last executing test programs: 4m20.323481241s ago: executing program 32 (id=685): r0 = socket$netlink(0x10, 0x3, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) getresuid(&(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000200)) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async, rerun: 32) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1m56.063788779s ago: executing program 33 (id=2484): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x3, 0xff, 0x5, 0x0, 0x6150, 0x61000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0x7, 0x2, 0x4000, 0x0, 0x8, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 1m52.757279116s ago: executing program 34 (id=2524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 1m33.667188537s ago: executing program 35 (id=2750): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xa8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8001}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r4, &(0x7f0000001b40)=[{&(0x7f0000000040)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001ac0)=""/18, 0x12}], 0x3) write$tun(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m27.576956049s ago: executing program 36 (id=2835): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xa8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8001}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006d40)=@newtaction={0x1c8c, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x1c78, 0x1, [@m_pedit={0x1c74, 0x1, 0x0, 0x0, {{0xa}, {0x1c48, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xcdc5, 0x100, 0x8, 0xc, 0x7ff}, 0xc, 0x5e}, [{0x7fff, 0x6, 0x9, 0x59, 0x8, 0x1000}, {0x0, 0x9, 0x9, 0x6, 0x7, 0x6}, {0x400, 0x0, 0xa, 0x2, 0x1000, 0xf}, {0x5, 0x2, 0x9f, 0x9, 0xfffff001, 0x8}, {0x4, 0x1, 0xffff, 0x6, 0x80000000, 0xa}, {0x3, 0x2, 0x7, 0x6, 0x8, 0x2}, {0x4d5f, 0x17, 0x6, 0x8, 0x6, 0x2}, {0x9, 0x4, 0x5, 0x9, 0x8, 0x8}, {0x3, 0x80000000, 0x3, 0x9, 0x9ce, 0x100}, {0x3, 0x1, 0x401, 0x8, 0x7f, 0xed}, {0x40, 0xfffffff2, 0x7fffffff, 0x1, 0x7, 0x9}, {0xffffffff, 0x4, 0x8, 0xe, 0x5, 0xf}, {0x6, 0x6, 0x2, 0x9, 0x4, 0xe2571b5}, {0xffff, 0x3, 0x7, 0x87, 0x3, 0x7fffffff}, {0x8e7, 0x4, 0xe4bd, 0x3, 0x7, 0x3d4}, {0x8, 0x6, 0x8, 0x0, 0xffffff61}, {0x1ff, 0x81, 0xaf2, 0x401, 0x3, 0x1}, {0x80000000, 0x2, 0x1, 0x4, 0xd56, 0xc}, {0x81, 0xffffff7f, 0x2, 0x0, 0x101, 0x1000}, {0x6, 0x1, 0x8, 0xffffffff, 0x5, 0x8}, {0x605, 0x3, 0xffffff7c, 0x8, 0xc3c, 0x3}, {0xfffffff7, 0xfffffff3, 0xb8, 0xc, 0x0, 0x100}, {0x7, 0x4, 0x6, 0x40, 0x3, 0x1000100}, {0x6fe, 0xcf, 0x3, 0x3, 0xba, 0x3}, {0x200, 0xffffff09, 0xcba, 0x4, 0x1, 0xdc}, {0x7f, 0x5, 0x7, 0x7, 0x8000, 0x6}, {0x7, 0x1, 0x8, 0x10, 0x6, 0xffff}, {0x101, 0x7, 0x683b, 0x2, 0x3d8, 0x10}, {0x6, 0x6, 0xb, 0x2, 0xc442, 0x9}, {0xa, 0xb5, 0x6, 0x8, 0x7f, 0x1}, {0x6de, 0x101, 0x8, 0x3d, 0x6e2d1bf4, 0xffff}, {0x4, 0x9, 0x7, 0xfff, 0x9}, {0x6, 0x3, 0x101, 0x9, 0x6, 0x1}, {0x6, 0x40, 0x3, 0x0, 0x6, 0x7}, {0x44f6, 0x8, 0x8, 0xa8, 0x5, 0x4}, {0x7, 0xd0a1, 0x1, 0x6, 0x8, 0x8}, {0x6, 0x4, 0x5a, 0x3, 0x4, 0x9}, {0xfffffc00, 0x0, 0x8, 0x2, 0x5801, 0x6}, {0xd68a, 0x4, 0x8001, 0x3, 0x8, 0x1}, {0x5, 0x7, 0x8, 0x5, 0xffffc2a8, 0x2}, {0x7ff, 0x8000, 0xfffffffa, 0x8, 0x80000000, 0x9}, {0x63, 0x100, 0x8, 0x8, 0x7fffffff}, {0x7, 0x0, 0xb, 0x4, 0xd778, 0x8655}, {0xfffffff9, 0x401, 0x3, 0x1, 0x1f, 0x4}, {0x4, 0x0, 0x6, 0x9, 0xa061, 0x2f33}, {0x7, 0x3, 0x5, 0x1, 0x2, 0x600000}, {0x81, 0x2, 0x7, 0x401, 0x4, 0x1}, {0x3, 0xc3e3, 0x3e5, 0x9, 0x9313, 0x4}, {0x9, 0x1, 0x1, 0x80, 0x5, 0x9}, {0x8, 0x4, 0x2, 0x40, 0x1, 0x4}, {0x6, 0x10001, 0x4, 0x100, 0x5, 0x3ff}, {0x7ff, 0x81, 0x3, 0x7, 0xa, 0x7}, {0x1, 0x2, 0x5, 0x399, 0x3, 0xffffffff}, {0x10, 0x2, 0x9, 0x8001, 0x1ff, 0x5}, {0x8000, 0x7, 0xfffffffb, 0x5, 0x7, 0x5fc}, {0xc917, 0x10, 0x1, 0x2, 0x4, 0xfffff1da}, {0xfffff837, 0xb, 0xba7c, 0xfffffff2, 0x6, 0x2}, {0x5, 0x40, 0x4, 0x0, 0xf07, 0xf}, {0x2, 0x8001, 0x4, 0x810, 0x8, 0xffffffff}, {0x0, 0xcb, 0xc, 0x3, 0x0, 0x80}, {0x6, 0x7, 0x3, 0x4, 0x7, 0x2}, {0xfff, 0x10001, 0x7f, 0x5, 0xe841, 0x8}, {0x2, 0x1, 0x1ff, 0x3, 0x0, 0x1}, {0x6, 0x7, 0x1400000, 0x8, 0x80000000, 0x5}, {0xb7e, 0x3, 0x4, 0x0, 0x5, 0x400}, {0xc, 0x81, 0x2, 0x5, 0x400}, {0x4, 0x3, 0x6, 0x7, 0x3, 0x3}, {0x5, 0xffff, 0x0, 0x0, 0x2e2, 0x2}, {0x6, 0x4, 0xff, 0x9, 0x61222e, 0x3}, {0x0, 0xc4b, 0x8, 0x80000000, 0x200, 0x1}, {0x1, 0x2, 0x3, 0x5, 0x5192c3ef, 0x2}, {0x100, 0xfffffffa, 0x2fb, 0x0, 0x4, 0x3}, {0x8, 0x3, 0x80000001, 0x101, 0x431, 0x2}, {0x6, 0x0, 0xf5, 0x3ff, 0x3, 0xe4e6}, {0xab, 0xffff, 0x200, 0x4, 0x3, 0x9}, {0x2, 0x7, 0x3, 0x4, 0x0, 0x4}, {0x80000000, 0x9, 0x37, 0x80000001, 0x1, 0x9}, {0x331, 0x800, 0x9, 0x4, 0xf, 0x6}, {0xe9, 0x0, 0xa7, 0x7, 0x4, 0x9}, {0x9, 0x3, 0x3, 0xfffffff7, 0x7fff, 0x3}, {0x1, 0x9, 0x4, 0xfffffffb, 0xd, 0x9}, {0x2, 0x1, 0x7, 0x8001, 0x1, 0xffff8001}, {0x2, 0x19a8, 0x800, 0x101, 0x3, 0x5}, {0x4800, 0xcb, 0x80000001, 0x2, 0x7, 0x7}, {0xb, 0x3, 0x8, 0x4df0, 0x7, 0x40}, {0x3, 0x0, 0xda2, 0x42d4, 0x3, 0x4}, {0x0, 0xbf, 0x5, 0xffff, 0x6}, {0x1ff, 0x10001, 0x0, 0x9, 0x7, 0x10001}, {0x45b, 0x9, 0x4, 0x5, 0x6, 0xbc2}, {0x4, 0x2, 0xa9, 0x2, 0x2, 0x9}, {0x0, 0x200, 0xbf, 0x6, 0x266, 0x8}, {0x80000001, 0x0, 0x0, 0x1, 0x6, 0x5}, {0x19c00000, 0x9, 0x5, 0x9, 0x4, 0x1}, {0x0, 0x0, 0x7, 0x2, 0x4, 0xfffffffd}, {0x0, 0x1, 0xe, 0x8, 0x79, 0xd}, {0x400, 0x7, 0xc, 0x8, 0xf, 0x3}, {0x5, 0x5, 0x9, 0xa0d, 0x40, 0x6456}, {0xbb4e, 0x0, 0x3a, 0x8, 0xfffffffb, 0x8}, {0x10, 0x7ff, 0x7, 0xfff, 0x0, 0x9}, {0x8, 0x40, 0xfff, 0x1, 0x1, 0x1}, {0x0, 0x0, 0xe72, 0x8, 0x0, 0x3}, {0x401, 0x6, 0x8, 0x2, 0x2dbf19f1, 0x81}, {0x7, 0x6, 0xa5, 0x0, 0x401, 0xc}, {0x2, 0x9, 0x9864, 0x9b, 0x5}, {0x6, 0x7ff, 0x5fc5, 0xb, 0x7, 0x237}, {0x0, 0x80000001, 0xa4, 0x0, 0x7, 0x40}, {0x9, 0x6, 0x1000, 0x7, 0xd2e, 0x1}, {0x7, 0x3, 0xc, 0x8, 0x40, 0xb}, {0x7, 0x2, 0x7, 0x8, 0x200, 0x8}, {0x9, 0xffff, 0x101, 0x7a, 0x8, 0xfffffff8}, {0x9, 0x4, 0x0, 0x4, 0x8001, 0x800}, {0x2, 0x83a, 0x5, 0x2, 0x9, 0xffffffff}, {0xffffff4c, 0x2, 0x10001, 0x2, 0x7, 0x2}, {0x5, 0x0, 0x3, 0x0, 0xb, 0x6}, {0x3, 0x9, 0x7, 0x0, 0x7f, 0x800}, {0x2, 0x80000001, 0xe, 0x2, 0x6, 0xd5f}, {0x1, 0x7fffffff, 0x2, 0x3, 0x7, 0x6}, {0x400, 0xfffffffc, 0x4, 0xa6, 0x0, 0xfffffffc}, {0x5, 0x5, 0xff, 0xfffffffd, 0x5, 0x2}, {0x3, 0x4, 0x6, 0xc6b60000, 0x3ff, 0x10}, {0x2, 0xf27, 0x8, 0x6, 0xfffffffb, 0x5}, {0xe, 0x53, 0x400, 0x8, 0x6, 0x9}, {0x42, 0x1, 0xfff, 0x15f2, 0x3, 0x401}, {0xc7e8, 0x1, 0xfffffffe, 0x9, 0x3, 0x6}, {0x7f, 0x1000, 0xd19, 0x5, 0xfff, 0xb7}, {0x3, 0xed0, 0x8, 0x2, 0x1, 0x2}, {0x1, 0xdba, 0x4, 0xe3, 0x5, 0x5}, {0x8001, 0x831b0aa, 0x6, 0x200, 0x0, 0x4}], [{0x1}, {0x5}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0xd482b2beb95f1396}, {0x1, 0x1}, {0x2, 0x1}, {0xdf6e2fd7682863b7, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x0, 0x5dc99bf9bb419254}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x6d7d4d20e070fc88, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0xe371b5ac9b19a6e7}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x6}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x63017a1fdf0e3bbe}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0xf, 0x8, 0x4, 0x8}, 0x9}, [{0x24, 0x2, 0x0, 0x4, 0x3, 0x6}, {0xb, 0x1, 0x2, 0x9, 0x4, 0x4}, {0x1, 0x7, 0x4, 0x1, 0x800, 0x6}, {0xb, 0x5, 0xa78b, 0x6, 0x2, 0x9}, {0x2, 0x7, 0x9, 0x2, 0x9, 0x3}, {0x0, 0x4, 0x9, 0x9, 0x5, 0x824100}, {0xd, 0x7, 0xa, 0xfffffff8, 0x7, 0x33}, {0x1, 0x14, 0x5, 0x3, 0x200, 0xc}, {0x6, 0xffffff8e, 0x5, 0x3, 0x7fffffff, 0x3}, {0x4, 0xff, 0x8, 0x80000000, 0x271b, 0x51b8}, {0x31bf, 0x1, 0x8, 0x2, 0x1, 0x5}, {0x2, 0x4, 0x3, 0x1, 0x7a}, {0x4, 0x8000, 0xd232, 0x0, 0xfd, 0xfffffff9}, {0xbb5, 0x8, 0x4, 0x6, 0x5b, 0x1}, {0x200, 0x8000, 0x8, 0x4, 0x5, 0xdc3f}, {0x401, 0x40, 0x3, 0x1, 0x2}, {0x10001, 0x6, 0x8f, 0x7fff, 0x2, 0x7}, {0x5, 0x80000001, 0x5, 0x6, 0xffffffff, 0x2}, {0x0, 0x5, 0x9, 0x1, 0x5, 0x4}, {0x9, 0x10, 0x5, 0x7, 0x7, 0x7}, {0xc, 0x6, 0x1, 0x3, 0x48d, 0x7}, {0x4, 0x8, 0x800, 0x7fffffff, 0xb, 0x9}, {0x0, 0x8, 0x3, 0xffffffff, 0x7fff, 0x6}, {0x6, 0x78000000, 0xf, 0x8, 0x3, 0x8}, {0x1, 0x0, 0x40, 0xcbe, 0x1, 0x2}, {0xb757, 0x0, 0x8, 0x10, 0x1, 0x400}, {0x3, 0x3, 0x7e0, 0x3, 0x1, 0x9}, {0x4, 0x7fffffff, 0x1, 0x6, 0x7f, 0x4}, {0xffff, 0x3, 0xfffffffc, 0x1, 0x5, 0x2}, {0x5, 0xe, 0x9, 0x6, 0xa7dc, 0xffffe805}, {0x9, 0x538, 0x4, 0x2, 0x80c, 0x4}, {0x8, 0x3ff, 0x800, 0x9, 0x6}, {0x5d, 0x3, 0xfffffff9, 0xc7, 0x9, 0x4}, {0x0, 0x7, 0x5c4, 0x3, 0x101, 0x8}, {0x401, 0x8, 0x5, 0x5059, 0x5, 0x29}, {0x6, 0x131c, 0x401, 0x695, 0x1, 0x40}, {0x2, 0x4, 0x0, 0xff, 0xfffffffd, 0x1}, {0x4, 0x915, 0x6640, 0x9, 0x5, 0x1}, {0x9, 0x0, 0x6, 0x8, 0x6, 0x2}, {0x3, 0x200, 0x1ad, 0x1, 0x4, 0x2}, {0x401, 0x7, 0x6, 0x0, 0x800, 0x3}, {0x8, 0x401, 0x7, 0x800, 0x8000, 0x7}, {0x7f, 0x100, 0xfff, 0x4, 0x65a, 0x1ff}, {0x400, 0x6, 0x2, 0x1, 0x8, 0x2}, {0x1000, 0x1, 0x3, 0x5, 0x1000, 0xade3}, {0x2000, 0x4, 0x0, 0x1, 0x5, 0x9}, {0x9, 0xee20, 0x4, 0x2, 0xd, 0x2}, {0x377, 0x7c5, 0x6, 0x6, 0xff, 0x3}, {0x8, 0x2f653cd8, 0x0, 0xfd, 0xfffffe00, 0x4}, {0x4, 0x3, 0x5, 0x400, 0x7, 0x10001}, {0x7, 0x1, 0x0, 0xffff, 0x4ebb, 0x1}, {0x34e, 0x0, 0x401, 0xff, 0x8, 0x101}, {0x4, 0x8, 0x0, 0x0, 0x2, 0xc}, {0x5, 0xe5cf, 0xec1, 0x7, 0x3ff, 0x9}, {0x2, 0x100, 0x10000, 0x1, 0x200, 0x1000}, {0x3, 0x0, 0xf, 0x3, 0x9, 0x8001}, {0xf, 0x3, 0x4, 0xa3bd, 0x6, 0x5}, {0x7, 0x9, 0x10000, 0xb, 0x8, 0x1}, {0x90, 0x3, 0x9, 0xfff, 0x7, 0x1}, {0x3, 0x5, 0xfffffff8, 0x3, 0x9, 0x2}, {0x5, 0x0, 0x0, 0x9, 0x8001, 0xd998}, {0x0, 0x10000, 0x0, 0x1, 0x400, 0x57c82e23}, {0x6, 0x4fd09519, 0x1ff, 0x7, 0x3, 0xff}, {0x4, 0x2, 0xfffffffa, 0x8000000, 0x10, 0x1000}, {0x0, 0x10000, 0xd73, 0x9, 0x5, 0x2}, {0xb2e, 0xf39, 0x4, 0x0, 0x1, 0x5}, {0x10000, 0x4, 0x6, 0x0, 0x2e430b75, 0xff}, {0x9, 0x10, 0x101, 0x0, 0x7ff, 0x80000001}, {0x18000000, 0x6, 0x7f, 0x8, 0x8, 0x1}, {0xbb03, 0x4, 0x2, 0x6, 0x9, 0x200000}, {0x0, 0xfffff801, 0x4, 0x7, 0x7, 0x282}, {0x4, 0x1, 0x7fffffff, 0x7, 0x100, 0xbf6}, {0x635, 0x4, 0x4, 0x80000000, 0x400, 0x1}, {0x4f, 0x101, 0x9a9a, 0x40, 0x1, 0x3}, {0xa, 0x6, 0x7, 0x40, 0x2}, {0x200, 0x1, 0x7, 0xa, 0x4, 0xffd6}, {0x4, 0x6d, 0xa, 0x10, 0x7a0, 0x10001}, {0x6, 0x7fff, 0x686, 0xa5, 0xb, 0x40}, {0x7000000, 0x2, 0x2, 0xc, 0x4, 0x6}, {0x40, 0x1, 0xf4, 0x1000, 0x0, 0x1}, {0xfff, 0x1, 0x7, 0x4, 0x81, 0x1}, {0x9, 0x0, 0x0, 0xb, 0x3, 0xffff3636}, {0xa, 0x401, 0x7697, 0x8, 0xffffffff, 0x8}, {0x5, 0x0, 0x1, 0xfffff7ed, 0x83c, 0xd5}, {0x4000, 0x1, 0x5, 0x4, 0x8}, {0xc, 0x9, 0x83, 0x0, 0x7f, 0x40000000}, {0x2, 0x2, 0xed, 0x7, 0x0, 0xfffffff1}, {0xea, 0x1a8, 0x0, 0x0, 0x4, 0xc}, {0x5, 0x2, 0x9, 0x2, 0x2, 0x3}, {0xd, 0x0, 0x8, 0x8, 0x3, 0x9}, {0x0, 0x0, 0x5, 0x1, 0xe, 0x4}, {0x1, 0x7ff, 0x7, 0x9, 0x5, 0x9}, {0xfffffffd, 0x1ff, 0xa68, 0x5, 0x3, 0x54b05a69}, {0x5, 0xfffffff8, 0x3, 0xd348, 0x4, 0x9}, {0x6, 0x1ff, 0xfa, 0x4, 0x9, 0x1800000}, {0x2, 0x0, 0x10000, 0x2, 0x1, 0x6}, {0x9c, 0xffffff7f, 0x3, 0x6, 0x80000000, 0x1}, {0xf, 0xffffffff, 0x7fff, 0x8, 0x6, 0x1}, {0xfffffff7, 0x0, 0x80, 0x0, 0x7, 0x200}, {0x8, 0x0, 0x400, 0x0, 0xa6, 0xffffffff}, {0x8, 0x10000, 0x8, 0x0, 0x1, 0x9}, {0x7e, 0x8, 0x1000, 0x2, 0x1, 0x2}, {0x2, 0x9a1, 0x8, 0x0, 0x7, 0x4f}, {0x5, 0x7f, 0x1724, 0x9, 0x7fffffff, 0x9}, {0x1ff, 0x8001, 0x2, 0xd, 0x4, 0x517}, {0x0, 0xfffffff8, 0x2, 0x6, 0x80000001, 0x6}, {0x1, 0x3, 0x60af, 0x3ff, 0x400, 0xf6}, {0x5, 0x6, 0x0, 0x1, 0xc, 0x1a}, {0x6, 0xd, 0x401, 0x1, 0x3, 0x6}, {0xa09, 0xfffffff7, 0xfffffffb, 0x400, 0xa6, 0xfffffc01}, {0x3b26e9dc, 0x0, 0xffffffff, 0x44, 0x6, 0x4}, {0x2, 0x10, 0x5d2, 0x7, 0x6}, {0xffff56c0, 0x4, 0x0, 0x200, 0x25b, 0x7}, {0x6, 0xfff, 0x9, 0x0, 0x400, 0x1}, {0x6, 0xb, 0x1, 0x3, 0x80000001, 0xc}, {0x60000000, 0xfffffffb, 0x6, 0x7f, 0x0, 0x1}, {0x9, 0xcef, 0x101, 0x9, 0x2, 0x5}, {0x2, 0x8000, 0x1, 0x0, 0x6, 0x1}, {0xfffffffe, 0x6c, 0x5, 0x6, 0x7fffffff, 0x7}, {0x3, 0x9, 0xd4, 0x2, 0xfffffffd, 0xa49e}, {0xfffff800, 0x9c, 0x8, 0xe144, 0x8, 0x1}, {0x7, 0x80000001, 0x10, 0x0, 0x3, 0x101}, {0x0, 0x200, 0xffff, 0x80, 0x7, 0x8}, {0xc83, 0x0, 0x5, 0x6, 0x3, 0x80000000}, {0x8, 0x200, 0x1, 0x4, 0xffff, 0xfffeffff}, {0x3, 0xfffffff3, 0xb, 0x9, 0x5, 0xd}, {0x9, 0x760, 0x1, 0x5, 0xf, 0x2}, {0x0, 0x5, 0x6, 0x400, 0x0, 0x9}], [{0x1}, {}, {0x0, 0x1}, {0x3}, {0x4}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0xd5127f9ba5884387, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1}, {}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1c8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r9 = dup2(r8, r7) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$tun(r9, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x9, 0x2880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m26.286451423s ago: executing program 37 (id=2843): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000280), 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 31.481928878s ago: executing program 0 (id=3650): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000c88) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xa748, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f00000005c0)={&(0x7f00000003c0)=@isdn, 0x80, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/52, 0x34}, {&(0x7f0000000500)=""/4, 0x4}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f0000000540)=""/80, 0x50}, {&(0x7f0000000980)=""/180, 0xb4}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/144, 0x90}], 0x7, &(0x7f0000000c00)=""/83, 0x53}, 0x0) socket(0x10, 0x803, 0x8) 31.402471355s ago: executing program 0 (id=3652): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0600000004000000080000000c0000000000000077f5667ed4da036df6d963606598e16b89199ef304418e3544b67d8e9c64dc2585abedd991e876b9d069db0ca96daef15ef61620645f969829291590a6285ac8119e7201f986efba37f0ca9744fdc5d14c043d33b457a6a5974f8c21f90c48454ca8fa82dad61ac167c0e405a8295c3634f6cea6b0b43c3cc84eeb62e692fe2d285cd53e4609d4c5f9d8c16c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="a2c273ccb632fe97fb094aa9dc0a3a97bcdf2668660fadd711a2d277f33a51b7319f494def011de31930b5457b1ec8c8150e8353b95b9564c6048b03de554ab33d17174a353cae4cf9c03d434aa231bfdcca0957c151ce991da6bc5461bdd85c079b36e633263f0fa55b04497eb84cf90b88f4d807142f4e263f04af26dff902eb6200c6f2d831e7c0b370b13aa0497b5bea8625dd34642da0562f7bb2525d86b16b3358db500f9f14fa6bd317270c2ef04c84b80fc59b46380ad81579b657fa652beaf6f0e325c95b108bac03f546653fbfb11d7262e04eeb1a574318c6b1f66523e4a7dff1a9cf3eb7cb4b3fac8d03", @ANYBLOB="0000000000000000b7082efc733800007b8af8ff00000000bfa200000000000007020000f8ffffffb7d54c0008000000b704000000000000850000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='f2fs_truncate_data_blocks_range\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pselect6(0x40, &(0x7f0000000600)={0x11, 0x0, 0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffff9, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) lseek(0xffffffffffffffff, 0x9, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018fd000000000000001c0000001c000000060000000e00000002000006040000000e0000006a3000000e7050f7eebfa78b000000000000000030016161ee1cc6ceb55676f358931030c31e8fc1b540d14b31ef939d935d6be6e72f943726caf11b854fe893a360eedf135fee0e928bf0bb36d4af054b5bd010b67bde832659a85f91dc78d8d5905e347d4cb79ef1f3534664c416e12354964841cd07e2dccf68227698720a38429a9012113b7eed033864acb8c14d09096c9ab4d572905bda57861d3f27bae42f5bd8c4b4c65927aaa19f61152b0718acc8"], &(0x7f0000000480)=""/190, 0x3a, 0xbe, 0x1, 0x5}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 30.424325363s ago: executing program 0 (id=3662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a", 0x2) sendfile(r2, r1, 0x0, 0x7ffff000) 29.531970726s ago: executing program 0 (id=3675): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5e4d234aee5b4b6e"], 0x8, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f00000009c0)=ANY=[], 0x1, 0x2d6, &(0x7f0000001300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b876f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)='E', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="200025bd7000fbdbdf25170000002c00098008000200ff070000080002000010000008000200aa2f000008000200010001000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40010) syz_clone(0xa0108400, &(0x7f00000001c0)="6539dd4a658659335a61affb2f6ab4e7115a76d589093f9cabd784b8df12d08e815b2ebcf126e8438f818d91c00dd8499100ba4431c2c94b2968ebfc605eacd20e5a", 0x42, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)="7c0f178912938959ee52a4e693aa4e47cb7ce2e5f5b7477d55d282e30b7fdddbc3283a39fb564444b45c87f3686e9e59ce9f9b62b02eb0c939dfc48e9e6b1f3ac6e3961959a9acc990a0a1ea7c4f8e1c500d11c3c80af80b333aa9a39ed04db976fbfdf72730d728efdedddd11cf529e69d831692a8593fae0a8a0c6a2a77ff25321b98dfa4ec9eb279e12a0c7692fd0fc2c2cc21dde6ef9ba25e9a70806320603b0e6a468f3d267084a5ec552f022786cd4944bc3c87a707bacb77f20cd065c2082c0cf057f3a153f9d5aa396e2b0a5f2ef05cd10") 28.480203361s ago: executing program 0 (id=3701): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000c88) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xa748, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 28.23465002s ago: executing program 0 (id=3710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 28.23447804s ago: executing program 38 (id=3710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 27.139742399s ago: executing program 9 (id=3731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a", 0x2) sendfile(r2, r1, 0x0, 0x7ffff000) 26.25799795s ago: executing program 9 (id=3736): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0xfffffffffffffd5d) io_setup(0x2, &(0x7f0000002400)=0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff", 0x4, 0x0, 0x0, 0x2}]) 26.119188401s ago: executing program 9 (id=3739): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000040)=0x6e, 0x80800) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/208, 0xd0}], 0x2, &(0x7f00000017c0)=""/4096, 0x1000}, 0x10}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f00000027c0)=""/250, 0xfa}, {&(0x7f0000000600)}, {&(0x7f00000028c0)=""/191, 0xbf}, {&(0x7f0000000640)}, {&(0x7f0000002980)=""/212, 0xd4}, {&(0x7f0000002a80)=""/153, 0x99}], 0x8, &(0x7f0000002bc0)=""/4, 0x4}, 0x101}, {{&(0x7f0000002c00)=@isdn, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002c80)=""/232, 0xe8}, {&(0x7f0000002d80)=""/134, 0x86}], 0x2}, 0xfffffff3}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e80)=""/12, 0xc}, {&(0x7f0000002ec0)=""/10, 0xa}], 0x2, &(0x7f0000002f40)=""/29, 0x1d}, 0x5}], 0x4, 0x40010100, &(0x7f0000003080)={0x77359400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="0700000004000000206e100571061b56c9fb6507cc467201d5f9d0cf327f2ff21d3588c8000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686424000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001204000580040004800900010073797a3000000000140000001100010000000000000000000700000a000000"], 0x108}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r5 = dup(0xffffffffffffffff) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) dup3(r4, r5, 0x0) r6 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r7, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f0000000640)='hQ', 0x2}, {&(0x7f0000000900)="0db834278411be986e8bd0ae880053c48bcda26f", 0x14}], 0x3, 0xffffffff, 0x4) ioctl$TCFLSH(r4, 0x540b, 0x1) 26.097204153s ago: executing program 9 (id=3740): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f00000009c0)=ANY=[], 0x1, 0x2d6, &(0x7f0000001300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b876f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)='E', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="200025bd7000fbdbdf25170000002c00098008000200ff070000080002000010000008000200aa2f000008000200010001000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40010) syz_clone(0xa0108400, &(0x7f00000001c0)="6539dd4a658659335a61affb2f6ab4e7115a76d589093f9cabd784b8df12d08e815b2ebcf126e8438f818d91c00dd8499100ba4431c2c94b2968ebfc605eacd20e5a", 0x42, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)="7c0f178912938959ee52a4e693aa4e47cb7ce2e5f5b7477d55d282e30b7fdddbc3283a39fb564444b45c87f3686e9e59ce9f9b62b02eb0c939dfc48e9e6b1f3ac6e3961959a9acc990a0a1ea7c4f8e1c500d11c3c80af80b333aa9a39ed04db976fbfdf72730d728efdedddd11cf529e69d831692a8593fae0a8a0c6a2a77ff25321b98dfa4ec9eb279e12a0c7692fd0fc2c2cc21dde6ef9ba25e9a70806320603b0e6a468f3d267084a5ec552f022786cd4944bc3c87a707bacb77f20cd065c2082c0cf057f3a153f9d5aa396e2b0a5f2ef05cd10") 25.15268311s ago: executing program 9 (id=3751): io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r0, 0x200000000000032d, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x3, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x26) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x82400, 0x10a, 0x5}, 0x18) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000180)) mkdirat(r9, &(0x7f0000000140)='./file0\x00', 0x40) 24.89322416s ago: executing program 9 (id=3756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 24.849477654s ago: executing program 39 (id=3756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 15.786580815s ago: executing program 7 (id=3868): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 15.463653302s ago: executing program 7 (id=3869): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e0000000400000004", @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x2, 0x476, &(0x7f0000000540)="$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") 15.220389001s ago: