last executing test programs: 1m32.329712769s ago: executing program 32 (id=124): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 1m32.090903552s ago: executing program 33 (id=126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x4881b39f, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000010791048000000000007000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 1m26.88034922s ago: executing program 5 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000913000/0x2000)=nil) 1m26.808467507s ago: executing program 5 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = dup(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', r4, 0x29, 0x4d, 0x9, 0x10000, 0xa, @loopback, @mcast2, 0x20, 0x7, 0xc, 0x59bc}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x0) 1m26.796488609s ago: executing program 5 (id=165): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ad}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0xffffffffffffffe4, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000640)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ad}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") (async) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0xffffffffffffffe4, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000640)='./bus\x00', 0x0, 0x5000, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) (async) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) (async) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) (async) 1m26.282645748s ago: executing program 5 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) (async) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) (async) r7 = memfd_create(&(0x7f0000000400)='/proc/timer_list\x00', 0x6) sendfile(r7, r6, 0x0, 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2}, 0x18) (async) r10 = socket$kcm(0x2, 0x5, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x54, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0x3}, {0x0, 0xb}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x2000}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8008001}, {0x8, 0xb, 0xb7a}]}, 0x54}}, 0x0) syz_usb_disconnect(r8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r12, 0x0, 0x7}, 0x18) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) 1m25.639702419s ago: executing program 5 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x105, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r6, 0x6efc, 0x3900, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7f, 0x372, 0x401, 0x3, 0x3, 0xe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x80000009, 0x800, 0x0, 0x0, 0x2, 0xfffffffffffffffc}}]}}}]}, 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000040)={'ip_vti0\x00', r9, 0x20, 0x8, 0x4bc3, 0x10, {{0x6, 0x4, 0x3, 0xf, 0x18, 0x68, 0x0, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24001844) 1m25.599324643s ago: executing program 34 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x105, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r6, 0x6efc, 0x3900, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7f, 0x372, 0x401, 0x3, 0x3, 0xe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x80000009, 0x800, 0x0, 0x0, 0x2, 0xfffffffffffffffc}}]}}}]}, 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000040)={'ip_vti0\x00', r9, 0x20, 0x8, 0x4bc3, 0x10, {{0x6, 0x4, 0x3, 0xf, 0x18, 0x68, 0x0, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24001844) 58.55244276s ago: executing program 4 (id=477): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 58.431280492s ago: executing program 4 (id=479): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 57.472453493s ago: executing program 4 (id=491): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 56.600239727s ago: executing program 4 (id=495): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file1\x00', 0x4) 56.484426808s ago: executing program 4 (id=499): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x8031, 0xffffffffffffffff, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001200010000000000000000000a03000000004e"], 0x4c}}, 0x20004010) 56.484221618s ago: executing program 4 (id=500): syz_usb_connect$uac1(0x5, 0x93, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x7, 0x24, 0x6, 0x1, 0x4, 0x0, [], 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0x1c}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) 56.449009991s ago: executing program 35 (id=500): syz_usb_connect$uac1(0x5, 0x93, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x7, 0x24, 0x6, 0x1, 0x4, 0x0, [], 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0x1c}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) 35.65651014s ago: executing program 2 (id=694): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) 35.65621943s ago: executing program 2 (id=695): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/mnt\x00') 35.374982017s ago: executing program 2 (id=697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 35.247715969s ago: executing program 2 (id=698): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000500)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x203}}, {@mblk_io_submit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x39) io_setup(0x2, &(0x7f0000002380)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./bus\x00', 0x0, 0x5800, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x100000001, 0xf4a, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000000edf1139c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00, 0xc00}]) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000200)={0x2, 0x2, 0x1000, 0x0, 0x0, 0xfffffe09, 0x0, 0x0}) 34.479521773s ago: executing program 2 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xd8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x5e, 0xf, [@ibss={0x6, 0x2, 0x1000}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0xfd, 0x8, @broadcast, 0x0, 0x5, 0x7}}, @random={0xff, 0x32, "c527c58c93ae48d0c8d4c59cf67c46eb0cc3b4dafe8815c981c05937aafeccd000f9d7fb68511ec9e4672eba19b44fc487eb"}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 34.224414607s ago: executing program 2 (id=707): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd83, 0x8, 0x1, 0x31d}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 33.452004391s ago: executing program 36 (id=707): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd83, 0x8, 0x1, 0x31d}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 28.809159875s ago: executing program 9 (id=758): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 28.688442257s ago: executing program 9 (id=760): ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) 28.688318777s ago: executing program 9 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x44, r1, 0x5, 0x0, 0x1fffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x44}}, 0x0) 28.616828733s ago: executing program 6 (id=762): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x89, 0x7ffc0002}]}) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0xfffb, @loopback}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000640)="5e1d", 0x2}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) 28.590998376s ago: executing program 9 (id=763): socket$inet6(0xa, 0x3, 0x87) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 27.859846276s ago: executing program 9 (id=767): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) 27.71659951s ago: executing program 6 (id=768): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@delchain={0x24, 0x2e, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 27.476283932s ago: executing program 6 (id=770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8004, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 27.317151118s ago: executing program 6 (id=772): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000500)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x203}}, {@mblk_io_submit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x39) io_setup(0x2, &(0x7f0000002380)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./bus\x00', 0x0, 0x5800, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x100000001, 0xf4a, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000000edf1139c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00, 0xc00}]) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000200)={0x2, 0x2, 0x1000, 0x0, 0x0, 0xfffffe09, 0x0, 0x0}) 26.963488471s ago: executing program 6 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) 26.632749833s ago: executing program 6 (id=777): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000700), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) 26.585461918s ago: executing program 37 (id=777): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000700), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) 25.41418927s ago: executing program 9 (id=790): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) 25.342206887s ago: executing program 38 (id=790): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) 3.826147795s ago: executing program 7 (id=1117): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="d79b36f3970147b947475d04046435a1d22b15aa3bd82d35fd378243be387c44e9176e7a2c355c6a20630a33e432974bf5a40689519d1e15e74862b4d709ad2fc47474ce47d95e1724043f1636837b830cb79978abcccdf1e3aeb054", 0x5c, 0x7fff) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)='95', 0x2}], 0x1) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000040)=""/147) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.530149283s ago: executing program 7 (id=1123): r0 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000011f00)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="b4fb0710fe938cc73c62c6ee817e679357e122458a76e19767f5bf80100a615a9b849171affe5258", 0x28}], 0x1, 0x0, 0x0, 0x4000004}}], 0x1, 0x40000) 3.443874061s ago: executing program 7 (id=1124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='dax_insert_mapping\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_emit_ethernet(0x75, &(0x7f0000000040)={@local, @empty, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x0, 0x63, 0x64, 0x0, 0x40, 0x2, 0x0, @remote, @multicast2, {[@rr={0x7, 0x3, 0xf6}, @end]}}, {0x12, 0xcc, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, "41b140c21fc861d677f5594eb679407f152c58f18bc5242f85b992b2cd49173f7e6700b9ee4a7c4958171d1199f9c16d7f81f879277227329dd0073881053f23fc1db1"}}}}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) pselect6(0x40, &(0x7f0000000040)={0xb, 0x6, 0xcb19, 0x2, 0x81, 0x8, 0xfffffffffffffffa, 0x7}, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a"], 0x38}}, 0x40408c0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x9, 0x80) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000002c0)={0xb3, 0xffff6db7, 0x0, "690a9015c2d99575d75849062f5d4e0ea91d40f5fe78d2d9ad89a907d6411ca4255d7735463b0c7c9d06c7362291dc4c34393e63c4e8aed26720f826a7dbd3da0e3ab76c728f701e058d2fac4e0c0e745897039639edac03412404049675c549c601462ab09b63293310c8fdf348ff4e2900ec787d470027321a7b7b06673cbb332daebf7b8990a73831a7b34b77f3418a513b877602b80da7e78b204ac4622b41b2efdfa97b4ec668c6eef747f911fc5c88f8"}) 3.376702908s ago: executing program 7 (id=1126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)={0x54, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xc1d}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8064}, 0x40000) 3.374990008s ago: executing program 7 (id=1127): socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x6, 0x2003) lseek(0xffffffffffffffff, 0x5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socket$kcm(0x1e, 0x1, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 2.292612331s ago: executing program 7 (id=1139): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) mount(&(0x7f0000000040)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='smb3\x00', 0x0, &(0x7f0000000140)='/dev/ptmx\x00') ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 2.09402848s ago: executing program 8 (id=1143): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100802, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) 2.039882925s ago: executing program 8 (id=1144): r0 = socket(0x10, 0x803, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYRESDEC=r10], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$TIOCMBIS(r10, 0x5416, &(0x7f0000000180)) sendfile(r10, r12, 0x0, 0x8) 1.78409721s ago: executing program 1 (id=1145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYRES32, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000810) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x41009432, &(0x7f00000001c0)=0xfe) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='fib6_table_lookup\x00', r10}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011f00)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="b4fb0710fe938cc73c62c6ee817e679357e122458a76e19767f5bf80100a615a9b849171affe5258", 0x28}], 0x1, 0x0, 0x0, 0x4000004}}], 0x1, 0x40000) 1.544418063s ago: executing program 0 (id=1146): unshare(0x24020400) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x42, 0x9, 0x59, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x1, 0x9}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1, 0xfffffffe) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote, r6}, 0x14) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2005, {0x0, 0x0, 0x74, r6, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000380)={@private0, 0x0}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0xa2, 0x5e6, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x40, 0x2, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xd0, 0x3, 0x10, @local, @mcast2, 0x80, 0x80, 0xffff8001, 0x800}}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f00000005c0)={@empty, @remote, @remote, 0x6, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r11}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x2, 0x0, 0x20, @mcast2, @empty, 0x8000, 0x10, 0xe, 0x1}}) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf25090000005000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3100000000000000000008000300000000000800030002000000080003000200000008000100", @ANYRES16=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300030000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100ee2aac0a0e29e94a6a540b06ff964b4f54e9d58908eaab835b59e06c59e8fbe99d6d4b31d49d11de86058e884240", @ANYRES32=r6, @ANYBLOB="140002006970366772657461703000000000000008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\x00', @ANYRES32=r8, @ANYBLOB="140002006d6163766c616e30000000000000000008000100", @ANYRES32=r9, @ANYBLOB="040001802400018008000300030000000800030000000000080003000200000008000100", @ANYRES32=r11, @ANYBLOB="3000018008000300030000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=r0, @ANYBLOB="080003000300000004000180"], 0x120}, 0x1, 0x0, 0x0, 0x9}, 0x4004000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), 0x0}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r13, @ANYBLOB="05002abd7000fddbdf25010000008c0008803000008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000300070000005800008024000100dbffffffffffffffffffffffffff0900000000000000ffffffffffffffffffff3000098028000080060001000a000000140002000000000000000000000000000000000105000300000000000400008008000100", @ANYRES8=r11, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x91) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 1.336448253s ago: executing program 3 (id=1149): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, 0x0, 0x0) read(r0, &(0x7f0000000580)=""/129, 0x81) 1.181971038s ago: executing program 0 (id=1150): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), 0x0}, 0x20) setreuid(0xffffffffffffffff, 0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x84, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.176022308s ago: executing program 1 (id=1151): syz_open_dev$vcsu(&(0x7f00000000c0), 0x3, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") (fail_nth: 15) 1.132173442s ago: executing program 8 (id=1152): setresuid(0x0, 0xee00, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) set_robust_list(&(0x7f0000000400)={0x0, 0x1}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0x6c, r5, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e66bb62e6c4b1fdea8ef24527db69cda"}, @NL80211_ATTR_SSID={0x10, 0x34, @random="ba2e1722591ce5775352783e"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="0f58ac51e83770d77497ac5c5211e76f814a87d2669a838080"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14800}, 0x40000d0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1.116869254s ago: executing program 0 (id=1153): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x9, 0x20000008, 0x8, 0xa000}, 0x50) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) r2 = fsopen(&(0x7f0000000180)='ext4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={0x40000, 0x80, 0x20}, 0x18) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x1, 0x1, 0x7, 0x2859, 0xff}, &(0x7f00000003c0)=0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xde61}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)=ANY=[@ANYBLOB="6802000000050104000000000000000007000002540201"], 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) socket$netlink(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000020000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r12}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32, @ANYBLOB="885e667641dd83e6354083df31e56b60e896c103712cbe77ceccc56964b97a78b241ed9cfe40ea3dc3c439ccaaf75ad05892dc31cc030bbd759e76873c04e3e93a5fe8e78d"], 0x28}, 0x1, 0x0, 0x0, 0xc845}, 0x20000000) 1.018672543s ago: executing program 8 (id=1154): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100802, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) 926.348662ms ago: executing program 8 