz.9.7612 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 781.674313][T13314] Tainted: [W]=WARN [ 781.674320][T13314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 781.674333][T13314] Call Trace: [ 781.674343][T13314] [ 781.674377][T13314] __dump_stack+0x1d/0x30 [ 781.674408][T13314] dump_stack_lvl+0xe8/0x140 [ 781.674429][T13314] dump_stack+0x15/0x1b [ 781.674508][T13314] should_fail_ex+0x265/0x280 [ 781.674528][T13314] should_failslab+0x8c/0xb0 [ 781.674563][T13314] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 781.674619][T13314] ? __alloc_skb+0x101/0x320 [ 781.674667][T13314] __alloc_skb+0x101/0x320 [ 781.674697][T13314] alloc_skb_with_frags+0x7d/0x470 [ 781.674730][T13314] ? should_fail_ex+0xdb/0x280 [ 781.674756][T13314] sock_alloc_send_pskb+0x430/0x4e0 [ 781.674870][T13314] ? __rcu_read_unlock+0x34/0x70 [ 781.674896][T13314] ? __rcu_read_unlock+0x4f/0x70 [ 781.674952][T13314] packet_sendmsg+0x222b/0x31f0 [ 781.675010][T13314] ? avc_has_perm+0xf7/0x180 [ 781.675034][T13314] ? selinux_socket_sendmsg+0x175/0x1b0 [ 781.675136][T13314] ? __pfx_packet_sendmsg+0x10/0x10 [ 781.675180][T13314] __sock_sendmsg+0x145/0x180 [ 781.675211][T13314] __sys_sendto+0x268/0x330 [ 781.675272][T13314] __x64_sys_sendto+0x76/0x90 [ 781.675310][T13314] x64_sys_call+0x2d14/0x3000 [ 781.675393][T13314] do_syscall_64+0xd2/0x200 [ 781.675497][T13314] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 781.675526][T13314] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 781.675563][T13314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.675588][T13314] RIP: 0033:0x7f77a5caf6c9 [ 781.675603][T13314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.675663][T13314] RSP: 002b:00007f77a4717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 781.675683][T13314] RAX: ffffffffffffffda RBX: 00007f77a5f05fa0 RCX: 00007f77a5caf6c9 [ 781.675695][T13314] RDX: 0000000000010025 RSI: 00002000000002c0 RDI: 0000000000000006 [ 781.675757][T13314] RBP: 00007f77a4717090 R08: 0000200000000300 R09: 0000000000000014 [ 781.675841][T13314] R10: 0000000004000004 R11: 0000000000000246 R12: 0000000000000001 [ 781.675865][T13314] R13: 00007f77a5f06038 R14: 00007f77a5f05fa0 R15: 00007fffcd171658 [ 781.675886][T13314] [ 781.925168][T13306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.948364][T13327] loop7: detected capacity change from 0 to 512 [ 781.951316][T13307] macvlan1: entered promiscuous mode [ 781.955869][T13327] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 781.975103][T13307] ipvlan0: entered promiscuous mode [ 781.980626][T13327] EXT4-fs (loop7): 1 truncate cleaned up [ 781.981774][T13307] ipvlan0: left promiscuous mode [ 781.987023][T13327] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.003831][T13307] macvlan1: left promiscuous mode [ 782.016068][T13306] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.7611: Allocating blocks 449-513 which overlap fs metadata [ 782.069413][T13304] EXT4-fs (loop3): pa ffff88810726b690: logic 48, phys. 177, len 21 [ 782.077509][T13304] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 782.102697][T13339] lo speed is unknown, defaulting to 1000 [ 782.193205][T13339] loop8: detected capacity change from 0 to 128 [ 782.208822][T13338] FAULT_INJECTION: forcing a failure. [ 782.208822][T13338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.221949][T13338] CPU: 1 UID: 0 PID: 13338 Comm: syz.9.7615 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 782.222027][T13338] Tainted: [W]=WARN [ 782.222037][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 782.222054][T13338] Call Trace: [ 782.222063][T13338] [ 782.222144][T13338] __dump_stack+0x1d/0x30 [ 782.222173][T13338] dump_stack_lvl+0xe8/0x140 [ 782.222202][T13338] dump_stack+0x15/0x1b [ 782.222227][T13338] should_fail_ex+0x265/0x280 [ 782.222254][T13338] should_fail+0xb/0x20 [ 782.222276][T13338] should_fail_usercopy+0x1a/0x20 [ 782.222351][T13338] _copy_to_user+0x20/0xa0 [ 782.222430][T13338] store_msg+0xa6/0x120 [ 782.222468][T13338] do_msg_fill+0x85/0xb0 [ 782.222503][T13338] ? __pfx_do_msg_fill+0x10/0x10 [ 782.222575][T13338] do_msgrcv+0x988/0xa00 [ 782.222676][T13338] ? __pfx_do_msg_fill+0x10/0x10 [ 782.222736][T13338] __x64_sys_msgrcv+0x6b/0x80 [ 782.222775][T13338] x64_sys_call+0x298e/0x3000 [ 782.222881][T13338] do_syscall_64+0xd2/0x200 [ 782.222910][T13338] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 782.222972][T13338] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 782.223006][T13338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.223035][T13338] RIP: 0033:0x7f77a5caf6c9 [ 782.223078][T13338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.223099][T13338] RSP: 002b:00007f77a46f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 782.223131][T13338] RAX: ffffffffffffffda RBX: 00007f77a5f06090 RCX: 00007f77a5caf6c9 [ 782.223149][T13338] RDX: 0000000000000009 RSI: 0000200000000200 RDI: 0000000000000000 [ 782.223166][T13338] RBP: 00007f77a46f6090 R08: 0000000000003000 R09: 0000000000000000 [ 782.223179][T13338] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 782.223191][T13338] R13: 00007f77a5f06128 R14: 00007f77a5f06090 R15: 00007fffcd171658 [ 782.223210][T13338] [ 782.539455][T31516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.549665][T13339] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 782.562452][T13339] ext4 filesystem being mounted at /570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 782.611537][T13367] loop9: detected capacity change from 0 to 1024 [ 782.619709][T13367] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 782.633237][ T2513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.695289][T13377] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7616'. [ 782.721022][ T29] audit: type=1326 audit(6442452239.698:71962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.4.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 782.744796][ T29] audit: type=1326 audit(6442452239.698:71963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.4.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa276cddf10 code=0x7ffc0000 [ 782.768484][ T29] audit: type=1326 audit(6442452239.698:71964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.4.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa276cddf10 code=0x7ffc0000 [ 782.780078][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7620'. [ 782.792288][ T29] audit: type=1326 audit(6442452239.698:71965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.4.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 782.825110][ T29] audit: type=1326 audit(6442452239.698:71966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.4.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 782.849091][ T29] audit: type=1326 audit(6442452239.698:71967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.4.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 782.872857][ T29] audit: type=1326 audit(6442452239.698:71968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.4.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 782.896500][ T29] audit: type=1326 audit(6442452239.698:71969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.4.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 782.920388][ T29] audit: type=1326 audit(6442452239.698:71970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.4.7620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 782.967101][T25985] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 783.026213][T13393] lo speed is unknown, defaulting to 1000 [ 783.034370][T13409] FAULT_INJECTION: forcing a failure. [ 783.034370][T13409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.047625][T13409] CPU: 0 UID: 0 PID: 13409 Comm: syz.4.7626 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 783.047756][T13409] Tainted: [W]=WARN [ 783.047765][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 783.047841][T13409] Call Trace: [ 783.047848][T13409] [ 783.047857][T13409] __dump_stack+0x1d/0x30 [ 783.047880][T13409] dump_stack_lvl+0xe8/0x140 [ 783.047931][T13409] dump_stack+0x15/0x1b [ 783.047954][T13409] should_fail_ex+0x265/0x280 [ 783.048045][T13409] should_fail+0xb/0x20 [ 783.048063][T13409] should_fail_usercopy+0x1a/0x20 [ 783.048180][T13409] _copy_from_user+0x1c/0xb0 [ 783.048217][T13409] __sys_sendto+0x19e/0x330 [ 783.048270][T13409] __x64_sys_sendto+0x76/0x90 [ 783.048370][T13409] x64_sys_call+0x2d14/0x3000 [ 783.048403][T13409] do_syscall_64+0xd2/0x200 [ 783.048426][T13409] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 783.048461][T13409] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 783.048521][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.048603][T13409] RIP: 0033:0x7fa276cdf6c9 [ 783.048620][T13409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.048649][T13409] RSP: 002b:00007fa275747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 783.048672][T13409] RAX: ffffffffffffffda RBX: 00007fa276f35fa0 RCX: 00007fa276cdf6c9 [ 783.048685][T13409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 783.048697][T13409] RBP: 00007fa275747090 R08: 0000200000e68000 R09: 0000000000000010 [ 783.048736][T13409] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 783.048753][T13409] R13: 00007fa276f36038 R14: 00007fa276f35fa0 R15: 00007ffe41d1be98 [ 783.048779][T13409] [ 783.249270][T13399] macvlan1: entered promiscuous mode [ 783.249925][T13399] ipvlan0: entered promiscuous mode [ 783.250529][T13399] ipvlan0: left promiscuous mode [ 783.250822][T13399] macvlan1: left promiscuous mode [ 783.404525][T13487] loop8: detected capacity change from 0 to 1024 [ 783.435851][T13487] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.470436][T25985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.784955][T13510] lo speed is unknown, defaulting to 1000 [ 783.791550][T13510] lo speed is unknown, defaulting to 1000 [ 783.797621][T13510] lo speed is unknown, defaulting to 1000 [ 783.835306][T13512] loop8: detected capacity change from 0 to 512 [ 783.836510][T13510] infiniband sz1: set active [ 783.846357][T13510] infiniband sz1: added lo [ 783.846590][T13512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 783.850909][ T4802] lo speed is unknown, defaulting to 1000 [ 783.868414][T13510] RDS/IB: sz1: added [ 783.872742][T13510] smc: adding ib device sz1 with port count 1 [ 783.879181][T13510] smc: ib device sz1 port 1 has no pnetid [ 783.885364][ T4790] lo speed is unknown, defaulting to 1000 [ 783.892431][T13512] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 783.905434][T13512] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.907587][T13510] lo speed is unknown, defaulting to 1000 [ 783.923571][T13521] loop3: detected capacity change from 0 to 512 [ 783.948719][T13521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.962031][T25985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 783.963795][T13521] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.974080][T13510] lo speed is unknown, defaulting to 1000 [ 783.982893][T13521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.013423][T13529] loop8: detected capacity change from 0 to 512 [ 784.031755][T13510] lo speed is unknown, defaulting to 1000 [ 784.042417][T13529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.064139][T13529] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.075724][T13529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.087398][T13510] lo speed is unknown, defaulting to 1000 [ 784.126520][T13510] lo speed is unknown, defaulting to 1000 [ 784.150862][T13540] loop3: detected capacity change from 0 to 512 [ 784.178618][T13510] lo speed is unknown, defaulting to 1000 [ 784.187901][T13540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.201355][T13540] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 784.214348][T13540] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.7638: corrupted inode contents [ 784.240784][T13540] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.7638: mark_inode_dirty error [ 784.254020][T13540] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.7638: corrupted inode contents [ 784.273828][T13540] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.7638: mark_inode_dirty error [ 784.295529][T13558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=13558 comm=syz.8.7641 [ 784.296334][T13560] FAULT_INJECTION: forcing a failure. [ 784.296334][T13560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.321409][T13560] CPU: 0 UID: 0 PID: 13560 Comm: syz.4.7642 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 784.321451][T13560] Tainted: [W]=WARN [ 784.321460][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 784.321476][T13560] Call Trace: [ 784.321485][T13560] [ 784.321530][T13560] __dump_stack+0x1d/0x30 [ 784.321556][T13560] dump_stack_lvl+0xe8/0x140 [ 784.321585][T13560] dump_stack+0x15/0x1b [ 784.321603][T13560] should_fail_ex+0x265/0x280 [ 784.321623][T13560] should_fail+0xb/0x20 [ 784.321642][T13560] should_fail_usercopy+0x1a/0x20 [ 784.321696][T13560] _copy_from_user+0x1c/0xb0 [ 784.321730][T13560] restore_altstack+0x4b/0x2d0 [ 784.321769][T13560] ? __set_task_blocked+0x23a/0x2a0 [ 784.321807][T13560] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 784.321869][T13560] ? _raw_spin_unlock_irq+0x26/0x50 [ 784.321903][T13560] ? signal_setup_done+0x266/0x290 [ 784.321931][T13560] ? xfd_validate_state+0x45/0xf0 [ 784.321954][T13560] ? fpu__clear_user_states+0x63/0x270 [ 784.322027][T13560] ? fpregs_mark_activate+0x66/0x140 [ 784.322063][T13560] ? fpu__clear_user_states+0x63/0x270 [ 784.322146][T13560] ? arch_do_signal_or_restart+0x2b5/0x440 [ 784.322175][T13560] ? __rcu_read_unlock+0x4f/0x70 [ 784.322208][T13560] x64_sys_call+0x2d4b/0x3000 [ 784.322285][T13560] do_syscall_64+0xd2/0x200 [ 784.322309][T13560] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 784.322435][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.322528][T13560] RIP: 0033:0x7fa276c7b779 [ 784.322668][T13560] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 784.322692][T13560] RSP: 002b:00007fa275746a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 784.322717][T13560] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa276c7b779 [ 784.322732][T13560] RDX: 00007fa275746a80 RSI: 00007fa275746bb0 RDI: 0000000000000021 [ 784.322748][T13560] RBP: 00007fa275747090 R08: 0000000000000000 R09: 00007fa275746df7 [ 784.322764][T13560] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 784.322779][T13560] R13: 00007fa276f36038 R14: 00007fa276f35fa0 R15: 00007ffe41d1be98 [ 784.322803][T13560] [ 784.572519][T13564] loop9: detected capacity change from 0 to 128 [ 784.594928][T13564] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 784.603620][T13558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13558 comm=syz.8.7641 [ 784.606088][T13564] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 784.633730][T13564] ext2 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.660642][T13570] loop8: detected capacity change from 0 to 512 [ 784.675496][T13570] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 784.679520][T31516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.707212][T13570] EXT4-fs (loop8): 1 truncate cleaned up [ 784.713897][T13570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.795338][T13564] syzkaller0: entered promiscuous mode [ 784.799087][T13584] loop4: detected capacity change from 0 to 512 [ 784.800861][T13564] syzkaller0: entered allmulticast mode [ 784.814933][T13584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 784.818354][T25985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.833760][ T3806] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 784.844424][T13584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 784.859331][T13584] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.957822][T13597] loop3: detected capacity change from 0 to 128 [ 784.976916][T13597] vfat filesystem being mounted at /441/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 785.113285][T28882] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 785.136763][ T3485] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 785.212081][T13605] SELinux: failed to load policy [ 785.221889][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7653'. [ 785.466907][T13619] lo speed is unknown, defaulting to 1000 [ 785.496860][T13628] FAULT_INJECTION: forcing a failure. [ 785.496860][T13628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.509992][T13628] CPU: 1 UID: 0 PID: 13628 Comm: syz.4.7655 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 785.510092][T13628] Tainted: [W]=WARN [ 785.510101][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 785.510163][T13628] Call Trace: [ 785.510170][T13628] [ 785.510179][T13628] __dump_stack+0x1d/0x30 [ 785.510207][T13628] dump_stack_lvl+0xe8/0x140 [ 785.510235][T13628] dump_stack+0x15/0x1b [ 785.510259][T13628] should_fail_ex+0x265/0x280 [ 785.510355][T13628] should_fail+0xb/0x20 [ 785.510377][T13628] should_fail_usercopy+0x1a/0x20 [ 785.510405][T13628] _copy_from_iter+0xd2/0xe80 [ 785.510439][T13628] ? alloc_pages_mpol+0x217/0x260 [ 785.510515][T13628] copy_page_from_iter+0x178/0x2a0 [ 785.510546][T13628] tun_get_user+0x679/0x26e0 [ 785.510586][T13628] ? ref_tracker_alloc+0x1f2/0x2f0 [ 785.510698][T13628] tun_chr_write_iter+0x15e/0x210 [ 785.510792][T13628] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 785.510825][T13628] vfs_write+0x52a/0x960 [ 785.510940][T13628] ksys_write+0xda/0x1a0 [ 785.510969][T13628] __x64_sys_write+0x40/0x50 [ 785.510997][T13628] x64_sys_call+0x2802/0x3000 [ 785.511028][T13628] do_syscall_64+0xd2/0x200 [ 785.511123][T13628] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 785.511157][T13628] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 785.511202][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.511239][T13628] RIP: 0033:0x7fa276cde17f [ 785.511258][T13628] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 785.511312][T13628] RSP: 002b:00007fa275747000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 785.511337][T13628] RAX: ffffffffffffffda RBX: 00007fa276f35fa0 RCX: 00007fa276cde17f [ 785.511353][T13628] RDX: 0000000000000066 RSI: 0000200000000300 RDI: 00000000000000c8 [ 785.511369][T13628] RBP: 00007fa275747090 R08: 0000000000000000 R09: 0000000000000000 [ 785.511386][T13628] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 785.511402][T13628] R13: 00007fa276f36038 R14: 00007fa276f35fa0 R15: 00007ffe41d1be98 [ 785.511480][T13628] [ 785.513091][T13619] lo speed is unknown, defaulting to 1000 [ 786.074088][T13657] loop4: detected capacity change from 0 to 128 [ 786.093271][T13657] vfat filesystem being mounted at /273/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 786.210545][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 786.210562][ T29] audit: type=1326 audit(6442452243.198:72105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.9.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 786.242310][T13660] loop9: detected capacity change from 0 to 128 [ 786.304002][T13660] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 786.347139][ T29] audit: type=1326 audit(6442452243.228:72106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.9.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 786.370900][ T29] audit: type=1326 audit(6442452243.228:72107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.9.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f77a5caf703 code=0x7ffc0000 [ 786.394363][ T29] audit: type=1326 audit(6442452243.228:72108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.9.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f77a5cae17f code=0x7ffc0000 [ 786.417849][ T29] audit: type=1326 audit(6442452243.228:72109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.9.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f77a5caf757 code=0x7ffc0000 [ 786.441484][ T29] audit: type=1326 audit(6442452243.228:72110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.9.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77a5cadf10 code=0x7ffc0000 [ 786.465250][ T29] audit: type=1326 audit(6442452243.228:72111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.9.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77a5caf2cb code=0x7ffc0000 [ 786.488763][ T29] audit: type=1326 audit(6442452243.258:72112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.9.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f77a5cae32a code=0x7ffc0000 [ 786.512272][ T29] audit: type=1326 audit(6442452243.258:72113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.9.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f77a5cae32a code=0x7ffc0000 [ 786.535752][ T29] audit: type=1326 audit(6442452243.258:72114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.9.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f77a5cade17 code=0x7ffc0000 [ 786.726852][T13660] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.807316][T13674] lo speed is unknown, defaulting to 1000 [ 786.814085][T13674] lo speed is unknown, defaulting to 1000 [ 786.983257][T13697] loop7: detected capacity change from 0 to 512 [ 787.248233][T13697] EXT4-fs: Invalid want_extra_isize 93 [ 787.338698][T13700] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 787.405526][T28882] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 787.653109][T13737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7665'. [ 787.662351][T13737] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7665'. [ 787.674269][T13726] loop9: detected capacity change from 0 to 1024 [ 787.756692][T13726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.958961][T13737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7665'. [ 788.009742][T13726] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7664: bg 0: block 88: padding at end of block bitmap is not set [ 788.027191][T13737] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7665'. [ 788.036363][T13737] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7665'. [ 788.054566][T13726] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7664'. [ 788.074303][T13751] loop7: detected capacity change from 0 to 512 [ 788.087598][T13751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 788.106866][T13756] loop3: detected capacity change from 0 to 512 [ 788.128348][T28882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.138663][T13751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 788.153432][T13758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7669'. [ 788.162708][T13758] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7669'. [ 788.172225][T13751] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.185875][T13756] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 788.203966][T13756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 788.213758][T13756] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.7670: corrupted inode contents [ 788.243892][T13756] EXT4-fs (loop3): Remounting filesystem read-only [ 788.270907][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.273932][ T2513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 788.287542][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.291534][T13756] EXT4-fs (loop3): 1 truncate cleaned up [ 788.325357][ T5452] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 788.336082][ T5452] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 788.373685][ T5452] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 788.415100][T13756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 788.440170][T13780] lo speed is unknown, defaulting to 1000 [ 788.446353][T13780] lo speed is unknown, defaulting to 1000 [ 