executing program 7 (id=3874): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18050000000020000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000004000005c61ce751459f27a30239236b92e7511eb700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r6], 0x4c}}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, &(0x7f0000000a80)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/211, 0xd3}, {&(0x7f0000000540)=""/26, 0x1a}, {&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000000640)=""/78, 0x4e}, {&(0x7f0000000940)=""/40, 0x28}], 0x5, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x12002) r11 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) recvfrom$phonet(r11, &(0x7f0000000140)=""/135, 0x87, 0x0, &(0x7f00000000c0)={0x23, 0x0, 0x7, 0xd}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000100)=0x2) 15.081281563s ago: executing program 7 (id=3876): msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f00000009c0)=ANY=[], 0x1, 0x2d6, &(0x7f0000001300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b876f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)='E', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="200025bd7000fbdbdf25170000002c00098008000200ff070000080002000010000008000200aa2f000008000200010001000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40010) syz_clone(0xa0108400, &(0x7f00000001c0)="6539dd4a658659335a61affb2f6ab4e7115a76d589093f9cabd784b8df12d08e815b2ebcf126e8438f818d91c00dd8499100ba4431c2c94b2968ebfc605eacd20e5a", 0x42, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)="7c0f178912938959ee52a4e693aa4e47cb7ce2e5f5b7477d55d282e30b7fdddbc3283a39fb564444b45c87f3686e9e59ce9f9b62b02eb0c939dfc48e9e6b1f3ac6e3961959a9acc990a0a1ea7c4f8e1c500d11c3c80af80b333aa9a39ed04db976fbfdf72730d728efdedddd11cf529e69d831692a8593fae0a8a0c6a2a77ff25321b98dfa4ec9eb279e12a0c7692fd0fc2c2cc21dde6ef9ba25e9a70806320603b0e6a468f3d267084a5ec552f022786cd4944bc3c87a707bacb77f20cd065c2082c0cf057f3a153f9d5aa396e2b0a5f2ef05cd10") 14.193286744s ago: executing program 7 (id=3894): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)=[{&(0x7f0000000580)=""/226, 0xe2}]}, &(0x7f0000000300)="ff33501ef663", 0x0, 0x840804, 0x0, 0x1000, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@debug}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, 0x0, &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 13.925087386s ago: executing program 7 (id=3895): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 13.915445786s ago: executing program 40 (id=3895): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 13.13406893s ago: executing program 1 (id=3906): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 13.082926214s ago: executing program 1 (id=3907): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000008c0)=0x400002) syz_io_uring_setup(0x22f, &(0x7f0000000400)={0x0, 0x8ffd, 0x200, 0x2, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x6, &(0x7f0000000a40)=""/213, &(0x7f0000000b40)=0xd5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0xa8000, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffa, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r4, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r5, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 11.593688244s ago: executing program 1 (id=3918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=0x0, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a00000800040001000000", 0x24) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000600ffffff0001000200000000748372680008000400", @ANYRES32=0x0, @ANYBLOB="10000000000000002000020000000000"], 0x2c, 0x2) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x0, 0x2, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x7fff, 0x100, {{0x9, 0x4, 0x2, 0x0, 0x24, 0x66, 0x0, 0x8, 0x11, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x8, 0xe3, 0x0, 0x7, [0x2]}, @timestamp={0x44, 0x8, 0xf2, 0x0, 0x4, [0x9]}]}}}}}) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7ff, 0x80000001, 0x10, 0x10000, r9, 0xed, '\x00', r10, r11, 0x1, 0x8001, 0x5, 0xb}, 0x50) 11.362587503s ago: executing program 1 (id=3922): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f00000009c0)=ANY=[], 0x1, 0x2d6, &(0x7f0000001300)="$eJzs3c9qE10UAPDTJE3T8vG1a3ERcKOboq7dBKkgBgqVLNSNgSpIK0K6ia7yCm7EZ/CRXPgQXRVcRKYz7aRN0kKZzPTP7wfTnpkT7pwZJnNnce/k/f3Pe7tfDj6Of/+MVqsdjWhFHEVsRC3qkVpK/rRO4mZMGtXPrMZKAADX3c5OvzMvNyq3FArRmNoyGHT6yzOfzXq/SioKAAAAAAAAAACAgk2P/4/RzPH/EVE7O/7/ODBGEABunovG/3M7DAad/lr6/HZutqbx/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB1GjFeH4/Hj/5LV5M4X5qxXnV9AEDxjib7+9Pl7zij/weAW2h2/58vVdcHABRvov+PuKT/r1dXJgBQoNdv3r7qdLtbO+12K+JwNOwNe+n/NP/iZXfrcfvYRkTU0q2Hw2Gvfpp/kubbeatJfjnWsvzTmflmPHyQ5pPc8+3uufxK7JZzCgAAAAAAAAAAAAAAAAAAAKBymycv9Unn92fy+f2bm9s//nw6nf8/kU+j7P0AtZia39+Ie43L9r5S1GEAAAAAAAAAAAAAAAAAAADAjXbw9dtef3//w6CcYCkiim25HhHHQSPbUi98FxPB4lpOglbMSzUj4sotJyd9dirJXLXm72kQc2u+KHj2LuLSDy/trcZUarX8i3axwWr2Tbwu9fyfXS3z7hjN8m5OAAAAAAAAAAAAAAAAAABwx+Szf6uuBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACqk//+/+KCqo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBv+BQAA//8hOXWq") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b876f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)='E', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="200025bd7000fbdbdf25170000002c00098008000200ff070000080002000010000008000200aa2f000008000200010001000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40010) syz_clone(0xa0108400, &(0x7f00000001c0)="6539dd4a658659335a61affb2f6ab4e7115a76d589093f9cabd784b8df12d08e815b2ebcf126e8438f818d91c00dd8499100ba4431c2c94b2968ebfc605eacd20e5a", 0x42, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)="7c0f178912938959ee52a4e693aa4e47cb7ce2e5f5b7477d55d282e30b7fdddbc3283a39fb564444b45c87f3686e9e59ce9f9b62b02eb0c939dfc48e9e6b1f3ac6e3961959a9acc990a0a1ea7c4f8e1c500d11c3c80af80b333aa9a39ed04db976fbfdf72730d728efdedddd11cf529e69d831692a8593fae0a8a0c6a2a77ff25321b98dfa4ec9eb279e12a0c7692fd0fc2c2cc21dde6ef9ba25e9a70806320603b0e6a468f3d267084a5ec552f022786cd4944bc3c87a707bacb77f20cd065c2082c0cf057f3a153f9d5aa396e2b0a5f2ef05cd10") 10.53173343s ago: executing program 1 (id=3936): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 10.202672166s ago: executing program 1 (id=3940): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0xb29}, &(0x7f00000004c0)=0x7, 0x0, 0xa, 0x2, 0x3, 0xfff, 0x16, 0x100000001}}], 0x58}, 0x0) 10.202548136s ago: executing program 41 (id=3940): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0xb29}, &(0x7f00000004c0)=0x7, 0x0, 0xa, 0x2, 0x3, 0xfff, 0x16, 0x100000001}}], 0x58}, 0x0) 7.514385973s ago: executing program 8 (id=3996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) truncate(&(0x7f00000000c0)='./file0\x00', 0x4) 7.498089335s ago: executing program 8 (id=3997): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18050000000020000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000004000005c61ce751459f27a30239236b92e7511eb700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x1) 7.106283876s ago: executing program 8 (id=4001): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xa8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8001}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006d40)=@newtaction={0x1c8c, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x1c78, 0x1, [@m_pedit={0x1c74, 0x1, 0x0, 0x0, {{0xa}, {0x1c48, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xcdc5, 0x100, 0x8, 0xc, 0x7ff}, 0xc, 0x5e}, [{0x7fff, 0x6, 0x9, 0x59, 0x8, 0x1000}, {0x0, 0x9, 0x9, 0x6, 0x7, 0x6}, {0x400, 0x0, 0xa, 0x2, 0x1000, 0xf}, {0x5, 0x2, 0x9f, 0x9, 0xfffff001, 0x8}, {0x4, 0x1, 0xffff, 0x6, 0x80000000, 0xa}, {0x3, 0x2, 0x7, 0x6, 0x8, 0x2}, {0x4d5f, 0x17, 0x6, 0x8, 0x6, 0x2}, {0x9, 0x4, 0x5, 0x9, 0x8, 0x8}, {0x3, 0x80000000, 0x3, 0x9, 0x9ce, 0x100}, {0x3, 0x1, 0x401, 0x8, 0x7f, 0xed}, {0x40, 0xfffffff2, 0x7fffffff, 0x1, 0x7, 0x9}, {0xffffffff, 0x4, 0x8, 0xe, 0x5, 0xf}, {0x6, 0x6, 0x2, 0x9, 0x4, 0xe2571b5}, {0xffff, 0x3, 0x7, 0x87, 0x3, 0x7fffffff}, {0x8e7, 0x4, 0xe4bd, 0x3, 0x7, 0x3d4}, {0x8, 0x6, 0x8, 0x0, 0xffffff61}, {0x1ff, 0x81, 0xaf2, 0x401, 0x3, 0x1}, {0x80000000, 0x2, 0x1, 0x4, 0xd56, 0xc}, {0x81, 0xffffff7f, 0x2, 0x0, 0x101, 0x1000}, {0x6, 0x1, 0x8, 0xffffffff, 0x5, 0x8}, {0x605, 0x3, 0xffffff7c, 0x8, 0xc3c, 0x3}, {0xfffffff7, 0xfffffff3, 0xb8, 0xc, 0x0, 0x100}, {0x7, 0x4, 0x6, 0x40, 0x3, 0x1000100}, {0x6fe, 0xcf, 0x3, 0x3, 0xba, 0x3}, {0x200, 0xffffff09, 0xcba, 0x4, 0x1, 0xdc}, {0x7f, 0x5, 0x7, 0x7, 0x8000, 0x6}, {0x7, 0x1, 0x8, 0x10, 0x6, 0xffff}, {0x101, 0x7, 0x683b, 0x2, 0x3d8, 0x10}, {0x6, 0x6, 0xb, 0x2, 0xc442, 0x9}, {0xa, 0xb5, 0x6, 0x8, 0x7f, 0x1}, {0x6de, 0x101, 0x8, 0x3d, 0x6e2d1bf4, 0xffff}, {0x4, 0x9, 0x7, 0xfff, 0x9}, {0x6, 0x3, 0x101, 0x9, 0x6, 0x1}, {0x6, 0x40, 0x3, 0x0, 0x6, 0x7}, {0x44f6, 0x8, 0x8, 0xa8, 0x5, 0x4}, {0x7, 0xd0a1, 0x1, 0x6, 0x8, 0x8}, {0x6, 0x4, 0x5a, 0x3, 0x4, 0x9}, {0xfffffc00, 0x0, 0x8, 0x2, 0x5801, 0x6}, {0xd68a, 0x4, 0x8001, 0x3, 0x8, 0x1}, {0x5, 0x7, 0x8, 0x5, 0xffffc2a8, 0x2}, {0x7ff, 0x8000, 0xfffffffa, 0x8, 0x80000000, 0x9}, {0x63, 0x100, 0x8, 0x8, 0x7fffffff}, {0x7, 0x0, 0xb, 0x4, 0xd778, 0x8655}, {0xfffffff9, 0x401, 0x3, 0x1, 0x1f, 0x4}, {0x4, 0x0, 0x6, 0x9, 0xa061, 0x2f33}, {0x7, 0x3, 0x5, 0x1, 0x2, 0x600000}, {0x81, 0x2, 0x7, 0x401, 0x4, 0x1}, {0x3, 0xc3e3, 0x3e5, 0x9, 0x9313, 0x4}, {0x9, 0x1, 0x1, 0x80, 0x5, 0x9}, {0x8, 0x4, 0x2, 0x40, 0x1, 0x4}, {0x6, 0x10001, 0x4, 0x100, 0x5, 0x3ff}, {0x7ff, 0x81, 0x3, 0x7, 0xa, 0x7}, {0x1, 0x2, 0x5, 0x399, 0x3, 0xffffffff}, {0x10, 0x2, 0x9, 0x8001, 0x1ff, 0x5}, {0x8000, 0x7, 0xfffffffb, 0x5, 0x7, 0x5fc}, {0xc917, 0x10, 0x1, 0x2, 0x4, 0xfffff1da}, {0xfffff837, 0xb, 0xba7c, 0xfffffff2, 0x6, 0x2}, {0x5, 0x40, 0x4, 0x0, 0xf07, 0xf}, {0x2, 0x8001, 0x4, 0x810, 0x8, 0xffffffff}, {0x0, 0xcb, 0xc, 0x3, 0x0, 0x80}, {0x6, 0x7, 0x3, 0x4, 0x7, 0x2}, {0xfff, 0x10001, 0x7f, 0x5, 0xe841, 0x8}, {0x2, 0x1, 0x1ff, 0x3, 0x0, 0x1}, {0x6, 0x7, 0x1400000, 0x8, 0x80000000, 0x5}, {0xb7e, 0x3, 0x4, 0x0, 0x5, 0x400}, {0xc, 0x81, 0x2, 0x5, 0x400}, {0x4, 0x3, 0x6, 0x7, 0x3, 0x3}, {0x5, 0xffff, 0x0, 0x0, 0x2e2, 0x2}, {0x6, 0x4, 0xff, 0x9, 0x61222e, 0x3}, {0x0, 0xc4b, 0x8, 0x80000000, 0x200, 0x1}, {0x1, 0x2, 0x3, 0x5, 0x5192c3ef, 0x2}, {0x100, 0xfffffffa, 0x2fb, 0x0, 0x4, 0x3}, {0x8, 0x3, 0x80000001, 0x101, 0x431, 0x2}, {0x6, 0x0, 0xf5, 0x3ff, 0x3, 0xe4e6}, {0xab, 0xffff, 0x200, 0x4, 0x3, 0x9}, {0x2, 0x7, 0x3, 0x4, 0x0, 0x4}, {0x80000000, 0x9, 0x37, 0x80000001, 0x1, 0x9}, {0x331, 0x800, 0x9, 0x4, 0xf, 0x6}, {0xe9, 0x0, 0xa7, 0x7, 0x4, 0x9}, {0x9, 0x3, 0x3, 0xfffffff7, 0x7fff, 0x3}, {0x1, 0x9, 0x4, 0xfffffffb, 0xd, 0x9}, {0x2, 0x1, 0x7, 0x8001, 0x1, 0xffff8001}, {0x2, 0x19a8, 0x800, 0x101, 0x3, 0x5}, {0x4800, 0xcb, 0x80000001, 0x2, 0x7, 0x7}, {0xb, 0x3, 0x8, 0x4df0, 0x7, 0x40}, {0x3, 0x0, 0xda2, 0x42d4, 0x3, 0x4}, {0x0, 0xbf, 0x5, 0xffff, 0x6}, {0x1ff, 0x10001, 0x0, 0x9, 0x7, 0x10001}, {0x45b, 0x9, 0x4, 0x5, 0x6, 0xbc2}, {0x4, 0x2, 0xa9, 0x2, 0x2, 0x9}, {0x0, 0x200, 0xbf, 0x6, 0x266, 0x8}, {0x80000001, 0x0, 0x0, 0x1, 0x6, 0x5}, {0x19c00000, 0x9, 0x5, 0x9, 0x4, 0x1}, {0x0, 0x0, 0x7, 0x2, 0x4, 0xfffffffd}, {0x0, 0x1, 0xe, 0x8, 0x79, 0xd}, {0x400, 0x7, 0xc, 0x8, 0xf, 0x3}, {0x5, 0x5, 0x9, 0xa0d, 0x40, 0x6456}, {0xbb4e, 0x0, 0x3a, 0x8, 0xfffffffb, 0x8}, {0x10, 0x7ff, 0x7, 0xfff, 0x0, 0x9}, {0x8, 0x40, 0xfff, 0x1, 0x1, 0x1}, {0x0, 0x0, 0xe72, 0x8, 0x0, 0x3}, {0x401, 0x6, 0x8, 0x2, 0x2dbf19f1, 0x81}, {0x7, 0x6, 0xa5, 0x0, 0x401, 0xc}, {0x2, 0x9, 0x9864, 0x9b, 0x5}, {0x6, 0x7ff, 0x5fc5, 0xb, 0x7, 0x237}, {0x0, 0x80000001, 0xa4, 0x0, 0x7, 0x40}, {0x9, 0x6, 0x1000, 0x7, 0xd2e, 0x1}, {0x7, 0x3, 0xc, 0x8, 0x40, 0xb}, {0x7, 0x2, 0x7, 0x8, 0x200, 0x8}, {0x9, 0xffff, 0x101, 0x7a, 0x8, 0xfffffff8}, {0x9, 0x4, 0x0, 0x4, 0x8001, 0x800}, {0x2, 0x83a, 0x5, 0x2, 0x9, 0xffffffff}, {0xffffff4c, 0x2, 0x10001, 0x2, 0x7, 0x2}, {0x5, 0x0, 0x3, 0x0, 0xb, 0x6}, {0x3, 0x9, 0x7, 0x0, 0x7f, 0x800}, {0x2, 0x80000001, 0xe, 0x2, 0x6, 0xd5f}, {0x1, 0x7fffffff, 0x2, 0x3, 0x7, 0x6}, {0x400, 0xfffffffc, 0x4, 0xa6, 0x0, 0xfffffffc}, {0x5, 0x5, 0xff, 0xfffffffd, 0x5, 0x2}, {0x3, 0x4, 0x6, 0xc6b60000, 0x3ff, 0x10}, {0x2, 0xf27, 0x8, 0x6, 0xfffffffb, 0x5}, {0xe, 0x53, 0x400, 0x8, 0x6, 0x9}, {0x42, 0x1, 0xfff, 0x15f2, 0x3, 0x401}, {0xc7e8, 0x1, 0xfffffffe, 0x9, 0x3, 0x6}, {0x7f, 0x1000, 0xd19, 0x5, 0xfff, 0xb7}, {0x3, 0xed0, 0x8, 0x2, 0x1, 0x2}, {0x1, 0xdba, 0x4, 0xe3, 0x5, 0x5}, {0x8001, 0x831b0aa, 0x6, 0x200, 0x0, 0x4}], [{0x1}, {0x5}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0xd482b2beb95f1396}, {0x1, 0x1}, {0x2, 0x1}, {0xdf6e2fd7682863b7, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x0, 0x5dc99bf9bb419254}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x6d7d4d20e070fc88, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0xe371b5ac9b19a6e7}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x6}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x63017a1fdf0e3bbe}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0xf, 0x8, 0x4, 0x8}, 0x9}, [{0x24, 0x2, 0x0, 0x4, 0x3, 0x6}, {0xb, 0x1, 0x2, 0x9, 0x4, 0x4}, {0x1, 0x7, 0x4, 0x1, 0x800, 0x6}, {0xb, 0x5, 0xa78b, 0x6, 0x2, 0x9}, {0x2, 0x7, 0x9, 0x2, 0x9, 0x3}, {0x0, 0x4, 0x9, 0x9, 0x5, 0x824100}, {0xd, 0x7, 0xa, 0xfffffff8, 0x7, 0x33}, {0x1, 0x14, 0x5, 0x3, 0x200, 0xc}, {0x6, 0xffffff8e, 0x5, 0x3, 0x7fffffff, 0x3}, {0x4, 0xff, 0x8, 0x80000000, 0x271b, 0x51b8}, {0x31bf, 0x1, 0x8, 0x2, 0x1, 0x5}, {0x2, 0x4, 0x3, 0x1, 0x7a}, {0x4, 0x8000, 0xd232, 0x0, 0xfd, 0xfffffff9}, {0xbb5, 0x8, 0x4, 0x6, 0x5b, 0x1}, {0x200, 0x8000, 0x8, 0x4, 0x5, 0xdc3f}, {0x401, 0x40, 0x3, 0x1, 0x2}, {0x10001, 0x6, 0x8f, 0x7fff, 0x2, 0x7}, {0x5, 0x80000001, 0x5, 0x6, 0xffffffff, 0x2}, {0x0, 0x5, 0x9, 0x1, 0x5, 0x4}, {0x9, 0x10, 0x5, 0x7, 0x7, 0x7}, {0xc, 0x6, 0x1, 0x3, 0x48d, 0x7}, {0x4, 0x8, 0x800, 0x7fffffff, 0xb, 0x9}, {0x0, 0x8, 0x3, 0xffffffff, 0x7fff, 0x6}, {0x6, 0x78000000, 0xf, 0x8, 0x3, 0x8}, {0x1, 0x0, 0x40, 0xcbe, 0x1, 0x2}, {0xb757, 0x0, 0x8, 0x10, 0x1, 0x400}, {0x3, 0x3, 0x7e0, 0x3, 0x1, 0x9}, {0x4, 0x7fffffff, 0x1, 0x6, 0x7f, 0x4}, {0xffff, 0x3, 0xfffffffc, 0x1, 0x5, 0x2}, {0x5, 0xe, 0x9, 0x6, 0xa7dc, 0xffffe805}, {0x9, 0x538, 0x4, 0x2, 0x80c, 0x4}, {0x8, 0x3ff, 0x800, 0x9, 0x6}, {0x5d, 0x3, 0xfffffff9, 0xc7, 0x9, 0x4}, {0x0, 0x7, 0x5c4, 0x3, 0x101, 0x8}, {0x401, 0x8, 0x5, 0x5059, 0x5, 0x29}, {0x6, 0x131c, 0x401, 0x695, 0x1, 0x40}, {0x2, 0x4, 0x0, 0xff, 0xfffffffd, 0x1}, {0x4, 0x915, 0x6640, 0x9, 0x5, 0x1}, {0x9, 0x0, 0x6, 0x8, 0x6, 0x2}, {0x3, 0x200, 0x1ad, 0x1, 0x4, 0x2}, {0x401, 0x7, 0x6, 0x0, 0x800, 0x3}, {0x8, 0x401, 0x7, 0x800, 0x8000, 0x7}, {0x7f, 0x100, 0xfff, 0x4, 0x65a, 0x1ff}, {0x400, 0x6, 0x2, 0x1, 0x8, 0x2}, {0x1000, 0x1, 0x3, 0x5, 0x1000, 0xade3}, {0x2000, 0x4, 0x0, 0x1, 0x5, 0x9}, {0x9, 0xee20, 0x4, 0x2, 0xd, 0x2}, {0x377, 0x7c5, 0x6, 0x6, 0xff, 0x3}, {0x8, 0x2f653cd8, 0x0, 0xfd, 0xfffffe00, 0x4}, {0x4, 0x3, 0x5, 0x400, 0x7, 0x10001}, {0x7, 0x1, 0x0, 0xffff, 0x4ebb, 0x1}, {0x34e, 0x0, 0x401, 0xff, 0x8, 0x101}, {0x4, 0x8, 0x0, 0x0, 0x2, 0xc}, {0x5, 0xe5cf, 0xec1, 0x7, 0x3ff, 0x9}, {0x2, 0x100, 0x10000, 0x1, 0x200, 0x1000}, {0x3, 0x0, 0xf, 0x3, 0x9, 0x8001}, {0xf, 0x3, 0x4, 0xa3bd, 0x6, 0x5}, {0x7, 0x9, 0x10000, 0xb, 0x8, 0x1}, {0x90, 0x3, 0x9, 0xfff, 0x7, 0x1}, {0x3, 0x5, 0xfffffff8, 0x3, 0x9, 0x2}, {0x5, 0x0, 0x0, 0x9, 0x8001, 0xd998}, {0x0, 0x10000, 0x0, 0x1, 0x400, 0x57c82e23}, {0x6, 0x4fd09519, 0x1ff, 0x7, 0x3, 0xff}, {0x4, 0x2, 0xfffffffa, 0x8000000, 0x10, 0x1000}, {0x0, 0x10000, 0xd73, 0x9, 0x5, 0x2}, {0xb2e, 0xf39, 0x4, 0x0, 0x1, 0x5}, {0x10000, 0x4, 0x6, 0x0, 0x2e430b75, 0xff}, {0x9, 0x10, 0x101, 0x0, 0x7ff, 0x80000001}, {0x18000000, 0x6, 0x7f, 0x8, 0x8, 0x1}, {0xbb03, 0x4, 0x2, 0x6, 0x9, 0x200000}, {0x0, 0xfffff801, 0x4, 0x7, 0x7, 0x282}, {0x4, 0x1, 0x7fffffff, 0x7, 0x100, 0xbf6}, {0x635, 0x4, 0x4, 0x80000000, 0x400, 0x1}, {0x4f, 0x101, 0x9a9a, 0x40, 0x1, 0x3}, {0xa, 0x6, 0x7, 0x40, 0x2}, {0x200, 0x1, 0x7, 0xa, 0x4, 0xffd6}, {0x4, 0x6d, 0xa, 0x10, 0x7a0, 0x10001}, {0x6, 0x7fff, 0x686, 0xa5, 0xb, 0x40}, {0x7000000, 0x2, 0x2, 0xc, 0x4, 0x6}, {0x40, 0x1, 0xf4, 0x1000, 0x0, 0x1}, {0xfff, 0x1, 0x7, 0x4, 0x81, 0x1}, {0x9, 0x0, 0x0, 0xb, 0x3, 0xffff3636}, {0xa, 0x401, 0x7697, 0x8, 0xffffffff, 0x8}, {0x5, 0x0, 0x1, 0xfffff7ed, 0x83c, 0xd5}, {0x4000, 0x1, 0x5, 0x4, 0x8}, {0xc, 0x9, 0x83, 0x0, 0x7f, 0x40000000}, {0x2, 0x2, 0xed, 0x7, 0x0, 0xfffffff1}, {0xea, 0x1a8, 0x0, 0x0, 0x4, 0xc}, {0x5, 0x2, 0x9, 0x2, 0x2, 0x3}, {0xd, 0x0, 0x8, 0x8, 0x3, 0x9}, {0x0, 0x0, 0x5, 0x1, 0xe, 0x4}, {0x1, 0x7ff, 0x7, 0x9, 0x5, 0x9}, {0xfffffffd, 0x1ff, 0xa68, 0x5, 0x3, 0x54b05a69}, {0x5, 0xfffffff8, 0x3, 0xd348, 0x4, 0x9}, {0x6, 0x1ff, 0xfa, 0x4, 0x9, 0x1800000}, {0x2, 0x0, 0x10000, 0x2, 0x1, 0x6}, {0x9c, 0xffffff7f, 0x3, 0x6, 0x80000000, 0x1}, {0xf, 0xffffffff, 0x7fff, 0x8, 0x6, 0x1}, {0xfffffff7, 0x0, 0x80, 0x0, 0x7, 0x200}, {0x8, 0x0, 0x400, 0x0, 0xa6, 0xffffffff}, {0x8, 0x10000, 0x8, 0x0, 0x1, 0x9}, {0x7e, 0x8, 0x1000, 0x2, 0x1, 0x2}, {0x2, 0x9a1, 0x8, 0x0, 0x7, 0x4f}, {0x5, 0x7f, 0x1724, 0x9, 0x7fffffff, 0x9}, {0x1ff, 0x8001, 0x2, 0xd, 0x4, 0x517}, {0x0, 0xfffffff8, 0x2, 0x6, 0x80000001, 0x6}, {0x1, 0x3, 0x60af, 0x3ff, 0x400, 0xf6}, {0x5, 0x6, 0x0, 0x1, 0xc, 0x1a}, {0x6, 0xd, 0x401, 0x1, 0x3, 0x6}, {0xa09, 0xfffffff7, 0xfffffffb, 0x400, 0xa6, 0xfffffc01}, {0x3b26e9dc, 0x0, 0xffffffff, 0x44, 0x6, 0x4}, {0x2, 0x10, 0x5d2, 0x7, 0x6}, {0xffff56c0, 0x4, 0x0, 0x200, 0x25b, 0x7}, {0x6, 0xfff, 0x9, 0x0, 0x400, 0x1}, {0x6, 0xb, 0x1, 0x3, 0x80000001, 0xc}, {0x60000000, 0xfffffffb, 0x6, 0x7f, 0x0, 0x1}, {0x9, 0xcef, 0x101, 0x9, 0x2, 0x5}, {0x2, 0x8000, 0x1, 0x0, 0x6, 0x1}, {0xfffffffe, 0x6c, 0x5, 0x6, 0x7fffffff, 0x7}, {0x3, 0x9, 0xd4, 0x2, 0xfffffffd, 0xa49e}, {0xfffff800, 0x9c, 0x8, 0xe144, 0x8, 0x1}, {0x7, 0x80000001, 0x10, 0x0, 0x3, 0x101}, {0x0, 0x200, 0xffff, 0x80, 0x7, 0x8}, {0xc83, 0x0, 0x5, 0x6, 0x3, 0x80000000}, {0x8, 0x200, 0x1, 0x4, 0xffff, 0xfffeffff}, {0x3, 0xfffffff3, 0xb, 0x9, 0x5, 0xd}, {0x9, 0x760, 0x1, 0x5, 0xf, 0x2}, {0x0, 0x5, 0x6, 0x400, 0x0, 0x9}], [{0x1}, {}, {0x0, 0x1}, {0x3}, {0x4}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0xd5127f9ba5884387, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1}, {}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1c8c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r9 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r10 = dup2(r9, r8) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r11, &(0x7f0000001b40)=[{&(0x7f0000000040)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001ac0)=""/18, 0x12}], 0x3) write$tun(r10, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x9, 0x2880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 6.666371632s ago: executing program 8 (id=4014): msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f00000009c0)=ANY=[], 0x1, 0x2d6, &(0x7f0000001300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b876f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)='E', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="200025bd7000fbdbdf25170000002c00098008000200ff070000080002000010000008000200aa2f000008000200010001000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40010) syz_clone(0xa0108400, &(0x7f00000001c0)="6539dd4a658659335a61affb2f6ab4e7115a76d589093f9cabd784b8df12d08e815b2ebcf126e8438f818d91c00dd8499100ba4431c2c94b2968ebfc605eacd20e5a", 0x42, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)="7c0f178912938959ee52a4e693aa4e47cb7ce2e5f5b7477d55d282e30b7fdddbc3283a39fb564444b45c87f3686e9e59ce9f9b62b02eb0c939dfc48e9e6b1f3ac6e3961959a9acc990a0a1ea7c4f8e1c500d11c3c80af80b333aa9a39ed04db976fbfdf72730d728efdedddd11cf529e69d831692a8593fae0a8a0c6a2a77ff25321b98dfa4ec9eb279e12a0c7692fd0fc2c2cc21dde6ef9ba25e9a70806320603b0e6a468f3d267084a5ec552f022786cd4944bc3c87a707bacb77f20cd065c2082c0cf057f3a153f9d5aa396e2b0a5f2ef05cd10") 6.582235889s ago: executing program 8 (id=4016): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)=[{&(0x7f0000000580)=""/226, 0xe2}]}, &(0x7f0000000300)="ff33501ef663", 0x0, 0x840804, 0x0, 0x1000, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@debug}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 4.484133648s ago: executing program 8 (id=4044): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/208, 0xd0}], 0x2, &(0x7f00000017c0)=""/4096, 0x1000}, 0x10}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f00000027c0)=""/250, 0xfa}, {&(0x7f0000000600)}, {&(0x7f00000028c0)=""/191, 0xbf}, {&(0x7f0000000640)}, {&(0x7f0000002980)=""/212, 0xd4}, {&(0x7f0000002a80)=""/153, 0x99}], 0x8, &(0x7f0000002bc0)=""/4, 0x4}, 0x101}, {{&(0x7f0000002c00)=@isdn, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002c80)=""/232, 0xe8}, {&(0x7f0000002d80)=""/134, 0x86}], 0x2}, 0xfffffff3}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e80)=""/12, 0xc}, {&(0x7f0000002ec0)=""/10, 0xa}], 0x2, &(0x7f0000002f40)=""/29, 0x1d}, 0x5}], 0x4, 0x40010100, &(0x7f0000003080)={0x77359400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="0700000004000000206e100571061b56c9fb6507cc467201d5f9d0cf327f2ff21d3588c8000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup(r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) dup3(r3, r5, 0x0) r6 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r7, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f0000000640)='hQ', 0x2}, {&(0x7f0000000900)="0db834278411be986e8bd0ae880053c48bcda26f", 