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x19, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800e07ccce4d0a43c59bf0b0600ff0f00000000000000", @ANYRES8=r1, @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb2d1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x4000850) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000007}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 871.124567ms ago: executing program 1 (id=1156): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) r3 = socket$igmp6(0xa, 0x3, 0x2) pwritev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)="015ab73e1de2890f000203060071fb5deb9d0471", 0x14}], 0x1, 0xee, 0x7a) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r5, {0xfff2, 0x9}, {0x10, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000050000000300000000000d00000000000000000004000000612e5f0000008b00"/61], 0x0, 0x3d, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") truncate(0x0, 0x3000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000e5ffffffffffffff000000000000000000000100000000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="000000000000700000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r8 = syz_io_uring_setup(0x5ef9, &(0x7f0000000280)={0x0, 0xa818, 0x1, 0x3, 0x14}, &(0x7f0000000300)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x7dd7, 0x8029, 0x1, 0x0, 0x0) io_uring_enter(r8, 0xb82, 0xe875, 0x49, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0) 854.545079ms ago: executing program 0 (id=1157): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1a, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffff}, [@jmp={0x5, 0x1, 0xc, 0x0, 0x9, 0x20, 0xffffffffffffffff}, @func, @ldst={0x3, 0x3, 0x6, 0x1, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x140, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 807.727423ms ago: executing program 0 (id=1158): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000001600)='objagg_obj_parent_assign\x00', r0}, 0x18) r2 = io_uring_setup(0x2995, &(0x7f0000000480)={0x0, 0xf9e, 0x4, 0x1, 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f00000030c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYBLOB="11b0a866abcaa01b77ed7cb8a3f1820e18f15e70aca168766a21e24038736e384b516daf835011337f039590bc2224b861e0275dd4d1764b7d31ca2c0db3a2793bb513b7d99fa4c09f38880c91c82ca16a9d2681912e2052cd1ce63dd444bea08c9a1e6e4cb0dde1abd8f1605c69122d6d45beda1f8588ea4a8d8df076b0cba184decb17fc74dc99ab27e7c6d24910177f178e2c168db2fd7bb9ec448e594a2c504d0a2ab7226dce83ab39f845a81b5430cf99bef681698c91ddf18a04ade07acdc9a374f3adb9d62ad7d3bf9ffd2ed3ede24f6a2ebb3228428500deb20edaa99fa94e6518a6622207d2529f107247523802a8747696c1426299676e635e3abd4b6ca3bba58c27d8ffba649fd7a3dc04cab920ee6abe353c29e03bab23d602dfa8ce88da6b5c03e0c2a093f96ad61dc95d07f4a5db438f75a1a6e316df511fc7f1626199218583b69c3ada09617e309f0f85c012f4d1aa288f90a06b23930beca0872c5b6712ba4df2ba7ae329336cc2d04a1110b795838154aa7d654a4ecf81401768a9ae217be845e0f0b847d3baf61529822fe7e33270a72e9e5e721294c3970e154eda5a2b1ca9064ec963db3cecc5ffa18c3c29e3f7e0bfed5c651f1f2e4e162c76dbdbef8408faa377ce073f0f05ca57c6d6b7fe4ee170b79372fce72fdcff86b57c1862e8c875b77163bde4187091c418801cf44be9a23ec5a8c5396618abbbfcb4c18b2afc862f1e7c26c2ae322407483d038527f75260b10b4c0e7702bcc70940d415e1ec9e6faef08ab6bbaf3533360e332bb93976e7cf1f9d89a99da3501548e5b82f3a5d2b509d46f6538ea06bcea556768ea213d503fcf0ae4150b7eb6cdc94ed22160c49445ca5a223ddfff7d9fdcf88246fd4fab257976bb8143efa9460c9c80385e93b39876e06316168743d7b256df819100cfd6bea4df5ac28e15bce8ca4d1a82f3b30269eb4ff61be8fa67dfaacf8399043230e227cc986e36eed3c1a0b8fd0d21f4ac5784d8c730df04cfb63c53a1295ea192899a8c4edd1e2543bb350aa75c83789dc821466476a2b9c422e15dda2b4b946cbaee934667bbb7c3bedeb77f6229b846ec4196a35b26ab17e1e4e1d07ed1034cc5ca08f78d699faf5f7d9affeca11ffae3a1ffc5a5126f6c472fc5767ec7c22bccb345664fe9b4bdc7056338b8b16f74266efc2ab4518c6ab09271bc9a1cb8eaed70441c0315b115acd2f764807b2aca7d9f478fb70a5562a12d0170252b76c1b5f854bf266d9623500b04bc502cd65887461c9bf09e3d5d8f03e69aa68001b8ba736f893c20295c3fedb0933f41a6d7c9c895c7a6d3bd52d79b43461499b5ec3318a55868e1af7b837489eb3b3736c567ae54c1397f32582c09b603a4d37699895f98ea3dcb69f6d774b0b1a024e32ece290bdee6f00c9386d24f8d91426a99c7146ac745db806f76e4bbfe3f17d1d21089aaf340707f8a51fe5cc36e37e00a38df268806228468c6da35617ab65df3b0b6ba65acf9c70b1f445ba20b55e83fc9569fcfbe106a30e275bc4cd1f5ee0dfa1e4a5e729171b68d0bc3fd6ca51bfbc7bcc086d6642cc88373323a2f9c048b571863666c77a9814e0f426c9a8b8bef9b550f635c379e62a40f3bdb57200a8f7d21a3580259de89661bae9c2add2ed03121efe6d101e2bba902078c7d5b99e6282fac498ff91a7ec3a8d7e1c08f8175e2aded91466d918691a9bcb40aa8df804655568547d6717c7415cb772ae65cb04c233f98a0e2c54ef4bc421497587bfd89ec65af6181931c5db70651b27ffba1c3ad73ce6cfcbcf55dc3fcc2715444d475070a76a04033600a366844f27148b3f9dd12092a2f54413b0aeb59e552d4479f11a667571ae24a952a8b5ec02c48d78e4d059783d24d824029fba83573f3b0611fcb166277e49d22405fd7986652a8ec9d64a20a3a552095448b261714fbf84d6e602bad818c0ebd6543b11b32e8ca45500fe0c00c27090ee90f3f1daa866f819b2ab485cb93e5826985baa3294bd732b287f331c717a58ec954675d9a41453f2d4c94485d6ca34e2abe91a9364687666c3bbf6f310ec741bb0d585cfb59ff052a2da4ab9bc042a3a319d1df717a8578ab047ce2ee09d18778d22ba4014ee40658cf2026de404442db56e8a4a9113660e975a1df8addd30a1e4a45a36957c56a69652a922a4f8480a11a116c373077fd2a5f63684fbbc6d49421a37c3936b0624eae5b886c87705af11e803d6bfc5d9727fbe432c111c9cf55dc2b73a35b17009a2bec878075c4648fb79cea901dcac4cbd710e1f2d75b71ee4e9eef6a4863228780a51289c4b71ef207e95e072f34d763f6764e31ea52e8e2d6ce676926a9710fc5bcea9717465d5a8b0a94f5ea5fc6215ad8d4fffc866b4eb657a0813735e57d110a84b38da4b142c6c11c69861901ffb423086525f0168064de3dadb19d9fc9d2a82708c25cc69427a7e3d8daf554149d79dc49fe7441ef7e7101d9f0f7a72bf316d6c1676ffd26150cf8c2d17005e63fa0320989f9465a67c4443e9f39561d32f59aea09917bd1f01ad524df3a63580aab9833a0e13e3d5514ca3bb786dd43afa749d9cc2feca01b4c89d8f972d391e75f3e4dbb8c3c9d05a5e8a9598649fcd75d65d5dd6f70c5b79eab7f452eb4845898e94475c398515228e13f7492c1cf4277612562e191ea233100382e42303490bad466daffc1fa4bfd4c325ebe467ddb5d81308c7f7d744196fab040b4e68697498f282957704902c08e88a65b6f8137cd40b98d2ed6cb264ecdf32a13d34a2f2b34e9d412e93c78edd60861c387622b61a48473e3556a417001166806fdafba92b45e11c135c5d335527a486c807ed92345703f80ddd79a11aa4db123ba3f1f34ddfe66f639419d62973a0800ad528a77fd9eacd81404fc10fa9ab5f5a591cc9236a9a14b5c893a4d162f23d46490fca64758864484581f348644c13021e1b0928543ab43a8cecbbf4dc8ccffcba2c20e3d8e920e678375aa5ef9efca6fcf9ea6e843a8e77dcb0b5b07f334bf8829aefab338c90674a272be6021a761bd2132aac71cec3775b38daf7a46e88090ee8019276be725e0d08a8959489ff5e632521e1ea2fa4bd5599fb53a55c7414f12732ed9f4fc8dd727e5ed509c537b2736a229c028050f0d155a15a916665c9b63ff41a4f990f304f125c6f5053d39377dd869938ed76cc63c38b8e937bfe906b35c9539cb946f2bc0c0683b3cca0e8deb47ae1331f69acf942f3a92d18396a0cb39a3e86b932848f002a9dc1d530a00517592ed239ec36878e329bebc2845bf7839f3ab08f677ef74212e25f12477f8f21ad8e045ccc823f2c9111e873c685c14f89753ecb39879bdcbb4822f48c2e60b42f417c777d858cf57c9e8ee3335d7a2b53990e1e524b97dd5e08fd73d980782d5373e541a0733d9b73cea27a884a55cd87c84934cd8d790f0178863b9cc22783dce56d2e823b2e6866322b2cee9f2cd9fc7e3ec027b118cf84b248f748bc5a7ab5c635fc884ef2950c71cd52f254a69be034f230996e930566a4dd75896812c1ed3a87fe952fd50fe620943c383a702cb699a100e54d117c3336939eca67fadfcebcd531304b82e815ef0e188399fc5a89857a060cd55e5d2fd2dcce556e0cfe66e8dcc7e8c54b1ede8b23de0da7c2bb31a276106f43da9f8f44026b325e57a1afe41ccda3c3db2a973986e5da4f6c21550492fd6aa9fbe04736ecfbae6976b59d685cad2ecea071052fe9a2fe62560834092c49f9bed44d04254aee3d8c7a444fbd3423d31ade3bafc0fa3bb923904292c9fb498ae5f530e4d71ab57da6665ff5dc03fd6f597a3504de04563857ee4766b4ce8d14fa73890d56d127d3ea99164780b9cc380362ce7f03e693efca574a25e953c564d2751d7b0e8c436ec467d1485203b6a8f4a66dfc0a12657e9751135463f9fa5da2377da47aa9939b9b60920da0c946bd3ae70cd0d89207b2bb8e2dcd6e0b9e0ea2c9e1be1eb445caf7041ef68b06caf7de2b00b8c03841980bae0119b681ebf838d7a78d2edff671858449556a90ecddd206652e22c001fc9d9420f44b9d62bf5fd0e1ad4b0627ceb803e6028923fcaa63ecef8a744e2666ba1d11f323228e31bececb0ec60419430479b0360642187f804c07e9f0e7ce4a3410197fff4d9ba1ca5df01e0ed342ba48443dd19625c8ccca128742cd4ae13b3ff6efd434a73c850a35357d26d29184980b1e88e22c4c12a1f0ef279c3a04854d15ecb0559e0b18cfe1c0d77c77bf1467f8aabd0a2af339a26ee8ec1e89148dc391ef9a9187d0432104a7e68245af28a51b2ef9c1927b358b0a9eb0cfa79732c7745c104c61f0f7d60a6bbf18cfdbc40d3544f4026b93ec0137d5528b71a6997193e453e9bb9f388ae391a49535c2aaabcd9c3ba1b5161acd47bec8226b1730e2b13be3f66a753aee4e399bc1c08a68f77d63ddca7cceae4248e6d1bb648ac1ca138d6c7d8f30d109c01bc16742a49573b984f9cfeb0a547cddad5632a512c106bfab52ac17b15b5a20dc4bec5b1a2da1d6bffe9bcdf05f7df5f42aa5f3ae912769994264939072c8aa59bd2ec8f94bb2f4935831e1d60b267c3a6566c9d1f3dba14028b52c250be7eff514718a7891ff9165a9e4797125f70b9081d2b830e3a4aa8a74b954b5d92fd252c007d406bbf42287cc9d8ff629be560885ead87e0617ed81e3c84fa776a81518f581f77a81cbddbbdcc91999f359a5896fa5acbfa61b575a2d47c7cf66621fb3e4dfcfdf6b0143dc37569f6494dff8df9cb7fbb45afbbf21ff359b12b9514beb3971b606b29174bfdbac3d28b021fb1f122ec97346f6244ad2e8688b707723070486012f81c5e90a187247860efd0979dcfaa8dbaf4374d23a7abae3422c246adb35281697454f1416e299f48462bf4eff0bed57b8c2c2ca0a9bfe8d50305fa33f30ccc266950e6c2265603df35eb735cd0b542eb468c3e8b77abf1395d9f18b016a800cd56d8bd7466acdaba658eed8e5fc40d5aca1191165f67f1a3c82e8299e5414737827e27c219981207febb614200be80f46b1e4f7bb73da15005ef4d42e587b5c17113575630f15624866973db42f857cc797b88d117ad43269d4197c06e665c0279ec61565583b0172d44a0bd16df45da3fdf1de6ebe27e3859887de61e2662359752ab8e392b1d09ec3f0fbbbe009e8cd27ed850c3d9c34feba8dba37e1098d807b3a184d3d7c558ca84d7693762c9ba115a93df3d4128011f18fad0e11bd53867ddfb073ef91d5b189eaed8c464c59f94980320b8058d3e3d29c5a10c096554e36269f958769accf9916305fa3ba8d8d7a227aeab2963247b47a799c10afe9a16decbcb7a2841390728647bda67c41139419dd845e1c2905c7343ac540166e76826117ac32e7df97317712cf9202a69ae2c024e0b52af4e92a457343e80433c13b443c289d4ae53b7c99593af7296f38b8525d2a8f352049375cacae3fa7177b59fc61728aecfa2975659a4ebe164865d2293aceb90d153044270b12a574af51c684bd7bfdb450a1dca10dc83a606c3a46f60d8132392879b3dbe57db25a8bb4abe3c94e26d6908da344fd60e3a1b0a9d8d66860140de3b7ac5b31556256989ce4f1e0939238a65f09d02b640ac5174f459edfe50e024a27fc75245e434dffea6e095cdf48a908f4def2ae89d933dc4c7280f888fd12da24f2a01bb660d23c5276843bec3139a52f502e567445ec5f2d163f27367286c73fb5dd627ce5bd148763a92fc0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_clone3(&(0x7f0000001c80)={0x1020000, &(0x7f0000001580), &(0x7f00000017c0), &(0x7f0000001800), {0x40}, &(0x7f0000001840)=""/224, 0xe0, &(0x7f0000001940)=""/18, &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r11, 0x0, 0x5}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f00000000c0), 0x12) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001700)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef0000001c0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32, @ANYBLOB="e65e32ce619b77e1936e8aaa3f8191dc1bca0536e5267f9acb4ede4b40914c4962e79470c429a887a77a2f2a19ed2c8d6a1f29d5eafa7c0aa3275ebffd0be525a5cbb506962d43"], 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000001540)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001640)={0xa0, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x48004) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000010000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRES32=r9, @ANYRES8, @ANYRES16=r11, @ANYRES64=r9, @ANYRES32=r12, @ANYRES64=r5, @ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) setpgid(0x0, 0x0) syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz7GtwjAYBOB7eQlJCsRKsAENm7APFQ1TULEGJWMEQWyYACGk7yvs8y+dLYev+nul4bn+l9M26zk0ZbC8DJmmsdbGdG3OSRbHW/rHpN60X5Vw7ZPNWPvtvB2m7v1wszt97mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DvuAQAA//8yUgpN") 688.727984ms ago: executing program 8 (id=1159): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0/../file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x3c13, 0x4, 0xe, 0x0, 0xc}, 0x14) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) 567.689086ms ago: executing program 0 (id=1160): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0/../file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x3c13, 0x4, 0xe, 0x0, 0xc}, 0x14) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") 523.605ms ago: executing program 3 (id=1161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYRES32, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000810) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x41009432, &(0x7f00000001c0)=0xfe) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='fib6_table_lookup\x00', r10}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011f00)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="b4fb0710fe938cc73c62c6ee817e679357e122458a76e19767f5bf80100a615a9b849171affe5258", 0x28}], 0x1, 0x0, 0x0, 0x4000004}}], 0x1, 0x40000) 369.104936ms ago: executing program 3 (id=1162): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000eb20000000000000", @ANYRESDEC, @ANYBLOB="0020000000000000000000080002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500008000000000"], &(0x7f0000000000)='GPL\x00', 0x4000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010100000000000000000a0000070800000073797a3100000000090001007379893100c71eee19a247a0f7a9756417b9ee22ffffffff000000000c000080083d400000000214000000006452c7a1bf5e70f3d6dbcf6f3131e357fb81dc189a5260846758678359dea1c741c72d9ae2a8ba2164e6f5df42de3c792e6ac0cf6b4263a5fbb192aa13a3aeb8af3381f372f1e9e8533e7fe9b858137f8738c89fcad43bddf204bff1166f018a822610bfceaad054814a241a7a3ed1312ee50e2f8cbd18f2c0006888513db4f137ce54c72376c611fff49c"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000420000000000000000000000002ba1d9d8e73a3c9bd274aa3730ff47ece5e6bdf4150eb65d59464e31f0ee443134dc6c28682c6a6541bb076eaceef972e1a9eef2762348d66f1ca3bd38afa94fe232a9898c2e235204010e0fd25b9d44f63e92ec664c1d7d5541f35cc40c3e95990c6cb82bf6c717cfe3ab1edaf6919262b3ca408a0f24b2ffb9a6477e1256becead469208055788d99fad78ea6e41c3c3ce9ab66e799c8b791693b2954198b23561d65fb58a0000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xb, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32=r7], &(0x7f0000000580)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r1, r10, 0x25, 0x0, @val=@netfilter={0x3, 0x0, 0xd42}}, 0x20) clock_settime(0xfffffff4, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) clock_getres(0x3, &(0x7f0000000180)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r13, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98) splice(r12, 0x0, 0xffffffffffffffff, 0x0, 0xc, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 355.465407ms ago: executing program 1 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x5, 0x8}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) setrlimit(0xb, &(0x7f0000000100)={0xb, 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000000100)={'bridge0\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg(r6, 0x0, 0x0, 0x10020, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffe8a) r9 = socket$inet6(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r10}, 0x10) sendto$inet6(r9, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) sendfile(r1, r1, 0x0, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) 224.036159ms ago: executing program 3 (id=1164): r0 = socket(0x2, 0x5, 0x7) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2, 0x4, 0x3, 0x7, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xf808, 0x8, 0x2, 0x986}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2a}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4008800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x21b50d31, 0x1, 0x7fffffff, 0x4, 0xffffffffffffffff, 0xabd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x4}, 0x50) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000300)={0x8, 0x8, '\x00', 0x0, &(0x7f00000002c0)=[0x0]}) socket$kcm(0x29, 0x7, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x800}, @void, @llc={@llc={0x8e, 0x6, "fafd", "28f9b72e34b380e224dd47b3333ada92a1f24e42d40e97d918f24127dcb8567a419069011a8395bb0191b21b75dd0a1cd03f9bef41a2d8d66285bf9dfcd45ec3eb42445ef90d365835e22dc84076cbbe20c1e28b27d25cd1146ac3946c26f9fa73d1bce986d0c53f30dd23e39c6d3d71b2e9"}}}, 0x7a) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x10001, 0x4) syz_clone(0x800000, &(0x7f0000000400)="ba07130dae9e3fc4cd197e01770c9a06fb8321f7de117153cfb5c944051999b0b7338dd43c77237fcab0c631e27a78aa32a2f694eee27b0208b38ac1379c8d51504c779570c8eb5ac028405c147b0322790749a6f4685cbb6fb5e9a6fffc92d4d163a458c2edad1771e18e879e033f5787f6cb47e28761f6a85d2baf3a4633b2411edb99a9380b3449b23e3d1d7c54abe6a6d30c91ab", 0x96, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="5d59a77119752e8545b8958ed6cd2f00c35f7f6c15120f6f48c4075815c4bd2e7637595a2ffdfc1409f0c557ddfcc92302f5c3fdef7171134bc212bf848a90e8a495c66d3256b965589976bb1b9885fc1b065edddeee8de0643b687189110d60a4c6e892440c3be790495e8b9124131963027ef5e0bb9e7e20cc9724c9a41319c9ab7e2ef9fa23141f220dd3a4378d331fec814477c5ac516c57a1355b8fb0a27b85227cae1a83d70139a176") r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000640), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x60040004) sendmsg$key(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)={0x2, 0x7, 0xcf, 0x6, 0x31, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_sec_ctx={0x11, 0x18, 0xb, 0x6, 0x7f, "b6c5ef6524d96445e8d5f8a2e824e19f7b6570c9bd129f015de333da458ea5c73c8cb3e8e461044bc29f86ea859504ffbe3a53f24306aa40e1a9401c3965b88a44034c294f8b303e3afff647f69a34b4f2d5ce9fa77329d50f35ef88a1adf41523d6dcf3c7a185cce8fc231d650943360356d5a8eca79140bd9ccbcb533177"}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@mcast1, 0x8}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}, @sadb_key={0x18, 0x9, 0x598, 0x0, "cc9b927fe299be42548869c27d15f896c3f9cfb85f23246fbe0cc594e72589c140f0123c002b5f87f0d34b264b1ab11baab2d9e7216e6118cf2b8b79ca2b5bd74144f6cb8892a5e37db25a561cb175bd141888622b207fb1551f4e57748b9a8bb9c72679b5bb240bb28f260db46c7dee2903174c30fc4354df9c8f6f608e14ef9bcb80e6289d437d16394fd776fba3e68edbab441bb0f3c85ab92392ed68fe2143c5dec4467b1643a71724688891c115424c9b"}]}, 