788.507685][T31516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.554320][T13791] loop8: detected capacity change from 0 to 128 [ 788.640052][T13808] loop3: detected capacity change from 0 to 1024 [ 788.649919][T13791] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 788.685119][T13791] vfat filesystem being mounted at /585/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 788.696796][T13808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.745089][T13791] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 788.752972][T13791] FAT-fs (loop8): Filesystem has been set read-only [ 788.770568][T13808] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7678: bg 0: block 88: padding at end of block bitmap is not set [ 788.803857][T13791] syz.8.7677: attempt to access beyond end of device [ 788.803857][T13791] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 788.856834][T31516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.885074][T13836] loop3: detected capacity change from 0 to 512 [ 788.913383][T13842] loop8: detected capacity change from 0 to 128 [ 788.915905][T13836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 788.946020][T13836] EXT4-fs (loop3): 1 truncate cleaned up [ 788.950112][T13842] vfat filesystem being mounted at /586/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 788.954835][T13836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.213037][T31516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.323914][T13870] lo speed is unknown, defaulting to 1000 [ 789.332993][T13870] lo speed is unknown, defaulting to 1000 [ 789.605466][T13882] FAULT_INJECTION: forcing a failure. [ 789.605466][T13882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.618696][T13882] CPU: 0 UID: 0 PID: 13882 Comm: syz.7.7688 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 789.618745][T13882] Tainted: [W]=WARN [ 789.618752][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 789.618765][T13882] Call Trace: [ 789.618771][T13882] [ 789.618779][T13882] __dump_stack+0x1d/0x30 [ 789.618886][T13882] dump_stack_lvl+0xe8/0x140 [ 789.618915][T13882] dump_stack+0x15/0x1b [ 789.618934][T13882] should_fail_ex+0x265/0x280 [ 789.619022][T13882] should_fail+0xb/0x20 [ 789.619046][T13882] should_fail_usercopy+0x1a/0x20 [ 789.619119][T13882] _copy_from_user+0x1c/0xb0 [ 789.619155][T13882] do_semtimedop+0x153/0x220 [ 789.619201][T13882] __x64_sys_semop+0x41/0x50 [ 789.619230][T13882] x64_sys_call+0x2978/0x3000 [ 789.619303][T13882] do_syscall_64+0xd2/0x200 [ 789.619332][T13882] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 789.619373][T13882] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 789.619426][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.619580][T13882] RIP: 0033:0x7f157fdef6c9 [ 789.619601][T13882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.619661][T13882] RSP: 002b:00007f157e857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 789.619688][T13882] RAX: ffffffffffffffda RBX: 00007f1580045fa0 RCX: 00007f157fdef6c9 [ 789.619706][T13882] RDX: 0000000000000001 RSI: 0000200000001240 RDI: 0000000000000000 [ 789.619724][T13882] RBP: 00007f157e857090 R08: 0000000000000000 R09: 0000000000000000 [ 789.619739][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.619755][T13882] R13: 00007f1580046038 R14: 00007f1580045fa0 R15: 00007ffe123b9d48 [ 789.619842][T13882] [ 789.812605][T13879] lo speed is unknown, defaulting to 1000 [ 789.943434][T13879] lo speed is unknown, defaulting to 1000 [ 790.053231][T13915] loop7: detected capacity change from 0 to 128 [ 790.103527][T13915] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 790.115448][T13915] vfat filesystem being mounted at /307/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 790.173905][T13884] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 790.181865][T13884] FAT-fs (loop7): Filesystem has been set read-only [ 790.195630][T13884] syz.7.7689: attempt to access beyond end of device [ 790.195630][T13884] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 790.405041][T13946] loop4: detected capacity change from 0 to 128 [ 790.427356][T13946] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 790.484503][T13946] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 790.552444][T13946] ext2 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.772612][ T5452] Bluetooth: hci0: Frame reassembly failed (-84) [ 790.789508][T13967] __nla_validate_parse: 6 callbacks suppressed [ 790.789529][T13967] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7695'. [ 790.798695][ T3416] lo speed is unknown, defaulting to 1000 [ 790.888157][T13971] hub 1-0:1.0: USB hub found [ 790.914201][T13973] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 790.920758][T13973] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 790.928427][T13973] vhci_hcd vhci_hcd.0: Device attached [ 790.929857][T13971] hub 1-0:1.0: 8 ports detected [ 790.993119][T13974] vhci_hcd: connection closed [ 790.993483][ T269] vhci_hcd: stop threads [ 791.002761][ T269] vhci_hcd: release socket [ 791.007329][ T269] vhci_hcd: disconnect device [ 791.275168][ T3485] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 791.293377][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 791.293397][ T29] audit: type=1400 audit(6442452248.278:72420): avc: denied { bind } for pid=13986 comm="syz.4.7699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 791.319812][ T29] audit: type=1400 audit(6442452248.288:72421): avc: denied { listen } for pid=13986 comm="syz.4.7699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 791.340124][ T29] audit: type=1400 audit(6442452248.288:72422): avc: denied { write } for pid=13986 comm="syz.4.7699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 791.359955][ T29] audit: type=1400 audit(6442452248.288:72423): avc: denied { accept } for pid=13986 comm="syz.4.7699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 791.379940][ T29] audit: type=1400 audit(6442452248.288:72424): avc: denied { read } for pid=13986 comm="syz.4.7699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 791.646442][T13999] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7702'. [ 791.669284][ T29] audit: type=1326 audit(6442452248.658:72425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.7.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157fdef6c9 code=0x7ffc0000 [ 791.693130][ T29] audit: type=1326 audit(6442452248.658:72426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.7.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f157fdef6c9 code=0x7ffc0000 [ 791.698133][T13998] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7703'. [ 791.716902][ T29] audit: type=1326 audit(6442452248.658:72427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.7.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157fdef6c9 code=0x7ffc0000 [ 791.749468][ T29] audit: type=1326 audit(6442452248.658:72428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.7.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157fdef6c9 code=0x7ffc0000 [ 791.773306][ T29] audit: type=1326 audit(6442452248.658:72429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.7.7704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157fdef6c9 code=0x7ffc0000 [ 792.049639][T14013] lo speed is unknown, defaulting to 1000 [ 792.056536][T14013] lo speed is unknown, defaulting to 1000 [ 792.151375][T14011] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7707'. [ 792.406121][T14039] netlink: 5 bytes leftover after parsing attributes in process `syz.9.7709'. [ 792.423042][T14039] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 792.441180][T14039] 0ªî{X¹¦: entered allmulticast mode [ 792.453421][T14039] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 792.524318][T14046] macvlan1: entered promiscuous mode [ 792.531008][T14046] ipvlan0: entered promiscuous mode [ 792.543069][T14046] ipvlan0: left promiscuous mode [ 792.553995][T14046] macvlan1: left promiscuous mode [ 792.568998][T14039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14039 comm=syz.9.7709 [ 792.581717][T14039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14039 comm=syz.9.7709 [ 792.612991][T14037] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7708'. [ 792.742216][T14052] loop9: detected capacity change from 0 to 1024 [ 792.750647][T14055] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 792.757195][T14055] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 792.765081][T14055] vhci_hcd vhci_hcd.0: Device attached [ 792.786105][T14052] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.828114][ T3780] Bluetooth: hci0: command 0x1003 tx timeout [ 792.836856][ T3806] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 792.881320][T14057] vhci_hcd: connection closed [ 792.884243][T14052] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7712: bg 0: block 88: padding at end of block bitmap is not set [ 792.913378][ T269] vhci_hcd: stop threads [ 792.917734][ T269] vhci_hcd: release socket [ 792.922181][ T269] vhci_hcd: disconnect device [ 792.936946][T14052] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7712'. [ 792.961605][T28882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.994187][T14074] loop9: detected capacity change from 0 to 512 [ 793.007556][T14076] lo speed is unknown, defaulting to 1000 [ 793.014334][T14076] lo speed is unknown, defaulting to 1000 [ 793.038290][T14074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.054352][T14074] ext4 filesystem being mounted at /486/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 793.080354][T14074] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.7716: corrupted inode contents [ 793.122987][T14074] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.7716: mark_inode_dirty error [ 793.144269][T14074] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.7716: corrupted inode contents [ 793.166549][T14074] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.7716: mark_inode_dirty error [ 793.325744][T28882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.426872][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7720'. [ 793.696443][T14139] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 793.703130][T14139] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 793.710977][T14139] vhci_hcd vhci_hcd.0: Device attached [ 793.906505][T14140] vhci_hcd: connection closed [ 793.943848][ T3473] vhci_hcd: stop threads [ 793.950169][ T4788] vhci_hcd: vhci_device speed not set [ 793.952875][ T3473] vhci_hcd: release socket [ 793.962928][ T3473] vhci_hcd: disconnect device [ 794.000967][T14154] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7732'. [ 794.013718][ T4788] usb 19-1: new full-speed USB device number 5 using vhci_hcd [ 794.021325][ T4788] usb 19-1: enqueue for inactive port 0 [ 794.027015][ T4788] usb 19-1: enqueue for inactive port 0 [ 794.032713][ T4788] usb 19-1: enqueue for inactive port 0 [ 794.096462][T14156] lo speed is unknown, defaulting to 1000 [ 794.102869][T14156] lo speed is unknown, defaulting to 1000 [ 794.168827][ T4788] vhci_hcd: vhci_device speed not set [ 794.175610][T14157] hub 1-0:1.0: USB hub found [ 794.181321][T14157] hub 1-0:1.0: 8 ports detected [ 794.533995][T14162] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 794.540563][T14162] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 794.548233][T14162] vhci_hcd vhci_hcd.0: Device attached [ 794.565088][T14166] FAULT_INJECTION: forcing a failure. [ 794.565088][T14166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.578276][T14166] CPU: 0 UID: 0 PID: 14166 Comm: syz.9.7735 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 794.578319][T14166] Tainted: [W]=WARN [ 794.578335][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 794.578348][T14166] Call Trace: [ 794.578355][T14166] [ 794.578365][T14166] __dump_stack+0x1d/0x30 [ 