0x14}], 0x3, 0xffffffff, 0x4) ioctl$TCFLSH(r3, 0x540b, 0x1) 4.457721301s ago: executing program 42 (id=4044): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/208, 0xd0}], 0x2, &(0x7f00000017c0)=""/4096, 0x1000}, 0x10}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f00000027c0)=""/250, 0xfa}, {&(0x7f0000000600)}, {&(0x7f00000028c0)=""/191, 0xbf}, {&(0x7f0000000640)}, {&(0x7f0000002980)=""/212, 0xd4}, {&(0x7f0000002a80)=""/153, 0x99}], 0x8, &(0x7f0000002bc0)=""/4, 0x4}, 0x101}, {{&(0x7f0000002c00)=@isdn, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002c80)=""/232, 0xe8}, {&(0x7f0000002d80)=""/134, 0x86}], 0x2}, 0xfffffff3}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e80)=""/12, 0xc}, {&(0x7f0000002ec0)=""/10, 0xa}], 0x2, &(0x7f0000002f40)=""/29, 0x1d}, 0x5}], 0x4, 0x40010100, &(0x7f0000003080)={0x77359400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="0700000004000000206e100571061b56c9fb6507cc467201d5f9d0cf327f2ff21d3588c8000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup(r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) dup3(r3, r5, 0x0) r6 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r7, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f0000000640)='hQ', 0x2}, {&(0x7f0000000900)="0db834278411be986e8bd0ae880053c48bcda26f", 0x14}], 0x3, 0xffffffff, 0x4) ioctl$TCFLSH(r3, 0x540b, 0x1) 3.875013577s ago: executing program 5 (id=4052): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3.84589848s ago: executing program 5 (id=4053): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3.790649114s ago: executing program 5 (id=4055): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/208, 0xd0}], 0x2, &(0x7f00000017c0)=""/4096, 0x1000}, 0x10}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f00000027c0)=""/250, 0xfa}, {&(0x7f0000000600)}, {&(0x7f00000028c0)=""/191, 0xbf}, {&(0x7f0000000640)}, {&(0x7f0000002980)=""/212, 0xd4}, {&(0x7f0000002a80)=""/153, 0x99}], 0x8, &(0x7f0000002bc0)=""/4, 0x4}, 0x101}, {{&(0x7f0000002c00)=@isdn, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002c80)=""/232, 0xe8}, {&(0x7f0000002d80)=""/134, 0x86}], 0x2}, 0xfffffff3}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e80)=""/12, 0xc}, {&(0x7f0000002ec0)=""/10, 0xa}], 0x2, &(0x7f0000002f40)=""/29, 0x1d}, 0x5}], 0x4, 0x40010100, &(0x7f0000003080)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="0700000004000000206e100571061b56c9fb6507cc467201d5f9d0cf327f2ff21d3588c8000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup(r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) dup3(r1, r3, 0x0) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f0000000640)='hQ', 0x2}, {&(0x7f0000000900)="0db834278411be986e8bd0ae880053c48bcda26f", 0x14}], 0x3, 0xffffffff, 0x4) 3.790277574s ago: executing program 5 (id=4056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 3.22348618s ago: executing program 5 (id=4061): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1c}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x4005, 0x0, 0xd) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x3ff}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x1, 0x4, &(0x7f0000000580)="eba8ada98a2ea47877b2c3a1a440178688e0400c22f8b003ff8454f3d7aa392663b9d33a6f7a9e04466f78b8b7f30c507b7feb8fec78f646d70b49356b757d123f09c51bb4c3c3c51713093b303d8ac171a6c00848159df37cf6f0b00316d1a8525141a9429b838ef2cb804af8c1efd9cf0f298b0ef9be4cf368d87284"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000"], 0x64}}, 0x20008040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x18) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r10, 0x0, 0x5, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) 2.22534383s ago: executing program 2 (id=4079): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18050000000020000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000004000005c61ce751459f27a30239236b92e7511eb700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) 2.163542145s ago: executing program 2 (id=4080): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0xffc, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r4}) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "86e165", 0x10, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e21, 0x4e20, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x0, "9ae9b1", 0x3, "aa759c"}}}}}}}, 0x0) 2.047650705s ago: executing program 2 (id=4081): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000008c0)=0x400002) syz_io_uring_setup(0x22f, &(0x7f0000000400)={0x0, 0x8ffd, 0x200, 0x2, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0xa8000, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffa, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 991.57295ms ago: executing program 3 (id=4091): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18050000000020000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000004000005c61ce751459f27a30239236b92e7511eb700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$unix(0x1, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) 882.748899ms ago: executing program 6 (id=4093): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 844.391652ms ago: executing program 3 (id=4095): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0xffc, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r4}) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "86e165", 0x10, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e21, 0x4e20, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x0, "9ae9b1", 0x3, "aa759c"}}}}}}}, 0x0) 837.847993ms ago: executing program 6 (id=4096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 813.750775ms ago: executing program 2 (id=4097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x65, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x10080, 0x48000000, 0x0, 0x0, 0x0}) 808.281735ms ago: executing program 3 (id=4098): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xa8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8001}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006d40)=@newtaction={0x1c8c, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x1c78, 0x1, [@m_pedit={0x1c74, 0x1, 0x0, 0x0, {{0xa}, {0x1c48, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xcdc5, 0x100, 0x8, 0xc, 0x7ff}, 0xc, 0x5e}, [{0x7fff, 0x6, 0x9, 0x59, 0x8, 0x1000}, {0x0, 0x9, 0x9, 0x6, 0x7, 0x6}, {0x400, 0x0, 0xa, 0x2, 0x1000, 0xf}, {0x5, 0x2, 0x9f, 0x9, 0xfffff001, 0x8}, {0x4, 0x1, 0xffff, 0x6, 0x80000000, 0xa}, {0x3, 0x2, 0x7, 0x6, 0x8, 0x2}, {0x4d5f, 0x17, 0x6, 0x8, 0x6, 0x2}, {0x9, 0x4, 0x5, 0x9, 0x8, 0x8}, {0x3, 0x80000000, 0x3, 0x9, 0x9ce, 0x100}, {0x3, 0x1, 0x401, 0x8, 0x7f, 0xed}, {0x40, 0xfffffff2, 0x7fffffff, 0x1, 0x7, 0x9}, {0xffffffff, 0x4, 0x8, 0xe, 0x5, 0xf}, {0x6, 0x6, 0x2, 0x9, 0x4, 0xe2571b5}, {0xffff, 0x3, 0x7, 0x87, 0x3, 0x7fffffff}, {0x8e7, 0x4, 0xe4bd, 0x3, 0x7, 0x3d4}, {0x8, 0x6, 0x8, 0x0, 0xffffff61}, {0x1ff, 0x81, 0xaf2, 0x401, 0x3, 0x1}, {0x80000000, 0x2, 0x1, 0x4, 0xd56, 0xc}, {0x81, 0xffffff7f, 0x2, 0x0, 0x101, 0x1000}, {0x6, 0x1, 0x8, 0xffffffff, 0x5, 0x8}, {0x605, 0x3, 0xffffff7c, 0x8, 0xc3c, 0x3}, {0xfffffff7, 0xfffffff3, 0xb8, 0xc, 0x0, 0x100}, {0x7, 0x4, 0x6, 0x40, 0x3, 0x1000100}, {0x6fe, 0xcf, 0x3, 0x3, 0xba, 0x3}, {0x200, 0xffffff09, 0xcba, 0x4, 0x1, 0xdc}, {0x7f, 0x5, 0x7, 0x7, 0x8000, 0x6}, {0x7, 0x1, 0x8, 0x10, 0x6, 0xffff}, {0x101, 0x7, 0x683b, 0x2, 0x3d8, 0x10}, {0x6, 0x6, 0xb, 0x2, 0xc442, 0x9}, {0xa, 0xb5, 0x6, 0x8, 0x7f, 0x1}, {0x6de, 0x101, 0x8, 0x3d, 0x6e2d1bf4, 0xffff}, {0x4, 0x9, 0x7, 0xfff, 0x9}, {0x6, 0x3, 0x101, 0x9, 0x6, 0x1}, {0x6, 0x40, 0x3, 0x0, 0x6, 0x7}, {0x44f6, 0x8, 0x8, 0xa8, 0x5, 0x4}, {0x7, 0xd0a1, 0x1, 0x6, 0x8, 0x8}, {0x6, 0x4, 0x5a, 0x3, 0x4, 0x9}, {0xfffffc00, 0x0, 0x8, 0x2, 0x5801, 0x6}, {0xd68a, 0x4, 0x8001, 0x3, 0x8, 0x1}, {0x5, 0x7, 0x8, 0x5, 0xffffc2a8, 0x2}, {0x7ff, 0x8000, 0xfffffffa, 0x8, 0x80000000, 0x9}, {0x63, 0x100, 0x8, 0x8, 0x7fffffff}, {0x7, 0x0, 0xb, 0x4, 0xd778, 0x8655}, {0xfffffff9, 0x401, 0x3, 0x1, 0x1f, 0x4}, {0x4, 0x0, 0x6, 0x9, 0xa061, 0x2f33}, {0x7, 0x3, 0x5, 0x1, 0x2, 0x600000}, {0x81, 0x2, 0x7, 0x401, 0x4, 0x1}, {0x3, 0xc3e3, 0x3e5, 0x9, 0x9313, 0x4}, {0x9, 0x1, 0x1, 0x80, 0x5, 0x9}, {0x8, 0x4, 0x2, 0x40, 0x1, 0x4}, {0x6, 0x10001, 0x4, 0x100, 0x5, 0x3ff}, {0x7ff, 0x81, 0x3, 0x7, 0xa, 0x7}, {0x1, 0x2, 0x5, 0x399, 0x3, 0xffffffff}, {0x10, 0x2, 0x9, 0x8001, 0x1ff, 0x5}, {0x8000, 0x7, 0xfffffffb, 0x5, 0x7, 0x5fc}, {0xc917, 0x10, 0x1, 0x2, 0x4, 0xfffff1da}, {0xfffff837, 0xb, 0xba7c, 0xfffffff2, 0x6, 0x2}, {0x5, 0x40, 0x4, 0x0, 0xf07, 0xf}, {0x2, 0x8001, 0x4, 0x810, 0x8, 0xffffffff}, {0x0, 0xcb, 0xc, 0x3, 0x0, 0x80}, {0x6, 0x7, 0x3, 0x4, 0x7, 0x2}, {0xfff, 0x10001, 0x7f, 0x5, 0xe841, 0x8}, {0x2, 0x1, 0x1ff, 0x3, 0x0, 0x1}, {0x6, 0x7, 0x1400000, 0x8, 0x80000000, 0x5}, {0xb7e, 0x3, 0x4, 0x0, 0x5, 0x400}, {0xc, 0x81, 0x2, 0x5, 0x400}, {0x4, 0x3, 0x6, 0x7, 0x3, 0x3}, {0x5, 0xffff, 0x0, 0x0, 0x2e2, 0x2}, {0x6, 0x4, 0xff, 0x9, 0x61222e, 0x3}, {0x0, 0xc4b, 0x8, 0x80000000, 0x200, 0x1}, {0x1, 0x2, 0x3, 0x5, 0x5192c3ef, 0x2}, {0x100, 0xfffffffa, 0x2fb, 0x0, 0x4, 0x3}, {0x8, 0x3, 0x80000001, 0x101, 0x431, 0x2}, {0x6, 0x0, 0xf5, 0x3ff, 0x3, 0xe4e6}, {0xab, 0xffff, 0x200, 0x4, 0x3, 0x9}, {0x2, 0x7, 0x3, 0x4, 0x0, 0x4}, {0x80000000, 0x9, 0x37, 0x80000001, 0x1, 0x9}, {0x331, 0x800, 0x9, 0x4, 0xf, 0x6}, {0xe9, 0x0, 0xa7, 0x7, 0x4, 0x9}, {0x9, 0x3, 0x3, 0xfffffff7, 0x7fff, 0x3}, {0x1, 0x9, 0x4, 0xfffffffb, 0xd, 0x9}, {0x2, 0x1, 0x7, 0x8001, 0x1, 0xffff8001}, {0x2, 0x19a8, 0x800, 0x101, 0x3, 0x5}, {0x4800, 0xcb, 0x80000001, 0x2, 0x7, 0x7}, {0xb, 0x3, 0x8, 0x4df0, 0x7, 0x40}, {0x3, 0x0, 0xda2, 0x42d4, 0x3, 0x4}, {0x0, 0xbf, 0x5, 0xffff, 0x6}, {0x1ff, 0x10001, 0x0, 0x9, 0x7, 0x10001}, {0x45b, 0x9, 0x4, 0x5, 0x6, 0xbc2}, {0x4, 0x2, 0xa9, 0x2, 0x2, 0x9}, {0x0, 0x200, 0xbf, 0x6, 0x266, 0x8}, {0x80000001, 0x0, 0x0, 0x1, 0x6, 0x5}, {0x19c00000, 0x9, 0x5, 0x9, 0x4, 0x1}, {0x0, 0x0, 0x7, 0x2, 0x4, 0xfffffffd}, {0x0, 0x1, 0xe, 0x8, 0x79, 0xd}, {0x400, 0x7, 0xc, 0x8, 0xf, 0x3}, {0x5, 0x5, 0x9, 0xa0d, 0x40, 0x6456}, {0xbb4e, 0x0, 0x3a, 0x8, 0xfffffffb, 0x8}, {0x10, 0x7ff, 0x7, 0xfff, 0x0, 0x9}, {0x8, 0x40, 0xfff, 0x1, 0x1, 0x1}, {0x0, 0x0, 0xe72, 0x8, 0x0, 0x3}, {0x401, 0x6, 0x8, 0x2, 0x2dbf19f1, 0x81}, {0x7, 0x6, 0xa5, 0x0, 0x401, 0xc}, {0x2, 0x9, 0x9864, 0x9b, 0x5}, {0x6, 0x7ff, 0x5fc5, 0xb, 0x7, 0x237}, {0x0, 0x80000001, 0xa4, 0x0, 0x7, 0x40}, {0x9, 0x6, 0x1000, 0x7, 0xd2e, 0x1}, {0x7, 0x3, 0xc, 0x8, 0x40, 0xb}, {0x7, 0x2, 0x7, 0x8, 0x200, 0x8}, {0x9, 0xffff, 0x101, 0x7a, 0x8, 0xfffffff8}, {0x9, 0x4, 0x0, 0x4, 0x8001, 0x800}, {0x2, 0x83a, 0x5, 0x2, 0x9, 0xffffffff}, {0xffffff4c, 0x2, 0x10001, 0x2, 0x7, 0x2}, {0x5, 0x0, 0x3, 0x0, 0xb, 0x6}, {0x3, 0x9, 0x7, 0x0, 0x7f, 0x800}, {0x2, 0x80000001, 0xe, 0x2, 0x6, 0xd5f}, {0x1, 0x7fffffff, 0x2, 0x3, 0x7, 0x6}, {0x400, 0xfffffffc, 0x4, 0xa6, 0x0, 0xfffffffc}, {0x5, 0x5, 0xff, 0xfffffffd, 0x5, 0x2}, {0x3, 0x4, 0x6, 0xc6b60000, 0x3ff, 0x10}, {0x2, 0xf27, 0x8, 0x6, 0xfffffffb, 0x5}, {0xe, 0x53, 0x400, 0x8, 0x6, 0x9}, {0x42, 0x1, 0xfff, 0x15f2, 0x3, 0x401}, {0xc7e8, 0x1, 0xfffffffe, 0x9, 0x3, 0x6}, {0x7f, 0x1000, 0xd19, 0x5, 0xfff, 0xb7}, {0x3, 0xed0, 0x8, 0x2, 0x1, 0x2}, {0x1, 0xdba, 0x4, 0xe3, 0x5, 0x5}, {0x8001, 0x831b0aa, 0x6, 0x200, 0x0, 0x4}], [{0x1}, {0x5}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0xd482b2beb95f1396}, {0x1, 0x1}, {0x2, 0x1}, {0xdf6e2fd7682863b7, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x0, 0x5dc99bf9bb419254}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x6d7d4d20e070fc88, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0xe371b5ac9b19a6e7}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x6}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x63017a1fdf0e3bbe}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0xf, 0x8, 0x4, 0x8}, 0x9}, [{0x24, 0x2, 0x0, 0x4, 0x3, 0x6}, {0xb, 0x1, 0x2, 0x9, 0x4, 0x4}, {0x1, 0x7, 0x4, 0x1, 0x800, 0x6}, {0xb, 0x5, 0xa78b, 0x6, 0x2, 0x9}, {0x2, 0x7, 0x9, 0x2, 0x9, 0x3}, {0x0, 0x4, 0x9, 0x9, 0x5, 0x824100}, {0xd, 0x7, 0xa, 0xfffffff8, 0x7, 0x33}, {0x1, 0x14, 0x5, 0x3, 0x200, 0xc}, {0x6, 0xffffff8e, 0x5, 0x3, 0x7fffffff, 0x3}, {0x4, 0xff, 0x8, 0x80000000, 0x271b, 0x51b8}, {0x31bf, 0x1, 0x8, 0x2, 0x1, 0x5}, {0x2, 0x4, 0x3, 0x1, 0x7a}, {0x4, 0x8000, 0xd232, 0x0, 0xfd, 0xfffffff9}, {0xbb5, 0x8, 0x4, 0x6, 0x5b, 0x1}, {0x200, 0x8000, 0x8, 0x4, 0x5, 0xdc3f}, {0x401, 0x40, 0x3, 0x1, 0x2}, {0x10001, 0x6, 0x8f, 0x7fff, 0x2, 0x7}, {0x5, 0x80000001, 0x5, 0x6, 0xffffffff, 0x2}, {0x0, 0x5, 0x9, 0x1, 0x5, 0x4}, {0x9, 0x10, 0x5, 0x7, 0x7, 0x7}, {0xc, 0x6, 0x1, 0x3, 0x48d, 0x7}, {0x4, 0x8, 0x800, 0x7fffffff, 0xb, 0x9}, {0x0, 0x8, 0x3, 0xffffffff, 0x7fff, 0x6}, {0x6, 0x78000000, 0xf, 0x8, 0x3, 0x8}, {0x1, 0x0, 0x40, 0xcbe, 0x1, 0x2}, {0xb757, 0x0, 0x8, 0x10, 0x1, 0x400}, {0x3, 0x3, 0x7e0, 0x3, 0x1, 0x9}, {0x4, 0x7fffffff, 0x1, 0x6, 0x7f, 0x4}, {0xffff, 0x3, 0xfffffffc, 0x1, 0x5, 0x2}, {0x5, 0xe, 0x9, 0x6, 0xa7dc, 0xffffe805}, {0x9, 0x538, 0x4, 0x2, 0x80c, 0x4}, {0x8, 0x3ff, 0x800, 0x9, 0x6}, {0x5d, 0x3, 0xfffffff9, 0xc7, 0x9, 0x4}, {0x0, 0x7, 0x5c4, 0x3, 0x101, 0x8}, {0x401, 0x8, 0x5, 0x5059, 0x5, 0x29}, {0x6, 0x131c, 0x401, 0x695, 0x1, 0x40}, {0x2, 0x4, 0x0, 0xff, 0xfffffffd, 0x1}, {0x4, 0x915, 0x6640, 0x9, 0x5, 0x1}, {0x9, 0x0, 0x6, 0x8, 0x6, 0x2}, {0x3, 0x200, 0x1ad, 0x1, 0x4, 0x2}, {0x401, 0x7, 0x6, 0x0, 0x800, 0x3}, {0x8, 0x401, 0x7, 0x800, 0x8000, 0x7}, {0x7f, 0x100, 0xfff, 0x4, 0x65a, 0x1ff}, {0x400, 0x6, 0x2, 0x1, 0x8, 0x2}, {0x1000, 0x1, 0x3, 0x5, 0x1000, 0xade3}, {0x2000, 0x4, 0x0, 0x1, 0x5, 0x9}, {0x9, 0xee20, 0x4, 0x2, 0xd, 0x2}, {0x377, 0x7c5, 0x6, 0x6, 0xff, 0x3}, {0x8, 0x2f653cd8, 0x0, 0xfd, 0xfffffe00, 0x4}, {0x4, 0x3, 0x5, 0x400, 0x7, 0x10001}, {0x7, 0x1, 0x0, 0xffff, 0x4ebb, 0x1}, {0x34e, 0x0, 0x401, 0xff, 0x8, 0x101}, {0x4, 0x8, 0x0, 0x0, 0x2, 0xc}, {0x5, 0xe5cf, 0xec1, 0x7, 0x3ff, 0x9}, {0x2, 0x100, 0x10000, 0x1, 0x200, 0x1000}, {0x3, 0x0, 0xf, 0x3, 0x9, 0x8001}, {0xf, 0x3, 0x4, 0xa3bd, 0x6, 0x5}, {0x7, 0x9, 0x10000, 0xb, 0x8, 0x1}, {0x90, 0x3, 0x9, 0xfff, 0x7, 0x1}, {0x3, 0x5, 0xfffffff8, 0x3, 0x9, 0x2}, {0x5, 0x0, 0x0, 0x9, 0x8001, 0xd998}, {0x0, 0x10000, 0x0, 0x1, 0x400, 0x57c82e23}, {0x6, 0x4fd09519, 0x1ff, 0x7, 0x3, 0xff}, {0x4, 0x2, 0xfffffffa, 0x8000000, 0x10, 0x1000}, {0x0, 0x10000, 0xd73, 0x9, 0x5, 0x2}, {0xb2e, 0xf39, 0x4, 0x0, 0x1, 0x5}, {0x10000, 0x4, 0x6, 0x0, 0x2e430b75, 0xff}, {0x9, 0x10, 0x101, 0x0, 0x7ff, 0x80000001}, {0x18000000, 0x6, 0x7f, 0x8, 0x8, 0x1}, {0xbb03, 0x4, 0x2, 0x6, 0x9, 0x200000}, {0x0, 0xfffff801, 0x4, 0x7, 0x7, 0x282}, {0x4, 0x1, 0x7fffffff, 0x7, 0x100, 0xbf6}, {0x635, 0x4, 0x4, 0x80000000, 0x400, 0x1}, {0x4f, 0x101, 0x9a9a, 0x40, 0x1, 0x3}, {0xa, 0x6, 0x7, 0x40, 0x2}, {0x200, 0x1, 0x7, 0xa, 0x4, 0xffd6}, {0x4, 0x6d, 0xa, 0x10, 0x7a0, 0x10001}, {0x6, 0x7fff, 0x686, 0xa5, 0xb, 0x40}, {0x7000000, 0x2, 0x2, 0xc, 0x4, 0x6}, {0x40, 0x1, 0xf4, 0x1000, 0x0, 0x1}, {0xfff, 0x1, 0x7, 0x4, 0x81, 0x1}, {0x9, 0x0, 0x0, 0xb, 0x3, 0xffff3636}, {0xa, 0x401, 0x7697, 0x8, 0xffffffff, 0x8}, {0x5, 0x0, 0x1, 0xfffff7ed, 0x83c, 0xd5}, {0x4000, 0x1, 0x5, 0x4, 0x8}, {0xc, 0x9, 0x83, 0x0, 0x7f, 0x40000000}, {0x2, 0x2, 0xed, 0x7, 0x0, 0xfffffff1}, {0xea, 0x1a8, 0x0, 0x0, 0x4, 0xc}, {0x5, 0x2, 0x9, 0x2, 0x2, 0x3}, {0xd, 0x0, 0x8, 0x8, 0x3, 0x9}, {0x0, 0x0, 0x5, 0x1, 0xe, 0x4}, {0x1, 0x7ff, 0x7, 0x9, 0x5, 0x9}, {0xfffffffd, 0x1ff, 0xa68, 0x5, 0x3, 0x54b05a69}, {0x5, 0xfffffff8, 0x3, 0xd348, 0x4, 0x9}, {0x6, 0x1ff, 0xfa, 0x4, 0x9, 0x1800000}, {0x2, 0x0, 0x10000, 0x2, 0x1, 0x6}, {0x9c, 0xffffff7f, 0x3, 0x6, 0x80000000, 0x1}, {0xf, 0xffffffff, 0x7fff, 0x8, 0x6, 0x1}, {0xfffffff7, 0x0, 0x80, 0x0, 0x7, 0x200}, {0x8, 0x0, 0x400, 0x0, 0xa6, 0xffffffff}, {0x8, 0x10000, 0x8, 0x0, 0x1, 0x9}, {0x7e, 0x8, 0x1000, 0x2, 0x1, 0x2}, {0x2, 0x9a1, 0x8, 0x0, 0x7, 0x4f}, {0x5, 0x7f, 0x1724, 0x9, 0x7fffffff, 0x9}, {0x1ff, 0x8001, 0x2, 0xd, 0x4, 0x517}, {0x0, 0xfffffff8, 0x2, 0x6, 0x80000001, 0x6}, {0x1, 0x3, 0x60af, 0x3ff, 0x400, 0xf6}, {0x5, 0x6, 0x0, 0x1, 0xc, 0x1a}, {0x6, 0xd, 0x401, 0x1, 0x3, 0x6}, {0xa09, 0xfffffff7, 0xfffffffb, 0x400, 0xa6, 0xfffffc01}, {0x3b26e9dc, 0x0, 0xffffffff, 0x44, 0x6, 0x4}, {0x2, 0x10, 0x5d2, 0x7, 0x6}, {0xffff56c0, 0x4, 0x0, 0x200, 0x25b, 0x7}, {0x6, 0xfff, 0x9, 0x0, 0x400, 0x1}, {0x6, 0xb, 0x1, 0x3, 0x80000001, 0xc}, {0x60000000, 0xfffffffb, 0x6, 0x7f, 0x0, 0x1}, {0x9, 0xcef, 0x101, 0x9, 0x2, 0x5}, {0x2, 0x8000, 0x1, 0x0, 0x6, 0x1}, {0xfffffffe, 0x6c, 0x5, 0x6, 0x7fffffff, 0x7}, {0x3, 0x9, 0xd4, 0x2, 0xfffffffd, 0xa49e}, {0xfffff800, 0x9c, 0x8, 0xe144, 0x8, 0x1}, {0x7, 0x80000001, 0x10, 0x0, 0x3, 0x101}, {0x0, 0x200, 0xffff, 0x80, 0x7, 0x8}, {0xc83, 0x0, 0x5, 0x6, 0x3, 0x80000000}, {0x8, 0x200, 0x1, 0x4, 0xffff, 0xfffeffff}, {0x3, 0xfffffff3, 0xb, 0x9, 0x5, 0xd}, {0x9, 0x760, 0x1, 0x5, 0xf, 0x2}, {0x0, 0x5, 0x6, 0x400, 0x0, 0x9}], [{0x1}, {}, {0x0, 0x1}, {0x3}, {0x4}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0xd5127f9ba5884387, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1}, {}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1c8c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0xe) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r9 = dup2(r8, r7) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r10, &(0x7f0000001b40)=[{&(0x7f0000000040)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001ac0)=""/18, 0x12}], 0x3) write$tun(r9, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x9, 0x2880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 772.752658ms ago: executing program 2 (id=4099): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 766.290688ms ago: executing program 2 (id=4101): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xa0, 0x9, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8001}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r4, &(0x7f0000001b40)=[{&(0x7f0000000040)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001ac0)=""/18, 0x12}], 0x3) write$tun(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 702.663103ms ago: executing program 4 (id=4102): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) writev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)}], 0x1) 701.615253ms ago: executing program 6 (id=4103): openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x6, 0xfffffffffffffffa) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f00000003c0)="0200ffff000020ffae2b6d665e05000000ff", 0x12, 0x0, 0x0, 0x1}]) 675.316505ms ago: executing program 4 (id=4104): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x2, 0x476, &(0x7f0000000540)="$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") 556.289365ms ago: executing program 6 (id=4105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) setgroups(0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000403000000000000000000000902"], 0x0, 0x56, 0x0, 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (fail_nth: 1) 345.852852ms ago: executing program 3 (id=4106): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 345.426992ms ago: executing program 6 (id=4107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) setgroups(0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000403000000000000000000000902"], 0x0, 0x56, 0x0, 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 279.104608ms ago: executing program 6 (id=4108): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000008c0)=0x400002) syz_io_uring_setup(0x22f, &(0x7f0000000400)={0x0, 0x8ffd, 0x200, 0x2, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0xa8000, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffa, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 278.619748ms ago: executing program 3 (id=4109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x65, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x10080, 0x48000000, 0x0, 0x0, 0x0}) 149.286938ms ago: executing program 4 (id=4110): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0xffc, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r4}) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "86e165", 0x10, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e21, 0x4e20, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x0, "9ae9b1", 0x3, "aa759c"}}}}}}}, 0x0) 97.098492ms ago: executing program 3 (id=4111): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18050000000020000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000004000005c61ce751459f27a30239236b92e7511eb700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$unix(0x1, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 96.644252ms ago: executing program 4 (id=4112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) 42.500387ms ago: executing program 5 (id=4113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@stripe={'stripe', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@noinit_itable}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000000), &(0x7f00000000c0)=@md5={0x1, "9cf619d9aad9f6132fc8113dff110f7b"}, 0x11, 0x2) sendfile(r5, r5, 0x0, 0x800000009) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) 41.856027ms ago: executing program 4 (id=4114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x20000, 0x0, 0x351}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) setgroups(0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000403000000000000000000000902"], 0x0, 