last executing test programs: 23.63104652s ago: executing program 2 (id=203): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001700)=ANY=[], 0x16c4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="08008864070000000000140000000001080006040001aaaaaaaaaabbe0000001aaaaaaaaaaaa7f00000172c0ad2f4b13a65889792bcf6b1993bade9bc98f044c3fbb7b4c8d228a5ca4a5c3dcd0093f53c9c9a324d8cff9db99c057d765ba8104d2d142a975a264e5fcad290d9c1bb6e21fdfe24692db8820cd432a01e92e64202a9181ea8f1b0c1e15645b30310553bae03b9324dec3fcfc08857ab813f46cd2b7fc17a0"], 0x2a) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="000000000002000000000000000000000000000072f8d354c5c5b29a1938a159ad9eaeec5541839488f7a99529a95ba29487fee13758c95b26eb304bcf89d78b4b507242d6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0x24040845}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x39}}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 23.565585326s ago: executing program 2 (id=206): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54c, &(0x7f0000000ac0)="$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") (async, rerun: 64) creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r0 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) io_setup(0x8, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) (rerun: 64) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000002c0)='./bus\x00', 0x4000, 0x0, 0xfb, 0x0, &(0x7f0000000340)) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10) mkdirat(r5, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r5, &(0x7f0000000240)='./bus/file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x2) 23.564030816s ago: executing program 2 (id=207): r0 = memfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r3, 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) fallocate(r0, 0x1, 0x400002000000000, 0xffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$snapshot(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) 23.258043405s ago: executing program 2 (id=215): r0 = syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f639489314a7a8eda839df64e9f6f6d7072657373"], 0x3, 0x54c, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd22, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r8 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r9, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r10 = inotify_init() inotify_add_watch(r10, &(0x7f00000005c0)='./file0\x00', 0x44000c93) 22.882970901s ago: executing program 2 (id=219): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010500000000000000850a60e600000000000500000014000500200100000000000000000300000000001c00090008"], 0x4c}}, 0x0) (async) r0 = creat(&(0x7f0000000080)='./bus\x00', 0xad) fcntl$setstatus(r0, 0x4, 0x46100) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r1, &(0x7f00000002c0)={0x3, 0x5, 0x1, 0x4}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, r2, 0x400) (async) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r6}, 0x18) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYRES64=r6, @ANYRES16=r7, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 22.518466045s ago: executing program 2 (id=225): r0 = memfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r3, 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) fallocate(r0, 0x1, 0x400002000000000, 0xffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000080000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$snapshot(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) 22.491493798s ago: executing program 32 (id=225): r0 = memfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r3, 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) fallocate(r0, 0x1, 0x400002000000000, 0xffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$snapshot(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) 17.385216492s ago: executing program 4 (id=295): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], ';'}]}}, 0x0, 0x2a, 0x0, 0x1, 0x4}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], ';'}]}}, 0x0, 0x2a, 0x0, 0x1, 0x4}, 0x28) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) (async) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mq_unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r3, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r3, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) (async) ftruncate(r4, 0x8800000) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000640), &(0x7f00000001c0)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000640), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="14000000a6ba601e03a974abca5f2682feaddf27dc331507f6afb391557f0d77887dd86d552f935ff31957b405af6ab444f4bfcfa89a0453ab2613f6d4c6c044e874e8a514667877231e24638590440fb13a720f2264808ce8424c95964a1671e90d4a35dd32c5575a58906ca98bec0651eb805038ac919fa5f765f1542ba935b31be3d1d908ccd9d779", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 17.381965102s ago: executing program 4 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x14, &(0x7f0000000300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x8, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x8, 0xb, 0x3, 0xffffffffffffffe0, 0x10}, @call={0x85, 0x0, 0x0, 0xc8}, @ldst={0x3, 0x1, 0x6, 0x9, 0x2, 0x80}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5c3}}, @call={0x85, 0x0, 0x0, 0x2b}, @call={0x85, 0x0, 0x0, 0x56}, @jmp={0x5, 0x0, 0x1, 0x8, 0x0, 0xc, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x88, &(0x7f00000003c0)=""/136, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xc, 0xffff, 0xddb4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000580)=[{0x1, 0x2, 0xe, 0x1}, {0x1, 0x2, 0xa, 0x8}, {0x0, 0x1, 0x6, 0x6}, {0x3, 0x2, 0x7, 0x9}, {0x2, 0x4, 0x7, 0x4}], 0x10, 0xdfc1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) (async, rerun: 64) fgetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.redirect\x00', &(0x7f0000000280)=""/99, 0x63) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) pselect6(0x40, &(0x7f0000000240)={0x8, 0x7, 0x4, 0x0, 0x4cd6, 0x5982, 0xfffffffffffffffc, 0xbbde}, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0) (async, rerun: 64) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0xfffffffd, 0x4) (rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000009019078ac1e0001ac1414aa03049078318bbad7306b8ac7897a391209183f2500000000680000000100007f0000017f00000100186371ae9b1c03"], 0x0) 17.208330249s ago: executing program 4 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00'}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) write$UHID_CREATE2(r2, &(0x7f0000000980)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xa8, 0xfffb, 0x1, 0x3, 0x6, 0xe79, "78fd6a1e48058a8467b859b032e7dd8d83be55bb2cd208c7b4223dcbcd72fac8bb24986249bc46d0a102314359ffa92c516dc1d4c14ab683ae18c0cc9740a6fa68142ea352920633952dde4123771bd285dc08661dd022dce26c1a54a222403c24849f5b03d4f48a80047066a2ada4ab1591567e0674f7b842deacc7956619a48f11e17ded5f7143c6e6fb2a6dac1934e7b17403b9037c52f03cdf3fd6f176e7b99a81407db2b3ac"}}, 0x1c0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r8, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="de", 0x1}], 0x1}}], 0x2, 0x20008050) shutdown(r8, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x7, 0x7, 0xee15, 0x80000000, {{0xf, 0x4, 0x2, 0xc, 0x3c, 0x67, 0x0, 0x10, 0x29, 0x0, @remote, @remote, {[@lsrr={0x83, 0x27, 0x4a, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010100, @empty, @local, @rand_addr=0x64010100, @remote, @empty]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xfc, 0x12, 0x100, 0x70bd28, 0x25dfdbfd, {0x5, 0x1a, 0x2, 0x1, {0x4e20, 0x4e20, [0x5, 0x0, 0x715b, 0xffff], [0x7f, 0x9, 0x1bf, 0x2], r9, [0x1, 0x4]}, 0x1ff, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x28, 0x1, "47c0cc83537b1b6bfc7f74f10b4d8a7fa8981eaacef83c655535cfd5ad88d1bd1c7540f1"}, @INET_DIAG_REQ_BYTECODE={0x53, 0x1, "b33b4f1f72abe776a8d52139aa8fce3f4c9c73a938b6108ea6e7193a77348df063e5281a5654b08926a336eeaa5837af28d94fa17a159feec1ae344f4ea897214a089002c8cf54f59d61d4f33a62a1"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "2466d013843ae6b25b5568ebec0349df4e22215a8809e37553950ab27379d08323ce2ad30ad1cd822547fd8b18c37e"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x41}, 0x4000044) sendfile(r2, r2, 0x0, 0x2) 16.326178443s ago: executing program 4 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf251500000060000180140001"], 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811eede", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r4, &(0x7f0000000600)=""/99, 0x63, 0x100, &(0x7f0000000680)=@phonet={0x23, 0x80, 0x6, 0x9}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9699df75839ab099, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = getpid() r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r10, r11, 0x0, r7, r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 15.645119327s ago: executing program 4 (id=332): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@nombcache}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@nobarrier}, {@nomblk_io_submit}, {@mblk_io_submit}, {@init_itable}]}, 0x1, 0x572, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRESHEX], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001df00000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r5, 0x0, 0x7}, 0x18) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat$cgroup_int(r0, &(0x7f0000000040)='blkio.reset_stats\x00', 0x2, 0x0) 14.777146409s ago: executing program 4 (id=347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a40)=@newtclass={0x0, 0x28, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x2, 0x3}, {0xf, 0xc}, {0xe, 0x4}}, [@tclass_kind_options=@c_cake, @TCA_RATE={0x0, 0x5, {0xd}}, @tclass_kind_options=@c_sfb]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048010}, 