794.578395][T14166] dump_stack_lvl+0xe8/0x140 [ 794.578485][T14166] dump_stack+0x15/0x1b [ 794.578505][T14166] should_fail_ex+0x265/0x280 [ 794.578582][T14166] should_fail+0xb/0x20 [ 794.578599][T14166] should_fail_usercopy+0x1a/0x20 [ 794.578620][T14166] _copy_from_user+0x1c/0xb0 [ 794.578722][T14166] __sys_bpf+0x183/0x7c0 [ 794.578756][T14166] __x64_sys_bpf+0x41/0x50 [ 794.578876][T14166] x64_sys_call+0x2aee/0x3000 [ 794.578907][T14166] do_syscall_64+0xd2/0x200 [ 794.578928][T14166] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 794.578959][T14166] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 794.579070][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.579175][T14166] RIP: 0033:0x7f77a5caf6c9 [ 794.579192][T14166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.579221][T14166] RSP: 002b:00007f77a4717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 794.579245][T14166] RAX: ffffffffffffffda RBX: 00007f77a5f05fa0 RCX: 00007f77a5caf6c9 [ 794.579263][T14166] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000002 [ 794.579280][T14166] RBP: 00007f77a4717090 R08: 0000000000000000 R09: 0000000000000000 [ 794.579293][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.579305][T14166] R13: 00007f77a5f06038 R14: 00007f77a5f05fa0 R15: 00007fffcd171658 [ 794.579325][T14166] [ 794.764045][T14163] vhci_hcd: connection closed [ 794.764477][ T3473] vhci_hcd: stop threads [ 794.773546][ T3473] vhci_hcd: release socket [ 794.778043][ T3473] vhci_hcd: disconnect device [ 794.834370][ T4790] vhci_hcd: vhci_device speed not set [ 794.868601][T14203] loop3: detected capacity change from 0 to 512 [ 794.904519][T14208] loop7: detected capacity change from 0 to 512 [ 794.926771][T14210] loop4: detected capacity change from 0 to 1024 [ 794.936941][T14210] EXT4-fs: Ignoring removed orlov option [ 794.948172][T14210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 794.962184][T14203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.975856][T14210] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.992421][T14208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.993811][T14203] ext4 filesystem being mounted at /462/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 795.010760][T14210] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.7741: lblock 3 mapped to illegal pblock 3 (length 3) [ 795.036590][T14208] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 795.045434][T14203] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.7739: corrupted inode contents [ 795.047417][T14210] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 795.071124][T14210] EXT4-fs (loop4): This should not happen!! Data will be lost [ 795.071124][T14210] [ 795.081177][T14203] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.7739: mark_inode_dirty error [ 795.092999][T14203] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.7739: corrupted inode contents [ 795.093758][T14208] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.7740: corrupted inode contents [ 795.105213][T14203] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.7739: mark_inode_dirty error [ 795.123957][T14208] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.7740: mark_inode_dirty error [ 795.144353][T14210] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7741: lblock 3 mapped to illegal pblock 3 (length 1) [ 795.163262][T14210] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7741: lblock 3 mapped to illegal pblock 3 (length 1) [ 795.176723][T14214] 0ªî{X¹¦: left allmulticast mode [ 795.187768][T14208] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.7740: corrupted inode contents [ 795.195714][T14210] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7741: lblock 3 mapped to illegal pblock 3 (length 1) [ 795.214040][T14210] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7741: lblock 3 mapped to illegal pblock 3 (length 1) [ 795.230694][T14208] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.7740: mark_inode_dirty error [ 795.243257][T14210] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7741: lblock 3 mapped to illegal pblock 3 (length 1) [ 795.258466][T14214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 795.274987][T14210] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7741: lblock 3 mapped to illegal pblock 3 (length 1) [ 795.292890][T14210] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7741: lblock 3 mapped to illegal pblock 3 (length 1) [ 795.318145][T14210] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7741: lblock 3 mapped to illegal pblock 3 (length 1) [ 795.336293][T14210] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7741: lblock 3 mapped to illegal pblock 3 (length 1) [ 795.456189][T14237] lo speed is unknown, defaulting to 1000 [ 795.462598][T14237] lo speed is unknown, defaulting to 1000 [ 795.654992][T14237] loop8: detected capacity change from 0 to 128 [ 795.740007][T14237] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 795.753270][T14237] ext4 filesystem being mounted at /596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 795.817486][T14262] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 795.910643][T14262] SELinux: failed to load policy [ 796.035073][T31516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.142684][T14265] veth0_to_team: entered promiscuous mode [ 796.155838][T25029] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 796.168187][T25029] EXT4-fs (loop4): This should not happen!! Data will be lost [ 796.168187][T25029] [ 796.202599][ T2513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.215949][ T3485] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 796.226013][T14267] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 796.237507][T14267] SELinux: failed to load policy [ 796.244267][T25985] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 796.274458][T14271] macvlan1: entered promiscuous mode [ 796.290211][T14271] ipvlan0: entered promiscuous mode [ 796.296643][T14271] ipvlan0: left promiscuous mode [ 796.302121][T14271] macvlan1: left promiscuous mode [ 796.391221][T14304] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 796.397974][T14304] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 796.405715][T14304] vhci_hcd vhci_hcd.0: Device attached [ 796.450760][T14309] vhci_hcd: connection closed [ 796.451212][ T269] vhci_hcd: stop threads [ 796.460328][ T269] vhci_hcd: release socket [ 796.464877][ T269] vhci_hcd: disconnect device [ 796.518146][T14318] loop9: detected capacity change from 0 to 512 [ 796.546189][T14318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.572055][T14318] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 796.596825][T14326] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 796.606114][T14326] SELinux: failed to load policy [ 796.629326][T14318] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.7756: corrupted inode contents [ 796.647474][T14318] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.7756: mark_inode_dirty error [ 796.660077][T14318] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.7756: corrupted inode contents [ 796.663766][T14330] veth0_to_team: entered promiscuous mode [ 796.673101][T14318] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.7756: mark_inode_dirty error [ 796.710993][T14335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7761'. [ 796.799772][T14338] hub 1-0:1.0: USB hub found [ 796.812674][T14338] hub 1-0:1.0: 8 ports detected [ 796.845201][T28882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.868200][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 796.868219][ T29] audit: type=1326 audit(6442452253.858:72626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14343 comm="syz.9.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 796.898849][ T29] audit: type=1326 audit(6442452253.858:72627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14343 comm="syz.9.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 796.911136][T14344] lo speed is unknown, defaulting to 1000 [ 796.922612][ T29] audit: type=1326 audit(6442452253.878:72628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14343 comm="syz.9.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 796.928959][T14344] lo speed is unknown, defaulting to 1000 [ 797.012525][ T29] audit: type=1400 audit(6442452253.998:72629): avc: denied { write } for pid=14343 comm="syz.9.7763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 797.063222][ T29] audit: type=1326 audit(6442452254.048:72630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14343 comm="syz.9.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 797.087043][ T29] audit: type=1326 audit(6442452254.048:72631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14343 comm="syz.9.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 797.123012][ T29] audit: type=1326 audit(6442452254.108:72632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14343 comm="syz.9.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 797.146678][ T29] audit: type=1326 audit(6442452254.108:72633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14343 comm="syz.9.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 797.170413][ T29] audit: type=1326 audit(6442452254.108:72634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14343 comm="syz.9.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 797.194128][ T29] audit: type=1326 audit(6442452254.108:72635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14343 comm="syz.9.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77a5caf6c9 code=0x7ffc0000 [ 797.696580][ T5452] bridge_slave_1: left allmulticast mode [ 797.702470][ T5452] bridge_slave_1: left promiscuous mode [ 797.708352][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.723231][ T5452] bridge_slave_0: left allmulticast mode [ 797.729089][ T5452] bridge_slave_0: left promiscuous mode [ 797.734996][ T5452] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.823753][T14411] loop3: detected capacity change from 0 to 128 [ 797.970104][T14411] vfat filesystem being mounted at /469/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 798.381886][ T5452] smc: removing net device bond0 with user defined pnetid SYZ2 [ 798.403010][ T5452] bond0 (unregistering): Released all slaves [ 798.439699][T14405] macvlan1: entered promiscuous mode [ 798.473041][T14405] ipvlan0: entered promiscuous mode [ 798.480464][T14437] loop7: detected capacity change from 0 to 128 [ 798.518740][T14405] ipvlan0: left promiscuous mode [ 798.533607][T14437] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 798.611528][T14405] macvlan1: left promiscuous mode [ 798.623079][T14437] vfat filesystem being mounted at /321/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 798.673698][ T5452] tipc: Disabling bearer [ 798.678959][ T5452] tipc: Left network mode [ 798.691334][T14430] lo speed is unknown, defaulting to 1000 [ 798.697746][T14430] lo speed is unknown, defaulting to 1000 [ 798.745030][T14429] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 798.752889][T14429] FAT-fs (loop7): Filesystem has been set read-only [ 798.793829][T14429] syz.7.7775: attempt to access beyond end of device [ 798.793829][T14429] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 798.963559][ T5452] team0 (unregistering): Port device team_slave_1 removed [ 798.984523][ T5452] team0 (unregistering): Port device team_slave_0 removed [ 799.918050][T14391] lo speed is unknown, defaulting to 1000 [ 800.963384][T14488] lo speed is unknown, defaulting to 1000 [ 801.044925][T14489] lo speed is unknown, defaulting to 1000 [ 801.402879][T14391] chnl_net:caif_netlink_parms(): no params data found [ 801.439924][T14654] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 801.449746][T14654] SELinux: failed to load policy [ 