0x56, 0x0, 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=4115): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x405b, &(0x7f0000004080)="$eJzszjFKA1EUBdCbxMGvDARBK0EM9jJ2VrOL6SVrsFZxdmIZXIArsnQLIyhGEkW0CKicU73P5b1/wx9RltMoycP8fi/J8Sx907yGW2/5zvtSc5Zqt4xTJ7n8eLNbbL43AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwS41XXtdraVlO88P0V23O66QcTJPbSar2aJT9ZHb6yd1J8phklOQpSTfdUH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J+5WHltr8f1F6t3J+nb6mW8STIMw/Dtb0vSLX7SE57ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKMCAAD//wx/Es8=") (async) syz_read_part_table(0x405b, &(0x7f0000004080)="$eJzszjFKA1EUBdCbxMGvDARBK0EM9jJ2VrOL6SVrsFZxdmIZXIArsnQLIyhGEkW0CKicU73P5b1/wx9RltMoycP8fi/J8Sx907yGW2/5zvtSc5Zqt4xTJ7n8eLNbbL43AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwS41XXtdraVlO88P0V23O66QcTJPbSar2aJT9ZHb6yd1J8phklOQpSTfdUH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J+5WHltr8f1F6t3J+nb6mW8STIMw/Dtb0vSLX7SE57ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKMCAAD//wx/Es8=") getpgrp(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='net/softnet_stat\x00') (async) syz_open_procfs(r0, &(0x7f0000000100)='net/softnet_stat\x00') kernel console output (not intermixed with test programs): ] [ 308.591576][T15650] System zones: 0-2, 18-18, 34-35 [ 308.597552][T15650] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.664521][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3481'. [ 308.689102][T13420] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 308.703082][T13420] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 308.722082][T13420] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 308.741712][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3483'. [ 308.863500][T15677] loop9: detected capacity change from 0 to 512 [ 308.870781][T15677] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 308.898180][T15679] loop3: detected capacity change from 0 to 512 [ 308.906934][T15677] EXT4-fs (loop9): 1 truncate cleaned up [ 308.961877][T15679] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 308.970180][T15679] System zones: 0-2, 18-18, 34-35 [ 309.002277][T15679] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.025119][T15688] loop0: detected capacity change from 0 to 8192 [ 309.918053][T15718] loop0: detected capacity change from 0 to 512 [ 309.988181][T15718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 310.001728][T15718] System zones: 1-12 [ 310.018252][T15718] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3504: error while reading EA inode 32 err=-116 [ 310.092438][T15718] EXT4-fs (loop0): Remounting filesystem read-only [ 310.099124][T15718] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 310.171513][T15718] EXT4-fs (loop0): 1 orphan inode deleted [ 310.255794][T15736] loop7: detected capacity change from 0 to 512 [ 310.263515][T15736] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 310.318985][T15736] EXT4-fs (loop7): 1 truncate cleaned up [ 311.106886][T15762] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 311.169864][T15762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.282794][T15770] bond2: (slave gretap1): making interface the new active one [ 311.291261][T15770] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 311.331658][T14583] EXT4-fs unmount: 121 callbacks suppressed [ 311.331682][T14583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.399479][T15785] bond_slave_1: mtu less than device minimum [ 311.408958][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.534044][T15805] loop4: detected capacity change from 0 to 512 [ 311.543971][T15805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 311.562928][T15805] System zones: 1-12 [ 311.577379][T15805] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.3537: error while reading EA inode 32 err=-116 [ 311.637447][T15805] EXT4-fs (loop4): Remounting filesystem read-only [ 311.644124][T15805] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 311.663822][T15805] EXT4-fs (loop4): 1 orphan inode deleted [ 311.678811][T15805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.711117][T15805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.795412][T15802] loop0: detected capacity change from 0 to 1024 [ 311.804346][T15820] __nla_validate_parse: 18 callbacks suppressed [ 311.804406][T15820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3542'. [ 311.812575][T15802] EXT4-fs: Ignoring removed orlov option [ 311.819640][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3542'. [ 311.825311][T15802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.904158][T15802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.936767][T15827] netlink: 'syz.4.3544': attribute type 1 has an invalid length. [ 311.957440][T15827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.975864][T15828] loop9: detected capacity change from 0 to 512 [ 312.169884][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3547'. [ 312.189322][T15828] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 312.267268][T15828] EXT4-fs (loop9): 1 truncate cleaned up [ 312.275189][T15828] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.380970][T15847] bond_slave_1: mtu less than device minimum [ 312.398710][T15847] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3550'. [ 312.471235][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.539836][T15851] loop7: detected capacity change from 0 to 512 [ 312.570687][T15851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.681301][ T3385] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 312.693413][ T3385] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.742677][T15866] loop0: detected capacity change from 0 to 512 [ 312.752329][T15866] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 312.809096][T15866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 312.827631][T15866] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3557: corrupted in-inode xattr: e_value size too large [ 312.921519][T15866] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3557: couldn't read orphan inode 15 (err -117) [ 312.942169][T15866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.000623][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.066494][ T29] kauditd_printk_skb: 3616 callbacks suppressed [ 313.066591][ T29] audit: type=1400 audit(1755087305.849:89453): avc: denied { unmount } for pid=13726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 313.127479][T15880] bond_slave_1: mtu less than device minimum [ 313.160147][ T29] audit: type=1326 audit(1755087305.939:89454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15881 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 313.183813][ T29] audit: type=1326 audit(1755087305.939:89455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15881 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 313.207449][ T29] audit: type=1326 audit(1755087305.939:89456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15881 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 313.231655][ T29] audit: type=1326 audit(1755087305.939:89457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15881 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 313.255615][ T29] audit: type=1326 audit(1755087305.939:89458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15881 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 313.279295][ T29] audit: type=1326 audit(1755087305.939:89459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15881 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 313.303262][ T29] audit: type=1326 audit(1755087305.939:89460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15881 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 313.317395][T15883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3562'. [ 313.327536][ T29] audit: type=1326 audit(1755087305.939:89461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15881 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 313.359841][ T29] audit: type=1326 audit(1755087305.939:89462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15881 comm="syz.4.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 313.403821][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.440261][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.463669][T15890] loop7: detected capacity change from 0 to 512 [ 313.477277][T15890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 313.485408][T15890] System zones: 1-12 [ 313.490016][T15890] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.3564: error while reading EA inode 32 err=-116 [ 313.503132][T15890] EXT4-fs (loop7): Remounting filesystem read-only [ 313.509717][T15890] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 313.526217][T15890] EXT4-fs (loop7): 1 orphan inode deleted [ 313.532556][T15890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.533033][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3565'. [ 313.554944][T15890] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.573115][T15896] loop0: detected capacity change from 0 to 512 [ 313.580575][T15896] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 313.590444][T15896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 313.598962][T15896] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3568: corrupted in-inode xattr: e_value size too large [ 313.614139][T15896] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3568: couldn't read orphan inode 15 (err -117) [ 313.628360][T15896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.655575][T15903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3570'. [ 313.664703][T15903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3570'. [ 313.674366][T15903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3570'. [ 313.684665][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.696787][T15907] loop9: detected capacity change from 0 to 512 [ 313.707006][T15911] atomic_op ffff888128670d28 conn xmit_atomic 0000000000000000 [ 313.727193][T15903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3570'. [ 313.745800][T15907] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 313.758624][T15907] System zones: 0-2, 18-18, 34-35 [ 313.771191][T15907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.784407][T15907] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.821001][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.876024][T15931] bond_slave_1: mtu less than device minimum [ 313.919845][T15941] loop9: detected capacity change from 0 to 512 [ 313.927842][T15941] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 313.938349][T15941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 313.946724][T15941] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.3583: corrupted in-inode xattr: e_value size too large [ 313.967487][T15941] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3583: couldn't read orphan inode 15 (err -117) [ 313.983172][T15941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.009712][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.059287][T15955] loop0: detected capacity change from 0 to 512 [ 314.074301][T15955] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 314.082396][T15955] System zones: 0-2, 18-18, 34-35 [ 314.088242][T15955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.100878][T15955] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.126106][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.145753][T15959] atomic_op ffff888119469128 conn xmit_atomic 0000000000000000 [ 314.246891][T15966] loop0: detected capacity change from 0 to 512 [ 314.255351][T15966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.678977][T15969] netlink: 'syz.4.3593': attribute type 1 has an invalid length. [ 314.693891][T15969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.029705][T15982] FAULT_INJECTION: forcing a failure. [ 315.029705][T15982] name failslab, interval 1, probability 0, space 0, times 0 [ 315.042400][T15982] CPU: 0 UID: 0 PID: 15982 Comm: syz.3.3599 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 315.042505][T15982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.042523][T15982] Call Trace: [ 315.042530][T15982] [ 315.042537][T15982] __dump_stack+0x1d/0x30 [ 315.042560][T15982] dump_stack_lvl+0xe8/0x140 [ 315.042583][T15982] dump_stack+0x15/0x1b [ 315.042605][T15982] should_fail_ex+0x265/0x280 [ 315.042649][T15982] should_failslab+0x8c/0xb0 [ 315.042674][T15982] __kmalloc_noprof+0xa5/0x3e0 [ 315.042707][T15982] ? unregister_netdevice_many_notify+0x4c9/0x15d0 [ 315.042745][T15982] ? unlist_netdevice+0x2cc/0x320 [ 315.042774][T15982] unregister_netdevice_many_notify+0x4c9/0x15d0 [ 315.042805][T15982] ? fput_close_sync+0x6e/0x120 [ 315.042908][T15982] ? __x64_sys_close+0x56/0xf0 [ 315.042994][T15982] ? do_syscall_64+0xd2/0x200 [ 315.043019][T15982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.043043][T15982] ? queue_delayed_work_on+0x106/0x170 [ 315.043073][T15982] unregister_netdevice_queue+0x1f5/0x220 [ 315.043117][T15982] __tun_detach+0x7db/0xad0 [ 315.043143][T15982] ? __pfx_tun_chr_close+0x10/0x10 [ 315.043172][T15982] tun_chr_close+0x5a/0x100 [ 315.043213][T15982] __fput+0x298/0x650 [ 315.043253][T15982] fput_close_sync+0x6e/0x120 [ 315.043293][T15982] __x64_sys_close+0x56/0xf0 [ 315.043391][T15982] x64_sys_call+0x2738/0x2ff0 [ 315.043419][T15982] do_syscall_64+0xd2/0x200 [ 315.043506][T15982] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 315.043577][T15982] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 315.043602][T15982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.043628][T15982] RIP: 0033:0x7f626adfebe9 [ 315.043649][T15982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.043762][T15982] RSP: 002b:00007f626985f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 315.043786][T15982] RAX: ffffffffffffffda RBX: 00007f626b025fa0 RCX: 00007f626adfebe9 [ 315.043801][T15982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 315.043814][T15982] RBP: 00007f626985f090 R08: 0000000000000000 R09: 0000000000000000 [ 315.043825][T15982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.043836][T15982] R13: 00007f626b026038 R14: 00007f626b025fa0 R15: 00007ffc09469e28 [ 315.043859][T15982] [ 315.342125][T15986] bond_slave_1: mtu less than device minimum [ 315.366969][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.483906][T16001] loop9: detected capacity change from 0 to 1024 [ 315.490990][T16001] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 315.503050][ T3407] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 315.510863][ T3407] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.558226][T16001] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.585977][T16001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16001 comm=syz.9.3606 [ 315.598632][T16001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16001 comm=syz.9.3606 [ 315.677506][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.698294][T16012] atomic_op ffff8881037b4d28 conn xmit_atomic 0000000000000000 [ 315.730482][T16014] loop9: detected capacity change from 0 to 512 [ 315.742802][T16014] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 315.750910][T16014] System zones: 0-2, 18-18, 34-35 [ 315.760636][T16014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.774342][T16014] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.801006][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.881238][T16027] bond_slave_1: mtu less than device minimum [ 316.046407][T16047] loop9: detected capacity change from 0 to 512 [ 316.063404][T16047] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 316.071509][T16047] System zones: 0-2, 18-18, 34-35 [ 316.077463][T16047] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.092840][T16047] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.117947][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.282918][T16062] bond_slave_1: mtu less than device minimum [ 316.424561][T16059] loop9: detected capacity change from 0 to 1024 [ 316.435752][T16059] EXT4-fs: Ignoring removed orlov option [ 316.441517][T16059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.454174][T16059] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.498984][T16081] loop4: detected capacity change from 0 to 512 [ 316.512838][T16081] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 316.521090][T16081] System zones: 0-2, 18-18, 34-35 [ 316.540322][T16081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.552967][T16081] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.576937][T14583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.747269][T16095] bond_slave_1: mtu less than device minimum [ 316.780810][T16098] FAULT_INJECTION: forcing a failure. [ 316.780810][T16098] name failslab, interval 1, probability 0, space 0, times 0 [ 316.793711][T16098] CPU: 1 UID: 0 PID: 16098 Comm: syz.7.3640 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 316.793742][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.793754][T16098] Call Trace: [ 316.793759][T16098] [ 316.793765][T16098] __dump_stack+0x1d/0x30 [ 316.793788][T16098] dump_stack_lvl+0xe8/0x140 [ 316.793810][T16098] dump_stack+0x15/0x1b [ 316.793829][T16098] should_fail_ex+0x265/0x280 [ 316.793854][T16098] should_failslab+0x8c/0xb0 [ 316.793880][T16098] kmem_cache_alloc_noprof+0x50/0x310 [ 316.793905][T16098] ? vm_area_dup+0x33/0x2c0 [ 316.793940][T16098] vm_area_dup+0x33/0x2c0 [ 316.793974][T16098] __split_vma+0xe9/0x650 [ 316.794002][T16098] ? xfd_validate_state+0x45/0xf0 [ 316.794035][T16098] ? save_fpregs_to_fpstate+0x100/0x160 [ 316.794061][T16098] vms_gather_munmap_vmas+0x17a/0x7b0 [ 316.794086][T16098] ? mntput_no_expire+0x6f/0x460 [ 316.794122][T16098] do_vmi_align_munmap+0x1a4/0x3d0 [ 316.794159][T16098] do_vmi_munmap+0x1db/0x220 [ 316.794185][T16098] mremap_at+0x110/0x630 [ 316.794214][T16098] __se_sys_mremap+0x6c5/0xc60 [ 316.794241][T16098] ? fput+0x8f/0xc0 [ 316.794263][T16098] ? ksys_write+0x192/0x1a0 [ 316.794281][T16098] __x64_sys_mremap+0x67/0x80 [ 316.794303][T16098] x64_sys_call+0x2a24/0x2ff0 [ 316.794320][T16098] do_syscall_64+0xd2/0x200 [ 316.794341][T16098] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 316.794360][T16098] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 316.794379][T16098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.794403][T16098] RIP: 0033:0x7f665147ebe9 [ 316.794415][T16098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.794429][T16098] RSP: 002b:00007f664fedf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 316.794444][T16098] RAX: ffffffffffffffda RBX: 00007f66516a5fa0 RCX: 00007f665147ebe9 [ 316.794454][T16098] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 316.794464][T16098] RBP: 00007f664fedf090 R08: 00002000008b5000 R09: 0000000000000000 [ 316.794474][T16098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.794483][T16098] R13: 00007f66516a6038 R14: 00007f66516a5fa0 R15: 00007ffccf7d6908 [ 316.794498][T16098] [ 316.816335][T16101] loop7: detected capacity change from 0 to 512 [ 317.035628][T16101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.172993][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.224175][T16119] FAULT_INJECTION: forcing a failure. [ 317.224175][T16119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.237288][T16119] CPU: 1 UID: 0 PID: 16119 Comm: syz.0.3647 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 317.237315][T16119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.237331][T16119] Call Trace: [ 317.237338][T16119] [ 317.237346][T16119] __dump_stack+0x1d/0x30 [ 317.237397][T16119] dump_stack_lvl+0xe8/0x140 [ 317.237414][T16119] dump_stack+0x15/0x1b [ 317.237429][T16119] should_fail_ex+0x265/0x280 [ 317.237448][T16119] should_fail+0xb/0x20 [ 317.237528][T16119] should_fail_usercopy+0x1a/0x20 [ 317.237554][T16119] _copy_to_user+0x20/0xa0 [ 317.237580][T16119] simple_read_from_buffer+0xb5/0x130 [ 317.237637][T16119] proc_fail_nth_read+0x10e/0x150 [ 317.237670][T16119] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.237700][T16119] vfs_read+0x1a8/0x770 [ 317.237776][T16119] ? __rcu_read_unlock+0x4f/0x70 [ 317.237796][T16119] ? __fget_files+0x184/0x1c0 [ 317.237828][T16119] ksys_read+0xda/0x1a0 [ 317.237884][T16119] __x64_sys_read+0x40/0x50 [ 317.237910][T16119] x64_sys_call+0x27bc/0x2ff0 [ 317.237935][T16119] do_syscall_64+0xd2/0x200 [ 317.238017][T16119] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 317.238039][T16119] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 317.238068][T16119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.238152][T16119] RIP: 0033:0x7fa0d628d5fc [ 317.238171][T16119] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 317.238194][T16119] RSP: 002b:00007fa0d4cf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.238218][T16119] RAX: ffffffffffffffda RBX: 00007fa0d64b5fa0 RCX: 00007fa0d628d5fc [ 317.238234][T16119] RDX: 000000000000000f RSI: 00007fa0d4cf70a0 RDI: 0000000000000005 [ 317.238264][T16119] RBP: 00007fa0d4cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 317.238280][T16119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.238301][T16119] R13: 