0x200000c0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2a, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@map_fd={0x18, 0x1}, @alu={0x7, 0x0, 0xc, 0x5, 0x9, 0x50, 0xffffffffffffffff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}, @generic={0x4, 0x8, 0xa, 0x4b1, 0x4}, @tail_call, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x3, 0x8, 0x18}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x800, 0x1000, &(0x7f0000000500)=""/4096, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff]}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_tracing={0x1a, 0x7, &(0x7f0000001900)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @ldst={0x0, 0x2, 0x6, 0x0, 0x1, 0x4, 0xfffffffffffffffc}, @generic={0x4, 0x2, 0x0, 0x10, 0x101}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000001940)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000019c0)={0x3, 0x4, 0x3, 0xd52}, 0x10, 0x27e98, r5, 0x1, &(0x7f0000001ac0)=[r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000001b00)=[{0x2, 0x4, 0x0, 0x9}], 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000302, r8, 0x0) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a40)=@newtclass={0x0, 0x28, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x2, 0x3}, {0xf, 0xc}, {0xe, 0x4}}, [@tclass_kind_options=@c_cake, @TCA_RATE={0x0, 0x5, {0xd}}, @tclass_kind_options=@c_sfb]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048010}, 0x200000c0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2a, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@map_fd={0x18, 0x1}, @alu={0x7, 0x0, 0xc, 0x5, 0x9, 0x50, 0xffffffffffffffff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}, @generic={0x4, 0x8, 0xa, 0x4b1, 0x4}, @tail_call, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x3, 0x8, 0x18}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x800, 0x1000, &(0x7f0000000500)=""/4096, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff]}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_tracing={0x1a, 0x7, &(0x7f0000001900)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @ldst={0x0, 0x2, 0x6, 0x0, 0x1, 0x4, 0xfffffffffffffffc}, @generic={0x4, 0x2, 0x0, 0x10, 0x101}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000001940)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000019c0)={0x3, 0x4, 0x3, 0xd52}, 0x10, 0x27e98, r5, 0x1, &(0x7f0000001ac0)=[r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000001b00)=[{0x2, 0x4, 0x0, 0x9}], 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000302, r8, 0x0) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) read(r1, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xc, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async, rerun: 64) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) (async, rerun: 64) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcccc}}}, 0x84) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/1339], 0x53b) (async) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r5, 0xa, 0x21) (async) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000080)=0x80) fcntl$setlease(r5, 0x400, 0x1) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00001f003b0000e7ff00001080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x200000000000024b, &(0x7f0000000640)=ANY=[@ANYBLOB="d5000000000000410ee4c2a3ef676484b75f2167578a174452156597999e2ab237aeb90c59bad0ca2b90981fce66e616d04e194a6a70bb0bcd0fbb69f7eb11acbb871d083757317e9916dfc7324923db282ffab7c72ae3c2fb8c77b7105ed3e355db03470274bdac21b4e19d05c380a3b8093ccbed1c1d5ea9ee6e885742ae60e55a908b9e2560c6b87f0cf9c295d013659802c17b5ba4b6e490bb1bd4177b3d", @ANYRES32=r6, @ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r8, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000200)={r4, 0x8001, 0x7, 0x6}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='qgroup_meta_reserve\x00', r9}, 0x18) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) splice(r10, 0x0, r11, 0x0, 0x10003, 0x0) write$RDMA_USER_CM_CMD_REJECT(r11, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "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"}}, 0x110) 1.15767433s ago: executing program 1 (id=592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000060b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.077467668s ago: executing program 1 (id=595): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4800000}, 0x70) 1.076786078s ago: executing program 3 (id=596): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) unshare(0x22020400) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) r4 = fsmount(r3, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x52, 0x8, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @cond=[{0x0, 0x20c8, 0x20, 0x6, 0xaf}, {0x7ffe, 0x11, 0x1, 0x10, 0x5, 0xfaa}]}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r6, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="d1", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000c386b51d1202e1000005000000"], 0x10}}], 0x1, 0x4044044) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) recvmmsg(r2, &(0x7f0000000780), 0x0, 0x12020, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf254c0000000800030003000000080001007063690011000200303030303a30303a31c5ea3f3ee6238f3000a8007365636f6e646e616d6500000e00a90066697273746e616d650000000e00a90066697273746ef00b6714cb64ccb47c32a148fac2cffffdd26194a308d129050a41c71926acab7f343b4a52cb58256ef2a191608b8ff68823f0844cb2e29c98637365eeb8", @ANYRESHEX=r4, @ANYRESOCT=r5], 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x24008010) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x5, 0xab, &(0x7f000000cf3d)=""/171, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 1.074329978s ago: executing program 1 (id=597): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000033000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000840005"], 0x13c}}, 0x20040880) 977.607938ms ago: executing program 3 (id=600): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r5, 0x401, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) splice(r1, 0x0, r3, 0x0, 0x200000000000c, 0xa) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 976.427698ms ago: executing program 1 (id=602): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_int(r1, 0x1, 0x28, 0x0, &(0x7f00000001c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 824.310322ms ago: executing program 0 (id=604): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) (async, rerun: 64) syz_open_dev$vcsu(0x0, 0x80, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) 748.950839ms ago: executing program 0 (id=605): syz_emit_ethernet(0x8a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0) 747.452639ms ago: executing program 0 (id=606): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000070b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 675.552586ms ago: executing program 0 (id=609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14001c00", @ANYRES16=r4, @ANYBLOB="210727bd7000fbdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000040)) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000c3016c000100000095000000000000c7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x0) utimensat(r6, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000300)={0x0, 0x7fffffff, 0x7}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r8, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c011}, 0x81) r9 = io_uring_setup(0x2280, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x2}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, 0x0, 0x0) 537.88497ms ago: executing program 6 (id=614): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000003c0)=0x1, 0x4) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async, rerun: 32) close(0x3) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r7}, 0x20) (rerun: 64) getpid() (async) socket$inet(0x2, 0xa, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xffbfffd9, 0x10001, 0x0, 0xa, 0x4, "03f00900", 0x566, 0x3}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r8}, 0x10) (async, rerun: 32) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9) (rerun: 32) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x44800) 529.40848ms ago: executing program 6 (id=615): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mremap(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f00009a1000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000bde000/0x2000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x14) (async) r2 = semget(0x1, 0x4, 0x120) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000000)=""/68) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) 513.022792ms ago: executing program 6 (id=617): syz_emit_ethernet(0x8a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0) 483.336744ms ago: executing program 6 (id=618): r0 = memfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r3, 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) fallocate(r0, 0x1, 0x400002000000000, 0xffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$snapshot(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) 413.436121ms ago: executing program 5 (id=619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000000018020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 412.936881ms ago: executing program 5 (id=620): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="5de454bd17de79", 0x7}], 0x1, 0x0, 0x1, {0x8000}}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xffffffff, 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f0000000240)) r7 = socket(0x10, 0x803, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000003c0)={0x7, 0xcb, 0x1, 'queue0\x00', 0xd9c}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000006}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0xfffffffffffff001}, 0x18) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0x2, 