0x188}}, 0x4010800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r6, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xb, 0x0, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x8081) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000b00)) sendmsg$nl_route(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@ipv6_deladdr={0x44, 0x15, 0x100, 0x70bd27, 0x25dfdbff, {0xa, 0x78, 0xe2, 0x0, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x504}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20044040) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x16, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_query, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}]}, &(0x7f0000000d40)='syzkaller\x00', 0x4, 0x81, &(0x7f0000000d80)=""/129, 0x41100, 0x38, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000e40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x4, 0xd, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000ec0)=[r3, r3, r3, r3, r7], &(0x7f0000000f00)=[{0x0, 0x2, 0x2, 0x9}, {0x4, 0x3, 0x5, 0x7}], 0x10, 0x800}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001000)=r8, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000001040)={0x2, 'dvmrp1\x00', {0xb}, 0x8}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{0x0, 0x5, 0x7, 0x8, 0x5, 0x4, 0x200, 0x6, 0xd, 0x619a, 0x9, 0x9, 0xc, 0x71ad034b, 0x2}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000001100)={r9, 0x51d}) r10 = socket$inet6(0xa, 0x6, 0x8) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000002100)={0x55, 0x400, 0x4, {0xff, 0x18b2}, {0x7, 0x6}, @const={0xffff, {0x6c, 0x2, 0x61f, 0x80}}}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000002140)={'veth0_vlan\x00', @random="bd68c2fda83d"}) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000002180), 0x8) bind$inet(r0, &(0x7f00000021c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 182.373983ms ago: executing program 1 (id=1165): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100802, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) 174.989424ms ago: executing program 3 (id=1166): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x5, 0x0, 0xffffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x7, 0x7ab0715dca68faf3, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 110.9612ms ago: executing program 1 (id=1167): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (rerun: 64) r2 = syz_open_pts(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0xc0, 0x0, 0x0, 0x5, 0x11308, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r3, 0x1) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) (async) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) (async, rerun: 32) r7 = socket(0x2, 0x800, 0x0) (rerun: 32) fcntl$setflags(r7, 0x2, 0x0) (async) fcntl$notify(r4, 0x402, 0x5) (async) fcntl$notify(r4, 0x402, 0x300) 0s ago: executing program 3 (id=1168): modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = mq_open(0x0, 0x42, 0x1f0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xfc}}, 0x0) r2 = io_uring_setup(0x400792b, &(0x7f0000000600)={0x0, 0x2002, 0x204ea, 0x0, 0x4b1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000013000500000000000000000007000000", @ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x604c050}, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008085}, 0x804) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, 0x0, 0x0, r5) modify_ldt$read(0x0, &(0x7f0000000940)=""/235, 0xf9) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES64=r5, @ANYRESHEX=r4], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff01) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0xe8, 0xe8, 0x210, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0x9}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x2f, 0x3, 0x6, 0x5, 0xc0000000, 0x6, 0x5]}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0xf], 0xfffffffb, 0x18, 0x2}}, @common=@hl={{0x28}, {0x2, 0x7}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x2, 0x6}, {0x0, 0x0, 0x1}}}}, {{@ipv6={@private2, @local, [0xffffffff, 0xff, 0xffffffff], [0xff, 0xff000000, 0xff, 0xff000000], 'veth0\x00', 'wlan0\x00', {}, {0xff}, 0x32, 0x88, 0x4, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, ',I'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffc74}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x105093, 0x13acaf0e, 0x43a1bd79, 0x9, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x10004000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x2, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) kernel console output (not intermixed with test programs): ction closed [ 61.785444][ T5154] vhci_hcd: connection closed [ 61.793800][ T3679] vhci_hcd vhci_hcd.7: stop threads [ 61.803797][ T3679] vhci_hcd vhci_hcd.7: release socket [ 61.809265][ T3679] vhci_hcd vhci_hcd.7: disconnect device [ 61.815254][ T5139] vhci_hcd: connection closed [ 61.879854][ T5176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.975642][ T3679] vhci_hcd vhci_hcd.7: stop threads [ 61.976027][ T5165] vhci_hcd: connection closed [ 61.980926][ T3679] vhci_hcd vhci_hcd.7: release socket [ 61.985675][ T5176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.998820][ T3679] vhci_hcd vhci_hcd.7: disconnect device [ 62.007077][ T3679] vhci_hcd vhci_hcd.7: stop threads [ 62.012322][ T3679] vhci_hcd vhci_hcd.7: release socket [ 62.017794][ T3679] vhci_hcd vhci_hcd.7: disconnect device [ 62.023905][ T3679] vhci_hcd vhci_hcd.7: stop threads [ 62.029236][ T3679] vhci_hcd vhci_hcd.7: release socket [ 62.034766][ T3679] vhci_hcd vhci_hcd.7: disconnect device [ 62.041216][ T3679] vhci_hcd vhci_hcd.7: stop threads [ 62.046570][ T3679] vhci_hcd vhci_hcd.7: release socket [ 62.052039][ T3679] vhci_hcd vhci_hcd.7: disconnect device [ 62.059007][ T3679] vhci_hcd vhci_hcd.7: stop threads [ 62.064240][ T3679] vhci_hcd vhci_hcd.7: release socket [ 62.069702][ T3679] vhci_hcd vhci_hcd.7: disconnect device [ 62.114446][ T3679] vhci_hcd vhci_hcd.7: stop threads [ 62.119783][ T3679] vhci_hcd vhci_hcd.7: release socket [ 62.125247][ T3679] vhci_hcd vhci_hcd.7: disconnect device [ 62.184656][ T5182] EXT4-fs: Ignoring removed orlov option [ 62.190490][ T5182] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.198458][ T5182] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.362: corrupted in-inode xattr: e_value size too large [ 62.212906][ T5182] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.362: couldn't read orphan inode 15 (err -117) [ 62.244071][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.252842][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.458913][ T5196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.467632][ T5196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.001409][ T5210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.051458][ T5210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.487941][ T1037] hid_parser_main: 6 callbacks suppressed [ 63.487958][ T1037] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 63.501220][ T1037] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 63.508746][ T1037] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 63.515840][ T5229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.516527][ T1037] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 63.525628][ T5229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.532232][ T1037] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 63.547417][ T1037] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 63.554881][ T1037] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 63.562283][ T1037] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 63.569771][ T1037] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 63.577203][ T1037] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 63.590906][ T1037] hid-generic 0003:0003:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 63.862448][ T5246] EXT4-fs: Ignoring removed i_version option [ 63.880680][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 63.880693][ T29] audit: type=1400 audit(63.853:2722): avc: denied { read } for pid=5237 comm="syz.2.383" path="/91/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.926747][ T29] audit: type=1400 audit(63.893:2723): avc: denied { ioctl } for pid=5237 comm="syz.2.383" path="socket:[12805]" dev="sockfs" ino=12805 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.974156][ T29] audit: type=1400 audit(63.943:2724): avc: denied { bind } for pid=5237 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.010799][ T5250] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 64.020518][ T5250] EXT4-fs (loop4): invalid journal inode [ 64.027536][ T5250] EXT4-fs (loop4): can't get journal size [ 64.039621][ T5250] EXT4-fs (loop4): 1 truncate cleaned up [ 64.569417][ T5258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.578132][ T5258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.109296][ T29] audit: type=1400 audit(65.083:2725): avc: denied { write } for pid=5259 comm="syz.7.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.150925][ T5263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.159767][ T5263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.658332][ T5267] serio: Serial port ttyS3 [ 65.846206][ T5270] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.444948][ T9] usb 15-1: enqueue for inactive port 0 [ 66.450581][ T9] usb 15-1: enqueue for inactive port 0 [ 66.534849][ T9] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 66.557112][ T5244] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 66.563847][ T5244] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 66.572001][ T5244] vhci_hcd vhci_hcd.0: Device attached [ 66.578295][ T29] audit: type=1400 audit(66.553:2726): avc: denied { create } for pid=5243 comm="syz.6.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 66.618493][ T5244] random: crng reseeded on system resumption [ 66.623618][ T29] audit: type=1400 audit(66.593:2727): avc: denied { append } for pid=5243 comm="syz.6.387" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 66.646997][ T29] audit: type=1400 audit(66.593:2728): avc: denied { open } for pid=5243 comm="syz.6.387" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 66.696400][ T5278] set_capacity_and_notify: 4 callbacks suppressed [ 66.696484][ T5278] loop7: detected capacity change from 0 to 2048 [ 66.739990][ T29] audit: type=1400 audit(66.713:2729): avc: denied { ioctl } for pid=5249 comm="syz.4.388" path="/92/file0/file1" dev="loop4" ino=15 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.764086][ T5276] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1073741833 (only 1 groups) [ 66.775823][ T5278] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 66.791373][ T5278] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 66.803732][ T5278] EXT4-fs (loop7): This should not happen!! Data will be lost [ 66.803732][ T5278] [ 66.813423][ T5278] EXT4-fs (loop7): Total free blocks count 0 [ 66.819527][ T5278] EXT4-fs (loop7): Free/Dirty block details [ 66.825461][ T5278] EXT4-fs (loop7): free_blocks=2415919504 [ 66.831225][ T5278] EXT4-fs (loop7): dirty_blocks=48 [ 66.836398][ T5278] EXT4-fs (loop7): Block reservation details [ 66.842397][ T5278] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 66.848538][ T3483] usb 14-1: SetAddress Request (2) to port 0 [ 66.854572][ T3483] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 67.218797][ T5273] vhci_hcd: connection reset by peer [ 67.235989][ T3686] vhci_hcd vhci_hcd.6: stop threads [ 67.241336][ T3686] vhci_hcd vhci_hcd.6: release socket [ 67.246941][ T3686] vhci_hcd vhci_hcd.6: disconnect device [ 67.417274][ T29] audit: type=1400 audit(67.393:2730): avc: denied { mounton } for pid=5297 comm="syz.1.403" path="/proc/253/task" dev="proc" ino=12911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 67.441116][ T29] audit: type=1400 audit(67.413:2731): avc: denied { associate } for pid=5299 comm="syz.1.403" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.494496][ T5300] loop2: detected capacity change from 0 to 128 [ 67.501453][ T5300] vfat: Unknown parameter '' [ 69.357646][ T5308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.383103][ T5308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.546452][ T5317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.585186][ T5317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.616502][ T5317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.651271][ T5317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.947678][ T5320] loop4: detected capacity change from 0 to 128 [ 70.000674][ T5322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.069261][ T5322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.245352][ T5324] loop7: detected capacity change from 0 to 256 [ 70.268182][ T5324] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.651906][ T23] usb usb16-port1: attempt power cycle [ 70.810476][ T5341] syzkaller0: entered promiscuous mode [ 70.816180][ T5341] syzkaller0: entered allmulticast mode [ 70.889783][ T5349] geneve2: entered promiscuous mode [ 70.891064][ T3679] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.891117][ T3679] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.891150][ T3679] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.891266][ T3679] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.351162][ T29] audit: type=1400 audit(71.223:2732): avc: denied { create } for pid=5355 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 71.802865][ T5361] lo speed is unknown, defaulting to 1000 [ 71.815568][ T5361] wg1 speed is unknown, defaulting to 1000 [ 72.064669][ T3483] usb 14-1: device descriptor read/8, error -110 [ 72.092299][ T5373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.102148][ T5372] loop1: detected capacity change from 0 to 512 [ 72.105285][ T5373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.139845][ T5372] EXT4-fs: Ignoring removed bh option [ 72.169284][ T5372] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 72.184991][ T3483] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 72.223050][ T3483] usb 14-1: enqueue for inactive port 0 [ 72.230560][ T5372] EXT4-fs (loop1): 1 truncate cleaned up [ 72.233349][ T3483] usb 14-1: enqueue for inactive port 0 [ 72.242201][ T3483] usb 14-1: enqueue for inactive port 0 [ 72.255754][ T5372] EXT4-fs mount: 29 callbacks suppressed [ 72.255775][ T5372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.295858][ T29] audit: type=1400 audit(72.273:2733): avc: denied { remove_name } for pid=5371 comm="syz.1.432" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.317791][ T29] audit: type=1400 audit(72.273:2734): avc: denied { unlink } for pid=5371 comm="syz.1.432" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.355695][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.405160][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.436'. [ 72.510702][ T5385] loop1: detected capacity change from 0 to 512 [ 72.526402][ T5385] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.636558][ T5385] EXT4-fs (loop1): 1 orphan inode deleted [ 72.642593][ T5385] EXT4-fs (loop1): 1 truncate cleaned up [ 72.663158][ T5385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.679576][ T5385] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.435: path /89/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 73.257003][ T5385] EXT4-fs (loop1): Remounting filesystem read-only [ 73.309231][ T3555] IPVS: starting estimator thread 0... [ 73.349672][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.386798][ T5406] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 73.388792][ T29] audit: type=1400 audit(73.353:2735): avc: denied { map } for pid=5405 comm="syz.6.441" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.396636][ T5406] vhci_hcd vhci_hcd.2: invalid port number 96 [ 73.424619][ T5406] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 73.496008][ T5401] IPVS: using max 2208 ests per chain, 110400 per kthread [ 73.515332][ T23] usb usb16-port1: unable to enumerate USB device [ 73.955263][ T3483] usb usb14-port1: attempt power cycle [ 74.071456][ T29] audit: type=1400 audit(74.043:2736): avc: denied { read } for pid=5430 comm="syz.2.450" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.094192][ T29] audit: type=1400 audit(74.043:2737): avc: denied { open } for pid=5430 comm="syz.2.450" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.226428][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.281654][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.392809][ T29] audit: type=1400 audit(74.103:2738): avc: denied { ioctl } for pid=5430 comm="syz.2.450" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.421851][ T5442] loop6: detected capacity change from 0 to 1024 [ 74.478083][ T5442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 74.497171][ T29] audit: type=1400 audit(74.473:2739): avc: denied { append } for pid=5441 comm="syz.6.454" path="/52/file1/memory.events.local" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.693909][ T5448] loop4: detected capacity change from 0 to 128 [ 74.933411][ T4088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 74.980680][ T29] audit: type=1400 audit(74.953:2740): avc: denied { connect } for pid=5459 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.010312][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.461'. [ 75.031932][ T29] audit: type=1400 audit(74.973:2741): avc: denied { write } for pid=5459 comm="syz.2.463" path="socket:[13215]" dev="sockfs" ino=13215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.056413][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.064191][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.650911][ T5487] loop7: detected capacity change from 0 to 128 [ 75.742743][ T5498] loop2: detected capacity change from 0 to 512 [ 75.883872][ T5498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.185223][ T3483] usb usb14-port1: unable to enumerate USB device [ 76.232910][ T5511] loop1: detected capacity change from 0 to 512 [ 76.257102][ T5511] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 76.337567][ T5511] EXT4-fs (loop1): failed to open journal device unknown-block(0,8195) -6 [ 76.437043][ T5498] EXT4-fs (loop2): 1 truncate cleaned up [ 76.443282][ T5498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.469174][ T5498] EXT4-fs (loop2): shut down requested (0) [ 76.485258][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 76.485274][ T29] audit: type=1400 audit(76.463:2750): avc: denied { read } for pid=2990 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 76.512694][ T29] audit: type=1400 audit(76.463:2751): avc: denied { search } for pid=2990 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.581008][ T29] audit: type=1400 audit(76.513:2752): avc: denied { search } for pid=2990 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.602634][ T29] audit: type=1400 audit(76.513:2753): avc: denied { add_name } for pid=2990 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.624421][ T29] audit: type=1400 audit(76.513:2754): avc: denied { create } for pid=2990 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.646118][ T29] audit: type=1400 audit(76.513:2755): avc: denied { append open } for pid=2990 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.669628][ T29] audit: type=1400 audit(76.513:2756): avc: denied { getattr } for pid=2990 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.674462][ T5521] loop7: detected capacity change from 0 to 128 [ 76.701981][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.733865][ T5526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.743014][ T5526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.828256][ T5530] loop2: detected capacity change from 0 to 2048 [ 76.858139][ T5534] loop1: detected capacity change from 0 to 512 [ 76.865075][ T5534] EXT4-fs: Ignoring removed i_version option [ 76.873455][ T5534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.897146][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.908353][ T5530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.067978][ T5542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 77.474153][ T29] audit: type=1400 audit(77.123:2757): avc: denied { getopt } for pid=5529 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.494135][ T29] audit: type=1400 audit(77.443:2758): avc: denied { create } for pid=5543 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.565018][ T29] audit: type=1400 audit(77.493:2759): avc: denied { write } for pid=5543 comm="syz.4.491" path="socket:[13365]" dev="sockfs" ino=13365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.595661][ T5539] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 77.675596][ T3483] IPVS: starting estimator thread 0... [ 77.681797][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.691827][ T5547] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 77.764901][ T5548] IPVS: using max 2304 ests per chain, 115200 per kthread [ 77.773183][ T5550] loop1: detected capacity change from 0 to 2048 [ 77.798846][ T5550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.848345][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.901189][ T5555] netlink: 'syz.2.492': attribute type 30 has an invalid length. [ 78.019564][ T5569] loop2: detected capacity change from 0 to 764 [ 78.193780][ T5585] loop2: detected capacity change from 0 to 512 [ 78.215829][ T5585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.556468][ T5585] EXT4-fs (loop2): 1 truncate cleaned up [ 78.563484][ T5585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.640503][ T5581] lo speed is unknown, defaulting to 1000 [ 78.648862][ T5581] wg1 speed is unknown, defaulting to 1000 [ 78.711277][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.847673][ T5581] chnl_net:caif_netlink_parms(): no params data found [ 79.069753][ T5583] Set syz1 is full, maxelem 65536 reached [ 79.132484][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.139984][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.172577][ T5581] bridge_slave_0: entered allmulticast mode [ 79.179788][ T5616] /dev/nullb0: Can't lookup blockdev [ 79.186864][ T5581] bridge_slave_0: entered promiscuous mode [ 79.194447][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.201746][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.243506][ T5581] bridge_slave_1: entered allmulticast mode [ 79.251894][ T5581] bridge_slave_1: entered promiscuous mode [ 79.282538][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.315057][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.441919][ T5581] team0: Port device team_slave_0 added [ 79.473069][ T5581] team0: Port device team_slave_1 added [ 79.538176][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.577695][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.601938][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.609032][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.634981][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.646941][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.653926][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.679914][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.759957][ T5581] hsr_slave_0: entered promiscuous mode [ 79.766505][ T5581] hsr_slave_1: entered promiscuous mode [ 79.772560][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 79.778362][ T5581] Cannot create hsr debugfs directory [ 79.886576][ T5581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 79.896365][ T5581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 79.904952][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.908701][ T5581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 79.922506][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.926064][ T5581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 79.953503][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.960796][ T5581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.968479][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.975639][ T5581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.024145][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.037928][ T3681] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.046572][ T3681] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.065414][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.089925][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.097364][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.117710][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.125114][ T3676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.379724][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.589411][ T5652] loop1: detected capacity change from 0 to 8192 [ 80.746890][ T5670] tap0: tun_chr_ioctl cmd 35111 [ 80.808374][ T5581] veth0_vlan: entered promiscuous mode [ 80.844989][ T5581] veth1_vlan: entered promiscuous mode [ 80.984569][ T5677] batadv_slave_0: entered promiscuous mode [ 81.001619][ T5581] veth0_macvtap: entered promiscuous mode [ 81.011520][ T5581] veth1_macvtap: entered promiscuous mode [ 81.028804][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.044429][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.874459][ T3691] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.900757][ T5686] loop6: detected capacity change from 0 to 256 [ 81.908901][ T3691] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.946562][ T5686] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.960270][ T3691] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.987565][ T3691] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.033771][ T5691] loop1: detected capacity change from 0 to 512 [ 82.051852][ T5693] loop8: detected capacity change from 0 to 1024 [ 82.151580][ T5691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.167753][ T5698] loop2: detected capacity change from 0 to 512 [ 82.177361][ T5693] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 82.192360][ T5698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.260963][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.297641][ T5693] EXT4-fs error (device loop8): ext4_search_dir:1474: inode #12: block 7: comm syz.8.504: bad entry in directory: inode out of bounds - offset=0, inode=1073741837, rec_len=16, size=56 fake=0 [ 82.320284][ T5698] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.532: corrupted inode contents [ 82.333722][ T5698] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.532: mark_inode_dirty error [ 82.376495][ T5581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 82.387702][ T5698] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.532: corrupted inode contents [ 82.401885][ T5698] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.532: mark_inode_dirty error [ 82.417297][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 82.417327][ T29] audit: type=1400 audit(82.393:2771): avc: denied { add_name } for pid=5697 comm="syz.2.532" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.479647][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.727135][ T5716] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 82.734871][ T5716] netlink: 'syz.2.538': attribute type 2 has an invalid length. [ 82.766429][ T29] audit: type=1400 audit(82.743:2772): avc: denied { bind } for pid=5719 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.078724][ T5733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.090581][ T5734] IPVS: sh: FWM 3 0x00000003 - no destination available [ 83.097908][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 83.132826][ T3555] IPVS: starting estimator thread 0... [ 83.148433][ T5733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.203262][ T29] audit: type=1400 audit(83.173:2773): avc: denied { connect } for pid=5736 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.265086][ T5735] IPVS: using max 2208 ests per chain, 110400 per kthread [ 83.346724][ T29] audit: type=1400 audit(83.193:2774): avc: denied { write } for pid=5736 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.925914][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.956788][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.045729][ T5762] sch_tbf: burst 22 is lower than device lo mtu (1550) ! [ 84.879728][ T5776] loop2: detected capacity change from 0 to 256 [ 84.991699][ T5776] FAT-fs (loop2): IO charset iso8859-5 not found [ 85.333126][ T5790] lo speed is unknown, defaulting to 1000 [ 85.339243][ T5790] wg1 speed is unknown, defaulting to 1000 [ 86.474320][ T5809] rtc_cmos 00:00: Alarms can be up to one day in the future [ 86.606803][ T5818] netlink: 16 bytes leftover after parsing attributes in process `syz.6.569'. [ 86.867565][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.885082][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.906458][ T5815] lo speed is unknown, defaulting to 1000 [ 86.913770][ T5815] wg1 speed is unknown, defaulting to 1000 [ 87.583036][ T5838] loop2: detected capacity change from 0 to 512 [ 87.607709][ T5838] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.620153][ T5838] EXT4-fs (loop2): 1 truncate cleaned up [ 87.626834][ T5838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.643311][ T29] audit: type=1400 audit(87.123:2775): avc: denied { bind } for pid=5829 comm="syz.8.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.666497][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.695076][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.877717][ T29] audit: type=1400 audit(87.853:2776): avc: denied { setopt } for pid=5842 comm="syz.7.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.326189][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.334930][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.637411][ T29] audit: type=1326 audit(88.613:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 88.661026][ T29] audit: type=1326 audit(88.613:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 88.684451][ T29] audit: type=1326 audit(88.613:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 88.708581][ T29] audit: type=1326 audit(88.613:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 88.731314][ T29] audit: type=1326 audit(88.633:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 88.753965][ T29] audit: type=1326 audit(88.633:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 88.776707][ T29] audit: type=1326 audit(88.633:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 88.799428][ T29] audit: type=1326 audit(88.663:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 88.898830][ T5856] syzkaller0: entered promiscuous mode [ 88.904628][ T5856] syzkaller0: entered allmulticast mode [ 88.997533][ T5861] syzkaller0: entered promiscuous mode [ 89.003229][ T5861] syzkaller0: entered allmulticast mode [ 89.320247][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.406783][ T5865] syzkaller0: entered promiscuous mode [ 89.412320][ T5865] syzkaller0: entered allmulticast mode [ 89.526321][ T9] IPVS: starting estimator thread 0... [ 89.588452][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 89.606010][ T5886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.618007][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.626706][ T5881] IPVS: using max 2448 ests per chain, 122400 per kthread [ 89.634665][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.642682][ T5886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.667617][ T5882] netlink: 32 bytes leftover after parsing attributes in process `syz.7.594'. [ 89.676589][ T5882] tipc: Invalid UDP bearer configuration [ 89.676598][ T5882] tipc: Enabling of bearer rejected, failed to enable media [ 92.880501][ T5983] netlink: 104 bytes leftover after parsing attributes in process `syz.1.629'. [ 92.966777][ T5996] netlink: 'syz.1.633': attribute type 10 has an invalid length. [ 93.006394][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.037226][ T5996] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 93.052264][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.089663][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.118565][ T6003] bond0: (slave batadv0): Releasing backup interface [ 93.382004][ T6018] hub 1-0:1.0: USB hub found [ 93.387080][ T6018] hub 1-0:1.0: 8 ports detected [ 94.064388][ T6033] loop8: detected capacity change from 0 to 164 [ 94.082700][ T6033] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.258389][ T6041] loop6: detected capacity change from 0 to 1024 [ 94.404013][ T6041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.487309][ T3689] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm kworker/u8:25: lblock 3 mapped to illegal pblock 3 (length 3) [ 94.509435][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 94.509448][ T29] audit: type=1400 audit(94.483:2853): avc: denied { getopt } for pid=6042 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.538398][ T3689] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 94.551229][ T3689] EXT4-fs (loop6): This should not happen!! Data will be lost [ 94.551229][ T3689] [ 94.564230][ T3689] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:25: lblock 8 mapped to illegal pblock 8 (length 8) [ 94.581076][ T3689] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 94.593426][ T3689] EXT4-fs (loop6): This should not happen!! Data will be lost [ 94.593426][ T3689] [ 94.607096][ T4088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.342411][ T6052] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.352444][ T6052] block device autoloading is deprecated and will be removed. [ 95.455170][ T29] audit: type=1400 audit(95.433:2854): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.492481][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.519983][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.156277][ T29] audit: type=1400 audit(96.133:2855): avc: denied { write } for pid=6083 comm="syz.1.663" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.179964][ T6084] random: crng reseeded on system resumption [ 96.313794][ T6087] x_tables: ip_tables: ah match: only valid for protocol 51 [ 96.334731][ T29] audit: type=1400 audit(96.223:2856): avc: denied { firmware_load } for pid=6083 comm="syz.1.663" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 96.726433][ T29] audit: type=1400 audit(96.703:2857): avc: denied { bind } for pid=6094 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.745926][ T6099] atomic_op ffff88810f37a528 conn xmit_atomic 0000000000000000 [ 96.786019][ T29] audit: type=1400 audit(96.723:2858): avc: denied { write } for pid=6094 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.805371][ T29] audit: type=1400 audit(96.733:2859): avc: denied { write } for pid=6101 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 97.953612][ T29] audit: type=1400 audit(97.923:2860): avc: denied { name_bind } for pid=6135 comm="syz.2.683" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 98.105999][ T6141] loop8: detected capacity change from 0 to 512 [ 98.128656][ T6141] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 98.243875][ T29] audit: type=1400 audit(98.213:2861): avc: denied { write } for pid=6142 comm="syz.6.