801.472040][T14391] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.472120][T14391] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.472253][T14391] bridge_slave_0: entered allmulticast mode [ 801.472799][T14391] bridge_slave_0: entered promiscuous mode [ 801.475170][T14391] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.475209][T14391] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.475361][T14391] bridge_slave_1: entered allmulticast mode [ 801.475952][T14391] bridge_slave_1: entered promiscuous mode [ 801.503176][T14391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.504900][T14391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.540749][T14391] team0: Port device team_slave_0 added [ 801.541879][T14391] team0: Port device team_slave_1 added [ 801.615362][T14391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.615379][T14391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.615448][T14391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.616312][T14391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.616327][T14391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.616363][T14391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.672134][T14764] loop4: detected capacity change from 0 to 128 [ 801.743985][T14764] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 801.757782][T14764] vfat filesystem being mounted at /303/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 801.770415][T14764] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 801.778476][T14764] FAT-fs (loop4): Filesystem has been set read-only [ 801.787599][T14391] hsr_slave_0: entered promiscuous mode [ 801.793371][T14736] loop9: detected capacity change from 0 to 1024 [ 801.799363][T14803] loop7: detected capacity change from 0 to 512 [ 801.800470][T14764] syz.4.7786: attempt to access beyond end of device [ 801.800470][T14764] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 801.807008][T14391] hsr_slave_1: entered promiscuous mode [ 801.855489][T14823] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.7788' sets config #1 [ 801.874200][T14736] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.877193][T14803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.915455][T14803] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 801.950749][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 801.950769][ T29] audit: type=1326 audit(6442452258.938:72754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.4.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 801.966637][T14854] loop4: detected capacity change from 0 to 1024 [ 801.988452][ T29] audit: type=1326 audit(6442452258.938:72755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.4.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 801.995216][T14854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.012145][ T29] audit: type=1326 audit(6442452258.938:72756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.4.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 802.028150][T14736] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.7785: Allocating blocks 449-513 which overlap fs metadata [ 802.047836][ T29] audit: type=1326 audit(6442452258.938:72757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.4.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 802.062943][T14803] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.7787: corrupted inode contents [ 802.085482][ T29] audit: type=1326 audit(6442452258.938:72758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.4.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 802.099083][T14803] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.7787: mark_inode_dirty error [ 802.121326][ T29] audit: type=1326 audit(6442452258.938:72759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.4.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 802.133741][T14803] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.7787: corrupted inode contents [ 802.156292][ T29] audit: type=1326 audit(6442452258.938:72760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.4.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 802.156340][ T29] audit: type=1326 audit(6442452258.938:72761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.4.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 802.190787][T14866] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7789'. [ 802.191675][ T29] audit: type=1326 audit(6442452258.948:72762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.4.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 802.247930][ T29] audit: type=1326 audit(6442452258.948:72763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14853 comm="syz.4.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 802.250138][T14732] EXT4-fs (loop9): pa ffff8881072a6af0: logic 48, phys. 177, len 21 [ 802.279854][T14732] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 802.286283][T14803] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.7787: mark_inode_dirty error [ 802.294800][T14854] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.7790: Allocating blocks 449-513 which overlap fs metadata [ 802.341624][T28882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.357801][T14853] EXT4-fs (loop4): pa ffff8881072a6b60: logic 48, phys. 177, len 21 [ 802.365988][T14853] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 802.379908][T14875] EXT4-fs error (device loop7): ext4_lookup:1784: inode #19: comm syz.7.7787: 'bus' linked to parent dir [ 802.409410][ T3485] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.421394][ T2513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.446109][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7794'. [ 802.460125][T14907] loop9: detected capacity change from 0 to 128 [ 802.466163][T14909] macvlan1: entered promiscuous mode [ 802.469207][T14913] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7793'. [ 802.473237][T14909] ipvlan0: entered promiscuous mode [ 802.482794][T14907] vfat filesystem being mounted at /508/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 802.487072][T14909] ipvlan0: left promiscuous mode [ 802.502057][T14909] macvlan1: left promiscuous mode [ 802.548438][T14932] loop9: detected capacity change from 0 to 1024 [ 802.566245][T14932] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.579209][T14939] hub 1-0:1.0: USB hub found [ 802.584062][T14939] hub 1-0:1.0: 8 ports detected [ 802.599320][T14932] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.7795: Allocating blocks 449-513 which overlap fs metadata [ 802.616271][T14931] EXT4-fs (loop9): pa ffff8881072a6cb0: logic 48, phys. 177, len 21 [ 802.618117][T14948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7797'. [ 802.624361][T14931] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 802.655484][T28882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.694805][T14391] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 802.702081][T14967] hub 1-0:1.0: USB hub found [ 802.709833][T14391] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 802.719522][T14391] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 802.728333][T14967] hub 1-0:1.0: 8 ports detected [ 802.734239][T14391] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 802.778567][T14391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.792482][T14391] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.804200][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.811321][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.824798][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 802.831312][T14391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 802.841890][T14391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 802.855243][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.862571][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.922092][T14391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.978593][T14989] lo speed is unknown, defaulting to 1000 [ 803.123331][T14391] veth0_vlan: entered promiscuous mode [ 803.133109][T14391] veth1_vlan: entered promiscuous mode [ 803.156167][T14391] veth0_macvtap: entered promiscuous mode [ 803.166771][T14391] veth1_macvtap: entered promiscuous mode [ 803.187861][T14391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.201801][T14391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.217392][ T5452] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.228948][ T5452] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.246353][ T5452] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.262497][ T5452] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.327820][T15025] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 803.338578][T15025] SELinux: failed to load policy [ 803.407973][T15029] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 803.427676][T15031] loop7: detected capacity change from 0 to 1024 [ 803.434523][T15029] SELinux: failed to load policy [ 803.457928][T15031] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.554944][T15039] loop4: detected capacity change from 0 to 128 [ 803.562453][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7805'. [ 803.581083][T15031] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7803: Allocating blocks 449-513 which overlap fs metadata [ 803.597104][T15039] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 803.617066][T15037] loop8: detected capacity change from 0 to 128 [ 803.629324][T15030] EXT4-fs (loop7): pa ffff8881072a6af0: logic 48, phys. 177, len 21 [ 803.637434][T15030] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 803.655294][T15037] vfat filesystem being mounted at /2/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 803.669319][T15039] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 803.703272][T15039] ext2 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.722347][ T2513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.786596][T15046] loop9: detected capacity change from 0 to 128 [ 803.806668][T15046] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 803.823505][T15046] vfat filesystem being mounted at /511/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 803.839885][T15070] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7810'. [ 803.850527][T15046] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 803.858614][T15046] FAT-fs (loop9): Filesystem has been set read-only [ 803.866274][T15046] syz.9.7806: attempt to access beyond end of device [ 803.866274][T15046] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 803.932523][T15082] hub 1-0:1.0: USB hub found [ 803.940137][T15082] hub 1-0:1.0: 8 ports detected [ 803.962777][T15085] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 803.969477][T15085] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 803.977203][T15085] vhci_hcd vhci_hcd.0: Device attached [ 804.033770][T15086] vhci_hcd: connection closed [ 804.034002][ T12] vhci_hcd: stop threads [ 804.043018][ T12] vhci_hcd: release socket [ 804.047717][ T12] vhci_hcd: disconnect device [ 804.065172][T15079] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7811'. [ 804.142491][T15093] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7814'. [ 804.209290][T15096] hub 1-0:1.0: USB hub found [ 804.214518][T15096] hub 1-0:1.0: 8 ports detected [ 804.448564][T15104] loop4: detected capacity change from 0 to 1024 [ 804.479192][T15104] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.7815: Allocating blocks 449-513 which overlap fs metadata [ 804.495212][T15103] EXT4-fs (loop4): pa ffff8881072a6cb0: logic 48, phys. 177, len 21 [ 804.503510][T15103] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 804.688548][T15119] loop4: detected capacity change from 0 to 1024 [ 804.734606][T15119] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.7820: Allocating blocks 449-513 which overlap fs metadata [ 804.752688][T15118] EXT4-fs (loop4): pa ffff88810726b4d0: logic 48, phys. 177, len 21 [ 804.761255][T15118] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 804.837756][T15140] lo speed is unknown, defaulting to 1000 [ 804.910277][ T3780] Bluetooth: hci0: command 0x1003 tx timeout [ 804.916501][ T3806] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 804.976049][T15168] loop7: detected capacity change from 0 to 128 [ 804.989586][T15168] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 805.009376][T15168] ext2 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.299113][T15173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 805.418097][T15183] loop8: detected capacity change from 0 to 1024 [ 805.484896][T15183] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.7828: Allocating blocks 449-513 which overlap fs metadata [ 805.533548][T15182] EXT4-fs (loop8): pa ffff8881072a6af0: logic 48, phys. 177, len 21 [ 805.542028][T15182] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 805.578988][T15190] loop3: detected capacity change from 0 to 1024 [ 805.590107][T15190] EXT4-fs: Ignoring removed orlov option [ 805.661110][T15190] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.688313][T15190] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.7830: lblock 3 mapped to illegal pblock 3 (length 3) [ 805.721198][T15190] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 805.733626][T15190] EXT4-fs (loop3): This should not happen!! Data will be lost [ 805.733626][T15190] [ 805.772353][T15204] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 805.781868][T15204] SELinux: failed to load policy [ 805.837473][ T5452] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 805.870136][ T5452] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 805.882619][ T5452] EXT4-fs (loop3): This should not happen!! Data will be lost [ 805.882619][ T5452] [ 805.922950][T15217] loop7: detected capacity change from 0 to 1024 [ 805.943558][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7837'. [ 805.969157][T15226] loop3: detected capacity change from 0 to 128 [ 805.977197][T15226] vfat filesystem being mounted at /477/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 805.991033][T15217] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7838: bg 0: block 88: padding at end of block bitmap is not set [ 806.043914][T15217] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7838'. [ 806.126923][T15237] loop9: detected capacity change from 0 to 1024 [ 806.146866][T15236] lo speed is unknown, defaulting to 1000 [ 806.198237][T15237] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.7841: Allocating blocks 449-513 which overlap fs metadata [ 806.274263][T15235] EXT4-fs (loop9): pa ffff8881072a6cb0: logic 48, phys. 177, len 21 [ 806.282335][T15235] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 806.554429][T15268] macvlan1: entered promiscuous mode [ 806.561059][T15268] ipvlan0: entered promiscuous mode [ 806.567411][T15268] ipvlan0: left promiscuous mode [ 806.573106][T15268] macvlan1: left promiscuous mode [ 806.621259][T15293] loop7: detected capacity change from 0 to 128 [ 806.629671][T15293] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 806.644668][T15293] ext2 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.716324][T15303] loop4: detected capacity change from 0 to 1024 [ 806.729579][T15303] EXT4-fs: Ignoring removed orlov option [ 806.754650][T15303] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.781386][T15303] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.7850: lblock 3 mapped to illegal pblock 3 (length 3) [ 806.812775][T15315] hub 1-0:1.0: USB hub found [ 806.817612][T15315] hub 1-0:1.0: 8 ports detected [ 806.826577][T15303] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 806.839040][T15303] EXT4-fs (loop4): This should not happen!! Data will be lost [ 806.839040][T15303] [ 806.862490][T25029] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 806.881023][T15318] lo speed is unknown, defaulting to 1000 [ 806.888076][T25029] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 806.900414][T25029] EXT4-fs (loop4): This should not happen!! Data will be lost [ 806.900414][T25029] [ 806.956405][T15333] loop4: detected capacity change from 0 to 128 [ 806.971137][T15333] vfat filesystem being mounted at /323/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 807.025195][T15339] loop9: detected capacity change from 0 to 512 [ 807.066461][T15339] ext4 filesystem being mounted at /524/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 807.097599][T15339] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.7858: corrupted inode contents [ 807.113724][T15339] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.7858: mark_inode_dirty error [ 807.133971][T15339] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.7858: corrupted inode contents [ 807.154705][T15339] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.7858: mark_inode_dirty error [ 807.215777][T15376] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.7864' sets config #1 [ 807.284903][T15380] loop4: detected capacity change from 0 to 512 [ 807.302096][T15380] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 807.316487][T15380] EXT4-fs (loop4): 1 truncate cleaned up [ 807.394790][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 807.394848][ T29] audit: type=1326 audit(6442452264.388:72915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.8.7854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac8136f6c9 code=0x0 [ 807.818499][T15390] __nla_validate_parse: 2 callbacks suppressed [ 807.818520][T15390] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7870'. [ 807.862616][T15390] hub 1-0:1.0: USB hub found [ 807.868480][T15390] hub 1-0:1.0: 8 ports detected [ 807.972755][T15398] loop4: detected capacity change from 0 to 1024 [ 807.979745][T15398] EXT4-fs: Ignoring removed orlov option [ 808.006365][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7871'. [ 808.022249][T15398] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.046501][T15409] loop8: detected capacity change from 0 to 128 [ 808.070296][T15409] vfat filesystem being mounted at /16/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 808.084651][T15418] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 808.123852][T15418] SELinux: failed to load policy [ 808.162976][T15420] loop9: detected capacity change from 0 to 1024 [ 808.184571][T15432] loop3: detected capacity change from 0 to 128 [ 808.192356][T15432] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 808.212185][T15426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 808.242062][T15420] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.7875: Allocating blocks 449-513 which overlap fs metadata [ 808.262885][T15432] ext2 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.289603][T15419] EXT4-fs (loop9): pa ffff8881072a6af0: logic 48, phys. 177, len 21 [ 808.297847][T15419] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 808.311066][T15442] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 808.320252][T15442] SELinux: failed to load policy [ 808.430648][T15456] loop8: detected capacity change from 0 to 128 [ 808.444663][T15456] vfat filesystem being mounted at /18/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 808.490718][T15456] tipc: Started in network mode [ 808.495817][T15456] tipc: Node identity 4, cluster identity 4711 [ 808.502204][T15456] tipc: Node number set to 4 [ 808.547404][T15459] loop7: detected capacity change from 0 to 512 [ 808.588415][T15459] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 808.667212][T15459] EXT4-fs (loop7): 1 truncate cleaned up [ 808.720460][T15462] macvlan1: entered promiscuous mode [ 808.761847][T15462] ipvlan0: entered promiscuous mode [ 808.797578][T15462] ipvlan0: left promiscuous mode [ 808.830419][T15462] macvlan1: left promiscuous mode [ 808.992317][T15478] loop9: detected capacity change from 0 to 512 [ 809.004439][T15478] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 809.052875][T15478] EXT4-fs (loop9): 1 truncate cleaned up [ 809.199837][T15488] loop7: detected capacity change from 0 to 1024 [ 809.214981][T15488] EXT4-fs: Ignoring removed orlov option [ 809.268589][T15488] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 809.438114][T15509] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7894'. [ 809.611488][T15514] hub 1-0:1.0: USB hub found [ 809.644487][T15514] hub 1-0:1.0: 8 ports detected [ 810.090771][T15511] veth0_to_team: entered promiscuous mode [ 810.225686][T15522] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7895'. [ 810.761676][T15534] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 810.834115][T15534] SELinux: failed to load policy [ 810.871807][T15539] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7898'. [ 810.897732][T15528] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 810.904599][T15528] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 810.912443][T15528] vhci_hcd vhci_hcd.0: Device attached [ 810.920280][T15542] vhci_hcd: connection closed [ 810.920601][ T269] vhci_hcd: stop threads [ 810.929717][ T269] vhci_hcd: release socket [ 810.934195][ T269] vhci_hcd: disconnect device [ 811.036614][T15551] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7904'. [ 811.045756][T15551] netlink: 108 bytes leftover after parsing attributes in process `syz.9.7904'. [ 811.055460][T15551] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7904'. [ 811.065468][T15551] netlink: 108 bytes leftover after parsing attributes in process `syz.9.7904'. [ 811.074614][T15551] netlink: 84 bytes leftover after parsing attributes in process `syz.9.7904'. [ 811.148937][T15549] lo speed is unknown, defaulting to 1000 [ 811.246615][T15562] loop9: detected capacity change from 0 to 1024 [ 811.253836][T15562] EXT4-fs: Ignoring removed orlov option [ 811.273795][T15562] EXT4-fs mount: 35 callbacks suppressed [ 811.273814][T15562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 811.327993][T15562] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.446743][T15562] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 3: comm syz.9.7906: lblock 3 mapped to illegal pblock 3 (length 3) [ 811.478463][T25029] Bluetooth: hci0: Frame reassembly failed (-84) [ 811.486167][T15562] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 811.498520][T15562] EXT4-fs (loop9): This should not happen!! Data will be lost [ 811.498520][T15562] [ 811.509173][T15593] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.7906: lblock 3 mapped to illegal pblock 3 (length 1) [ 811.524050][T15593] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.7906: lblock 3 mapped to illegal pblock 3 (length 1) [ 811.542366][T15593] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.7906: lblock 3 mapped to illegal pblock 3 (length 1) [ 811.556945][T15593] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.7906: lblock 3 mapped to illegal pblock 3 (length 1) [ 811.581035][T15593] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.7906: lblock 3 mapped to illegal pblock 3 (length 1) [ 811.595886][T15593] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.7906: lblock 3 mapped to illegal pblock 3 (length 1) [ 811.610457][T15593] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.7906: lblock 3 mapped to illegal pblock 3 (length 1) [ 811.625596][T15593] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.7906: lblock 3 mapped to illegal pblock 3 (length 1) [ 811.640995][T15593] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 3: comm syz.9.7906: lblock 3 mapped to illegal pblock 3 (length 1) [ 811.679808][T15598] hub 1-0:1.0: USB hub found [ 811.684738][T15598] hub 1-0:1.0: 8 ports detected [ 811.746394][T15603] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.7909' sets config #1 [ 811.780459][T15602] macvlan1: entered promiscuous mode [ 811.817746][T15602] ipvlan0: entered promiscuous mode [ 811.834412][T15602] ipvlan0: left promiscuous mode [ 811.839878][T15602] macvlan1: left promiscuous mode [ 812.020997][T15614] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 812.045312][T15614] SELinux: failed to load policy [ 812.151833][ T9720] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 812.164297][ T9720] EXT4-fs (loop9): This should not happen!! Data will be lost [ 812.164297][ T9720] [ 812.175286][T28882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 812.442898][ T29] audit: type=1326 audit(6442452269.428:72916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.8.