0x9}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048014}, 0x4000) 333.003679ms ago: executing program 1 (id=621): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) (async) listen(r0, 0x1) (async) socket$unix(0x1, 0x1, 0x0) (async) accept4(r0, 0xfffffffffffffffd, &(0x7f0000000000)=0xffffffffffffff03, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x754e, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) close(0x3) (async) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) (async) time(&(0x7f0000000280)) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x10007ffffffff}, 0x18) (async) sendto$inet6(r3, &(0x7f0000000000)="8f6b", 0x2, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r2], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c23003f) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230051) 306.695851ms ago: executing program 5 (id=622): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1e00000, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1e00000, 0x8}, 0xc) (async) 260.184126ms ago: executing program 0 (id=623): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x25) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 258.834116ms ago: executing program 0 (id=624): syz_read_part_table(0x4094, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/3m0YhoEgCi5MEv5U4obchPvPT4CgkypQNhOSb4Prr5H31VVVPb8jyeecrE5fXc0cT//eZD72touV/OrWiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICNHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFAAD//6VnITk=") inotify_init1(0x800) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xf, &(0x7f0000000500)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x80000004, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05080000000000000c000000000000000000000057c1f00967731631e62b39ab907d8c4f4c3bbbbbdfcdf1327ddd0b12dfc88ee6a8357c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) 152.079626ms ago: executing program 6 (id=625): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x7}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}]}, 0x44}}, 0x4800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x501000, 0x100) 137.311547ms ago: executing program 3 (id=626): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRES32=r0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file1\x00', 0x0) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) (async) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRES32=r0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) (async) renameat2(r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file1\x00', 0x0) (async) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) 137.069857ms ago: executing program 5 (id=627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_peer\x00', r0}, 0x18) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_stats={0x1d, 0x2, [0x2, 0x2]}}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 50.262396ms ago: executing program 6 (id=628): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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") (async, rerun: 32) mbind(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x2, 0x0, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067656e65e1250c704e5693040008000000050003000100000005000d00", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (rerun: 64) fallocate(r3, 0x3, 0x1, 0x8000c62) (async, rerun: 32) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)) (async, rerun: 32) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000001c0)={0x4, 0xfffffffd, 0x2, 0x80000001}, 0x10) (async, rerun: 32) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x420002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 40.490766ms ago: executing program 5 (id=629): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000700007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=630): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154d000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x4d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000140)="39bec9c07fff155e1705c04fa598a445a06077df03c025cf5f82d63762a4c014e11f720a24ebceb4f6134f88b1f2bd75a39e918c9c28dd11a69ed9e162222389be9f9e4a324ded4fc754b5a9600903183dbd78344b25382f8bc1d7627bc8569358ddecf4ee45a1dbb275e0a89df78c134fc9cf21247cf906bf74d0c6e38366dd513de1165c486781b3644d2b856fbf49e9fe4b1570d0333a2777193f6f30b553d3da037b10d8904a47ffdf27c944b74fa6963fb808288fbbb260f8a39dbca275c968dddd5968384f798af6c5d580234f1c6d", &(0x7f0000000040)=""/37, &(0x7f0000000080)="832f7e291adc9f6b5285", &(0x7f0000000400)="e35c471d4388580f0de8c4dd2c7213c60658ae3110f2b9f321bb02ae2e020e09308b6387f64d169c8bdd83d8e2e7bf1db4756b2553fc6faf4f23bd18a519312c95c7b83226b34e1d6d8bead4d52fe4328d65bf16e5626257d9ffe45b5b9305b56a1147703d3d25235ee084f623905cec212fdd110d88", 0x7, r0, 0x4}, 0x38) kernel console output (not intermixed with test programs): f data journaling mode [ 39.456591][ T2075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.479272][ T3510] loop3: detected capacity change from 0 to 736 [ 39.486143][ T3510] iso9660: Unknown parameter 'noc1JzڃNompress' [ 39.504406][ T2075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.519780][ T3496] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.526475][ T3510] loop3: detected capacity change from 0 to 1024 [ 39.541001][ T3510] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.556131][ T3510] ext4: Unknown parameter 'obj_type' [ 39.564142][ T2075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.573641][ T2075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.583321][ T2075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.598850][ T2075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.600980][ T3510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.609315][ T3496] EXT4-fs (loop4): 1 truncate cleaned up [ 39.623855][ T3496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.746147][ T3510] syz.3.4 (3510) used greatest stack depth: 9544 bytes left [ 39.748609][ T3509] Zero length message leads to an empty skb [ 39.769160][ T3509] hub 2-0:1.0: USB hub found [ 39.775378][ T3509] hub 2-0:1.0: 8 ports detected [ 39.823903][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.126918][ C0] hrtimer: interrupt took 36576 ns [ 40.312249][ T3537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 40.321365][ T3537] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13'. [ 40.342079][ T3537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 40.351416][ T3537] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13'. [ 40.352115][ T3539] loop2: detected capacity change from 0 to 1024 [ 40.360523][ T3537] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13'. [ 40.378459][ T3535] bridge0: entered allmulticast mode [ 40.384707][ T3539] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.399537][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 40.426219][ T3519] can: request_module (can-proto-0) failed. [ 40.429579][ T3538] bridge_slave_1: left allmulticast mode [ 40.437964][ T3538] bridge_slave_1: left promiscuous mode [ 40.443975][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.456758][ T3539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.462940][ T3538] bridge_slave_0: left allmulticast mode [ 40.474876][ T3538] bridge_slave_0: left promiscuous mode [ 40.480777][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.510608][ T3538] bridge0 (unregistering): left allmulticast mode [ 40.560795][ T3549] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3549 comm=syz.4.16 [ 40.618844][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.656468][ T3555] loop1: detected capacity change from 0 to 512 [ 40.720665][ T3555] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.768557][ T3555] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 40.794468][ T3555] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.823727][ T3555] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 40.843604][ T3555] EXT4-fs (loop1): Remounting filesystem read-only [ 40.850376][ T3555] EXT4-fs (loop1): 1 truncate cleaned up [ 40.856538][ T37] EXT4-fs (loop1): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 40.867652][ T37] EXT4-fs (loop1): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 40.911759][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.923612][ T3555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.937078][ T3555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.026331][ T3591] loop1: detected capacity change from 0 to 164 [ 41.141678][ T3593] team0: Device gtp0 is of different type [ 41.253980][ T3586] loop4: detected capacity change from 0 to 2048 [ 41.266484][ T3598] loop1: detected capacity change from 0 to 8192 [ 41.276693][ T3598] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.303470][ T3599] netlink: 76 bytes leftover after parsing attributes in process `syz.1.31'. [ 41.323799][ T3598] netlink: 76 bytes leftover after parsing attributes in process `syz.1.31'. [ 41.328108][ T3586] loop4: p2 p3 p7 [ 41.416089][ T3608] netlink: 48 bytes leftover after parsing attributes in process `syz.3.35'. [ 41.438330][ T3609] loop3: detected capacity change from 0 to 128 [ 41.458319][ T3609] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.478151][ T3609] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.513500][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 41.532417][ T3607] udevd[3607]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 41.534140][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.588795][ T3626] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.616735][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 41.638079][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 41.641374][ T3607] udevd[3607]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.703501][ T3636] loop3: detected