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.293377][ T6141] EXT4-fs (loop8): 1 truncate cleaned up [ 98.342076][ T6141] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.404013][ T6149] netlink: 160 bytes leftover after parsing attributes in process `syz.6.688'. [ 98.420315][ T5581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.457687][ T6151] bond1: (slave dummy0): Device is not bonding slave [ 98.464399][ T6151] bond1: option active_slave: invalid value (dummy0) [ 98.476731][ T6151] bond1 (unregistering): Released all slaves [ 98.556021][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.565230][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.035217][ T6167] loop2: detected capacity change from 0 to 32768 [ 99.076365][ T6167] loop2: p1 p3 < > [ 99.208683][ T6173] loop2: detected capacity change from 0 to 512 [ 99.216032][ T6173] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.222986][ T6173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.234918][ T6173] EXT4-fs (loop2): 1 truncate cleaned up [ 99.241871][ T6173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.261714][ T29] audit: type=1400 audit(99.233:2862): avc: denied { mounton } for pid=6172 comm="syz.2.698" path="/149/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.314843][ T6173] loop2: detected capacity change from 512 to 0 [ 99.322194][ T6179] EXT4-fs error (device loop2): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.2.698: unable to read itable block [ 99.335639][ T6179] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 99.344214][ T6179] EXT4-fs (loop2): I/O error while writing superblock [ 99.351352][ T6179] EXT4-fs error (device loop2): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.2.698: unable to read itable block [ 99.364733][ T6179] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 99.374052][ T6180] EXT4-fs (loop2): shut down requested (2) [ 99.396770][ T6179] EXT4-fs (loop2): I/O error while writing superblock [ 99.404033][ C1] I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 99.652502][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.6.701'. [ 99.687788][ T3321] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 99.791149][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.197133][ T3692] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.289387][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.312708][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.328582][ T3692] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.397602][ T3692] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.442889][ T6213] lo speed is unknown, defaulting to 1000 [ 101.453827][ T6213] wg1 speed is unknown, defaulting to 1000 [ 101.494971][ T6234] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 101.501636][ T6234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.509612][ T6234] vhci_hcd vhci_hcd.0: Device attached [ 101.521219][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.530007][ T6238] loop1: detected capacity change from 0 to 256 [ 101.539129][ T3692] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.550629][ T6238] FAT-fs (loop1): codepage cp855 not found [ 101.557455][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.565620][ T6235] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 101.575978][ T3693] vhci_hcd vhci_hcd.8: stop threads [ 101.581215][ T3693] vhci_hcd vhci_hcd.8: release socket [ 101.586710][ T3693] vhci_hcd vhci_hcd.8: disconnect device [ 101.596107][ T6213] chnl_net:caif_netlink_parms(): no params data found [ 101.662044][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.669215][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.677326][ T6213] bridge_slave_0: entered allmulticast mode [ 101.683795][ T6213] bridge_slave_0: entered promiscuous mode [ 101.700141][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.707260][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.714571][ T6213] bridge_slave_1: entered allmulticast mode [ 101.721818][ T6213] bridge_slave_1: entered promiscuous mode [ 101.798032][ T3692] bond0 (unregistering): Released all slaves [ 101.808835][ T3692] bond1 (unregistering): Released all slaves [ 101.835179][ T6213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.856449][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 101.856467][ T29] audit: type=1400 audit(101.833:2864): avc: denied { getopt } for pid=6241 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.900743][ T6213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.965710][ T6213] team0: Port device team_slave_0 added [ 101.974611][ T6213] team0: Port device team_slave_1 added [ 102.016789][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.023871][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.049943][ T6213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.162455][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.179325][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.192720][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.199830][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.226065][ T6213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.268109][ T6213] hsr_slave_0: entered promiscuous mode [ 102.274484][ T6213] hsr_slave_1: entered promiscuous mode [ 102.280977][ T6213] debugfs: 'hsr0' already exists in 'hsr' [ 102.286809][ T6213] Cannot create hsr debugfs directory [ 102.476535][ T3692] hsr_slave_0: left promiscuous mode [ 102.482469][ T3692] hsr_slave_1: left promiscuous mode [ 102.488946][ T3692] veth1_macvtap: left promiscuous mode [ 102.494525][ T3692] veth0_macvtap: left promiscuous mode [ 102.500392][ T3692] veth1_vlan: left promiscuous mode [ 102.505824][ T3692] veth0_vlan: left promiscuous mode [ 102.539721][ T6266] netlink: 'syz.1.726': attribute type 21 has an invalid length. [ 102.658240][ T6266] netlink: 156 bytes leftover after parsing attributes in process `syz.1.726'. [ 102.708255][ T6213] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 102.717323][ T6213] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 102.726404][ T6213] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 102.738144][ T6213] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 102.758307][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.767333][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.818930][ T6213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.833260][ T6213] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.844096][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.851225][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.860497][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.870092][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.893791][ T6213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.904259][ T6213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.919577][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.926745][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.010182][ T6213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.283940][ T6213] veth0_vlan: entered promiscuous mode [ 103.296153][ T6213] veth1_vlan: entered promiscuous mode [ 103.343879][ T6213] veth0_macvtap: entered promiscuous mode [ 103.356332][ T6213] veth1_macvtap: entered promiscuous mode [ 103.447976][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.542539][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.653544][ T6314] loop8: detected capacity change from 0 to 128 [ 103.692355][ T3692] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.844134][ T3692] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.192637][ T3692] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.350742][ T6322] loop9: detected capacity change from 0 to 512 [ 104.354971][ T3692] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.408717][ T29] audit: type=1400 audit(104.383:2865): avc: denied { write } for pid=6316 comm="syz.8.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.437281][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.446003][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.470817][ T6322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.487738][ T29] audit: type=1400 audit(104.463:2866): avc: denied { setattr } for pid=6321 comm="syz.9.709" name="cgroup.controllers" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.567705][ T6213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.982694][ T6337] syzkaller0: entered promiscuous mode [ 104.988571][ T6337] syzkaller0: entered allmulticast mode [ 105.110803][ T6350] syzkaller0: entered promiscuous mode [ 105.116445][ T6350] syzkaller0: entered allmulticast mode [ 105.250359][ T6356] loop9: detected capacity change from 0 to 512 [ 105.272342][ T6356] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.302464][ T6356] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.752: corrupted inode contents [ 105.315131][ T6356] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz.9.752: mark_inode_dirty error [ 105.331620][ T6356] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.752: corrupted inode contents [ 105.346563][ T6356] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.752: mark_inode_dirty error [ 105.363367][ T29] audit: type=1400 audit(105.333:2867): avc: denied { rename } for pid=6355 comm="syz.9.752" name="file0" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 105.365167][ T6356] EXT4-fs error (device loop9): ext4_get_first_dir_block:3538: inode #18: comm syz.9.752: directory missing '.' [ 105.384686][ T29] audit: type=1400 audit(105.333:2868): avc: denied { reparent } for pid=6355 comm="syz.9.752" name="file0" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 105.384718][ T29] audit: type=1400 audit(105.333:2869): avc: denied { remove_name } for pid=6355 comm="syz.9.752" name="file0" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 105.384765][ T29] audit: type=1400 audit(105.333:2870): avc: denied { rmdir } for pid=6355 comm="syz.9.752" name="file0" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 105.427221][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.754'. [ 105.509954][ T6213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.523033][ T6366] loop8: detected capacity change from 0 to 128 [ 105.609879][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 105.623415][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.9.757'. [ 105.625215][ T6369] bridge_slave_1: left allmulticast mode [ 105.638478][ T6369] bridge_slave_1: left promiscuous mode [ 105.644332][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.681722][ T6369] bridge_slave_0: left promiscuous mode [ 105.687791][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.716209][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.755096][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.899053][ T29] audit: type=1326 audit(105.873:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.6.762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc88387f749 code=0x0 [ 105.938587][ T6385] loop9: detected capacity change from 0 to 512 [ 105.945469][ T6385] EXT4-fs: Ignoring removed oldalloc option [ 105.954852][ T6385] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 105.964167][ T29] audit: type=1400 audit(105.923:2872): avc: denied { bind } for pid=6382 comm="syz.6.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.997318][ T6385] EXT4-fs (loop9): 1 truncate cleaned up [ 106.003579][ T6385] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.063088][ T6392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.765'. [ 106.157936][ T6385] loop9: detected capacity change from 512 to 64 [ 106.177548][ T6385] bio_check_eod: 105 callbacks suppressed [ 106.177599][ T6385] syz.9.763: attempt to access beyond end of device [ 106.177599][ T6385] loop9: rw=2049, sector=74, nr_sectors = 4 limit=64 [ 106.197183][ T6385] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 37) [ 106.208661][ T6385] Buffer I/O error on device loop9, logical block 37 [ 106.215626][ T6385] Buffer I/O error on device loop9, logical block 38 [ 106.224626][ T6385] syz.9.763: attempt to access beyond end of device [ 106.224626][ T6385] loop9: rw=2049, sector=86, nr_sectors = 8 limit=64 [ 106.238327][ T6385] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 43) [ 106.250079][ T6385] Buffer I/O error on device loop9, logical block 43 [ 106.256800][ T6385] Buffer I/O error on device loop9, logical block 44 [ 106.263513][ T6385] Buffer I/O error on device loop9, logical block 45 [ 106.270213][ T6385] Buffer I/O error on device loop9, logical block 46 [ 106.357156][ T6385] syz.9.763: attempt to access beyond end of device [ 106.357156][ T6385] loop9: rw=2049, sector=102, nr_sectors = 8 limit=64 [ 106.370853][ T6385] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 51) [ 106.382453][ T6385] Buffer I/O error on device loop9, logical block 51 [ 106.389138][ T6385] Buffer I/O error on device loop9, logical block 52 [ 106.395813][ T6385] Buffer I/O error on device loop9, logical block 53 [ 106.402528][ T6385] Buffer I/O error on device loop9, logical block 54 [ 106.627590][ T29] audit: type=1400 audit(106.603:2873): avc: denied { unmount } for pid=6213 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 106.647436][ T6213] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -12) [ 106.721871][ T6213] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 106.737455][ T6213] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 106.791672][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.6.768'. [ 106.984350][ T6403] loop7: detected capacity change from 0 to 128 [ 107.048518][ T29] audit: type=1400 audit(106.623:2874): avc: denied { unlink } for pid=6213 comm="syz-executor" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.069898][ T29] audit: type=1400 audit(106.693:2875): avc: denied { rmdir } for pid=6213 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.143723][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.152523][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.176646][ T6410] loop6: detected capacity change from 0 to 512 [ 107.183224][ T6410] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.190050][ T6410] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 107.201556][ T6410] EXT4-fs (loop6): 1 truncate cleaned up [ 107.207981][ T6410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.274881][ T6410] loop6: detected capacity change from 512 to 0 [ 107.275851][ T6412] EXT4-fs error (device loop6): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.6.772: unable to read itable block [ 107.293922][ T6412] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 107.302218][ T6412] EXT4-fs (loop6): I/O error while writing superblock [ 107.309163][ T6412] EXT4-fs error (device loop6): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.6.772: unable to read itable block [ 107.321920][ T6412] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 107.332826][ T6412] EXT4-fs (loop6): I/O error while writing superblock [ 107.339667][ T6412] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: IO failure [ 107.348866][ T6412] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 107.357170][ T6412] EXT4-fs (loop6): I/O error while writing superblock [ 107.364004][ T6412] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #18: comm syz.6.772: mark_inode_dirty error [ 107.375424][ T6412] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 107.383717][ T6412] EXT4-fs (loop6): I/O error while writing superblock [ 107.414893][ T6410] EXT4-fs (loop6): shut down requested (2) [ 107.524337][ T4088] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 107.566229][ T4088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.675344][ T29] audit: type=1400 audit(107.653:2876): avc: denied { write } for pid=6413 comm="syz.8.773" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.839104][ T3691] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.918038][ T3691] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.988527][ T3691] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.048800][ T3691] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.148663][ T3691] bridge_slave_1: left allmulticast mode [ 108.154876][ T3691] bridge_slave_1: left promiscuous mode [ 108.160869][ T3691] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.190573][ T3691] bridge_slave_0: left promiscuous mode [ 108.196612][ T3691] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.329608][ T3691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.346032][ T3691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.363593][ T3691] bond0 (unregistering): Released all slaves [ 108.524161][ T3691] veth1_macvtap: left promiscuous mode [ 108.530142][ T3691] veth0_macvtap: left promiscuous mode [ 108.536022][ T3691] veth1_vlan: left promiscuous mode [ 108.541487][ T3691] veth0_vlan: left promiscuous mode [ 108.657923][ T3691] team0 (unregistering): Port device team_slave_1 removed [ 108.694021][ T3691] team0 (unregistering): Port device team_slave_0 removed [ 108.827609][ T6213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.843254][ T6451] loop1: detected capacity change from 0 to 512 [ 108.886340][ T6451] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.960370][ T6451] EXT4-fs (loop1): 1 truncate cleaned up [ 108.996726][ T6451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.024169][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 109.087857][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.150836][ T3691] IPVS: stop unused estimator thread 0... [ 109.160166][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.167630][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.176170][ T6424] bridge_slave_0: entered allmulticast mode [ 109.182803][ T6424] bridge_slave_0: entered promiscuous mode [ 109.197501][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.204601][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.212848][ T6424] bridge_slave_1: entered allmulticast mode [ 109.226776][ T6424] bridge_slave_1: entered promiscuous mode [ 109.357076][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.375637][ T3691] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.388539][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.737444][ T3691] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.763150][ T6424] team0: Port device team_slave_0 added [ 109.781396][ T6424] team0: Port device team_slave_1 added [ 109.837094][ T3691] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.902919][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.910010][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.936003][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.997399][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.004817][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.031641][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.049047][ T3691] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.078480][ T6424] hsr_slave_0: entered promiscuous mode [ 110.089469][ T6424] hsr_slave_1: entered promiscuous mode [ 110.095525][ T6424] debugfs: 'hsr0' already exists in 'hsr' [ 110.101272][ T6424] Cannot create hsr debugfs directory [ 110.262385][ T6503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6503 comm=syz.8.801 [ 110.333790][ T29] audit: type=1400 audit(110.303:2877): avc: denied { write } for pid=6513 comm="syz.7.805" name="file0" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.377707][ T29] audit: type=1400 audit(110.333:2878): avc: denied { ioctl } for pid=6513 comm="syz.7.805" path="/117/file0" dev="tmpfs" ino=624 ioctlcmd=0x4c07 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.416645][ T6481] chnl_net:caif_netlink_parms(): no params data found [ 110.458389][ T3691] bridge_slave_1: left allmulticast mode [ 110.464390][ T3691] bridge_slave_1: left promiscuous mode [ 110.470538][ T3691] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.484986][ T3691] bridge_slave_0: left allmulticast mode [ 110.490901][ T3691] bridge_slave_0: left promiscuous mode [ 110.496824][ T3691] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.776567][ T3691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.788166][ T3691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.799244][ T3691] bond0 (unregistering): Released all slaves [ 110.986285][ T6481] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.993784][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.047269][ T6481] bridge_slave_0: entered allmulticast mode [ 111.074550][ T6481] bridge_slave_0: entered promiscuous mode [ 111.091414][ T6548] loop1: detected capacity change from 0 to 1024 [ 111.103469][ T3691] hsr_slave_0: left promiscuous mode [ 111.110982][ T3691] hsr_slave_1: left promiscuous mode [ 111.119029][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.126725][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.137931][ T6548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.155684][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.163323][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.174519][ T6548] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.815: Allocating blocks 385-513 which overlap fs metadata [ 111.194037][ T3691] veth1_macvtap: left promiscuous mode [ 111.202495][ T3691] veth0_macvtap: left promiscuous mode [ 111.208814][ T6548] EXT4-fs (loop1): pa ffff8881060ff9a0: logic 16, phys. 129, len 24 [ 111.217308][ T6548] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 111.228470][ T3691] veth1_vlan: left promiscuous mode [ 111.234088][ T3691] veth0_vlan: left promiscuous mode [ 111.334658][ T6548] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 1 [ 111.346969][ T6548] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.346969][ T6548] [ 111.365823][ T6553] netlink: 128 bytes leftover after parsing attributes in process `syz.7.816'. [ 111.386092][ T29] audit: type=1400 audit(111.363:2879): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 111.411043][ T3317] Trying to write to read-only block-device loop1 [ 111.418458][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.440199][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.449427][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.466184][ T3691] team0 (unregistering): Port device team_slave_1 removed [ 111.476588][ T3691] team0 (unregistering): Port device team_slave_0 removed [ 111.534410][ T6481] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.541529][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.549009][ T6481] bridge_slave_1: entered allmulticast mode [ 111.557648][ T6481] bridge_slave_1: entered promiscuous mode [ 111.581610][ T6481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.592719][ T6481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.627629][ T6481] team0: Port device team_slave_0 added [ 111.639677][ T6481] team0: Port device team_slave_1 added [ 111.664535][ T6567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.673356][ T6567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.675893][ T6481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.688526][ T6481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.715539][ T6481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.727283][ T6481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.734496][ T6481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.761248][ T6481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.826865][ T6481] hsr_slave_0: entered promiscuous mode [ 111.833012][ T6481] hsr_slave_1: entered promiscuous mode [ 111.839172][ T6481] debugfs: 'hsr0' already exists in 'hsr' [ 111.845104][ T6481] Cannot create hsr debugfs directory [ 111.901337][ T6424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.916234][ T6424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.929004][ T6424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.940277][ T6424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.118718][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.146219][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.185423][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.192749][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.238742][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.246108][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.631205][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.680487][ T6481] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.691671][ T6481] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.703612][ T6481] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.719864][ T6481] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.761375][ T6424] veth0_vlan: entered promiscuous mode [ 112.777595][ T6424] veth1_vlan: entered promiscuous mode [ 112.810791][ T6424] veth0_macvtap: entered promiscuous mode [ 112.825158][ T6424] veth1_macvtap: entered promiscuous mode [ 112.901525][ T6481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.914218][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.930996][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.942149][ T6481] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.952148][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.959249][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.986944][ T3676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.000827][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.008001][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.027785][ T6610] loop1: detected capacity change from 0 to 8192 [ 113.037200][ T3676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.047304][ T3676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.189005][ T3676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.200382][ T6481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.211041][ T6481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.200809][ T29] audit: type=1400 audit(113.273:2880): avc: denied { read } for pid=6615 comm="syz.8.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.804724][ T6481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.000948][ T6481] veth0_vlan: entered promiscuous mode [ 115.019962][ T6481] veth1_vlan: entered promiscuous mode [ 115.052787][ T6481] veth0_macvtap: entered promiscuous mode [ 115.062988][ T6481] veth1_macvtap: entered promiscuous mode [ 115.080797][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.096344][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.110721][ T3689] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.146058][ T3689] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.178865][ T3689] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.197045][ T6653] netlink: 'syz.0.839': attribute type 12 has an invalid length. [ 115.210020][ T3689] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.373220][ T6677] loop1: detected capacity change from 0 to 512 [ 115.477016][ T6693] loop1: detected capacity change from 0 to 128 [ 115.488568][ T6695] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 115.531382][ T6698] loop3: detected capacity change from 0 to 1024 [ 115.538863][ T6698] EXT4-fs: Ignoring removed orlov option [ 115.566114][ T6698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.583098][ T6704] loop1: detected capacity change from 0 to 512 [ 115.600300][ T29] audit: type=1400 audit(115.563:2881): avc: denied { setattr } for pid=6697 comm="syz.3.858" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.622059][ T29] audit: type=1400 audit(115.563:2882): avc: denied { rename } for pid=6697 comm="syz.3.858" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.643763][ T29] audit: type=1400 audit(115.573:2883): avc: denied { setopt } for pid=6697 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.678297][ T29] audit: type=1400 audit(115.653:2884): avc: denied { setopt } for pid=6706 comm="syz.8.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.698574][ T29] audit: type=1326 audit(115.673:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.8.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5433fdf749 code=0x7ffc0000 [ 115.727409][ T29] audit: type=1326 audit(115.673:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.8.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f5433fdf749 code=0x7ffc0000 [ 115.751011][ T29] audit: type=1326 audit(115.673:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.8.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5433fdf749 code=0x7ffc0000 [ 115.774471][ T29] audit: type=1326 audit(115.673:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.8.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5433fdf749 code=0x7ffc0000 [ 115.797706][ T29] audit: type=1326 audit(115.703:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.8.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5433fdf749 code=0x7ffc0000 [ 115.847238][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.924528][ T6729] loop1: detected capacity change from 0 to 512 [ 115.982166][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'. [ 115.995149][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 116.004680][ T3534] Bluetooth: hci0: sending frame failed (-49) [ 116.007904][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.011229][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 116.030380][ T6737] bridge_slave_1 (unregistering): left allmulticast mode [ 116.037606][ T6737] bridge_slave_1 (unregistering): left promiscuous mode [ 116.044649][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.159842][ T6754] loop8: detected capacity change from 0 to 256 [ 116.174549][ T6754] FAT-fs (loop8): Directory bread(block 64) failed [ 116.184975][ T6754] FAT-fs (loop8): Directory bread(block 65) failed [ 116.193342][ T6754] FAT-fs (loop8): Directory bread(block 66) failed [ 116.217097][ T6754] FAT-fs (loop8): Directory bread(block 67) failed [ 116.223655][ T6754] FAT-fs (loop8): Directory bread(block 68) failed [ 116.238914][ T6754] FAT-fs (loop8): Directory bread(block 69) failed [ 116.246071][ T6754] FAT-fs (loop8): Directory bread(block 70) failed [ 116.252989][ T6754] FAT-fs (loop8): Directory bread(block 71) failed [ 116.260113][ T6754] FAT-fs (loop8): Directory bread(block 72) failed [ 116.267833][ T6754] FAT-fs (loop8): Directory bread(block 73) failed [ 116.314889][ T3676] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.548587][ T6788] loop0: detected capacity change from 0 to 512 [ 116.555706][ T6788] msdos: Bad value for 'allow_utime' [ 116.582036][ T6792] loop0: detected capacity change from 0 to 512 [ 116.589135][ T6792] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 116.598232][ T6792] EXT4-fs (loop0): invalid journal inode [ 116.603969][ T6792] EXT4-fs (loop0): can't get journal size [ 116.613239][ T6792] EXT4-fs (loop0): 1 truncate cleaned up [ 116.619512][ T6792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.975956][ T6424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.034734][ T6804] loop0: detected capacity change from 0 to 1024 [ 117.041671][ T6804] EXT4-fs: inline encryption not supported [ 117.057202][ T6804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.075196][ T6804] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.889: Allocating blocks 385-513 which overlap fs metadata [ 117.094538][ T6804] EXT4-fs (loop0): pa ffff888107682070: logic 16, phys. 129, len 24 [ 117.102629][ T6804] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 117.114074][ T6804] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 117.126615][ T6804] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.126615][ T6804] [ 117.136314][ T6804] EXT4-fs (loop0): Total free blocks count 0 [ 117.142412][ T6804] EXT4-fs (loop0): Free/Dirty block details [ 117.148391][ T6804] EXT4-fs (loop0): free_blocks=128 [ 117.153527][ T6804] EXT4-fs (loop0): dirty_blocks=0 [ 117.158577][ T6804] EXT4-fs (loop0): Block reservation details [ 117.164634][ T6804] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 117.482581][ T6834] FAULT_INJECTION: forcing a failure. [ 117.482581][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 117.495301][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.1.900 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.495366][ T6834] Tainted: [W]=WARN [ 117.495374][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.495388][ T6834] Call Trace: [ 117.495395][ T6834] [ 117.495404][ T6834] __dump_stack+0x1d/0x30 [ 117.495432][ T6834] dump_stack_lvl+0x95/0xd0 [ 117.495474][ T6834] dump_stack+0x15/0x1b [ 117.495496][ T6834] should_fail_ex+0x265/0x280 [ 117.495530][ T6834] should_failslab+0x8c/0xb0 [ 117.495595][ T6834] __kmalloc_cache_noprof+0x65/0x4c0 [ 117.495635][ T6834] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 117.495673][ T6834] ? mutex_unlock+0x4f/0x90 [ 117.495715][ T6834] __se_sys_memfd_create+0x1d6/0x6b0 [ 117.495753][ T6834] __x64_sys_memfd_create+0x31/0x40 [ 117.495854][ T6834] x64_sys_call+0x28cb/0x3000 [ 117.495881][ T6834] do_syscall_64+0xca/0x2b0 [ 117.495919][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.496000][ T6834] RIP: 0033:0x7fe6d1c1f749 [ 117.496015][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.496116][ T6834] RSP: 002b:00007fe6d067ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 117.496135][ T6834] RAX: ffffffffffffffda RBX: 00000000000004f3 RCX: 00007fe6d1c1f749 [ 117.496202][ T6834] RDX: 00007fe6d067eef0 RSI: 0000000000000000 RDI: 00007fe6d1ca4960 [ 117.496215][ T6834] RBP: 00002000000012c0 R08: 00007fe6d067ebb7 R09: 00007fe6d067ee40 [ 117.496230][ T6834] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 117.496243][ T6834] R13: 00007fe6d067eef0 R14: 00007fe6d067eeb0 R15: 0000200000000380 [ 117.496264][ T6834] [ 117.726086][ T6845] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 117.735458][ T6844] loop7: detected capacity change from 0 to 512 [ 117.756874][ T6844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.776856][ T6844] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 117.811596][ T6856] loop3: detected capacity change from 0 to 512 [ 117.855554][ T6858] loop1: detected capacity change from 0 to 4096 [ 117.879497][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 117.904488][ T6858] 9p: Bad value for 'wfdno' [ 117.913725][ T6864] loop0: detected capacity change from 0 to 512 [ 117.920818][ T6864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.931281][ T6864] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.912: invalid block [ 117.943412][ T6864] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.912: invalid indirect mapped block 4294967295 (level 1) [ 117.958210][ T6864] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.912: invalid indirect mapped block 4294967295 (level 1) [ 117.972936][ T6864] EXT4-fs (loop0): 2 truncates cleaned up [ 117.979146][ T6864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.002516][ T4399] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.013809][ T6424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.041584][ T6870] loop0: detected capacity change from 0 to 1024 [ 118.049209][ T6870] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 118.059563][ T6870] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 118.070543][ T6870] EXT4-fs (loop0): invalid journal inode [ 118.087239][ T6872] netlink: 1932 bytes leftover after parsing attributes in process `syz.7.913'. [ 118.096860][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.913'. [ 118.364820][ T6740] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.373416][ T6890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.918'. [ 118.638696][ T6902] IPVS: Unknown mcast interface: veth0_virt_wifi [ 118.927568][ T6906] loop7: detected capacity change from 0 to 512 [ 118.969578][ T6906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.000308][ T6906] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 119.018693][ T6910] bridge1: entered allmulticast mode [ 119.028097][ T6906] EXT4-fs error (device loop7): ext4_validate_block_bitmap:423: comm syz.7.923: bg 0: bad block bitmap checksum [ 119.051510][ T6906] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Filesystem failed CRC [ 119.190802][ T6938] netlink: 96 bytes leftover after parsing attributes in process `syz.8.925'. [ 119.200119][ T6938] netlink: 96 bytes leftover after parsing attributes in process `syz.8.925'. [ 119.231589][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 119.242388][ T4399] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.305362][ T6951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.325685][ T6944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 119.334351][ T6951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.372733][ T6959] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.391268][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 119.391320][ T29] audit: type=1326 audit(119.363:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.7.