00007fa0d64b6038 R14: 00007fa0d64b5fa0 R15: 00007ffd67ec7b48 [ 317.238335][T16119] [ 317.536930][T16126] netlink: 'syz.0.3650': attribute type 1 has an invalid length. [ 317.551932][T16126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.658189][T16134] bond_slave_1: mtu less than device minimum [ 317.685274][T16134] __nla_validate_parse: 28 callbacks suppressed [ 317.685293][T16134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3653'. [ 317.722188][T16139] loop9: detected capacity change from 0 to 512 [ 317.758172][T16139] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.795256][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 317.810944][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.814245][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 317.863109][T16145] atomic_op ffff88811ab0cd28 conn xmit_atomic 0000000000000000 [ 317.985367][T16151] netlink: 'syz.3.3659': attribute type 1 has an invalid length. [ 317.999160][T16151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.019458][T16151] bond3: (slave gretap1): making interface the new active one [ 318.027913][T16151] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 318.072285][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 318.072376][ T29] audit: type=1326 audit(1755087310.859:89694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626adfebe9 code=0x7ffc0000 [ 318.109555][T16154] loop7: detected capacity change from 0 to 2048 [ 318.123526][ T29] audit: type=1326 audit(1755087310.859:89695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f626adfebe9 code=0x7ffc0000 [ 318.147305][ T29] audit: type=1326 audit(1755087310.859:89696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626adfebe9 code=0x7ffc0000 [ 318.159567][T16154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.170932][ T29] audit: type=1326 audit(1755087310.859:89697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f626adfebe9 code=0x7ffc0000 [ 318.206525][ T29] audit: type=1326 audit(1755087310.859:89698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f626adfec23 code=0x7ffc0000 [ 318.229983][ T29] audit: type=1326 audit(1755087310.859:89699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f626adfd69f code=0x7ffc0000 [ 318.283891][ T29] audit: type=1326 audit(1755087310.969:89700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f626adfec77 code=0x7ffc0000 [ 318.307455][ T29] audit: type=1326 audit(1755087311.039:89701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f626adfd550 code=0x7ffc0000 [ 318.331194][ T29] audit: type=1326 audit(1755087311.039:89702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f626adfd84a code=0x7ffc0000 [ 318.354652][ T29] audit: type=1326 audit(1755087311.059:89703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16155 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626adfebe9 code=0x7ffc0000 [ 318.614085][T16162] loop0: detected capacity change from 0 to 512 [ 318.645675][T16162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.752755][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.857955][T16163] bridge_slave_0: left allmulticast mode [ 318.863720][T16163] bridge_slave_0: left promiscuous mode [ 318.869356][T16163] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.947058][T16163] bridge_slave_1: left allmulticast mode [ 318.952804][T16163] bridge_slave_1: left promiscuous mode [ 318.958475][T16163] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.970411][T16163] bond0: (slave bond_slave_0): Releasing backup interface [ 318.980469][T16163] bond0: (slave bond_slave_1): Releasing backup interface [ 318.993613][T16173] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3665'. [ 319.050568][T16163] team0: Port device team_slave_0 removed [ 319.075261][T16163] team0: Port device team_slave_1 removed [ 319.141315][T16163] bond1: (slave gretap1): Releasing active interface [ 319.161356][T16168] bond_slave_1: mtu less than device minimum [ 319.180466][ T2959] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 319.190248][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.206465][ T2959] hid-generic 0000:0000:0000.0084: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.230755][T16178] pim6reg: entered allmulticast mode [ 319.238172][T16178] pim6reg: left allmulticast mode [ 319.337037][T16184] loop4: detected capacity change from 0 to 512 [ 319.346316][T16184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 319.391538][T16184] System zones: 1-12 [ 319.396093][T16193] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3673'. [ 319.405087][T16193] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3673'. [ 319.414839][T16184] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.3669: error while reading EA inode 32 err=-116 [ 319.442277][T16184] EXT4-fs (loop4): Remounting filesystem read-only [ 319.448865][T16184] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 319.471236][T16184] EXT4-fs (loop4): 1 orphan inode deleted [ 319.482754][T16184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.487479][T13726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.498420][T16184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.560226][T16204] bond_slave_1: mtu less than device minimum [ 319.574484][T16204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3678'. [ 319.608884][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3679'. [ 319.626405][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3679'. [ 319.642812][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3681'. [ 319.657651][T16214] loop0: detected capacity change from 0 to 512 [ 319.665313][T16214] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 319.874260][T16228] loop7: detected capacity change from 0 to 512 [ 319.885674][T16228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.245844][T16254] loop9: detected capacity change from 0 to 2048 [ 320.268779][T16256] FAULT_INJECTION: forcing a failure. [ 320.268779][T16256] name failslab, interval 1, probability 0, space 0, times 0 [ 320.281588][T16256] CPU: 0 UID: 0 PID: 16256 Comm: syz.3.3697 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 320.281638][T16256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.281656][T16256] Call Trace: [ 320.281664][T16256] [ 320.281674][T16256] __dump_stack+0x1d/0x30 [ 320.281766][T16256] dump_stack_lvl+0xe8/0x140 [ 320.281791][T16256] dump_stack+0x15/0x1b [ 320.281865][T16256] should_fail_ex+0x265/0x280 [ 320.281888][T16256] should_failslab+0x8c/0xb0 [ 320.281916][T16256] kmem_cache_alloc_noprof+0x50/0x310 [ 320.281948][T16256] ? getname_flags+0x80/0x3b0 [ 320.281978][T16256] getname_flags+0x80/0x3b0 [ 320.282083][T16256] path_setxattrat+0x223/0x310 [ 320.282136][T16256] __x64_sys_lsetxattr+0x71/0x90 [ 320.282168][T16256] x64_sys_call+0x2877/0x2ff0 [ 320.282193][T16256] do_syscall_64+0xd2/0x200 [ 320.282264][T16256] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 320.282294][T16256] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 320.282324][T16256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.282351][T16256] RIP: 0033:0x7f626adfebe9 [ 320.282365][T16256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.282434][T16256] RSP: 002b:00007f626985f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 320.282454][T16256] RAX: ffffffffffffffda RBX: 00007f626b025fa0 RCX: 00007f626adfebe9 [ 320.282470][T16256] RDX: 0000200000000800 RSI: 0000200000000140 RDI: 0000200000000080 [ 320.282486][T16256] RBP: 00007f626985f090 R08: 0000000000000002 R09: 0000000000000000 [ 320.282569][T16256] R10: 000000000000004c R11: 0000000000000246 R12: 0000000000000001 [ 320.282585][T16256] R13: 00007f626b026038 R14: 00007f626b025fa0 R15: 00007ffc09469e28 [ 320.282609][T16256] [ 320.285344][T16254] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.554347][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.629377][T16273] netlink: 'syz.3.3705': attribute type 1 has an invalid length. [ 320.647729][T16273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.734384][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.828545][T16276] loop9: detected capacity change from 0 to 1024 [ 320.835518][T16276] EXT4-fs: Ignoring removed orlov option [ 320.841180][T16276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.853739][T16276] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.866949][T16291] pim6reg: entered allmulticast mode [ 320.874365][T16287] pim6reg: left allmulticast mode [ 320.985760][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.998943][T16288] chnl_net:caif_netlink_parms(): no params data found [ 321.028785][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.043297][T16308] atomic_op ffff888104334128 conn xmit_atomic 0000000000000000 [ 321.064010][T16311] atomic_op ffff888128670128 conn xmit_atomic 0000000000000000 [ 321.093842][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.113507][T16288] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.120767][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.128081][T16288] bridge_slave_0: entered allmulticast mode [ 321.135492][T16288] bridge_slave_0: entered promiscuous mode [ 321.144384][T16288] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.151589][T16288] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.158968][T16288] bridge_slave_1: entered allmulticast mode [ 321.168062][T16288] bridge_slave_1: entered promiscuous mode [ 321.183616][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.211894][T16288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.230704][T16288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.254101][T16328] loop7: detected capacity change from 0 to 512 [ 321.267412][T16328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 321.275848][T16328] System zones: 1-12 [ 321.281251][T16328] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.3721: error while reading EA inode 32 err=-116 [ 321.299724][T16288] team0: Port device team_slave_0 added [ 321.307055][ T31] bridge_slave_1: left allmulticast mode [ 321.312815][ T31] bridge_slave_1: left promiscuous mode [ 321.318486][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.326985][T16328] EXT4-fs (loop7): Remounting filesystem read-only [ 321.333603][T16328] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 321.344704][T16328] EXT4-fs (loop7): 1 orphan inode deleted [ 321.351020][ T31] bridge_slave_0: left allmulticast mode [ 321.356756][ T31] bridge_slave_0: left promiscuous mode [ 321.362489][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.389568][T16328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.419613][T16328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.467285][ T31] bond2 (unregistering): (slave gretap1): Releasing active interface [ 321.514478][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.527614][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.541038][ T31] bond0 (unregistering): Released all slaves [ 321.550185][ T31] bond1 (unregistering): Released all slaves [ 321.559387][ T31] bond2 (unregistering): Released all slaves [ 321.568602][ T31] bond3 (unregistering): Released all slaves [ 321.577892][T16288] team0: Port device team_slave_1 added [ 321.613742][T16288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.620712][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.646714][T16288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.658013][T16340] atomic_op ffff888104337128 conn xmit_atomic 0000000000000000 [ 321.661303][T16288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.672718][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.698701][T16288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.742118][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.757927][T16288] hsr_slave_0: entered promiscuous mode [ 321.765501][T16288] hsr_slave_1: entered promiscuous mode [ 321.775373][T16288] debugfs: 'hsr0' already exists in 'hsr' [ 321.781142][T16288] Cannot create hsr debugfs directory [ 321.793519][ T31] hsr_slave_0: left promiscuous mode [ 321.803821][ T31] hsr_slave_1: left promiscuous mode [ 321.815634][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.823186][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.832952][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.840380][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.852614][ T31] veth1_macvtap: left promiscuous mode [ 321.858308][ T31] veth0_macvtap: left promiscuous mode [ 321.864103][ T31] veth1_vlan: left promiscuous mode [ 321.870454][ T31] veth0_vlan: left promiscuous mode [ 321.887566][T16350] loop9: detected capacity change from 0 to 512 [ 321.906050][T16350] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.984738][ T31] team0 (unregistering): Port device team_slave_1 removed [ 322.000932][ T31] team0 (unregistering): Port device team_slave_0 removed [ 322.581354][T16288] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.590626][T16288] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 322.599789][T16288] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 322.609117][T16288] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 322.662855][T16288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.677110][T16288] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.689862][T16371] netlink: 'syz.7.3735': attribute type 1 has an invalid length. [ 322.700651][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.707729][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.723774][T16371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 322.735375][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.742547][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.754208][T13356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.798919][T16378] IPVS: Error connecting to the multicast addr [ 322.825440][T16288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.858925][T16385] __nla_validate_parse: 16 callbacks suppressed [ 322.858944][T16385] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3739'. [ 322.874533][T16385] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3739'. [ 322.876492][T16386] loop7: detected capacity change from 0 to 2048 [ 322.904036][T16386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.949344][T16288] veth0_vlan: entered promiscuous mode [ 322.961249][T16288] veth1_vlan: entered promiscuous mode [ 322.992395][T16288] veth0_macvtap: entered promiscuous mode [ 323.016972][T16398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3741'. [ 323.026099][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3741'. [ 323.038854][T16400] loop9: detected capacity change from 0 to 512 [ 323.040560][T16288] veth1_macvtap: entered promiscuous mode [ 323.056013][T16400] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.074823][T16288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.087517][T16288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.112746][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 323.112764][ T29] audit: type=1400 audit(1755087315.889:89919): avc: denied { create } for pid=16383 comm="syz.7.3738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.139194][ T29] audit: type=1400 audit(1755087315.889:89920): avc: denied { ioctl } for pid=16383 comm="syz.7.3738" path="socket:[45843]" dev="sockfs" ino=45843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.164521][ T29] audit: type=1400 audit(1755087315.889:89921): avc: denied { ioctl } for pid=16383 comm="syz.7.3738" path="socket:[45841]" dev="sockfs" ino=45841 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.186547][T16406] pim6reg: entered allmulticast mode [ 323.215064][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.226648][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.235377][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.246790][T16403] pim6reg: left allmulticast mode [ 323.255654][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.267448][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.276406][ T29] audit: type=1326 audit(1755087316.049:89922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.7.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 323.300031][ T29] audit: type=1326 audit(1755087316.049:89923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.7.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 323.323868][ T29] audit: type=1326 audit(1755087316.049:89924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.7.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 323.324150][T16408] loop7: detected capacity change from 0 to 8192 [ 323.347512][ T29] audit: type=1326 audit(1755087316.049:89925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.7.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 323.347552][ T29] audit: type=1326 audit(1755087316.049:89926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.7.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 323.347585][ T29] audit: type=1326 audit(1755087316.049:89927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.7.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f665147ec23 code=0x7ffc0000 [ 323.427413][ T29] audit: type=1326 audit(1755087316.069:89928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.7.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f665147d69f code=0x7ffc0000 [ 323.511038][T16417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3745'. [ 323.574814][T16420] loop1: detected capacity change from 0 to 512 [ 323.612609][T16420] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 323.620653][T16420] System zones: 0-2, 18-18, 34-35 [ 323.627724][T16420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.640395][T16420] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.732917][T16288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.757660][T16426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3749'. [ 323.766757][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3749'. [ 324.038442][T16446] loop4: detected capacity change from 0 to 512 [ 324.048233][T16446] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 324.072177][T16446] EXT4-fs (loop4): 1 truncate cleaned up [ 324.072713][T16446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.105338][ T51] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.145590][ T51] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.192858][ T51] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.226090][ T51] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.375172][ T51] bridge_slave_1: left allmulticast mode [ 324.375242][ T51] bridge_slave_1: left promiscuous mode [ 324.375362][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.435371][ T51] bridge_slave_0: left allmulticast mode [ 324.435468][ T51] bridge_slave_0: left promiscuous mode [ 324.435633][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.551707][ T51] bond1 (unregistering): (slave gretap1): Releasing active interface [ 324.579521][T16459] loop7: detected capacity change from 0 to 512 [ 324.640329][T16459] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 324.640365][T16459] System zones: 0-2, 18-18, 34-35 [ 324.641481][T16459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.641572][T16459] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.654464][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.655956][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.657347][ T51] bond0 (unregistering): Released all slaves [ 324.796774][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.820414][ T51] bond1 (unregistering): Released all slaves [ 324.829833][ T51] bond2 (unregistering): Released all slaves [ 324.832817][ T51] bond3 (unregistering): Released all slaves [ 324.913983][ T51] hsr_slave_0: left promiscuous mode [ 324.914372][ T51] hsr_slave_1: left promiscuous mode [ 324.929999][ T51] veth1_macvtap: left promiscuous mode [ 324.930031][ T51] veth0_macvtap: left promiscuous mode [ 324.930127][ T51] veth1_vlan: left promiscuous mode [ 324.930171][ T51] veth0_vlan: left promiscuous mode [ 325.028559][ T51] pim6reg (unregistering): left allmulticast mode [ 325.083163][T16472] loop7: detected capacity change from 0 to 512 [ 325.083954][T16472] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.177675][ T51] team0 (unregistering): Port device team_slave_1 removed [ 325.200849][ T51] team0 (unregistering): Port device team_slave_0 removed [ 325.422463][T16451] chnl_net:caif_netlink_parms(): no params data found [ 325.560735][T16451] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.560769][T16451] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.581563][T16451] bridge_slave_0: entered allmulticast mode [ 325.582206][T16451] bridge_slave_0: entered promiscuous mode [ 325.583294][T16451] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.602058][T16451] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.602334][T16451] bridge_slave_1: entered allmulticast mode [ 325.615678][T16451] bridge_slave_1: entered promiscuous mode [ 325.629151][T16451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.630536][T16451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.659465][T16451] team0: Port device team_slave_0 added [ 325.666097][T16451] team0: Port device