capacity change from 0 to 512 [ 41.714298][ T3622] netlink: 'syz.4.39': attribute type 15 has an invalid length. [ 41.739347][ T3636] ------------[ cut here ]------------ [ 41.744881][ T3636] EA inode 11 i_nlink=2 [ 41.744896][ T3636] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.3.41/3636 [ 41.760064][ T3636] Modules linked in: [ 41.764070][ T3636] CPU: 0 UID: 0 PID: 3636 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.773839][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.773994][ T3622] vxlan0: entered promiscuous mode [ 41.775309][ T53] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.784267][ T3636] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 41.804923][ T3636] Code: 41 cc 9c ff 4c 8d 2d fa b8 20 05 49 8d 7e 40 e8 c1 61 b8 ff 49 8b 6e 40 4c 89 e7 e8 d5 5c b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 3c f7 ba 03 66 66 66 2e 0f 1f 84 [ 41.824974][ T3636] RSP: 0018:ffffc900025ff5a0 EFLAGS: 00010246 [ 41.831264][ T3636] RAX: ffff888103711b10 RBX: ffff888107ebfaf0 RCX: ffffffff81bb545b [ 41.839353][ T3636] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0d40 [ 41.847616][ T3636] RBP: 000000000000000b R08: 0001888107ebfaa3 R09: 0000000000000000 [ 41.855664][ T3636] R10: ffffc900025ff4d0 R11: 0001c900025ff4d0 R12: ffff888107ebfaa0 [ 41.863983][ T3636] R13: ffffffff86dc0d40 R14: ffff888107ebfa58 R15: 0000000000000001 [ 41.872117][ T3636] FS: 00007f39cfed76c0(0000) GS:ffff8882aedc2000(0000) knlGS:0000000000000000 [ 41.872420][ T53] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.881420][ T3636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.897135][ T3636] CR2: 00007f5c088b7000 CR3: 000000011ce80000 CR4: 00000000003506f0 [ 41.905902][ T3636] Call Trace: [ 41.909306][ T3636] [ 41.912344][ T3636] ext4_xattr_set_entry+0x77f/0x1020 [ 41.917677][ T3636] ext4_xattr_ibody_set+0x184/0x3c0 [ 41.922962][ T3636] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 41.928826][ T3636] __ext4_expand_extra_isize+0x246/0x280 [ 41.934583][ T3636] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 41.936893][ T53] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.940174][ T3636] ext4_evict_inode+0x7c4/0xd40 [ 41.940224][ T3636] ? __pfx_ext4_evict_inode+0x10/0x10 [ 41.940275][ T3636] evict+0x2af/0x510 [ 41.961820][ T3644] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.963468][ T3636] ? __dquot_initialize+0x146/0x7c0 [ 41.980986][ T3636] iput+0x4bd/0x650 [ 41.984967][ T3636] ext4_process_orphan+0x1a9/0x1c0 [ 41.990153][ T3636] ext4_orphan_cleanup+0x6a8/0xa00 [ 41.995368][ T3636] ext4_fill_super+0x3411/0x37a0 [ 41.998587][ T53] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.000497][ T3636] ? set_blocksize+0x1a8/0x310 [ 42.014220][ T3636] ? sb_set_blocksize+0xfc/0x170 [ 42.014846][ T3644] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.019501][ T3636] ? setup_bdev_super+0x30e/0x370 [ 42.035277][ T3636] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.040903][ T3636] get_tree_bdev_flags+0x291/0x300 [ 42.046125][ T3636] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.051701][ T3636] get_tree_bdev+0x1f/0x30 [ 42.056217][ T3636] ext4_get_tree+0x1c/0x30 [ 42.060730][ T3636] vfs_get_tree+0x57/0x1d0 [ 42.065247][ T3636] do_new_mount+0x24d/0x6a0 [ 42.070012][ T3636] path_mount+0x4ab/0xb80 [ 42.074448][ T3636] ? user_path_at+0xbf/0x130 [ 42.079276][ T3636] __se_sys_mount+0x28c/0x2e0 [ 42.084332][ T3636] __x64_sys_mount+0x67/0x80 [ 42.089096][ T3636] x64_sys_call+0x2cca/0x3000 [ 42.093918][ T3636] do_syscall_64+0xd8/0x2c0 [ 42.098505][ T3636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.104844][ T3636] RIP: 0033:0x7f39d1470eea [ 42.109464][ T3636] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.129343][ T3636] RSP: 002b:00007f39cfed6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.138115][ T3636] RAX: ffffffffffffffda RBX: 00007f39cfed6ef0 RCX: 00007f39d1470eea [ 42.146216][ T3636] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f39cfed6eb0 [ 42.154279][ T3636] RBP: 0000200000000180 R08: 00007f39cfed6ef0 R09: 0000000000800700 [ 42.162295][ T3636] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 42.170396][ T3636] R13: 00007f39cfed6eb0 R14: 000000000000046f R15: 000000000000002c [ 42.178516][ T3636] [ 42.181765][ T3636] ---[ end trace 0000000000000000 ]--- [ 42.187911][ T3636] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.41: iget: bad extra_isize 90 (inode size 256) [ 42.201805][ T3636] EXT4-fs (loop3): Remounting filesystem read-only [ 42.208498][ T3636] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 42.217722][ T3636] EXT4-fs (loop3): 1 orphan inode deleted [ 42.224324][ T3636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.368323][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.462566][ T3659] journal_path: Lookup failure for './bus/file0' [ 42.469166][ T3659] EXT4-fs: error: could not find journal device path [ 42.518630][ T3659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.574373][ T3659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.605782][ T3723] ======================================================= [ 42.605782][ T3723] WARNING: The mand mount option has been deprecated and [ 42.605782][ T3723] and is ignored by this kernel. Remove the mand [ 42.605782][ T3723] option from the mount to silence this warning. [ 42.605782][ T3723] ======================================================= [ 42.650170][ T3659] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.687166][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.736718][ T3723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.949931][ T3749] syz.2.60 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.975049][ T3750] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 42.999875][ T3750] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.010524][ T3750] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.60: corrupted inode contents [ 43.023477][ T3750] EXT4-fs (loop2): Remounting filesystem read-only [ 43.030304][ T3750] EXT4-fs (loop2): 1 truncate cleaned up [ 43.031258][ T3759] xt_ecn: cannot match TCP bits for non-tcp packets [ 43.043310][ T3703] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.053901][ T3703] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.073507][ T3703] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.085448][ T3750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.122315][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.135999][ T3759] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.64: bg 0: block 5: invalid block bitmap [ 43.150231][ T3759] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 43.159659][ T3759] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.64: invalid indirect mapped block 3 (level 2) [ 43.174460][ T3759] EXT4-fs (loop4): 2 truncates cleaned up [ 43.183297][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.205186][ T3759] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.225846][ T3771] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 43.278010][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.291083][ T3771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.304248][ T3771] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.341286][ T3771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.431681][ T3787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.485906][ T3787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.511393][ T3787] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.565948][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.583189][ T3807] netlink: 'syz.2.79': attribute type 3 has an invalid length. [ 43.647298][ T3819] random: crng reseeded on system resumption [ 43.882208][ T3838] syz.3.88 uses obsolete (PF_INET,SOCK_PACKET) [ 43.982027][ T3847] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.004760][ T3847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.008797][ T29] kauditd_printk_skb: 738 callbacks suppressed [ 44.008813][ T29] audit: type=1400 audit(1766232414.191:819): avc: denied { read open } for pid=3852 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.049976][ T29] audit: type=1400 audit(1766232414.221:820): avc: denied { getattr } for pid=3852 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.076364][ T29] audit: type=1400 audit(1766232414.241:821): avc: denied { map } for pid=3843 comm="syz.4.90" path="/20/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.099697][ T29] audit: type=1400 audit(1766232414.241:822): avc: denied { execute } for pid=3843 comm="syz.4.90" path="/20/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.185055][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.209672][ T29] audit: type=1400 audit(1766232414.351:823): avc: denied { create } for pid=3843 comm="syz.4.90" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 44.243036][ T3854] syz.0.91: attempt to access beyond end of device [ 44.243036][ T3854] loop0: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 44.273644][ T3871] capability: warning: `syz.1.94' uses deprecated v2 capabilities in a way that may be insecure [ 44.295737][ T29] audit: type=1400 audit(1766232414.401:824): avc: denied { add_name } for pid=3849 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.296125][ T3869] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 44.318830][ T29] audit: type=1326 audit(1766232414.441:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4657c1f749 code=0x7ffc0000 [ 44.351854][ T29] audit: type=1326 audit(1766232414.441:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4657c1f749 code=0x7ffc0000 [ 44.376106][ T29] audit: type=1400 audit(1766232414.441:827): avc: denied { bind } for pid=3868 comm="syz.1.94" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.396948][ T29] audit: type=1400 