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 119.421108][ T29] audit: type=1326 audit(119.363:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.7.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 119.460727][ T6963] veth2: entered promiscuous mode [ 119.466055][ T6963] veth2: entered allmulticast mode [ 119.500266][ T29] audit: type=1400 audit(119.423:3218): avc: denied { execute } for pid=6956 comm="syz.7.938" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 119.522494][ T29] audit: type=1326 audit(119.423:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.7.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 119.546191][ T29] audit: type=1326 audit(119.423:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.7.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 119.569851][ T29] audit: type=1400 audit(119.453:3221): avc: denied { execute_no_trans } for pid=6956 comm="syz.7.938" path="/135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 119.580725][ T4399] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.622454][ T29] audit: type=1400 audit(119.523:3222): avc: denied { map } for pid=6940 comm="syz.3.933" path="/22/file2/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 119.662658][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 119.815230][ T6973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6973 comm=syz.3.941 [ 119.827750][ T29] audit: type=1326 audit(119.773:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 119.850607][ T29] audit: type=1326 audit(119.773:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 119.873407][ T29] audit: type=1326 audit(119.773:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b8a25f749 code=0x7ffc0000 [ 120.042097][ T6979] netlink: 'syz.0.944': attribute type 30 has an invalid length. [ 120.450673][ T6996] FAULT_INJECTION: forcing a failure. [ 120.450673][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 120.463924][ T6996] CPU: 1 UID: 0 PID: 6996 Comm: syz.0.950 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.463963][ T6996] Tainted: [W]=WARN [ 120.464068][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.464083][ T6996] Call Trace: [ 120.464089][ T6996] [ 120.464098][ T6996] __dump_stack+0x1d/0x30 [ 120.464188][ T6996] dump_stack_lvl+0x95/0xd0 [ 120.464212][ T6996] dump_stack+0x15/0x1b [ 120.464269][ T6996] should_fail_ex+0x265/0x280 [ 120.464354][ T6996] should_failslab+0x8c/0xb0 [ 120.464379][ T6996] kmem_cache_alloc_noprof+0x69/0x4b0 [ 120.464402][ T6996] ? security_inode_alloc+0x37/0x100 [ 120.464443][ T6996] security_inode_alloc+0x37/0x100 [ 120.464467][ T6996] inode_init_always_gfp+0x4b7/0x500 [ 120.464492][ T6996] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 120.464522][ T6996] alloc_inode+0x58/0x170 [ 120.464577][ T6996] new_inode+0x1d/0xe0 [ 120.464617][ T6996] shmem_get_inode+0x246/0x750 [ 120.464717][ T6996] __shmem_file_setup+0x113/0x210 [ 120.464795][ T6996] shmem_file_setup+0x3b/0x50 [ 120.464845][ T6996] __se_sys_memfd_create+0x2f7/0x6b0 [ 120.464886][ T6996] __x64_sys_memfd_create+0x31/0x40 [ 120.464944][ T6996] x64_sys_call+0x28cb/0x3000 [ 120.464973][ T6996] do_syscall_64+0xca/0x2b0 [ 120.465015][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.465066][ T6996] RIP: 0033:0x7f8b6e65f749 [ 120.465083][ T6996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.465105][ T6996] RSP: 002b:00007f8b6d0bee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 120.465127][ T6996] RAX: ffffffffffffffda RBX: 00000000000004f3 RCX: 00007f8b6e65f749 [ 120.465143][ T6996] RDX: 00007f8b6d0beef0 RSI: 0000000000000000 RDI: 00007f8b6e6e4960 [ 120.465158][ T6996] RBP: 00002000000012c0 R08: 00007f8b6d0bebb7 R09: 00007f8b6d0bee40 [ 120.465173][ T6996] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 120.465219][ T6996] R13: 00007f8b6d0beef0 R14: 00007f8b6d0beeb0 R15: 0000200000000380 [ 120.465242][ T6996] [ 120.790794][ T7012] netlink: 'syz.0.955': attribute type 10 has an invalid length. [ 120.803382][ T7012] team0: Failed to send options change via netlink (err -105) [ 120.810987][ T7012] team0: Port device dummy0 added [ 120.817505][ T7012] netlink: 'syz.0.955': attribute type 10 has an invalid length. [ 120.827874][ T7012] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 120.843160][ T7012] team0: Failed to send options change via netlink (err -105) [ 120.852460][ T7012] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 120.919074][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.961220][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.045468][ T7012] team0: Port device dummy0 removed [ 121.055690][ T7012] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.313754][ T7029] set_capacity_and_notify: 3 callbacks suppressed [ 121.313775][ T7029] loop1: detected capacity change from 0 to 512 [ 121.367864][ T7029] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 121.580709][ T7032] loop1: detected capacity change from 0 to 512 [ 121.931058][ T7042] FAULT_INJECTION: forcing a failure. [ 121.931058][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 121.943829][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.1.964 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.943945][ T7042] Tainted: [W]=WARN [ 121.943969][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.944007][ T7042] Call Trace: [ 121.944017][ T7042] [ 121.944026][ T7042] __dump_stack+0x1d/0x30 [ 121.944054][ T7042] dump_stack_lvl+0x95/0xd0 [ 121.944135][ T7042] dump_stack+0x15/0x1b [ 121.944159][ T7042] should_fail_ex+0x265/0x280 [ 121.944186][ T7042] should_failslab+0x8c/0xb0 [ 121.944271][ T7042] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 121.944300][ T7042] ? __d_alloc+0x37/0x340 [ 121.944325][ T7042] __d_alloc+0x37/0x340 [ 121.944380][ T7042] ? mpol_shared_policy_init+0xbd/0x4c0 [ 121.944423][ T7042] d_alloc_pseudo+0x1e/0x80 [ 121.944488][ T7042] alloc_file_pseudo+0x71/0x160 [ 121.944557][ T7042] __shmem_file_setup+0x1de/0x210 [ 121.944599][ T7042] shmem_file_setup+0x3b/0x50 [ 121.944643][ T7042] __se_sys_memfd_create+0x2f7/0x6b0 [ 121.944709][ T7042] __x64_sys_memfd_create+0x31/0x40 [ 121.944783][ T7042] x64_sys_call+0x28cb/0x3000 [ 121.944815][ T7042] do_syscall_64+0xca/0x2b0 [ 121.944858][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.944884][ T7042] RIP: 0033:0x7fe6d1c1f749 [ 121.944977][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.944996][ T7042] RSP: 002b:00007fe6d067ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 121.945016][ T7042] RAX: ffffffffffffffda RBX: 00000000000004f3 RCX: 00007fe6d1c1f749 [ 121.945032][ T7042] RDX: 00007fe6d067eef0 RSI: 0000000000000000 RDI: 00007fe6d1ca4960 [ 121.945047][ T7042] RBP: 00002000000012c0 R08: 00007fe6d067ebb7 R09: 00007fe6d067ee40 [ 121.945063][ T7042] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 121.945078][ T7042] R13: 00007fe6d067eef0 R14: 00007fe6d067eeb0 R15: 0000200000000380 [ 121.945162][ T7042] [ 122.144494][ T7044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.966'. [ 122.206112][ T7046] loop3: detected capacity change from 0 to 256 [ 122.211055][ T7052] loop8: detected capacity change from 0 to 512 [ 122.236812][ T7058] loop0: detected capacity change from 0 to 512 [ 122.253194][ T7058] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.970: invalid block [ 122.253383][ T7058] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.970: invalid indirect mapped block 4294967295 (level 1) [ 122.253522][ T7058] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.970: invalid indirect mapped block 4294967295 (level 1) [ 122.253859][ T7058] EXT4-fs (loop0): 2 truncates cleaned up [ 122.254301][ T7058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.291343][ T7052] ext4: Bad value for 'max_dir_size_kb' [ 122.341519][ T6424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.455674][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'. [ 122.488890][ T7081] loop0: detected capacity change from 0 to 512 [ 122.490405][ T7081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.516044][ T7081] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 122.555248][ T7081] EXT4-fs (loop0): 1 truncate cleaned up [ 122.566230][ T7081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.671624][ T7089] loop1: detected capacity change from 0 to 8192 [ 122.683679][ T7100] netlink: 'syz.0.973': attribute type 10 has an invalid length. [ 122.694077][ T7100] bond0: (slave dummy0): Releasing backup interface [ 122.699040][ T7100] team0: Port device dummy0 added [ 122.792731][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.979'. [ 122.816143][ T7123] SELinux: Context system_u:object_r:adjtime_t:s0 is not valid (left unmapped). [ 122.916333][ T7139] loop3: detected capacity change from 0 to 1024 [ 123.061853][ T7155] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 123.105902][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.8.996'. [ 123.167384][ T7169] loop1: detected capacity change from 0 to 512 [ 123.243242][ T6424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.333481][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.371878][ T7183] loop0: detected capacity change from 0 to 1024 [ 123.378868][ T7183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.397125][ T7183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.450424][ T7187] x_tables: duplicate underflow at hook 3 [ 123.467884][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 123.601840][ T7228] IPVS: Error connecting to the multicast addr [ 123.633034][ T7242] SELinux: security_context_str_to_sid (VWW) failed with errno=-22 [ 123.642240][ T7242] netlink: '+}[@': attribute type 13 has an invalid length. [ 123.678040][ T7244] FAULT_INJECTION: forcing a failure. [ 123.678040][ T7244] name failslab, interval 1, probability 0, space 0, times 0 [ 123.691150][ T7244] CPU: 1 UID: 0 PID: 7244 Comm: syz.7.1011 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.691179][ T7244] Tainted: [W]=WARN [ 123.691185][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.691222][ T7244] Call Trace: [ 123.691229][ T7244] [ 123.691237][ T7244] __dump_stack+0x1d/0x30 [ 123.691259][ T7244] dump_stack_lvl+0x95/0xd0 [ 123.691278][ T7244] dump_stack+0x15/0x1b [ 123.691296][ T7244] should_fail_ex+0x265/0x280 [ 123.691324][ T7244] should_failslab+0x8c/0xb0 [ 123.691416][ T7244] kmem_cache_alloc_noprof+0x69/0x4b0 [ 123.691438][ T7244] ? io_submit_one+0xbc/0x1210 [ 123.691517][ T7244] io_submit_one+0xbc/0x1210 [ 123.691561][ T7244] __se_sys_io_submit+0xfb/0x280 [ 123.691670][ T7244] __x64_sys_io_submit+0x43/0x50 [ 123.691698][ T7244] x64_sys_call+0x2e40/0x3000 [ 123.691779][ T7244] do_syscall_64+0xca/0x2b0 [ 123.691822][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.691848][ T7244] RIP: 0033:0x7f9b8a25f749 [ 123.691865][ T7244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.691885][ T7244] RSP: 002b:00007f9b88cbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 123.691914][ T7244] RAX: ffffffffffffffda RBX: 00007f9b8a4b5fa0 RCX: 00007f9b8a25f749 [ 123.691929][ T7244] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f9b88c96000 [ 123.691944][ T7244] RBP: 00007f9b88cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 123.691958][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.691972][ T7244] R13: 00007f9b8a4b6038 R14: 00007f9b8a4b5fa0 R15: 00007ffe743746f8 [ 123.691993][ T7244] [ 123.913390][ T7246] EXT4-fs: Ignoring removed oldalloc option [ 123.919562][ T7246] EXT4-fs: inline encryption not supported [ 123.926586][ T7246] EXT4-fs (loop3): can't read group descriptor 0 [ 124.059012][ T7249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.081062][ T7249] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.1013: invalid block [ 124.095954][ T7249] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1013: invalid indirect mapped block 4294967295 (level 1) [ 124.116538][ T7249] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1013: invalid indirect mapped block 4294967295 (level 1) [ 124.132142][ T7249] EXT4-fs (loop8): 2 truncates cleaned up [ 124.138770][ T7249] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.163550][ T5581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.215543][ T6424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.241223][ T7268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.300656][ T7288] rdma_op ffff88810fb59580 conn xmit_rdma 0000000000000000 [ 124.318200][ T7292] program syz.0.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.371757][ T7299] random: crng reseeded on system resumption [ 124.399289][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 124.399303][ T29] audit: type=1400 audit(124.373:3532): avc: denied { ioctl } for pid=7298 comm="syz.1.1021" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.405264][ T7299] Restarting kernel threads ... [ 124.462066][ T7293] ext4: Unknown parameter 'delallocp' [ 124.485974][ T7299] Done restarting kernel threads. [ 124.495713][ T7266] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 124.531187][ T7266] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 32 with error 28 [ 124.544120][ T7266] EXT4-fs (loop8): This should not happen!! Data will be lost [ 124.544120][ T7266] [ 124.554251][ T7266] EXT4-fs (loop8): Total free blocks count 0 [ 124.560504][ T7266] EXT4-fs (loop8): Free/Dirty block details [ 124.566642][ T7266] EXT4-fs (loop8): free_blocks=2415919504 [ 124.572596][ T7266] EXT4-fs (loop8): dirty_blocks=32 [ 124.577941][ T7266] EXT4-fs (loop8): Block reservation details [ 124.584286][ T7266] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 124.596053][ T7292] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1020: inode has both inline data and extents flags [ 124.612554][ T7292] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1020: couldn't read orphan inode 15 (err -117) [ 124.625963][ T7292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.641257][ T5581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.703562][ T6424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.943582][ T7365] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 125.139709][ T29] audit: type=1400 audit(125.113:3533): avc: denied { getopt } for pid=7395 comm="syz.1.1027" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.219895][ T7408] netlink: 'syz.7.1028': attribute type 1 has an invalid length. [ 125.235340][ T7408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.249567][ T7408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.258625][ T7408] bond1: (slave batadv0): making interface the new active one [ 125.267806][ T7408] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 125.457173][ T7455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.484411][ T4399] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.626247][ T29] audit: type=1326 audit(125.603:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d848cf749 code=0x7ffc0000 [ 125.656301][ T29] audit: type=1400 audit(125.633:3535): avc: denied { write } for pid=7489 comm="syz.1.1042" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.658675][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 125.787334][ T29] audit: type=1400 audit(125.763:3536): avc: denied { bind } for pid=7496 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.807766][ T29] audit: type=1400 audit(125.763:3537): avc: denied { connect } for pid=7496 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.864114][ T29] audit: type=1400 audit(125.833:3538): avc: denied { ioctl } for pid=7513 comm="syz.0.1051" path="socket:[20145]" dev="sockfs" ino=20145 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 125.892705][ T29] audit: type=1326 audit(125.863:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.0.1051" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b6e65f749 code=0x0 [ 125.894223][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 126.007283][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1053'. [ 126.135520][ T7528] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 126.152935][ T29] audit: type=1400 audit(126.123:3540): avc: denied { accept } for pid=7515 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 126.266399][ T7532] FAT-fs (loop3): bogus logical sector size 2134 [ 126.272798][ T7532] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 126.282289][ T7532] FAT-fs (loop3): Can't find a valid FAT filesystem [ 126.834529][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 126.862241][ T7545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1061'. [ 126.873475][ T7551] sctp: [Deprecated]: syz.7.1060 (pid 7551) Use of int in maxseg socket option. [ 126.873475][ T7551] Use struct sctp_assoc_value instead [ 126.888787][ T29] audit: type=1400 audit(126.863:3541): avc: denied { append } for pid=7550 comm="syz.7.1060" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.941383][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1064'. [ 