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8136f6c9 code=0x7ffc0000 [ 812.466620][ T29] audit: type=1326 audit(6442452269.428:72917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.8.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8136f6c9 code=0x7ffc0000 [ 812.496701][T15638] loop8: detected capacity change from 0 to 1024 [ 812.504658][ T29] audit: type=1326 audit(6442452269.478:72918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.8.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac8136f6c9 code=0x7ffc0000 [ 812.528415][ T29] audit: type=1326 audit(6442452269.478:72919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.8.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8136f6c9 code=0x7ffc0000 [ 812.552223][ T29] audit: type=1326 audit(6442452269.478:72920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.8.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8136f6c9 code=0x7ffc0000 [ 812.576278][ T29] audit: type=1326 audit(6442452269.478:72921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.8.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fac8136f6c9 code=0x7ffc0000 [ 812.600449][ T29] audit: type=1326 audit(6442452269.478:72922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.8.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fac8136f703 code=0x7ffc0000 [ 812.624171][ T29] audit: type=1326 audit(6442452269.488:72923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.8.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac8136e17f code=0x7ffc0000 [ 812.647802][ T29] audit: type=1326 audit(6442452269.488:72924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.8.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fac8136f757 code=0x7ffc0000 [ 812.647850][ T29] audit: type=1326 audit(6442452269.488:72925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.8.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac8136df10 code=0x7ffc0000 [ 812.697918][T15638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.724978][T14391] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.980720][T15666] lo speed is unknown, defaulting to 1000 [ 813.071836][T15666] loop8: detected capacity change from 0 to 128 [ 813.089215][T15666] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 813.101828][T15666] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 813.763497][ T3806] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 814.475409][T14391] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 814.517157][ T9720] Bluetooth: hci0: Frame reassembly failed (-84) [ 814.562889][T15705] __nla_validate_parse: 8 callbacks suppressed [ 814.562910][T15705] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7929'. [ 814.578213][T15705] netlink: 108 bytes leftover after parsing attributes in process `syz.8.7929'. [ 814.589841][T15705] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7929'. [ 814.601624][T15705] netlink: 108 bytes leftover after parsing attributes in process `syz.8.7929'. [ 814.610746][T15705] netlink: 84 bytes leftover after parsing attributes in process `syz.8.7929'. [ 814.790417][T15716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7932'. [ 814.871506][T15722] loop9: detected capacity change from 0 to 128 [ 814.878862][T15722] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 814.888148][T15724] hub 1-0:1.0: USB hub found [ 814.893539][T15724] hub 1-0:1.0: 8 ports detected [ 814.899571][T15722] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 814.912693][T15722] ext2 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.938175][T15722] syzkaller0: entered promiscuous mode [ 814.943795][T15722] syzkaller0: entered allmulticast mode [ 814.976351][T15733] loop7: detected capacity change from 0 to 1024 [ 815.007537][T15733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.031416][T28882] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 815.058526][T15742] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7937'. [ 815.075615][ T2513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.126439][T15758] hub 1-0:1.0: USB hub found [ 815.131444][T15758] hub 1-0:1.0: 8 ports detected [ 815.158370][T15762] macvlan1: entered promiscuous mode [ 815.164864][T15762] ipvlan0: entered promiscuous mode [ 815.170889][T15762] ipvlan0: left promiscuous mode [ 815.176304][T15762] macvlan1: left promiscuous mode [ 815.384548][T15780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 815.686581][T15793] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 815.695756][T15793] SELinux: failed to load policy [ 815.741218][T15795] loop3: detected capacity change from 0 to 512 [ 815.756403][T15795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.769808][T15795] ext4 filesystem being mounted at /495/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 815.788541][T15795] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.7946: corrupted inode contents [ 815.801476][T15795] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.7946: mark_inode_dirty error [ 815.813453][T15795] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.7946: corrupted inode contents [ 815.836767][T15795] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.7946: mark_inode_dirty error [ 815.858348][T15795] 9pnet_fd: Insufficient options for proto=fd [ 815.968610][T15801] loop7: detected capacity change from 0 to 128 [ 815.977152][T15801] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 815.989328][T15801] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 816.012330][T15801] ext2 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.044848][T15801] syzkaller0: entered promiscuous mode [ 816.050557][T15801] syzkaller0: entered allmulticast mode [ 816.077516][T31516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.152962][T15820] loop9: detected capacity change from 0 to 128 [ 816.177972][ T2513] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 816.200239][T15820] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 816.248699][T15820] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 816.264536][T15820] ext2 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.287604][T15820] syzkaller0: entered promiscuous mode [ 816.293141][T15820] syzkaller0: entered allmulticast mode [ 816.376831][T28882] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 816.419630][T15842] macvlan1: entered promiscuous mode [ 816.427847][T15842] ipvlan0: entered promiscuous mode [ 816.434648][T15842] ipvlan0: left promiscuous mode [ 816.439835][T15842] macvlan1: left promiscuous mode [ 816.500053][T15830] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7952'. [ 816.583933][ T3806] Bluetooth: hci0: command 0x1003 tx timeout [ 816.590761][ T3780] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 816.612559][T15863] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 816.634600][T15863] SELinux: failed to load policy [ 816.639698][T15865] SELinux: policydb version -1542338293 does not match my version range 15-35 [ 816.664326][T15865] SELinux: failed to load policy [ 816.671583][T15867] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7960'. [ 816.740516][T15872] hub 1-0:1.0: USB hub found [ 816.746066][T15872] hub 1-0:1.0: 8 ports detected [ 816.784616][T15877] loop8: detected capacity change from 0 to 128 [ 816.791428][T15858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 816.791759][T15877] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 816.817766][T15877] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 816.830374][T15877] ext2 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.905226][T15881] loop7: detected capacity change from 0 to 1024 [ 816.917069][T15881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.945148][ T2513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.968044][T14391] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 817.203690][T15903] loop7: detected capacity change from 0 to 128 [ 817.217063][T15903] vfat filesystem being mounted at /361/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 817.477413][T15909] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7968'. [ 818.017267][T15909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 818.468279][T15910] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 818.474859][T15910] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 818.482590][T15910] vhci_hcd vhci_hcd.0: Device attached [ 819.513746][ T3416] vhci_hcd: vhci_device speed not set [ 819.576648][ T3416] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 820.109987][T15912] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 820.257116][ T5452] vhci_hcd: stop threads [ 820.261436][ T5452] vhci_hcd: release socket [ 820.266174][ T5452] vhci_hcd: disconnect device [ 820.592369][T15937] loop7: detected capacity change from 0 to 1024 [ 820.674319][T15937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.790581][T15937] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7975: Allocating blocks 449-513 which overlap fs metadata [ 820.809383][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 820.809400][ T29] audit: type=1326 audit(6442452277.798:72983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.4.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 820.849400][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7977'. [ 820.858444][T15945] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7977'. [ 820.867444][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7977'. [ 820.880753][T15936] EXT4-fs (loop7): pa ffff88810726b540: logic 48, phys. 177, len 21 [ 820.888920][T15936] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 820.889447][ T29] audit: type=1326 audit(6442452277.838:72984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.4.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 820.922793][ T29] audit: type=1326 audit(6442452277.838:72985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.4.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 820.946417][ T29] audit: type=1326 audit(6442452277.838:72986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.4.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 820.970071][ T29] audit: type=1326 audit(6442452277.838:72987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.4.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 820.984995][T15945] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7977'. [ 820.993783][ T29] audit: type=1326 audit(6442452277.838:72988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.4.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 821.002837][T15945] netlink: 'syz.8.7977': attribute type 6 has an invalid length. [ 821.026293][ T29] audit: type=1326 audit(6442452277.838:72989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.4.