audit(1766232414.441:828): avc: denied { name_bind } for pid=3868 comm="syz.1.94" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 44.419967][ T3854] syz.0.91: attempt to access beyond end of device [ 44.419967][ T3854] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 44.435194][ T3854] syz.0.91: attempt to access beyond end of device [ 44.435194][ T3854] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 44.461977][ T3854] syz.0.91: attempt to access beyond end of device [ 44.461977][ T3854] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 44.504217][ T3854] syz.0.91: attempt to access beyond end of device [ 44.504217][ T3854] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 44.535446][ T3854] syz.0.91: attempt to access beyond end of device [ 44.535446][ T3854] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 44.549696][ T3854] syz.0.91: attempt to access beyond end of device [ 44.549696][ T3854] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 44.565820][ T3854] syz.0.91: attempt to access beyond end of device [ 44.565820][ T3854] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 44.580674][ T3854] syz.0.91: attempt to access beyond end of device [ 44.580674][ T3854] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 44.608692][ T3854] syz.0.91: attempt to access beyond end of device [ 44.608692][ T3854] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 44.635326][ T3893] set_capacity_and_notify: 11 callbacks suppressed [ 44.635345][ T3893] loop4: detected capacity change from 0 to 8192 [ 44.649891][ T3893] msdos: Unknown parameter 'n' [ 44.693982][ T3905] loop1: detected capacity change from 0 to 512 [ 44.727979][ T3893] loop4: detected capacity change from 0 to 512 [ 44.729664][ T3905] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.735192][ T3907] __nla_validate_parse: 10 callbacks suppressed [ 44.735213][ T3907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 44.754847][ T3905] EXT4-fs (loop1): 1 truncate cleaned up [ 44.766228][ T3905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.785115][ T3905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 44.791776][ T3893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.794006][ T3905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 44.808188][ T3907] random: crng reseeded on system resumption [ 44.826779][ T3905] bridge1: entered promiscuous mode [ 44.832092][ T3905] bridge1: entered allmulticast mode [ 44.838445][ T3893] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.873360][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.896192][ T3914] netlink: 'syz.4.100': attribute type 12 has an invalid length. [ 44.908945][ T3914] loop4: detected capacity change from 0 to 128 [ 44.931065][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.950808][ T3914] raw_sendmsg: syz.4.100 forgot to set AF_INET. Fix it! [ 44.966656][ T3918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'. [ 45.031507][ T3921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3921 comm=syz.2.103 [ 45.217082][ T3942] loop3: detected capacity change from 0 to 764 [ 45.220506][ T3939] loop4: detected capacity change from 0 to 128 [ 45.236532][ T3944] loop0: detected capacity change from 0 to 512 [ 45.243978][ T3944] EXT4-fs: Ignoring removed orlov option [ 45.270048][ T3944] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 45.281663][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 45.292290][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 45.307109][ T3957] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.350280][ T3962] loop0: detected capacity change from 0 to 512 [ 45.357505][ T3962] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.382686][ T3964] cgroup: No subsys list or none specified [ 45.406257][ T3968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3968 comm=syz.2.119 [ 45.420021][ T3962] EXT4-fs (loop0): 1 truncate cleaned up [ 45.426470][ T3962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.441349][ T3972] loop4: detected capacity change from 0 to 1024 [ 45.450716][ T3972] ext4: Unknown parameter 'uid<00000000000000000000' [ 45.517938][ T3978] batadv_slave_0: entered promiscuous mode [ 45.546942][ T3977] batadv_slave_0: left promiscuous mode [ 45.623615][ T3985] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.124'. [ 45.633179][ T3985] netlink: zone id is out of range [ 45.638505][ T3985] netlink: zone id is out of range [ 45.644432][ T3985] netlink: zone id is out of range [ 45.669803][ T3985] netlink: zone id is out of range [ 45.675139][ T3985] netlink: zone id is out of range [ 45.676844][ T3992] loop4: detected capacity change from 0 to 256 [ 45.680555][ T3985] netlink: zone id is out of range [ 45.680568][ T3985] netlink: zone id is out of range [ 45.680576][ T3985] netlink: zone id is out of range [ 45.703125][ T3985] netlink: zone id is out of range [ 45.708536][ T3985] netlink: zone id is out of range [ 45.948731][ T4005] netlink: 'syz.3.129': attribute type 12 has an invalid length. [ 46.148336][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.206591][ T3918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.240056][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 46.261212][ T3918] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.373117][ T4031] can0: slcan on ptm0. [ 46.520368][ T3918] netlink: 3 bytes leftover after parsing attributes in process `syz.1.102'. [ 46.536128][ T3918] 0X: renamed from caif0 [ 46.858025][ T4010] EXT4-fs: dax option not supported [ 46.943577][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 47.078053][ T3918] 0X: entered allmulticast mode [ 47.261336][ T4057] EXT4-fs: inline encryption not supported [ 47.269467][ T4029] can0 (unregistered): slcan off ptm0. [ 47.338158][ T4057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.471769][ T4090] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.493171][ T4090] EXT4-fs (loop3): mount failed [ 47.493697][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.650714][ T4114] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 47.664388][ T4114] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.681869][ T4114] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.159: corrupted inode contents [ 47.700083][ T4114] EXT4-fs (loop1): Remounting filesystem read-only [ 47.707178][ T4114] EXT4-fs (loop1): 1 truncate cleaned up [ 47.716366][ T3706] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.727230][ T3706] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.738510][ T3706] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.751107][ T4114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.791853][ T4135] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 47.830209][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.840161][ T4135] loop4: p1 < > p4 [ 47.845517][ T4135] loop4: p4 size 8388608 extends beyond EOD, truncated [ 47.862950][ T4135] netlink: 'syz.4.163': attribute type 13 has an invalid length. [ 47.916057][ T4136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.926104][ T4136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.977503][ T4135] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.984979][ T4135] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.011371][ T4156] random: crng reseeded on system resumption [ 48.023719][ T4158] iso9660: Bad value for 'map' [ 48.062020][ T4135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.073077][ T4135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.141715][ T3706] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.151318][ T3706] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.161242][ T3706] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.170484][ T3706] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.180263][ T3706] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.189376][ T3706] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.198572][ T3706] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.207697][ T3706] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.257735][ T4165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.353763][ T4169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.376428][ T4169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.397693][ T4169] bond0 (unregistering): Released all slaves [ 48.542448][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.838075][ T4196] random: crng reseeded on system resumption [ 48.931266][ T4198] EXT4-fs: Ignoring removed orlov option [ 49.001833][ T4198] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 49.011287][ T4198] System zones: 0-1, 3-12 [ 49.017827][ T4198] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.149746][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 49.269956][ T4229] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.272082][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.289564][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.309300][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 49.309393][ T29] audit: type=1400 audit(1766232419.491:1336): avc: denied { setopt } for pid=4225 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.350519][ T4212] 0X: left allmulticast mode [ 49.368025][ T29] audit: type=1400 audit(1766232419.551:1337): avc: denied { map } for pid=4228 comm="syz.3.192" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.381310][ T4236] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.193: bg 0: block 5: invalid block bitmap [ 49.393416][ T29] audit: type=1400 audit(1766232419.551:1338): avc: denied { execute } for pid=4228 comm="syz.3.192" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.439981][ T4243] random: crng reseeded on system resumption [ 49.446843][ T4236] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 49.458161][ T4236] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.193: invalid indirect mapped block 3 (level 2) [ 49.474558][ T4236] EXT4-fs (loop0): 2 truncates cleaned up [ 49.481939][ T4236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.489848][ T4230] EXT4-fs (loop3): 1 truncate cleaned up [ 49.522342][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.530844][ T4230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.547742][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.574257][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.588274][ T29] audit: type=1400 audit(1766232419.771:1339): avc: denied { setattr } for pid=4235 comm="syz.0.193" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.643204][ T4212] bridge1: left promiscuous mode [ 49.648378][ T4212] bridge1: left allmulticast mode [ 49.658104][ T29] audit: type=1326 audit(1766232419.841:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ea5f749 code=0x7ffc0000 [ 49.690299][ T4248] set_capacity_and_notify: 13 callbacks suppressed [ 49.690316][ T4248] loop4: detected capacity change from 0 to 128 [ 49.704219][ T29] audit: type=1326 audit(1766232419.841:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3ea5f749 code=0x7ffc0000 [ 49.728550][ T29] audit: type=1326 audit(1766232419.841:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ea5f749 code=0x7ffc0000 [ 49.737991][ T4248] msdos: Unknown parameter '[^ r5_ןQKiSc(g'WJEr+_N' [ 49.752810][ T29] audit: type=1326 audit(1766232419.851:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3ea5f749 code=0x7ffc0000 [ 49.786915][ T29] audit: type=1326 audit(1766232419.871:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ea5f749 code=0x7ffc0000 [ 49.810847][ T29] audit: type=1326 audit(1766232419.871:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3ea5f749 code=0x7ffc0000 [ 49.838665][ T3715] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.847886][ T3715] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.869946][ T3715] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.880570][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.894687][ T3715] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.918210][ T4253] __nla_validate_parse: 20 callbacks suppressed [ 49.918228][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 49.955798][ T4255] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 50.000452][ T4253] team0: Port device team_slave_1 removed [ 50.080954][ T4275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.205'. [ 50.118002][ T4286] loop1: detected capacity change from 0 to 512 [ 50.125347][ T4286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.142398][ T4286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.156608][ T4286] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.168885][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 50.179602][ T4295] random: crng reseeded on system resumption [ 50.200864][ T4272] loop0: detected capacity change from 0 to 512 [ 50.225421][ T4272] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.278240][ T4272] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 50.291880][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.358304][ T4306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 50.367809][ T4306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 50.440088][ T4316] loop2: detected capacity change from 0 to 736 [ 50.446831][ T4316] iso9660: Unknown parameter 'noc1JzڃNompress' [ 50.456839][ T4314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.212'. [ 50.460902][ T4297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4297 comm=syz.3.210 [ 50.489014][ T4314] Driver unsupported XDP return value 0 on prog (id 332) dev N/A, expect packet loss! [ 50.499014][ T4297] loop3: detected capacity change from 0 to 1024 [ 50.505862][ T4297] EXT4-fs: Ignoring removed orlov option [ 50.511833][ T4297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.518646][ T4297] ext4: Unknown parameter 'subj_role' [ 50.535211][ T4316] loop2: detected capacity change from 0 to 1024 [ 50.552255][ T4314] batman_adv: batadv0: Adding interface: dummy0 [ 50.558629][ T4314] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.584139][ T4314] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 50.599762][ T4316] EXT4-fs: Ignoring removed orlov option [ 50.607558][ T4316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.629781][ T4321] netlink: 3 bytes leftover after parsing attributes in process `,&#^%'. [ 50.636543][ T4316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 50.653897][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 50.667025][ T4321] 0X: renamed from caif0 [ 50.684164][ T4321] 0X: entered allmulticast mode [ 50.690371][ T4321] net_ratelimit: 13 callbacks suppressed [ 50.690391][ T4321] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 50.788093][ T3328] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 50.810339][ T3328] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 50.867746][ T4339] loop4: detected capacity change from 0 to 512 [ 50.874639][ T4339] EXT4-fs: Ignoring removed i_version option [ 50.885385][ T4339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.899335][ T4339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.046893][ T4351] loop1: detected capacity change from 0 to 512 [ 51.085097][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 51.104302][ T4351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.120479][ T4351] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.132044][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.147996][ T3715] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.202533][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.224'. [ 51.214330][ T4364] FAULT_INJECTION: forcing a failure. [ 51.214330][ T4364] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.227947][ T4364] CPU: 1 UID: 0 PID: 4364 Comm: Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.227986][ T4364] Tainted: [W]=WARN [ 51.227999][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.228011][ T4364] Call Trace: [ 51.228019][ T4364] [ 51.228027][ T4364] __dump_stack+0x1d/0x30 [ 51.228055][ T4364] dump_stack_lvl+0xe8/0x140 [ 51.228083][ T4364] dump_stack+0x15/0x1b [ 51.228121][ T4364] should_fail_ex+0x265/0x280 [ 51.228144][ T4364] should_fail+0xb/0x20 [ 51.228255][ T4364] should_fail_usercopy+0x1a/0x20 [ 51.228286][ T4364] _copy_from_user+0x1c/0xb0 [ 51.228321][ T4364] io_eventfd_register+0x77/0x1e0 [ 51.228366][ T4364] __se_sys_io_uring_register+0xb87/0xf20 [ 51.228396][ T4364] ? fput+0x8f/0xc0 [ 51.228429][ T4364] ? ksys_write+0x192/0x1a0 [ 51.228492][ T4364] __x64_sys_io_uring_register+0x55/0x70 [ 51.228523][ T4364] x64_sys_call+0x27ad/0x3000 [ 51.228625][ T4364] do_syscall_64+0xd8/0x2c0 [ 51.228663][ T4364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.228715][ T4364] RIP: 0033:0x7f39d146f749 [ 51.228732][ T4364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.228751][ T4364] RSP: 002b:00007f39cfed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 51.228785][ T4364] RAX: ffffffffffffffda RBX: 00007f39d16c5fa0 RCX: 00007f39d146f749 [ 51.228801][ T4364] RDX: 0000200000000a80 RSI: 0000000000000007 RDI: 0000000000000005 [ 51.228817][ T4364] RBP: 00007f39cfed7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.228959][ T4364] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 51.229051][ T4364] R13: 00007f39d16c6038 R14: 00007f39d16c5fa0 R15: 00007ffcb26daba8 [ 51.229071][ T4364] [ 51.417340][ T4362] loop4: detected capacity change from 0 to 2048 [ 51.425371][ T4368] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.221: corrupted inode contents [ 51.459793][ T4368] EXT4-fs (loop1): Remounting filesystem read-only [ 51.466431][ T4368] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 51.527306][ T3715] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.551921][ T4362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 51.578519][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.611255][ T3715] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.677712][ T4379] loop0: detected capacity change from 0 to 512 [ 51.711974][ T3715] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.727290][ T4379] EXT4-fs: dax option not supported [ 51.756196][ T4390] sit0: Master is either lo or non-ether device [ 51.828814][ T4359] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.880410][ T4390] Alternate GPT is invalid, using primary GPT. [ 51.886793][ T4390] loop1: p2 p3 p7 [ 51.891229][ T3715] bridge_slave_1: left allmulticast mode [ 51.897084][ T3715] bridge_slave_1: left promiscuous mode [ 51.902896][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.910917][ T4359] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 828 with error 28 [ 51.913279][ T4398] random: crng reseeded on system resumption [ 51.923633][ T4359] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.923633][ T4359] [ 51.939754][ T4359] EXT4-fs (loop4): Total free blocks count 0 [ 51.945854][ T4359] EXT4-fs (loop4): Free/Dirty block details [ 51.951919][ T4359] EXT4-fs (loop4): free_blocks=2415919104 [ 51.957828][ T4359] EXT4-fs (loop4): dirty_blocks=832 [ 51.963151][ T4359] EXT4-fs (loop4): Block reservation details [ 51.969192][ T4359] EXT4-fs (loop4): i_reserved_data_blocks=52 [ 51.980554][ T3715] bridge_slave_0: left allmulticast mode [ 51.986470][ T3715] bridge_slave_0: left promiscuous mode [ 51.992422][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.004801][ T4373] bio_check_eod: 13 callbacks suppressed [ 52.004820][ T4373] syz.3.228: attempt to access beyond end of device [ 52.004820][ T4373] loop3: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 52.041331][ T4373] syz.3.228: attempt to access beyond end of device [ 52.041331][ T4373] loop3: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 