team_slave_1 added [ 325.681502][T16451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.681516][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.681545][T16451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.682177][T16451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.732541][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.732581][T16451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.766955][T16451] hsr_slave_0: entered promiscuous mode [ 325.767305][T16451] hsr_slave_1: entered promiscuous mode [ 325.767693][T16451] debugfs: 'hsr0' already exists in 'hsr' [ 325.767706][T16451] Cannot create hsr debugfs directory [ 325.936529][T16487] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3763'. [ 325.945619][T16487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3763'. [ 326.064102][T16451] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.093675][T16451] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.106507][T16451] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.122870][T16451] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.173989][T16451] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.181178][T16451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.188567][T16451] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.195643][T16451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.195879][T16499] loop1: detected capacity change from 0 to 8192 [ 326.227871][T16451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.242170][T16451] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.251212][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.261304][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.295221][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.302303][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.327747][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.334977][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.525802][T16451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.688804][T16451] veth0_vlan: entered promiscuous mode [ 326.704320][T16451] veth1_vlan: entered promiscuous mode [ 326.730273][T16451] veth0_macvtap: entered promiscuous mode [ 326.738620][T16451] veth1_macvtap: entered promiscuous mode [ 326.756110][T16451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.769361][T16451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.781828][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.806085][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.823643][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.841917][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.030197][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3773'. [ 327.080083][T16537] smc: net device bond0 applied user defined pnetid SYZ0 [ 327.105353][T16539] loop7: detected capacity change from 0 to 512 [ 327.120303][T16539] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 327.120617][T16545] smc: net device bond0 erased user defined pnetid SYZ0 [ 327.223690][T16539] EXT4-fs (loop7): 1 truncate cleaned up [ 327.229778][T16539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.369683][T11724] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.419145][T16559] loop7: detected capacity change from 0 to 512 [ 327.428544][T16559] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 327.437619][T16559] System zones: 1-12 [ 327.453230][T16559] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.3781: error while reading EA inode 32 err=-116 [ 327.533315][T14583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.565006][T16559] EXT4-fs (loop7): Remounting filesystem read-only [ 327.571688][T16559] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 327.603860][T16559] EXT4-fs (loop7): 1 orphan inode deleted [ 327.719335][T16582] loop1: detected capacity change from 0 to 128 [ 327.759629][T16582] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 327.791844][T16582] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 327.809252][T16584] bond4: entered promiscuous mode [ 327.814352][T16584] bond4: entered allmulticast mode [ 327.822471][T16582] FAULT_INJECTION: forcing a failure. [ 327.822471][T16582] name failslab, interval 1, probability 0, space 0, times 0 [ 327.835203][T16582] CPU: 0 UID: 0 PID: 16582 Comm: syz.1.3791 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 327.835281][T16582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.835295][T16582] Call Trace: [ 327.835302][T16582] [ 327.835322][T16582] __dump_stack+0x1d/0x30 [ 327.835344][T16582] dump_stack_lvl+0xe8/0x140 [ 327.835364][T16582] dump_stack+0x15/0x1b [ 327.835414][T16582] should_fail_ex+0x265/0x280 [ 327.835440][T16582] should_failslab+0x8c/0xb0 [ 327.835513][T16582] kmem_cache_alloc_noprof+0x50/0x310 [ 327.835546][T16582] ? getname_flags+0x80/0x3b0 [ 327.835580][T16582] getname_flags+0x80/0x3b0 [ 327.835612][T16582] io_openat_prep+0x129/0x2b0 [ 327.835721][T16582] io_submit_sqes+0x5de/0x1050 [ 327.835762][T16582] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 327.835795][T16582] ? 0xffffffff81000000 [ 327.835810][T16582] ? __rcu_read_unlock+0x4f/0x70 [ 327.835835][T16582] ? get_pid_task+0x96/0xd0 [ 327.835860][T16582] ? proc_fail_nth_write+0x13b/0x160 [ 327.835884][T16582] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 327.835933][T16582] ? vfs_write+0x7e8/0x960 [ 327.835952][T16582] ? __rcu_read_unlock+0x4f/0x70 [ 327.835972][T16582] ? __fget_files+0x184/0x1c0 [ 327.836009][T16582] ? fput+0x8f/0xc0 [ 327.836075][T16582] __x64_sys_io_uring_enter+0x78/0x90 [ 327.836096][T16582] x64_sys_call+0x2de1/0x2ff0 [ 327.836182][T16582] do_syscall_64+0xd2/0x200 [ 327.836214][T16582] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 327.836243][T16582] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 327.836270][T16582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.836340][T16582] RIP: 0033:0x7fd3b3f0ebe9 [ 327.836418][T16582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.836437][T16582] RSP: 002b:00007fd3b296f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 327.836454][T16582] RAX: ffffffffffffffda RBX: 00007fd3b4135fa0 RCX: 00007fd3b3f0ebe9 [ 327.836465][T16582] RDX: 000000000000addf RSI: 0000000000003518 RDI: 0000000000000004 [ 327.836476][T16582] RBP: 00007fd3b296f090 R08: 0000000000000000 R09: 0000000000000000 [ 327.836487][T16582] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 327.836501][T16582] R13: 00007fd3b4136038 R14: 00007fd3b4135fa0 R15: 00007ffd8c99db88 [ 327.836582][T16582] [ 328.073165][T16584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 328.096954][T16584] bond4 (unregistering): Released all slaves [ 328.157410][T16587] loop1: detected capacity change from 0 to 2048 [ 328.194690][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 328.194705][ T29] audit: type=1326 audit(1755087320.979:90318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 328.243668][ T29] audit: type=1326 audit(1755087320.979:90319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 328.267415][ T29] audit: type=1326 audit(1755087320.979:90320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 328.291207][ T29] audit: type=1326 audit(1755087320.979:90321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 328.307446][T16597] pimreg: tun_chr_ioctl cmd 1074025677 [ 328.314973][ T29] audit: type=1326 audit(1755087320.979:90322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 328.344127][ T29] audit: type=1326 audit(1755087320.979:90323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 328.367781][ T29] audit: type=1326 audit(1755087320.979:90324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665147ebe9 code=0x7ffc0000 [ 328.391570][ T29] audit: type=1326 audit(1755087320.979:90325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6651480a7c code=0x7ffc0000 [ 328.415240][ T29] audit: type=1326 audit(1755087320.979:90326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f66514809b4 code=0x7ffc0000 [ 328.439104][ T29] audit: type=1326 audit(1755087320.979:90327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f66514809b4 code=0x7ffc0000 [ 328.487108][T16597] pimreg: linktype set to 786 [ 328.568298][T16607] pim6reg: entered allmulticast mode [ 328.574904][T16607] pim6reg: left allmulticast mode [ 328.623694][T16613] pim6reg: entered allmulticast mode [ 328.637237][T16613] pim6reg: left allmulticast mode [ 328.650672][T16617] __nla_validate_parse: 8 callbacks suppressed [ 328.650687][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3805'. [ 328.682355][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3805'. [ 328.774379][T16621] loop7: detected capacity change from 0 to 512 [ 328.888854][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3809'. [ 328.941284][T16621] EXT4-fs (loop7): orphan cleanup on readonly fs [ 328.948255][T16621] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3807: bg 0: block 248: padding at end of block bitmap is not set [ 328.977290][T16621] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3807: Failed to acquire dquot type 1 [ 328.979801][T16631] loop1: detected capacity change from 0 to 512 [ 329.010336][T16631] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 329.019417][T16621] EXT4-fs (loop7): 1 truncate cleaned up [ 329.037388][T16631] EXT4-fs (loop1): 1 truncate cleaned up [ 329.060445][T16621] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 329.078816][T16621] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 0 [ 329.216316][T16643] loop7: detected capacity change from 0 to 2048 [ 329.258362][T16651] pim6reg: entered allmulticast mode [ 329.264550][T16651] pim6reg: left allmulticast mode [ 329.322247][T16655] loop2: detected capacity change from 0 to 1024 [ 329.329288][T16655] EXT4-fs: Ignoring removed orlov option [ 329.449367][T16662] loop2: detected capacity change from 0 to 512 [ 329.496170][T16662] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 329.549473][T16662] System zones: 0-2, 18-18, 34-35 [ 329.577562][T16662] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.606326][T16666] bond_slave_1: mtu less than device minimum [ 329.647454][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3819'. [ 329.725248][T16668] loop2: detected capacity change from 0 to 8192 [ 329.759752][T16671] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3821'. [ 329.768808][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3821'. [ 329.867282][T16677] $Hÿ: renamed from bond0 (while UP) [ 329.874857][T16677] $Hÿ: entered promiscuous mode [ 330.616570][T16695] loop2: detected capacity change from 0 to 512 [ 330.642441][T16695] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 330.693144][T16695] System zones: 0-2, 18-18, 34-35 [ 330.699314][T16695] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.029380][T16707] loop2: detected capacity change from 0 to 1024 [ 331.038055][T16707] EXT4-fs: Ignoring removed orlov option [ 331.043902][T16707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.224744][T16711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3833'. [ 331.233782][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3833'. [ 331.398959][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'. [ 331.409494][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'. [ 331.497910][T16719] atomic_op ffff88811ae26d28 conn xmit_atomic 0000000000000000 [ 331.607742][T16730] loop1: detected capacity change from 0 to 512 [ 331.632118][T16730] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 331.640327][T16730] System zones: 1-12 [ 331.645012][T16730] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3842: error while reading EA inode 32 err=-116 [ 331.760524][T16730] EXT4-fs (loop1): Remounting filesystem read-only [ 331.767187][T16730] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 331.795281][T16730] EXT4-fs (loop1): 1 orphan inode deleted [ 331.880428][T16747] loop1: detected capacity change from 0 to 2048 [ 331.988946][T16747] FAULT_INJECTION: forcing a failure. [ 331.988946][T16747] name failslab, interval 1, probability 0, space 0, times 0 [ 332.001673][T16747] CPU: 1 UID: 0 PID: 16747 Comm: syz.1.3848 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 332.001707][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.001722][T16747] Call Trace: [ 332.001730][T16747] [ 332.001738][T16747] __dump_stack+0x1d/0x30 [ 332.001761][T16747] dump_stack_lvl+0xe8/0x140 [ 332.001782][T16747] dump_stack+0x15/0x1b [ 332.001819][T16747] should_fail_ex+0x265/0x280 [ 332.001844][T16747] should_failslab+0x8c/0xb0 [ 332.001943][T16747] kmem_cache_alloc_noprof+0x50/0x310 [ 332.001973][T16747] ? getname_flags+0x80/0x3b0 [ 332.002050][T16747] getname_flags+0x80/0x3b0 [ 332.002115][T16747] path_setxattrat+0x223/0x310 [ 332.002161][T16747] __x64_sys_lsetxattr+0x71/0x90 [ 332.002246][T16747] x64_sys_call+0x2877/0x2ff0 [ 332.002269][T16747] do_syscall_64+0xd2/0x200 [ 332.002298][T16747] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.002388][T16747] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.002484][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.002508][T16747] RIP: 0033:0x7fd3b3f0ebe9 [ 332.002525][T16747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.002573][T16747] RSP: 002b:00007fd3b296f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 332.002602][T16747] RAX: ffffffffffffffda RBX: 00007fd3b4135fa0 RCX: 00007fd3b3f0ebe9 [ 332.002616][T16747] RDX: 0000200000000800 RSI: 0000200000000140 RDI: 0000200000000080 [ 332.002630][T16747] RBP: 00007fd3b296f090 R08: 0000000000000002 R09: 0000000000000000 [ 332.002644][T16747] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 332.002658][T16747] R13: 00007fd3b4136038 R14: 00007fd3b4135fa0 R15: 00007ffd8c99db88 [ 332.002678][T16747] [ 332.007997][T16757] atomic_op ffff88811ae26d28 conn xmit_atomic 0000000000000000 [ 332.254860][T16764] loop4: detected capacity change from 0 to 512 [ 332.274258][T16764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 332.286648][T16764] System zones: 1-12 [ 332.291118][T16764] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.3855: error while reading EA inode 32 err=-116 [ 332.305180][T16764] EXT4-fs (loop4): Remounting filesystem read-only [ 332.311810][T16764] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 332.322028][T16764] EXT4-fs (loop4): 1 orphan inode deleted [ 332.427957][T16777] loop1: detected capacity change from 0 to 512 [ 332.442166][T16777] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 332.464291][T16777] EXT4-fs (loop1): 1 truncate cleaned up [ 332.856093][T16798] loop7: detected capacity change from 0 to 512 [ 332.893945][T16798] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 332.911630][T16798] System zones: 0-2, 18-18, 34-35 [ 332.922285][T16798] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.135996][T16803] tmpfs: Bad value for 'mpol' [ 333.198843][T16807] pim6reg: entered allmulticast mode [ 333.204544][ T29] kauditd_printk_skb: 853 callbacks suppressed [ 333.204559][ T29] audit: type=1326 audit(1755087325.989:91179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.1.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3b3f05ba7 code=0x7ffc0000 [ 333.292684][T16808] pim6reg: left allmulticast mode [ 333.299221][ T29] audit: type=1326 audit(1755087326.029:91180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.1.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3b3eaadd9 code=0x7ffc0000 [ 333.322754][ T29] audit: type=1326 audit(1755087326.029:91181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.1.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b3f0ebe9 code=0x7ffc0000 [ 333.346471][ T29] audit: type=1326 audit(1755087326.029:91182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.1.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b3f0ebe9 code=0x7ffc0000 [ 333.370175][ T29] audit: type=1326 audit(1755087326.029:91183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.1.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3b3f05ba7 code=0x7ffc0000 [ 333.393710][ T29] audit: type=1326 audit(1755087326.029:91184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.1.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3b3eaadd9 code=0x7ffc0000 [ 333.417256][ T29] audit: type=1326 audit(1755087326.029:91185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.1.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3b3f05ba7 code=0x7ffc0000 [ 333.440841][ T29] audit: type=1326 audit(1755087326.029:91186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.1.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3b3eaadd9 code=0x7ffc0000 [ 333.464572][ T29] audit: type=1326 audit(1755087326.039:91188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16772 comm="syz.3.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f626ad9add9 code=0x7ffc0000 [ 333.488267][ T29] audit: type=1326 audit(1755087326.039:91189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16772 comm="syz.3.3859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f626adf5ba7 code=0x7ffc0000 [ 333.554577][T16810] loop7: detected capacity change from 0 to 512 [ 333.569663][T16810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 333.595672][T16812] loop1: detected capacity change from 0 to 512 [ 333.622868][T16810] System zones: 1-12 [ 333.630230][T16810] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.3869: error while reading EA inode 32 err=-116 [ 333.665443][T16810] EXT4-fs (loop7): Remounting filesystem read-only [ 333.672024][T16810] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 333.721561][T16810] EXT4-fs (loop7): 1 orphan inode deleted [ 333.968900][T16832] __nla_validate_parse: 10 callbacks suppressed [ 333.968936][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3878'. [ 333.989348][T16833] loop7: detected capacity change from 0 to 512 [ 333.996524][T16833] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.001615][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3878'. [ 334.021858][T16832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.035681][T16832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.131358][T16840] pim6reg: entered allmulticast mode [ 334.137440][T16840] pim6reg: left allmulticast mode [ 334.195587][T16842] bond_slave_1: mtu less than device minimum [ 334.208805][T16842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3881'. [ 334.716274][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 335.089219][ T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.164538][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.219675][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.293963][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.315373][T16872] chnl_net:caif_netlink_parms(): no params data found [ 335.375359][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.382672][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.398903][T16872] bridge_slave_0: entered allmulticast mode [ 335.405629][T16872] bridge_slave_0: entered promiscuous mode [ 335.420086][T16891] loop2: detected capacity change from 0 to 512 [ 335.420919][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.433587][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.441618][T16872] bridge_slave_1: entered allmulticast mode [ 335.448261][T16872] bridge_slave_1: entered promiscuous mode [ 335.448312][T16891] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 335.484912][T16891] System zones: 0-2, 18-18, 34-35 [ 335.512121][T16891] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.561728][T16902] loop4: detected capacity change from 0 to 2048 [ 335.566279][T16904] loop1: detected capacity change from 0 to 512 [ 335.577310][T16904] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.593195][ T37] $Hÿ (unregistering): Released all slaves [ 335.595083][T16906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3905'. [ 335.602838][ T37] bond1 (unregistering): Released all slaves [ 335.617255][ T37] bond2 (unregistering): Released all slaves [ 335.645250][ T37] bond3 (unregistering): Released all slaves [ 335.667450][T16872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.685099][T16906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3905'. [ 335.689323][T16872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.725650][ T37] hsr_slave_0: left promiscuous mode [ 335.738808][ T37] hsr_slave_1: left promiscuous mode [ 335.761694][ T37] veth1_macvtap: left promiscuous mode [ 335.767425][ T37] veth0_macvtap: left promiscuous mode [ 335.777560][ T37] veth1_vlan: left promiscuous mode [ 335.787677][ T37] veth0_vlan: left promiscuous mode [ 335.934920][T16872] team0: Port device team_slave_0 added [ 335.943658][T16872] team0: Port device team_slave_1 added [ 335.981072][T16872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.984776][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'. [ 335.988124][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.988238][T16872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.069318][T16872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.076737][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.103021][T16872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.167683][T16872] hsr_slave_0: entered promiscuous mode [ 336.179130][T16872] hsr_slave_1: entered promiscuous mode [ 336.185563][T16872] debugfs: 'hsr0' already exists in 'hsr' [ 336.191318][T16872] Cannot create hsr debugfs directory [ 336.318750][T16934] loop2: detected capacity change from 0 to 512 [ 336.325599][T16934] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 336.336348][T16934] EXT4-fs (loop2): 1 truncate cleaned up [ 336.537791][T16872] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 336.563776][T16872] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 336.572688][T16872] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 336.587093][T16872] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 336.674671][T16872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.690987][T16872] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.712462][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.719556][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.740017][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.747746][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.873895][T16872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.113212][T16872] veth0_vlan: entered promiscuous mode [ 337.132899][T16872] veth1_vlan: entered promiscuous mode [ 337.154035][T16872] veth0_macvtap: entered promiscuous mode [ 337.161417][T16872] veth1_macvtap: entered promiscuous mode [ 337.185382][T16872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.202981][T16872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.223515][ T387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.235952][ T387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.251560][ T387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.267955][ T387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.307050][T16967] pim6reg: entered allmulticast mode [ 337.313232][T16967] pim6reg: left allmulticast mode [ 337.328080][T16965] loop2: detected capacity change from 0 to 4096 [ 337.517625][T16973] loop1: detected capacity change from 0 to 2048 [ 337.575904][T16994] loop2: detected capacity change from 0 to 1024 [ 337.583542][T16994] EXT4-fs: Ignoring removed orlov option [ 337.589424][T16994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.668770][T16999] loop1: detected capacity change from 0 to 512 [ 337.676308][T16999] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 337.950641][T17015] pim6reg: entered allmulticast mode [ 337.957591][T17015] pim6reg: left allmulticast mode [ 338.327177][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3933'. [ 338.410873][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3935'. [ 338.428963][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3935'. [ 338.580553][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 338.580577][ T29] audit: type=1326 audit(1755087331.359:91385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00002ebe9 code=0x7ffc0000 [ 338.614239][ T29] audit: type=1326 audit(1755087331.359:91386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00002ebe9 code=0x7ffc0000 [ 338.637926][ T29] audit: type=1326 audit(1755087331.359:91387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff00002ebe9 code=0x7ffc0000 [ 338.661605][ T29] audit: type=1326 audit(1755087331.359:91388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17033 comm="syz.2.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00002ebe9 code=0x7ffc0000 [ 338.787721][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.875961][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.924306][T17056] 9pnet: Could not find request transport: rdm [ 338.959912][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.975987][T17041] chnl_net:caif_netlink_parms(): no params data found [ 339.009046][T17065] loop4: detected capacity change from 0 to 512 [ 339.024174][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.035912][T17065] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 339.059712][T17065] System zones: 0-2, 18-18, 34-35 [ 339.066331][T17065] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 339.077927][T17041] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.085164][T17041] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.095866][T17041] bridge_slave_0: entered allmulticast mode [ 339.102663][T17041] bridge_slave_0: entered promiscuous mode [ 339.122122][T17041] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.129253][T17041] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.137101][T17041] bridge_slave_1: entered allmulticast mode [ 339.143671][T17041] bridge_slave_1: entered promiscuous mode [ 339.170723][ T52] bridge_slave_1: left allmulticast mode [ 339.176496][ T52] bridge_slave_1: left promiscuous mode [ 339.182220][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.189471][ T29] audit: type=1326 audit(1755087331.969:91389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 339.213183][ T29] audit: type=1326 audit(1755087331.969:91390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 339.234477][T17075] loop4: detected capacity change from 0 to 512 [ 339.236828][ T29] audit: type=1326 audit(1755087331.969:91391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm="syz.4.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 339.267253][ T29] audit: type=1326 audit(1755087331.999:91392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.4.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 339.290977][ T29] audit: type=1326 audit(1755087331.999:91393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.4.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 339.314653][ T29] audit: type=1326 audit(1755087331.999:91394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.4.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 339.340681][ T52] bridge_slave_0: left allmulticast mode [ 339.346375][ T52] bridge_slave_0: left promiscuous mode [ 339.352116][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.363065][T17075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 339.371021][T17075] System zones: 1-12 [ 339.376669][T17075] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.3949: error while reading EA inode 32 err=-116 [ 339.389791][T17075] EXT4-fs (loop4): Remounting filesystem read-only [ 339.396395][T17075] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 339.408259][T17075] EXT4-fs (loop4): 1 orphan inode deleted [ 339.467744][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.479306][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.499278][ T52] bond0 (unregistering): Released all slaves [ 339.517356][T17041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.527826][T17041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.567545][ T52] hsr_slave_0: left promiscuous mode [ 339.573399][ T52] hsr_slave_1: left promiscuous mode [ 339.579345][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.586829][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.599198][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.606736][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.617081][ T52] veth1_macvtap: left promiscuous mode [ 339.623134][ T52] veth0_macvtap: left promiscuous mode [ 339.628681][ T52] veth1_vlan: left promiscuous mode [ 339.634054][ T52] veth0_vlan: left promiscuous mode [ 339.703597][ T52] team0 (unregistering): Port device team_slave_1 removed [ 339.714529][ T52] team0 (unregistering): Port device team_slave_0 removed [ 339.731971][T17096] __nla_validate_parse: 2 callbacks suppressed [ 339.732044][T17096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3958'. [ 339.756951][T17041] team0: Port device team_slave_0 added [ 339.764101][T17041] team0: Port device team_slave_1 added [ 339.787461][T17041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.794520][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.820529][T17041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.838146][T17041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.845177][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.871153][T17041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.900313][T17041] hsr_slave_0: entered promiscuous mode [ 339.906434][T17041] hsr_slave_1: entered promiscuous mode [ 339.910995][T17104] loop2: detected capacity change from 0 to 512 [ 339.912469][T17041] debugfs: 'hsr0' already exists in 'hsr' [ 339.924244][T17041] Cannot create hsr debugfs directory [ 339.931340][T17104] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.949146][T17104] EXT4-fs (loop2): 1 truncate cleaned up [ 339.962995][T17107] 9pnet: Could not find request transport: rdm [ 340.116347][T17127] loop4: detected capacity change from 0 to 1024 [ 340.124946][T17127] EXT4-fs: Ignoring removed orlov option [ 340.130877][T17127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.270348][T17041] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 340.282695][T17041] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 340.292416][T17041] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 340.301372][T17041] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 340.356963][T17041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.373078][T17041] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.386206][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.393422][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.397746][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3980'. [ 340.404789][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.416576][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.449248][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3980'. [ 340.533093][T17041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.646578][T17180] FAULT_INJECTION: forcing a failure. [ 340.646578][T17180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.659763][T17180] CPU: 1 UID: 0 PID: 17180 Comm: syz.2.3983 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 340.659801][T17180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.659841][T17180] Call Trace: [ 340.659847][T17180] [ 340.659853][T17180] __dump_stack+0x1d/0x30 [ 340.659874][T17180] dump_stack_lvl+0xe8/0x140 [ 340.659899][T17180] dump_stack+0x15/0x1b [ 340.659959][T17180] should_fail_ex+0x265/0x280 [ 340.660005][T17180] should_fail+0xb/0x20 [ 340.660022][T17180] should_fail_usercopy+0x1a/0x20 [ 340.660043][T17180] _copy_from_user+0x1c/0xb0 [ 340.660072][T17180] __sys_sendto+0x19e/0x330 [ 340.660194][T17180] __x64_sys_sendto+0x76/0x90 [ 340.660262][T17180] x64_sys_call+0x2d05/0x2ff0 [ 340.660289][T17180] do_syscall_64+0xd2/0x200 [ 340.660400][T17180] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 340.660431][T17180] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 340.660522][T17180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.660549][T17180] RIP: 0033:0x7ff00002ebe9 [ 340.660609][T17180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.660629][T17180] RSP: 002b:00007feffea8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 340.660650][T17180] RAX: ffffffffffffffda RBX: 00007ff000255fa0 RCX: 00007ff00002ebe9 [ 340.660662][T17180] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 340.660674][T17180] RBP: 00007feffea8f090 R08: 0000200000000140 R09: 000000000000001c [ 340.660697][T17180] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 340.660712][T17180] R13: 00007ff000256038 R14: 00007ff000255fa0 R15: 00007ffda2abfef8 [ 340.660805][T17180] [ 340.674076][T17041] veth0_vlan: entered promiscuous mode [ 340.802050][T17185] loop2: detected capacity change from 0 to 2048 [ 340.815115][T17041] veth1_vlan: entered promiscuous mode [ 340.867662][T17041] veth0_macvtap: entered promiscuous mode [ 340.875541][T17041] veth1_macvtap: entered promiscuous mode [ 340.888744][T17041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.905621][T17041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.918415][ T1707] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.945990][ T1707] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.963095][ T52] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.978760][ T52] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.994500][T17184] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 341.010617][ T3392] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 341.011015][T17184] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1068 with error 28 [ 341.018656][ T3392] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.030789][T17184] EXT4-fs (loop2): This should not happen!! Data will be lost [ 341.030789][T17184] [ 341.050087][T17184] EXT4-fs (loop2): Total free blocks count 0 [ 341.056162][T17184] EXT4-fs (loop2): Free/Dirty block details [ 341.062276][T17184] EXT4-fs (loop2): free_blocks=2415919104 [ 341.068036][T17184] EXT4-fs (loop2): dirty_blocks=1072 [ 341.073465][T17184] EXT4-fs (loop2): Block reservation details [ 341.079490][T17184] EXT4-fs (loop2): i_reserved_data_blocks=67 [ 341.112484][T17197] loop8: detected capacity change from 0 to 2048 [ 341.144424][ T1707] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 341.156991][ T1707] EXT4-fs (loop2): This should not happen!! Data will be lost [ 341.156991][ T1707] [ 341.285787][T17219] loop2: detected capacity change from 0 to 2048 [ 341.362640][T17041] EXT4-fs unmount: 56 callbacks suppressed [ 341.362659][T17041] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.414007][T13729] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 341.426198][T17222] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 341.441546][T17222] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1258 with error 28 [ 341.454126][T17222] EXT4-fs (loop2): This should not happen!! Data will be lost [ 341.454126][T17222] [ 341.464040][T17222] EXT4-fs (loop2): Total free blocks count 0 [ 341.470128][T17222] EXT4-fs (loop2): Free/Dirty block details [ 341.476370][T17222] EXT4-fs (loop2): free_blocks=2415919104 [ 341.482188][T17222] EXT4-fs (loop2): dirty_blocks=1264 [ 341.487512][T17222] EXT4-fs (loop2): Block reservation details [ 341.493754][T17222] EXT4-fs (loop2): i_reserved_data_blocks=79 [ 341.500185][T13729] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.568160][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 341.574567][T17236] loop5: detected capacity change from 0 to 512 [ 341.581092][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 341.581092][ T12] [ 341.597379][T17236] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 341.646646][T17242] FAULT_INJECTION: forcing a failure. [ 341.646646][T17242] name failslab, interval 1, probability 0, space 0, times 0 [ 341.660198][T17242] CPU: 0 UID: 0 PID: 17242 Comm: syz.2.4000 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 341.660234][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.660251][T17242] Call Trace: [ 341.660259][T17242] [ 341.660269][T17242] __dump_stack+0x1d/0x30 [ 341.660292][T17242] dump_stack_lvl+0xe8/0x140 [ 341.660311][T17242] dump_stack+0x15/0x1b [ 341.660326][T17242] should_fail_ex+0x265/0x280 [ 341.660348][T17242] should_failslab+0x8c/0xb0 [ 341.660378][T17242] kmem_cache_alloc_noprof+0x50/0x310 [ 341.660413][T17242] ? vm_area_dup+0x33/0x2c0 [ 341.660453][T17242] vm_area_dup+0x33/0x2c0 [ 341.660486][T17242] copy_vma+0x2e2/0x580 [ 341.660521][T17242] move_vma+0x42e/0xcf0 [ 341.660555][T17242] ? do_vmi_munmap+0x1db/0x220 [ 341.660592][T17242] mremap_to+0x3eb/0x440 [ 341.660625][T17242] ? check_prep_vma+0x5d6/0x660 [ 341.660662][T17242] __se_sys_mremap+0x652/0xc60 [ 341.660702][T17242] ? __bpf_trace_sys_enter+0x10/0x30 [ 341.660724][T17242] ? trace_sys_enter+0xd0/0xf0 [ 341.660747][T17242] __x64_sys_mremap+0x67/0x80 [ 341.660779][T17242] x64_sys_call+0x2a24/0x2ff0 [ 341.660806][T17242] do_syscall_64+0xd2/0x200 [ 341.660839][T17242] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 341.660867][T17242] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 341.660891][T17242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.660913][T17242] RIP: 0033:0x7ff00002ebe9 [ 341.660932][T17242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.660961][T17242] RSP: 002b:00007feffea8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 341.660986][T17242] RAX: ffffffffffffffda RBX: 00007ff000255fa0 RCX: 00007ff00002ebe9 [ 341.661002][T17242] RDX: 0000000000400000 RSI: 0000000000002000 RDI: 000020000020e000 [ 341.661017][T17242] RBP: 00007feffea8f090 R08: 000020000082a000 R09: 0000000000000000 [ 341.661033][T17242] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 341.661048][T17242] R13: 00007ff000256038 R14: 00007ff000255fa0 R15: 00007ffda2abfef8 [ 341.661073][T17242] [ 341.921188][T17250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 341.941343][T17246] loop8: detected capacity change from 0 to 2048 [ 341.963656][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4002'. [ 341.976606][T17246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 341.992602][T17250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 342.011082][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4004'. [ 342.125109][T13729] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 342.142535][T17258] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 342.177833][T17258] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 342.181690][T13729] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.190473][T17258] EXT4-fs (loop8): This should not happen!! Data will be lost [ 342.190473][T17258] [ 342.209663][T17258] EXT4-fs (loop8): Total free blocks count 0 [ 342.215691][T17258] EXT4-fs (loop8): Free/Dirty block details [ 342.221617][T17258] EXT4-fs (loop8): free_blocks=2415919104 [ 342.227370][T17258] EXT4-fs (loop8): dirty_blocks=2336 [ 342.232719][T17258] EXT4-fs (loop8): Block reservation details [ 342.238720][T17258] EXT4-fs (loop8): i_reserved_data_blocks=146 [ 342.321385][T17280] bond_slave_1: mtu less than device minimum [ 342.330331][T17280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4012'. [ 342.339610][ T12] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 342.373487][T17285] loop8: detected capacity change from 0 to 512 [ 342.380323][T17285] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.455318][T17293] loop2: detected capacity change from 0 to 2048 [ 342.695797][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'. [ 342.710410][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'. [ 343.082566][T13729] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 343.101618][T13729] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.218485][T17313] loop4: detected capacity change from 0 to 2048 [ 343.236406][T17313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.261757][T14583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.401402][T17324] loop4: detected capacity change from 0 to 8192 [ 343.459671][T17324] loop4: p1 p2 < > p3 p4 < p5 > [ 343.464750][T17324] loop4: partition table partially beyond EOD, truncated [ 343.475707][T17320] 9pnet_fd: p9_fd_create_tcp (17320): problem connecting socket to 127.0.0.1 [ 343.481606][T17324] loop4: p1 size 100663296 extends beyond EOD, truncated [ 343.503187][T17324] loop4: p2 start 591104 is beyond EOD, truncated [ 343.509709][T17324] loop4: p3 start 33572980 is beyond EOD, truncated [ 343.572228][T17324] loop4: p5 size 100663296 extends beyond EOD, truncated [ 343.583830][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 343.583844][ T29] audit: type=1400 audit(1755087336.369:91605): avc: denied { watch } for pid=17319 comm="syz.4.4027" path="/146/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 343.614219][T17320] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 343.624355][ T29] audit: type=1400 audit(1755087336.399:91606): avc: denied { mac_admin } for pid=17319 comm="syz.4.4027" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 343.645681][ T29] audit: type=1400 audit(1755087336.409:91607): avc: denied { relabelto } for pid=17319 comm="syz.4.4027" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 343.671910][ T29] audit: type=1400 audit(1755087336.409:91608): avc: denied { associate } for pid=17319 comm="syz.4.4027" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 343.714786][ T29] audit: type=1400 audit(1755087336.499:91609): avc: denied { unmount } for pid=14583 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 343.759095][ T29] audit: type=1326 audit(1755087336.539:91610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="syz.3.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626adfebe9 code=0x7ffc0000 [ 343.782777][ T29] audit: type=1326 audit(1755087336.539:91611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="syz.3.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626adfebe9 code=0x7ffc0000 [ 343.822884][ T29] audit: type=1326 audit(1755087336.589:91612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="syz.3.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f626adfebe9 code=0x7ffc0000 [ 343.846566][ T29] audit: type=1326 audit(1755087336.589:91613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="syz.3.