126.962482][ T7561] set_capacity_and_notify: 13 callbacks suppressed [ 126.962510][ T7561] loop0: detected capacity change from 0 to 128 [ 127.050106][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 127.080878][ T7575] hsr_slave_1 (unregistering): left promiscuous mode [ 127.123211][ T7579] loop1: detected capacity change from 0 to 512 [ 127.176870][ T7579] loop1: detected capacity change from 0 to 512 [ 127.197951][ T7579] loop1: detected capacity change from 0 to 512 [ 127.217738][ T7579] loop1: detected capacity change from 0 to 512 [ 127.247568][ T7579] loop1: detected capacity change from 0 to 512 [ 127.282769][ T7579] loop1: detected capacity change from 0 to 512 [ 127.315314][ T7579] loop1: detected capacity change from 0 to 512 [ 127.336875][ T7600] Cannot find add_set index 0 as target [ 127.350033][ T7579] loop1: detected capacity change from 0 to 512 [ 127.357968][ T7595] bond2 (unregistering): Released all slaves [ 127.382465][ T7579] loop1: detected capacity change from 0 to 512 [ 127.637561][ T7645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.688503][ T6481] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 127.703759][ T6481] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 127.718593][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.794975][ T7660] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1086: invalid block [ 127.808419][ T7660] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1086: invalid indirect mapped block 4294967295 (level 1) [ 127.822865][ T7660] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1086: invalid indirect mapped block 4294967295 (level 1) [ 127.837721][ T7660] EXT4-fs (loop3): 2 truncates cleaned up [ 127.843930][ T7660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.881348][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.926535][ T7671] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 127.941448][ T7671] EXT4-fs (loop3): Remounting filesystem read-only [ 127.952194][ T7671] EXT4-fs (loop3): 1 truncate cleaned up [ 127.958482][ T7671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.972297][ T7671] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 127.990919][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.046057][ T7684] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 128.061826][ T7684] team0: Failed to send options change via netlink (err -105) [ 128.069488][ T7684] team0: Port device dummy0 added [ 128.084870][ T7684] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 128.093300][ T7684] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.104136][ T7684] team0: Failed to send options change via netlink (err -105) [ 128.115762][ T7691] __nla_validate_parse: 2 callbacks suppressed [ 128.115790][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1096'. [ 128.122687][ T7684] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.141803][ T7684] team0: Port device dummy0 removed [ 128.149851][ T7684] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.165579][ T7691] ip6gre1: entered allmulticast mode [ 128.258353][ T7697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.540564][ T7738] EXT4-fs: test_dummy_encryption option not supported [ 128.716709][ T7755] iso9660: Unknown parameter '00000000000000000000003y54V v&݈K*S2#<' [ 129.038298][ T4399] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.084836][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 130.084918][ T29] audit: type=1326 audit(130.013:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b6e65f749 code=0x7ffc0000 [ 130.084959][ T29] audit: type=1326 audit(130.023:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b6e65f749 code=0x7ffc0000 [ 130.084992][ T29] audit: type=1326 audit(130.033:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b6e65f749 code=0x7ffc0000 [ 130.085033][ T29] audit: type=1326 audit(130.043:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b6e65f749 code=0x7ffc0000 [ 130.085140][ T29] audit: type=1326 audit(130.053:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b6e65f749 code=0x7ffc0000 [ 130.092205][ T29] audit: type=1326 audit(130.063:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b6e65f749 code=0x7ffc0000 [ 130.102362][ T29] audit: type=1326 audit(130.073:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b6e65f749 code=0x7ffc0000 [ 130.112581][ T29] audit: type=1326 audit(130.083:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b6e65f749 code=0x7ffc0000 [ 130.122640][ T29] audit: type=1326 audit(130.093:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b6e65f749 code=0x7ffc0000 [ 130.132807][ T29] audit: type=1326 audit(130.103:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8b6e65f749 code=0x7ffc0000 [ 130.695317][ T7784] FAULT_INJECTION: forcing a failure. [ 130.695317][ T7784] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 130.708719][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.3.1118 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.708756][ T7784] Tainted: [W]=WARN [ 130.708762][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.708773][ T7784] Call Trace: [ 130.708779][ T7784] [ 130.708788][ T7784] __dump_stack+0x1d/0x30 [ 130.708815][ T7784] dump_stack_lvl+0x95/0xd0 [ 130.708837][ T7784] dump_stack+0x15/0x1b [ 130.708928][ T7784] should_fail_ex+0x265/0x280 [ 130.708973][ T7784] should_fail_alloc_page+0xf2/0x100 [ 130.708996][ T7784] __alloc_frozen_pages_noprof+0x109/0x360 [ 130.709028][ T7784] alloc_pages_mpol+0xb3/0x260 [ 130.709081][ T7784] vma_alloc_folio_noprof+0x1aa/0x300 [ 130.709182][ T7784] do_wp_page+0xf60/0x2510 [ 130.709216][ T7784] ? css_rstat_updated+0xbb/0x280 [ 130.709314][ T7784] ? __rcu_read_lock+0x37/0x50 [ 130.709335][ T7784] handle_mm_fault+0x7b0/0x2c60 [ 130.709371][ T7784] do_user_addr_fault+0x630/0x1080 [ 130.709426][ T7784] ? ksys_mmap_pgoff+0xc2/0x310 [ 130.709455][ T7784] exc_page_fault+0x62/0xa0 [ 130.709481][ T7784] asm_exc_page_fault+0x26/0x30 [ 130.709582][ T7784] RIP: 0033:0x7f4d84790943 [ 130.709596][ T7784] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 130.709612][ T7784] RSP: 002b:00007f4d833364a0 EFLAGS: 00010202 [ 130.709626][ T7784] RAX: 0000000000000400 RBX: 00007f4d83336540 RCX: 00007f4d7af17000 [ 130.709638][ T7784] RDX: 00007f4d833366e0 RSI: 0000000000000029 RDI: 00007f4d833365e0 [ 130.709651][ T7784] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a7 [ 130.709662][ T7784] R10: 00000000000000be R11: 00007f4d83336540 R12: 0000000000000001 [ 130.709672][ T7784] R13: 00007f4d8496fc40 R14: 0000000000000020 R15: 00007f4d833365e0 [ 130.709760][ T7784] [ 130.709784][ T7784] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 130.901485][ T7226] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.909421][ T7784] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.919885][ T7784] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1118: invalid block [ 130.944340][ T7784] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1118: invalid indirect mapped block 4294967295 (level 1) [ 130.971313][ T7784] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1118: invalid indirect mapped block 4294967295 (level 1) [ 130.995135][ T7784] EXT4-fs (loop3): 2 truncates cleaned up [ 131.001757][ T7784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.015772][ T7801] ip6tnl0: mtu less than device minimum [ 131.083013][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.233163][ T7819] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.250502][ T7822] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1130'. [ 131.259999][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1130'. [ 131.772275][ T7834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.789050][ T7834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.891781][ T7843] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1136'. [ 131.904500][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 131.927021][ T7846] FAULT_INJECTION: forcing a failure. [ 131.927021][ T7846] name failslab, interval 1, probability 0, space 0, times 0 [ 131.939776][ T7846] CPU: 0 UID: 0 PID: 7846 Comm: syz.1.1137 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 131.939812][ T7846] Tainted: [W]=WARN [ 131.939820][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.939858][ T7846] Call Trace: [ 131.939866][ T7846] [ 131.939873][ T7846] __dump_stack+0x1d/0x30 [ 131.939907][ T7846] dump_stack_lvl+0x95/0xd0 [ 131.939931][ T7846] dump_stack+0x15/0x1b [ 131.939983][ T7846] should_fail_ex+0x265/0x280 [ 131.940011][ T7846] should_failslab+0x8c/0xb0 [ 131.940037][ T7846] kmem_cache_alloc_noprof+0x69/0x4b0 [ 131.940099][ T7846] ? __anon_vma_prepare+0xcd/0x2f0 [ 131.940130][ T7846] __anon_vma_prepare+0xcd/0x2f0 [ 131.940162][ T7846] do_wp_page+0x18ee/0x2510 [ 131.940255][ T7846] ? css_rstat_updated+0xbb/0x280 [ 131.940278][ T7846] ? __rcu_read_lock+0x37/0x50 [ 131.940306][ T7846] handle_mm_fault+0x7b0/0x2c60 [ 131.940384][ T7846] do_user_addr_fault+0x630/0x1080 [ 131.940454][ T7846] ? ksys_mmap_pgoff+0xc2/0x310 [ 131.940489][ T7846] exc_page_fault+0x62/0xa0 [ 131.940564][ T7846] asm_exc_page_fault+0x26/0x30 [ 131.940605][ T7846] RIP: 0033:0x7fe6d1ae0943 [ 131.940624][ T7846] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 131.940645][ T7846] RSP: 002b:00007fe6d067e4a0 EFLAGS: 00010202 [ 131.940662][ T7846] RAX: 0000000000000400 RBX: 00007fe6d067e540 RCX: 00007fe6c825f000 [ 131.940676][ T7846] RDX: 00007fe6d067e6e0 RSI: 0000000000000029 RDI: 00007fe6d067e5e0 [ 131.940714][ T7846] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a7 [ 131.940727][ T7846] R10: 00000000000000be R11: 00007fe6d067e540 R12: 0000000000000001 [ 131.940744][ T7846] R13: 00007fe6d1cbfc40 R14: 0000000000000020 R15: 00007fe6d067e5e0 [ 131.940767][ T7846] [ 131.940789][ T7846] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 132.144379][ T5581] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.175438][ T7846] set_capacity_and_notify: 66 callbacks suppressed [ 132.175504][ T7846] loop1: detected capacity change from 0 to 512 [ 132.202902][ T7849] netlink: 'syz.8.1138': attribute type 30 has an invalid length. [ 132.263964][ T7864] loop1: detected capacity change from 0 to 512 [ 132.273677][ T7864] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1141'. [ 132.817165][ T7884] loop1: detected capacity change from 0 to 512 [ 132.924902][ T7859] Bluetooth: hci0: command 0x1003 tx timeout [ 132.924935][ T3534] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.319262][ T7899] FAULT_INJECTION: forcing a failure. [ 133.319262][ T7899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.332796][ T7899] CPU: 0 UID: 0 PID: 7899 Comm: syz.1.1151 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 133.332831][ T7899] Tainted: [W]=WARN [ 133.332907][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.332931][ T7899] Call Trace: [ 133.332937][ T7899] [ 133.332945][ T7899] __dump_stack+0x1d/0x30 [ 133.333106][ T7899] dump_stack_lvl+0x95/0xd0 [ 133.333132][ T7899] dump_stack+0x15/0x1b [ 133.333154][ T7899] should_fail_ex+0x265/0x280 [ 133.333180][ T7899] should_fail_alloc_page+0xf2/0x100 [ 133.333206][ T7899] __alloc_frozen_pages_noprof+0x109/0x360 [ 133.333318][ T7899] alloc_pages_mpol+0xb3/0x260 [ 133.333367][ T7899] ? css_rstat_updated+0xbb/0x280 [ 133.333413][ T7899] vma_alloc_folio_noprof+0x1aa/0x300 [ 133.333447][ T7899] handle_mm_fault+0xef5/0x2c60 [ 133.333491][ T7899] do_user_addr_fault+0x630/0x1080 [ 133.333523][ T7899] ? ksys_mmap_pgoff+0xc2/0x310 [ 133.333618][ T7899] exc_page_fault+0x62/0xa0 [ 133.333652][ T7899] asm_exc_page_fault+0x26/0x30 [ 133.333674][ T7899] RIP: 0033:0x7fe6d1ae0943 [ 133.333717][ T7899] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 133.333737][ T7899] RSP: 002b:00007fe6d067e4a0 EFLAGS: 00010206 [ 133.333754][ T7899] RAX: 0000000000002000 RBX: 00007fe6d067e540 RCX: 00007fe6c825f000 [ 133.333769][ T7899] RDX: 00007fe6d067e6e0 RSI: 0000000000000037 RDI: 00007fe6d067e5e0 [ 133.333783][ T7899] RBP: 0000000000000012 R08: 0000000000000009 R09: 00000000000001b2 [ 133.333794][ T7899] R10: 00000000000001b8 R11: 00007fe6d067e540 R12: 0000000000000001 [ 133.333805][ T7899] R13: 00007fe6d1cbfc40 R14: 00000000000000ed R15: 00007fe6d067e5e0 [ 133.333869][ T7899] [ 133.333884][ T7899] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 133.410591][ T7901] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7901 comm=syz.8.1152 [ 133.426389][ T7899] loop1: detected capacity change from 0 to 512 [ 133.544715][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 133.554000][ T7904] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1153'. [ 133.566097][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 133.575213][ T7904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1153'. [ 133.584172][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 133.597329][ T7904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1153'. [ 133.606708][ T7904] netlink: 'syz.0.1153': attribute type 6 has an invalid length. [ 133.621910][ T7911] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.635452][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 133.646383][ T1037] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.654335][ T1037] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.662325][ T1037] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.670448][ T1037] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.678073][ T1037] rtc rtc0: __rtc_set_alarm: err=-22 [ 133.700304][ T7917] loop1: detected capacity change from 0 to 1024 [ 133.707387][ T7917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.738074][ T7916] loop0: detected capacity change from 0 to 2048 [ 133.788185][ T7916] Alternate GPT is invalid, using primary GPT. [ 133.788382][ T7916] loop0: p2 p3 p7 [ 133.806159][ T7916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=7916 comm=syz.0.1158 [ 133.994609][ T7925] loop3: detected capacity change from 0 to 512 [ 134.005498][ T7925] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1161: invalid block [ 134.007066][ T7925] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1161: invalid indirect mapped block 4294967295 (level 1) [ 134.031869][ T7925] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1161: invalid indirect mapped block 4294967295 (level 1) [ 134.032243][ T7925] EXT4-fs (loop3): 2 truncates cleaned up [ 134.032753][ T7925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.052651][ T7926] loop0: detected capacity change from 0 to 256 [ 134.085901][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.197191][ T7932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1162'. [ 134.264089][ T7931] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1163'. [ 134.285308][ T6740] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 134.326664][ T7944] loop3: detected capacity change from 0 to 512 [ 134.335383][ T7944] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.335794][ T7944] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1166: bg 0: block 127: padding at end of block bitmap is not set [ 134.336181][ T7944] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 134.336317][ T7944] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1166: corrupted inode contents [ 134.336545][ T7944] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 134.336895][ T7944] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1166: corrupted inode contents [ 134.337049][ T7944] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.1166: mark_inode_dirty error [ 134.337311][ T7944] EXT4-fs (loop3): 1 orphan inode deleted [ 134.337805][ T7944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 134.442259][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.466412][ T7229] ================================================================== [ 134.466454][ T7229] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 134.466506][ T7229] [ 134.466512][ T7229] write to 0xffff88810448e108 of 44 bytes by task 7949 on cpu 1: [ 134.466530][ T7229] tty_set_termios+0xc0/0x8c0 [ 134.466564][ T7229] set_termios+0x490/0x4d0 [ 134.466595][ T7229] tty_mode_ioctl+0x379/0x5c0 [ 134.466620][ T7229] n_tty_ioctl_helper+0x91/0x210 [ 134.466646][ T7229] n_tty_ioctl+0x101/0x230 [ 134.466665][ T7229] tty_ioctl+0x83f/0xb80 [ 134.466683][ T7229] __se_sys_ioctl+0xce/0x140 [ 134.466717][ T7229] __x64_sys_ioctl+0x43/0x50 [ 134.466749][ T7229] x64_sys_call+0x14b0/0x3000 [ 134.466775][ T7229] do_syscall_64+0xca/0x2b0 [ 134.466809][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.466827][ T7229] [ 134.466832][ T7229] read to 0xffff88810448e121 of 1 bytes by task 7229 on cpu 0: [ 134.466845][ T7229] n_tty_receive_char_flow_ctrl+0x23/0x1d0 [ 134.466870][ T7229] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 134.466900][ T7229] tty_port_default_lookahead_buf+0x91/0xc0 [ 134.466933][ T7229] flush_to_ldisc+0x288/0x340 [ 134.466956][ T7229] process_scheduled_works+0x4ce/0x9d0 [ 134.466983][ T7229] worker_thread+0x582/0x770 [ 134.467009][ T7229] kthread+0x489/0x510 [ 134.467039][ T7229] ret_from_fork+0x149/0x290 [ 134.467067][ T7229] ret_from_fork_asm+0x1a/0x30 [ 134.467094][ T7229] [ 134.467098][ T7229] value changed: 0x11 -> 0x92 [ 134.467109][ T7229] [ 134.467112][ T7229] Reported by Kernel Concurrency Sanitizer on: [ 134.467125][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: kworker/u8:56 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.467154][ T7229] Tainted: [W]=WARN [ 134.467161][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.467176][ T7229] Workqueue: events_unbound flush_to_ldisc [ 134.641537][ T7229] ================================================================== [ 134.641975][ T7951] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1168'. [ 134.765779][ T7953] loop3: detected capacity change from 0 to 128