52.080631][ T4401] FAULT_INJECTION: forcing a failure. [ 52.080631][ T4401] name failslab, interval 1, probability 0, space 0, times 1 [ 52.093670][ T4401] CPU: 1 UID: 0 PID: 4401 Comm: Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.093769][ T4401] Tainted: [W]=WARN [ 52.093776][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.093791][ T4401] Call Trace: [ 52.093798][ T4401] [ 52.093807][ T4401] __dump_stack+0x1d/0x30 [ 52.093861][ T4401] dump_stack_lvl+0xe8/0x140 [ 52.093883][ T4401] dump_stack+0x15/0x1b [ 52.093902][ T4401] should_fail_ex+0x265/0x280 [ 52.094006][ T4401] should_failslab+0x8c/0xb0 [ 52.094032][ T4401] __kmalloc_cache_noprof+0x65/0x4c0 [ 52.094066][ T4401] ? io_eventfd_register+0xe0/0x1e0 [ 52.094104][ T4401] io_eventfd_register+0xe0/0x1e0 [ 52.094137][ T4401] __se_sys_io_uring_register+0xb87/0xf20 [ 52.094170][ T4401] ? fput+0x8f/0xc0 [ 52.094266][ T4401] ? ksys_write+0x192/0x1a0 [ 52.094291][ T4401] __x64_sys_io_uring_register+0x55/0x70 [ 52.094382][ T4401] x64_sys_call+0x27ad/0x3000 [ 52.094413][ T4401] do_syscall_64+0xd8/0x2c0 [ 52.094532][ T4401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.094559][ T4401] RIP: 0033:0x7f4657c1f749 [ 52.094580][ T4401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.094597][ T4401] RSP: 002b:00007f4656687038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 52.094665][ T4401] RAX: ffffffffffffffda RBX: 00007f4657e75fa0 RCX: 00007f4657c1f749 [ 52.094714][ T4401] RDX: 0000200000000a80 RSI: 0000000000000007 RDI: 0000000000000005 [ 52.094727][ T4401] RBP: 00007f4656687090 R08: 0000000000000000 R09: 0000000000000000 [ 52.094776][ T4401] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 52.094791][ T4401] R13: 00007f4657e76038 R14: 00007f4657e75fa0 R15: 00007ffcc2e92b88 [ 52.094810][ T4401] [ 52.095199][ T4373] syz.3.228: attempt to access beyond end of device [ 52.095199][ T4373] loop3: rw=34817, sector=261, nr_sectors = 27 limit=256 [ 52.296684][ T3705] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 52.316601][ T4373] syz.3.228: attempt to access beyond end of device [ 52.316601][ T4373] loop3: rw=8423425, sector=352, nr_sectors = 5 limit=256 [ 52.342749][ T3715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.361381][ T3715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.373504][ T3715] bond0 (unregistering): Released all slaves [ 52.379233][ T4409] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 52.383305][ T3715] bond1 (unregistering): Released all slaves [ 52.387207][ T4409] vhci_hcd vhci_hcd.2: invalid port number 96 [ 52.399548][ T4409] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 52.418753][ T3715] bond2 (unregistering): Released all slaves [ 52.459822][ T4408] tipc: Started in network mode [ 52.464771][ T4408] tipc: Node identity ac14140f, cluster identity 4711 [ 52.505821][ T4408] tipc: New replicast peer: 255.255.255.255 [ 52.512333][ T4408] tipc: Enabled bearer , priority 10 [ 52.530402][ T3715] hsr_slave_0: left promiscuous mode [ 52.545496][ T4404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.556991][ T3715] hsr_slave_1: left promiscuous mode [ 52.563051][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.570673][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.582189][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.582430][ T4404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.589769][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.616365][ T3715] veth1_macvtap: left promiscuous mode [ 52.631780][ T3715] veth0_macvtap: left promiscuous mode [ 52.637669][ T3715] veth1_vlan: left promiscuous mode [ 52.643275][ T3715] veth0_vlan: left promiscuous mode [ 52.707814][ T3715] team0 (unregistering): Port device team_slave_1 removed [ 52.718489][ T3715] team0 (unregistering): Port device team_slave_0 removed [ 52.758069][ T4417] netem: incorrect gi model size [ 52.763234][ T4417] netem: change failed [ 52.775510][ T4363] chnl_net:caif_netlink_parms(): no params data found [ 52.796095][ T4435] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.808378][ T4435] EXT4-fs (loop4): 1 truncate cleaned up [ 52.818961][ T4435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.841214][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.877291][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.884780][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.892505][ T4363] bridge_slave_0: entered allmulticast mode [ 52.899712][ T4363] bridge_slave_0: entered promiscuous mode [ 52.911327][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.918524][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.927151][ T4363] bridge_slave_1: entered allmulticast mode [ 52.935292][ T4363] bridge_slave_1: entered promiscuous mode [ 52.970365][ T4363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.996615][ T4363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.020139][ T4363] team0: Port device team_slave_0 added [ 53.026808][ T4363] team0: Port device team_slave_1 added [ 53.054057][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.061359][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.087718][ T4363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.099691][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.106649][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.133468][ T4363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.163122][ T4363] hsr_slave_0: entered promiscuous mode [ 53.169586][ T4363] hsr_slave_1: entered promiscuous mode [ 53.175645][ T4363] debugfs: 'hsr0' already exists in 'hsr' [ 53.181555][ T4363] Cannot create hsr debugfs directory [ 53.254129][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.314847][ T4449] kernel profiling enabled (shift: 5) [ 53.360872][ T4363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.369972][ T4363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.379020][ T4363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.388290][ T4363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.406458][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.413768][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.421273][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.428696][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.439441][ T4460] FAULT_INJECTION: forcing a failure. [ 53.439441][ T4460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.453014][ T4460] CPU: 0 UID: 0 PID: 4460 Comm: Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.453055][ T4460] Tainted: [W]=WARN [ 53.453062][ T4460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.453110][ T4460] Call Trace: [ 53.453117][ T4460] [ 53.453191][ T4460] __dump_stack+0x1d/0x30 [ 53.453219][ T4460] dump_stack_lvl+0xe8/0x140 [ 53.453302][ T4460] dump_stack+0x15/0x1b [ 53.453340][ T4460] should_fail_ex+0x265/0x280 [ 53.453431][ T4460] should_fail+0xb/0x20 [ 53.453456][ T4460] should_fail_usercopy+0x1a/0x20 [ 53.453537][ T4460] _copy_to_user+0x20/0xa0 [ 53.453571][ T4460] simple_read_from_buffer+0xb5/0x130 [ 53.453599][ T4460] proc_fail_nth_read+0x10e/0x150 [ 53.453722][ T4460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.453805][ T4460] vfs_read+0x1a8/0x770 [ 53.453883][ T4460] ? __rcu_read_unlock+0x4f/0x70 [ 53.453906][ T4460] ? __fget_files+0x184/0x1c0 [ 53.453977][ T4460] ? mutex_lock+0x58/0x90 [ 53.454006][ T4460] ksys_read+0xda/0x1a0 [ 53.454029][ T4460] __x64_sys_read+0x40/0x50 [ 53.454054][ T4460] x64_sys_call+0x2889/0x3000 [ 53.454084][ T4460] do_syscall_64+0xd8/0x2c0 [ 53.454219][ T4460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.454246][ T4460] RIP: 0033:0x7f1d3ea5e15c [ 53.454266][ T4460] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.454285][ T4460] RSP: 002b:00007f1d3d4c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.454306][ T4460] RAX: ffffffffffffffda RBX: 00007f1d3ecb5fa0 RCX: 00007f1d3ea5e15c [ 53.454319][ T4460] RDX: 000000000000000f RSI: 00007f1d3d4c70a0 RDI: 0000000000000008 [ 53.454370][ T4460] RBP: 00007f1d3d4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.454384][ T4460] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 53.454398][ T4460] R13: 00007f1d3ecb6038 R14: 00007f1d3ecb5fa0 R15: 00007ffc4f6312c8 [ 53.454419][ T4460] [ 53.459240][ T4363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.578987][ T4468] random: crng reseeded on system resumption [ 53.587564][ T4363] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.686979][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.696402][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.710260][ T3690] tipc: Node number set to 2886997007 [ 53.754992][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.762342][ T3709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.777997][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.785353][ T3705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.804668][ T4363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.812656][ T4476] vfat: Unknown parameter 'uni_xlatT' [ 53.815347][ T4363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.850367][ T4476] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 53.860942][ T4476] EXT4-fs (loop1): group descriptors corrupted! [ 53.940656][ T4491] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.962434][ T4363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.002069][ T4500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.011051][ T4499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.029263][ T4500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.049156][ T4499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.136954][ T4363] veth0_vlan: entered promiscuous mode [ 54.154463][ T4363] veth1_vlan: entered promiscuous mode [ 54.163382][ T4523] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.263: EA