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626adfebe9 code=0x7ffc0000 [ 343.870235][ T29] audit: type=1326 audit(1755087336.589:91614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="syz.3.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f626adfebe9 code=0x7ffc0000 [ 344.080014][T17350] loop2: detected capacity change from 0 to 2048 [ 344.093814][ T23] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 344.102437][ T23] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 344.113574][T17350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 344.174687][T17361] loop4: detected capacity change from 0 to 2048 [ 344.193388][T17361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 344.259264][ T3399] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 344.267472][ T3399] hid-generic 0000:0000:0000.008A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 344.296586][T17364] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 344.312862][T17364] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 344.325409][T17364] EXT4-fs (loop2): This should not happen!! Data will be lost [ 344.325409][T17364] [ 344.335229][T17364] EXT4-fs (loop2): Total free blocks count 0 [ 344.341261][T17364] EXT4-fs (loop2): Free/Dirty block details [ 344.347293][T17364] EXT4-fs (loop2): free_blocks=2415919104 [ 344.353172][T17364] EXT4-fs (loop2): dirty_blocks=3264 [ 344.358561][T17364] EXT4-fs (loop2): Block reservation details [ 344.364573][T17364] EXT4-fs (loop2): i_reserved_data_blocks=204 [ 344.375106][ T23] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 344.383075][ T23] hid-generic 0000:0000:0000.008B: hidraw2: HID v0.00 Device [syz1] on syz0 [ 344.394940][T17367] hid-generic 0000:0000:0000.0089: pid 17367 passed too short report [ 344.437468][T17365] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 344.452658][T17365] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 344.465202][T17365] EXT4-fs (loop4): This should not happen!! Data will be lost [ 344.465202][T17365] [ 344.474888][T17365] EXT4-fs (loop4): Total free blocks count 0 [ 344.480966][T17365] EXT4-fs (loop4): Free/Dirty block details [ 344.486904][T17365] EXT4-fs (loop4): free_blocks=2415919104 [ 344.492662][T17365] EXT4-fs (loop4): dirty_blocks=3712 [ 344.497949][T17365] EXT4-fs (loop4): Block reservation details [ 344.503956][T17365] EXT4-fs (loop4): i_reserved_data_blocks=232 [ 344.537138][ T387] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.565258][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 344.609820][T17374] loop4: detected capacity change from 0 to 512 [ 344.618111][T17374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 344.626368][T17374] System zones: 1-12 [ 344.632125][T17374] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.4046: error while reading EA inode 32 err=-116 [ 344.633280][ T387] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.656228][T17374] EXT4-fs (loop4): Remounting filesystem read-only [ 344.662852][T17374] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 344.673136][T17374] EXT4-fs (loop4): 1 orphan inode deleted [ 344.679425][T17374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.691951][T17374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.716040][ T387] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.742860][T17383] loop4: detected capacity change from 0 to 512 [ 344.751194][T17383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 344.760037][T17383] System zones: 1-12 [ 344.766129][T17383] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.4047: error while reading EA inode 32 err=-116 [ 344.778737][T17383] EXT4-fs (loop4): Remounting filesystem read-only [ 344.785375][T17383] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 344.795603][T17383] EXT4-fs (loop4): 1 orphan inode deleted [ 344.796453][ T387] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.801831][T17383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.825180][T17383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.880717][T17370] chnl_net:caif_netlink_parms(): no params data found [ 344.889870][T17392] __nla_validate_parse: 1 callbacks suppressed [ 344.889885][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4050'. [ 344.939856][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 3074 with max blocks 184 with error 28 [ 344.997018][ T387] bridge_slave_1: left allmulticast mode [ 345.002564][T17397] loop2: detected capacity change from 0 to 512 [ 345.002726][ T387] bridge_slave_1: left promiscuous mode [ 345.011206][T17397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 345.014756][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.024160][T17397] System zones: 1-12 [ 345.032041][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4050'. [ 345.042948][T17397] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.4051: error while reading EA inode 32 err=-116 [ 345.057476][T17397] EXT4-fs (loop2): Remounting filesystem read-only [ 345.064099][T17397] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 345.076790][T17397] EXT4-fs (loop2): 1 orphan inode deleted [ 345.082788][ T387] bridge_slave_0: left allmulticast mode [ 345.083236][T17397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.088452][ T387] bridge_slave_0: left promiscuous mode [ 345.102848][T17397] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.106085][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.245346][T17409] loop2: detected capacity change from 0 to 512 [ 345.255182][T17409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.284183][ T387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.295306][T16451] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.306007][ T387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.322245][ T387] bond0 (unregistering): Released all slaves [ 345.396185][T17412] pim6reg: entered allmulticast mode [ 345.403869][T17414] pim6reg: left allmulticast mode [ 345.431475][ T387] hsr_slave_0: left promiscuous mode [ 345.437346][ T387] hsr_slave_1: left promiscuous mode [ 345.443138][ T387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.450541][ T387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.478924][ T387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.486395][ T387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.486530][T17417] loop2: detected capacity change from 0 to 512 [ 345.506727][T17417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.519477][ T387] veth1_macvtap: left promiscuous mode [ 345.526066][ T387] veth0_macvtap: left promiscuous mode [ 345.532758][ T387] veth1_vlan: left promiscuous mode [ 345.551658][T16451] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.563418][ T387] veth0_vlan: left promiscuous mode [ 345.628861][T17421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=17421 comm=syz.2.4060 [ 345.645503][ T387] team0 (unregistering): Port device team_slave_1 removed [ 345.657050][ T387] team0 (unregistering): Port device team_slave_0 removed [ 345.697715][T17370] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.704936][T17370] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.725775][T17370] bridge_slave_0: entered allmulticast mode [ 345.734270][T17370] bridge_slave_0: entered promiscuous mode [ 345.741071][T17370] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.748169][T17370] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.755742][T17370] bridge_slave_1: entered allmulticast mode [ 345.762457][T17370] bridge_slave_1: entered promiscuous mode [ 345.816521][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4061'. [ 345.865454][T17370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.887920][T17370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.920174][T17370] team0: Port device team_slave_0 added [ 345.927527][T17370] team0: Port device team_slave_1 added [ 345.956247][T17370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.963280][T17370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.989293][T17370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.024181][T17370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.031179][T17370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.057287][T17370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.108152][T17370] hsr_slave_0: entered promiscuous mode [ 346.114380][T17370] hsr_slave_1: entered promiscuous mode [ 346.120769][T17370] debugfs: 'hsr0' already exists in 'hsr' [ 346.126588][T17370] Cannot create hsr debugfs directory [ 346.252070][T17455] FAULT_INJECTION: forcing a failure. [ 346.252070][T17455] name failslab, interval 1, probability 0, space 0, times 0 [ 346.264968][T17455] CPU: 0 UID: 0 PID: 17455 Comm: syz.4.4072 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 346.265059][T17455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.265075][T17455] Call Trace: [ 346.265081][T17455] [ 346.265088][T17455] __dump_stack+0x1d/0x30 [ 346.265108][T17455] dump_stack_lvl+0xe8/0x140 [ 346.265126][T17455] dump_stack+0x15/0x1b [ 346.265145][T17455] should_fail_ex+0x265/0x280 [ 346.265226][T17455] should_failslab+0x8c/0xb0 [ 346.265309][T17455] kmem_cache_alloc_node_noprof+0x57/0x320 [ 346.265343][T17455] ? __alloc_skb+0x101/0x320 [ 346.265382][T17455] __alloc_skb+0x101/0x320 [ 346.265443][T17455] ? audit_log_start+0x365/0x6c0 [ 346.265477][T17455] audit_log_start+0x380/0x6c0 [ 346.265517][T17455] audit_seccomp+0x48/0x100 [ 346.265551][T17455] ? __seccomp_filter+0x68c/0x10d0 [ 346.265575][T17455] __seccomp_filter+0x69d/0x10d0 [ 346.265600][T17455] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 346.265625][T17455] ? vfs_write+0x7e8/0x960 [ 346.265719][T17455] ? __rcu_read_unlock+0x4f/0x70 [ 346.265738][T17455] ? __fget_files+0x184/0x1c0 [ 346.265764][T17455] __secure_computing+0x82/0x150 [ 346.265835][T17455] syscall_trace_enter+0xcf/0x1e0 [ 346.265857][T17455] do_syscall_64+0xac/0x200 [ 346.265884][T17455] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 346.265916][T17455] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 346.265946][T17455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.265988][T17455] RIP: 0033:0x7f7259a2d5fc [ 346.266007][T17455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 346.266207][T17455] RSP: 002b:00007f725848f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.266231][T17455] RAX: ffffffffffffffda RBX: 00007f7259c55fa0 RCX: 00007f7259a2d5fc [ 346.266254][T17455] RDX: 000000000000000f RSI: 00007f725848f0a0 RDI: 0000000000000006 [ 346.266271][T17455] RBP: 00007f725848f090 R08: 0000000000000000 R09: 0000000000000000 [ 346.266286][T17455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.266298][T17455] R13: 00007f7259c56038 R14: 00007f7259c55fa0 R15: 00007ffe55939258 [ 346.266316][T17455] [ 346.719318][T17370] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 346.736912][T17370] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 346.747466][T17370] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.756236][T17370] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.832709][T17370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.875961][T17370] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.886976][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.894071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.913833][T17370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.924345][T17370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.942967][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.950045][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.011229][T17370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.152832][T17494] bond_slave_1: mtu less than device minimum [ 347.309401][T17370] veth0_vlan: entered promiscuous mode [ 347.325185][T17370] veth1_vlan: entered promiscuous mode [ 347.359529][T17370] veth0_macvtap: entered promiscuous mode [ 347.386415][T17370] veth1_macvtap: entered promiscuous mode [ 347.415927][T17370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.437395][T17370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.458342][ T387] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.474062][ T387] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.514380][ T387] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.541414][ T387] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.696989][T17519] loop4: detected capacity change from 0 to 512 [ 347.715407][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4087'. [ 347.727329][T17519] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 347.741545][T17519] System zones: 0-2, 18-18, 34-35 [ 347.756890][T17519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.786942][T17519] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.801694][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4084'. [ 347.824601][T14583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.850455][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4087'. [ 347.907896][T17514] veth0_macvtap: left promiscuous mode [ 347.950517][T17533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4090'. [ 347.992065][T17533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4090'. [ 348.073766][T17538] bond_slave_1: mtu less than device minimum [ 348.199705][T17547] pim6reg: entered allmulticast mode [ 348.205750][T17547] pim6reg: left allmulticast mode [ 348.259288][T17557] loop2: detected capacity change from 0 to 2048 [ 348.283341][T17557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 348.345302][T17566] loop4: detected capacity change from 0 to 512 [ 348.355975][T17566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 348.364409][T17566] System zones: 1-12 [ 348.368826][T17566] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.4104: error while reading EA inode 32 err=-116 [ 348.384061][T17566] EXT4-fs (loop4): Remounting filesystem read-only [ 348.390661][T17566] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 348.400907][T17566] EXT4-fs (loop4): 1 orphan inode deleted [ 348.408005][T17566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.420842][T13364] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 348.432814][ T1042] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 348.440919][T13364] hid-generic 0000:0000:0000.008C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 348.445389][ T1042] hid-generic 0000:0000:0000.008D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 348.451456][T17566] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.469479][T17567] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 348.484989][T17567] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 248 with error 28 [ 348.497424][T17567] EXT4-fs (loop2): This should not happen!! Data will be lost [ 348.497424][T17567] [ 348.507136][T17567] EXT4-fs (loop2): Total free blocks count 0 [ 348.508656][T17572] FAULT_INJECTION: forcing a failure. [ 348.508656][T17572] name failslab, interval 1, probability 0, space 0, times 0 [ 348.513225][T17567] EXT4-fs (loop2): Free/Dirty block details [ 348.513243][T17567] EXT4-fs (loop2): free_blocks=2415919104 [ 348.525881][T17572] CPU: 0 UID: 0 PID: 17572 Comm: syz.6.4105 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 348.525936][T17572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.525952][T17572] Call Trace: [ 348.525960][T17572] [ 348.525969][T17572] __dump_stack+0x1d/0x30 [ 348.525996][T17572] dump_stack_lvl+0xe8/0x140 [ 348.526019][T17572] dump_stack+0x15/0x1b [ 348.526108][T17572] should_fail_ex+0x265/0x280 [ 348.526133][T17572] ? resv_map_alloc+0x32/0x190 [ 348.526168][T17572] should_failslab+0x8c/0xb0 [ 348.526234][T17572] __kmalloc_cache_noprof+0x4c/0x320 [ 348.526272][T17572] ? vfs_write+0x7e8/0x960 [ 348.526300][T17572] resv_map_alloc+0x32/0x190 [ 348.526336][T17572] hugetlbfs_get_inode+0x67/0x370 [ 348.526402][T17572] hugetlb_file_setup+0x192/0x3d0 [ 348.526621][T17572] ksys_mmap_pgoff+0x157/0x310 [ 348.526706][T17572] x64_sys_call+0x14a3/0x2ff0 [ 348.526732][T17572] do_syscall_64+0xd2/0x200 [ 348.526766][T17572] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 348.526797][T17572] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 348.526877][T17572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.526921][T17572] RIP: 0033:0x7f37ab61ebe9 [ 348.526940][T17572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.526964][T17572] RSP: 002b:00007f37aa07f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 348.527005][T17572] RAX: ffffffffffffffda RBX: 00007f37ab845fa0 RCX: 00007f37ab61ebe9 [ 348.527023][T17572] RDX: 000000000000000b RSI: 0000000000c00000 RDI: 0000200000400000 [ 348.527040][T17572] RBP: 00007f37aa07f090 R08: ffffffffffffffff R09: 0000000000000000 [ 348.527065][T17572] R10: 0000000000059032 R11: 0000000000000246 R12: 0000000000000001 [ 348.527082][T17572] R13: 00007f37ab846038 R14: 00007f37ab845fa0 R15: 00007fff0bb8d138 [ 348.527186][T17572] [ 348.726445][T17567] EXT4-fs (loop2): dirty_blocks=256 [ 348.731892][T17567] EXT4-fs (loop2): Block reservation details [ 348.738114][T17567] EXT4-fs (loop2): i_reserved_data_blocks=16 [ 348.749905][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 348.749922][ T29] audit: type=1326 audit(1755087341.529:91960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7259a2d550 code=0x7ffc0000 [ 348.779775][ T29] audit: type=1326 audit(1755087341.529:91961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7259a2e7eb code=0x7ffc0000 [ 348.803294][ T29] audit: type=1326 audit(1755087341.529:91962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7259a2d84a code=0x7ffc0000 [ 348.826858][ T29] audit: type=1326 audit(1755087341.529:91963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 348.850687][ T29] audit: type=1326 audit(1755087341.529:91964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.4.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7259a2ebe9 code=0x7ffc0000 [ 348.936791][T17588] loop5: detected capacity change from 0 to 512 [ 348.943854][T17588] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 348.955598][T17588] EXT4-fs (loop5): 1 truncate cleaned up [ 348.971254][T17588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.009312][ T29] audit: type=1400 audit(1755087341.789:91965): avc: denied { write } for pid=17587 comm="syz.5.4113" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 349.031871][ T29] audit: type=1400 audit(1755087341.789:91966): avc: denied { open } for pid=17587 comm="syz.5.4113" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 349.065102][T17595] ================================================================== [ 349.073219][T17595] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 349.082202][T17595] [ 349.084535][T17595] read to 0xffff8881290151a0 of 4 bytes by task 17596 on cpu 0: [ 349.092180][T17595] selinux_inode_permission+0x334/0x740 [ 349.097778][T17595] security_inode_permission+0x6d/0xb0 [ 349.103263][T17595] inode_permission+0x106/0x310 [ 349.108129][T17595] link_path_walk+0x162/0x900 [ 349.112839][T17595] path_openat+0x1de/0x2170 [ 349.117358][T17595] do_filp_open+0x109/0x230 [ 349.121882][T17595] do_sys_openat2+0xa6/0x110 [ 349.126498][T17595] __x64_sys_openat+0xf2/0x120 [ 349.131291][T17595] x64_sys_call+0x2e9c/0x2ff0 [ 349.135977][T17595] do_syscall_64+0xd2/0x200 [ 349.140509][T17595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.146422][T17595] [ 349.148757][T17595] write to 0xffff8881290151a0 of 4 bytes by task 17595 on cpu 1: [ 349.156477][T17595] selinux_inode_permission+0x3ac/0x740 [ 349.162063][T17595] security_inode_permission+0x6d/0xb0 [ 349.167539][T17595] inode_permission+0x106/0x310 [ 349.172399][T17595] link_path_walk+0x162/0x900 [ 349.177088][T17595] path_openat+0x1de/0x2170 [ 349.181599][T17595] do_filp_open+0x109/0x230 [ 349.186102][T17595] do_sys_openat2+0xa6/0x110 [ 349.190795][T17595] __x64_sys_openat+0xf2/0x120 [ 349.195574][T17595] x64_sys_call+0x2e9c/0x2ff0 [ 349.200261][T17595] do_syscall_64+0xd2/0x200 [ 349.204783][T17595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.210689][T17595] [ 349.213096][T17595] value changed: 0x00000001 -> 0x00000002 [ 349.218831][T17595] [ 349.221156][T17595] Reported by Kernel Concurrency Sanitizer on: [ 349.227306][T17595] CPU: 1 UID: 0 PID: 17595 Comm: syz.4.4115 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 349.239805][T17595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.249855][T17595] ================================================================== [ 349.279707][ T29] audit: type=1400 audit(1755087341.839:91967): avc: denied { read } for pid=17587 comm="syz.5.4113" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 349.302056][ T29] audit: type=1400 audit(1755087341.839:91968): avc: denied { setattr } for pid=17587 comm="syz.5.4113" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 349.324797][ T29] audit: type=1400 audit(1755087341.849:91969): avc: denied { mounton } for pid=17592 comm="syz.4.4115" path="/proc/438/task" dev="proc" ino=52304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 349.351776][T17593] loop4: detected capacity change from 0 to 32768 [ 349.362780][T16451] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 349.374432][T17593] loop4: p1 p3 < > [ 349.380354][T16872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.