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 821.057659][ T29] audit: type=1326 audit(6442452277.838:72990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.4.7976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x7ffc0000 [ 821.081716][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7978'. [ 821.090742][T15952] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7978'. [ 821.116452][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7978'. [ 821.125826][T15952] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7978'. [ 821.128144][ T2513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.135322][T15952] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7978'. [ 821.199820][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7979'. [ 821.240087][ T29] audit: type=1400 audit(6442452278.228:72991): avc: denied { bind } for pid=15962 comm="syz.4.7981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 821.260159][ T29] audit: type=1400 audit(6442452278.228:72992): avc: denied { name_bind } for pid=15962 comm="syz.4.7981" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 821.322881][T15967] loop7: detected capacity change from 0 to 128 [ 821.335593][T15967] vfat filesystem being mounted at /365/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 821.353604][T15963] loop4: detected capacity change from 0 to 764 [ 821.677083][T15971] SELinux: policydb magic number 0xc0 does not match expected magic number 0xf97cff8c [ 821.884795][T15971] SELinux: failed to load policy [ 822.120997][T15972] lo speed is unknown, defaulting to 1000 [ 822.259587][T15963] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 822.667130][T16032] lo speed is unknown, defaulting to 1000 [ 823.200698][T16081] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 823.207364][T16081] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 823.215090][T16081] vhci_hcd vhci_hcd.0: Device attached [ 823.284776][T16080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.413793][ T4792] vhci_hcd: vhci_device speed not set [ 823.467859][T16095] FAULT_INJECTION: forcing a failure. [ 823.467859][T16095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.481036][T16095] CPU: 1 UID: 0 PID: 16095 Comm: syz.3.7989 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 823.481074][T16095] Tainted: [W]=WARN [ 823.481081][T16095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 823.481152][T16095] Call Trace: [ 823.481162][T16095] [ 823.481170][T16095] __dump_stack+0x1d/0x30 [ 823.481195][T16095] dump_stack_lvl+0xe8/0x140 [ 823.481221][T16095] dump_stack+0x15/0x1b [ 823.481247][T16095] should_fail_ex+0x265/0x280 [ 823.481280][T16095] should_fail+0xb/0x20 [ 823.481303][T16095] should_fail_usercopy+0x1a/0x20 [ 823.481325][T16095] _copy_to_user+0x20/0xa0 [ 823.481352][T16095] simple_read_from_buffer+0xb5/0x130 [ 823.481419][T16095] proc_fail_nth_read+0x10e/0x150 [ 823.481464][T16095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 823.481507][T16095] vfs_read+0x1a8/0x770 [ 823.481533][T16095] ? __rcu_read_unlock+0x4f/0x70 [ 823.481641][T16095] ? __fget_files+0x184/0x1c0 [ 823.481677][T16095] ? selinux_getselfattr+0x9a/0xd0 [ 823.481711][T16095] ksys_read+0xda/0x1a0 [ 823.481761][T16095] __x64_sys_read+0x40/0x50 [ 823.481833][T16095] x64_sys_call+0x27c0/0x3000 [ 823.481865][T16095] do_syscall_64+0xd2/0x200 [ 823.481895][T16095] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 823.481933][T16095] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 823.481998][T16095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.482021][T16095] RIP: 0033:0x7f65819ae0dc [ 823.482050][T16095] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 823.482068][T16095] RSP: 002b:00007f658040f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 823.482092][T16095] RAX: ffffffffffffffda RBX: 00007f6581c05fa0 RCX: 00007f65819ae0dc [ 823.482108][T16095] RDX: 000000000000000f RSI: 00007f658040f0a0 RDI: 0000000000000006 [ 823.482125][T16095] RBP: 00007f658040f090 R08: 0000000000000000 R09: 0000000000000000 [ 823.482169][T16095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.482181][T16095] R13: 00007f6581c06038 R14: 00007f6581c05fa0 R15: 00007ffd480d1738 [ 823.482207][T16095] [ 823.482285][ T4792] usb 17-1: new full-speed USB device number 5 using vhci_hcd [ 823.823821][T16082] vhci_hcd: connection closed [ 823.843417][T15998] vhci_hcd: stop threads [ 823.852548][T15998] vhci_hcd: release socket [ 823.857098][T15998] vhci_hcd: disconnect device [ 823.862910][T16097] FAULT_INJECTION: forcing a failure. [ 823.862910][T16097] name failslab, interval 1, probability 0, space 0, times 0 [ 823.875663][T16097] CPU: 1 UID: 0 PID: 16097 Comm: syz.9.7990 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 823.875701][T16097] Tainted: [W]=WARN [ 823.875709][T16097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 823.875738][T16097] Call Trace: [ 823.875747][T16097] [ 823.875758][T16097] __dump_stack+0x1d/0x30 [ 823.875788][T16097] dump_stack_lvl+0xe8/0x140 [ 823.875816][T16097] dump_stack+0x15/0x1b [ 823.875839][T16097] should_fail_ex+0x265/0x280 [ 823.875863][T16097] should_failslab+0x8c/0xb0 [ 823.875954][T16097] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 823.875988][T16097] ? __alloc_skb+0x101/0x320 [ 823.876061][T16097] __alloc_skb+0x101/0x320 [ 823.876090][T16097] ? mntput_no_expire+0x6f/0x440 [ 823.876113][T16097] alloc_skb_with_frags+0x7d/0x470 [ 823.876146][T16097] ? mntput+0x4b/0x80 [ 823.876304][T16097] ? terminate_walk+0x27f/0x2a0 [ 823.876340][T16097] virtio_transport_alloc_skb+0x91/0x710 [ 823.876369][T16097] ? __rcu_read_unlock+0x4f/0x70 [ 823.876399][T16097] virtio_transport_send_pkt_info+0x434/0x860 [ 823.876431][T16097] virtio_transport_connect+0x49/0x70 [ 823.876496][T16097] vsock_connect+0x793/0x820 [ 823.876523][T16097] ? __pfx_virtio_transport_stream_allow+0x10/0x10 [ 823.876548][T16097] ? __pfx_autoremove_wake_function+0x10/0x10 [ 823.876680][T16097] ? __pfx_vsock_connect+0x10/0x10 [ 823.876707][T16097] __sys_connect+0x1f2/0x2b0 [ 823.876787][T16097] __x64_sys_connect+0x3f/0x50 [ 823.876818][T16097] x64_sys_call+0x2c0c/0x3000 [ 823.876851][T16097] do_syscall_64+0xd2/0x200 [ 823.876873][T16097] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 823.876904][T16097] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 823.876947][T16097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.876970][T16097] RIP: 0033:0x7f77a5caf6c9 [ 823.876987][T16097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.877024][T16097] RSP: 002b:00007f77a4717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 823.877049][T16097] RAX: ffffffffffffffda RBX: 00007f77a5f05fa0 RCX: 00007f77a5caf6c9 [ 823.877129][T16097] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000006 [ 823.877142][T16097] RBP: 00007f77a4717090 R08: 0000000000000000 R09: 0000000000000000 [ 823.877155][T16097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.877168][T16097] R13: 00007f77a5f06038 R14: 00007f77a5f05fa0 R15: 00007fffcd171658 [ 823.877253][T16097] [ 823.877525][ T4792] usb 17-1: enqueue for inactive port 0 [ 824.170217][ T4792] usb 17-1: enqueue for inactive port 0 [ 824.176323][ T4792] usb 17-1: enqueue for inactive port 0 [ 824.219076][T16116] SELinux: Context system_u:object_r:var_run_t:s0 is not valid (left unmapped). [ 824.298676][ T4792] vhci_hcd: vhci_device speed not set [ 824.304940][T16114] hub 1-0:1.0: USB hub found [ 824.309741][T16114] hub 1-0:1.0: 8 ports detected [ 824.509553][T16141] loop3: detected capacity change from 0 to 1024 [ 824.525091][T16141] EXT4-fs: Ignoring removed orlov option [ 824.546538][T16141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 824.575275][T16141] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.694632][T31516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 824.920386][T16155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 825.151076][T16187] lo speed is unknown, defaulting to 1000 [ 825.240726][T16210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 825.289435][T16210] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 825.296281][T16210] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 825.304065][T16210] vhci_hcd vhci_hcd.0: Device attached [ 825.378841][T16215] vhci_hcd: connection closed [ 825.379179][T15998] vhci_hcd: stop threads [ 825.389203][T15998] vhci_hcd: release socket [ 825.393782][T15998] vhci_hcd: disconnect device [ 825.433087][T16221] netlink: 'syz.9.8022': attribute type 8 has an invalid length. [ 825.441129][T16221] netem: change failed [ 825.469496][T16221] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 825.501683][T16225] loop7: detected capacity change from 0 to 1024 [ 825.525810][T16225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.556508][ T3416] usb 9-1: enqueue for inactive port 0 [ 825.562052][ T3416] usb 9-1: enqueue for inactive port 0 [ 825.564232][T16225] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.8024: Allocating blocks 449-513 which overlap fs metadata [ 825.583557][T16224] EXT4-fs (loop7): pa ffff8881072a6af0: logic 48, phys. 177, len 21 [ 825.591637][T16224] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 825.612016][ T2513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.633707][ T3416] vhci_hcd: vhci_device speed not set [ 825.660248][T16235] macvlan1: entered promiscuous mode [ 825.666845][T16235] ipvlan0: entered promiscuous mode [ 825.673246][T16235] ipvlan0: left promiscuous mode [ 825.678518][T16235] macvlan1: left promiscuous mode [ 825.860031][T16265] netlink: 'syz.7.8029': attribute type 1 has an invalid length. [ 825.876430][T16265] smc: adding net device bond0 with user defined pnetid SYZ2 [ 825.884553][T16265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.899142][T16265] __nla_validate_parse: 12 callbacks suppressed [ 825.899164][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8029'. [ 825.917443][T16265] smc: removing net device bond0 with user defined pnetid SYZ2 [ 825.925616][T16265] bond0 (unregistering): Released all slaves [ 825.932346][T15992] ================================================================== [ 825.940570][T15992] BUG: KCSAN: data-race in alloc_pid / copy_process [ 825.947199][T15992] [ 825.949540][T15992] read-write to 0xffffffff8685ff98 of 4 bytes by task 15993 on cpu 0: [ 825.957786][T15992] alloc_pid+0x539/0x720 [ 825.962053][T15992] copy_process+0xe25/0x2000 [ 825.966664][T15992] kernel_clone+0x16c/0x5c0 [ 825.971190][T15992] user_mode_thread+0x7d/0xb0 [ 825.975904][T15992] call_usermodehelper_exec_work+0x41/0x160 [ 825.981817][T15992] process_scheduled_works+0x4ce/0x9d0 [ 825.987311][T15992] worker_thread+0x582/0x770 [ 825.991910][T15992] kthread+0x489/0x510 [ 825.995993][T15992] ret_from_fork+0x122/0x1b0 [ 826.000722][T15992] ret_from_fork_asm+0x1a/0x30 [ 826.005689][T15992] [ 826.008034][T15992] read to 0xffffffff8685ff98 of 4 bytes by task 15992 on cpu 1: [ 826.015677][T15992] copy_process+0x17fc/0x2000 [ 826.020396][T15992] kernel_clone+0x16c/0x5c0 [ 826.024925][T15992] user_mode_thread+0x7d/0xb0 [ 826.029647][T15992] call_usermodehelper_exec_work+0x41/0x160 [ 826.035558][T15992] process_scheduled_works+0x4ce/0x9d0 [ 826.041041][T15992] worker_thread+0x582/0x770 [ 826.045638][T15992] kthread+0x489/0x510 [ 826.049719][T15992] ret_from_fork+0x122/0x1b0 [ 826.054322][T15992] ret_from_fork_asm+0x1a/0x30 [ 826.059199][T15992] [ 826.061532][T15992] value changed: 0x80000113 -> 0x80000114 [ 826.067254][T15992] [ 826.069583][T15992] Reported by Kernel Concurrency Sanitizer on: [ 826.075769][T15992] CPU: 1 UID: 0 PID: 15992 Comm: kworker/u8:25 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 826.087413][T15992] Tainted: [W]=WARN [ 826.091224][T15992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 826.101297][T15992] Workqueue: events_unbound call_usermodehelper_exec_work [ 826.108444][T15992] ================================================================== [ 826.152002][T16333] lo speed is unknown, defaulting to 1000 [ 826.245234][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 826.245254][ T29] audit: type=1326 audit(6442452283.238:73006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16315 comm="syz.4.8031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa276cdf6c9 code=0x0