inode hash validation failed [ 54.176867][ T4523] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.263: corrupted inode contents [ 54.185042][ T4363] veth0_macvtap: entered promiscuous mode [ 54.201711][ T4363] veth1_macvtap: entered promiscuous mode [ 54.210287][ T4523] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.263: mark_inode_dirty error [ 54.217933][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.229721][ T4523] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.263: corrupted inode contents [ 54.231328][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.262667][ T4523] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.263: mark_inode_dirty error [ 54.277047][ T3710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.289321][ T4484] lo: entered promiscuous mode [ 54.294223][ T4484] lo: entered allmulticast mode [ 54.299149][ T4523] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.263: mark inode dirty (error -117) [ 54.311397][ T3710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.330241][ T4523] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 54.342422][ T3710] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.345063][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 54.345077][ T29] audit: type=1400 audit(1766232424.531:1726): avc: denied { mounton } for pid=4363 comm="syz-executor" path="/root/syzkaller.1TWpFu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 54.356781][ T3710] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.368003][ T4523] EXT4-fs (loop3): 1 orphan inode deleted [ 54.400924][ T29] audit: type=1400 audit(1766232424.591:1727): avc: denied { mounton } for pid=4363 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 54.425814][ T4523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.438239][ T29] audit: type=1326 audit(1766232424.631:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39d146df90 code=0x7ffc0000 [ 54.438699][ T4533] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 54.479774][ T29] audit: type=1326 audit(1766232424.651:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39d146df90 code=0x7ffc0000 [ 54.503702][ T29] audit: type=1326 audit(1766232424.651:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d146f749 code=0x7ffc0000 [ 54.512779][ T4533] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.527498][ T29] audit: type=1326 audit(1766232424.651:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d146f749 code=0x7ffc0000 [ 54.539996][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.583911][ T4533] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 54.594392][ T4533] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 54.604045][ T4533] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.265: Failed to acquire dquot type 1 [ 54.619557][ T29] audit: type=1326 audit(1766232424.771:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4657c1f749 code=0x7ffc0000 [ 54.643590][ T29] audit: type=1326 audit(1766232424.771:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4657c1f749 code=0x7ffc0000 [ 54.672215][ T4533] EXT4-fs (loop0): Remounting filesystem read-only [ 54.679836][ T4533] EXT4-fs (loop0): 1 truncate cleaned up [ 54.686906][ T4533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.736821][ T4554] random: crng reseeded on system resumption [ 54.746646][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.813271][ T4552] set_capacity_and_notify: 10 callbacks suppressed [ 54.813300][ T4552] loop5: detected capacity change from 0 to 128 [ 54.863093][ T4552] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.875794][ T4552] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.920883][ T4579] loop4: detected capacity change from 0 to 1024 [ 54.928609][ T4579] EXT4-fs: inline encryption not supported [ 54.929492][ T4363] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.934637][ T4579] EXT4-fs: Ignoring removed orlov option [ 54.950089][ T4579] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 54.988974][ T4579] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 55.027639][ T4579] System zones: 0-1, 3-12 [ 55.048738][ T4593] __nla_validate_parse: 9 callbacks suppressed [ 55.048757][ T4593] netlink: 83992 bytes leftover after parsing attributes in process `LX[X'. [ 55.064618][ T4593] netlink: zone id is out of range [ 55.070311][ T4593] netlink: zone id is out of range [ 55.076526][ T4593] netlink: zone id is out of range [ 55.102626][ T4593] netlink: zone id is out of range [ 55.108458][ T4593] netlink: zone id is out of range [ 55.125669][ T4593] netlink: zone id is out of range [ 55.131102][ T4593] netlink: zone id is out of range [ 55.134908][ T4579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.136736][ T4593] netlink: zone id is out of range [ 55.136745][ T4593] netlink: zone id is out of range [ 55.232045][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 55.434346][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.918893][ T4624] loop4: detected capacity change from 0 to 512 [ 55.946089][ T4630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 55.968249][ T4627] loop1: detected capacity change from 0 to 128 [ 55.982419][ T4630] random: crng reseeded on system resumption [ 56.370766][ T4660] netlink: 64 bytes leftover after parsing attributes in process `syz.0.296'. [ 56.403026][ T4660] lo speed is unknown, defaulting to 1000 [ 56.428416][ T4667] tmpfs: Bad value for 'nr_inodes' [ 56.433633][ T4660] lo speed is unknown, defaulting to 1000 [ 56.469370][ T4660] lo speed is unknown, defaulting to 1000 [ 56.555002][ T4660] infiniband syz1: set active [ 56.559818][ T4660] infiniband syz1: added lo [ 56.564518][ T909] lo speed is unknown, defaulting to 1000 [ 56.611029][ T4660] RDS/IB: syz1: added [ 56.646665][ T4660] smc: adding ib device syz1 with port count 1 [ 56.660235][ T4681] netlink: 'syz.3.306': attribute type 1 has an invalid length. [ 56.674621][ T4660] smc: ib device syz1 port 1 has no pnetid [ 56.690794][ T4681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.712474][ T4689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.305'. [ 56.722724][ T4689] random: crng reseeded on system resumption [ 56.730439][ T4690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 56.747774][ T4632] lo speed is unknown, defaulting to 1000 [ 56.753912][ T4660] lo speed is unknown, defaulting to 1000 [ 56.837841][ T4692] loop1: detected capacity change from 0 to 8192 [ 56.847490][ T4660] lo speed is unknown, defaulting to 1000 [ 56.883303][ T4694] lo speed is unknown, defaulting to 1000 [ 56.916495][ T4660] lo speed is unknown, defaulting to 1000 [ 56.928017][ T4695] loop3: detected capacity change from 0 to 512 [ 56.936913][ T4695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.945675][ T4695] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.975405][ T4695] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.310: Allocating blocks 41-42 which overlap fs metadata [ 56.993347][ T4660] lo speed is unknown, defaulting to 1000 [ 57.015477][ T4695] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.310: Allocating blocks 41-42 which overlap fs metadata [ 57.034911][ T4660] lo speed is unknown, defaulting to 1000 [ 57.067801][ T4695] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.310: Failed to acquire dquot type 1 [ 57.096165][ T4695] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 57.118105][ T4660] lo speed is unknown, defaulting to 1000 [ 57.129194][ T4695] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.310: corrupted inode contents [ 57.150028][ T4695] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.310: mark_inode_dirty error [ 57.182076][ T4695] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.310: corrupted inode contents [ 57.199513][ T4695] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.310: mark_inode_dirty error [ 57.210250][ T4723] can0: slcan on ptm0. [ 57.232081][ T4723] loop1: detected capacity change from 0 to 136 [ 57.245773][ T4695] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.310: corrupted inode contents [ 57.258448][ T4695] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 57.268804][ T4695] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.310: corrupted inode contents [ 57.281669][ T4695] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.310: mark_inode_dirty error [ 57.338299][ T4695] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 57.347667][ T4695] EXT4-fs (loop3): 1 truncate cleaned up [ 57.366122][ T4728] netlink: 72 bytes leftover after parsing attributes in process `syz.4.317'. [ 57.379656][ T4720] can0 (unregistered): slcan off ptm0. [ 57.493337][ T4736] netlink: 'syz.3.320': attribute type 13 has an invalid length. [ 57.531556][ T4736] net_ratelimit: 401 callbacks suppressed [ 57.531639][ T4736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.554209][ T4735] syz_tun: entered allmulticast mode [ 57.568033][ T4736] loop3: detected capacity change from 0 to 512 [ 57.581671][ T4736] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.600383][ T4736] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 57.610131][ T4728] loop4: detected capacity change from 0 to 8192 [ 57.617219][ T4736] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.630586][ T4736] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.320: Allocating blocks 41-42 which overlap fs metadata [ 57.659405][ T4736] EXT4-fs (loop3): Remounting filesystem read-only [ 57.666510][ T4736] EXT4-fs (loop3): 1 truncate cleaned up [ 57.692931][ T4736] EXT4-fs (loop3): pa ffff888107dd01c0: logic 1, phys. 41, len 23 [ 57.722780][ T4738] random: crng reseeded on system resumption [ 57.791886][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 57.808252][ T4749] mmap: syz.0.324 (4749) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.866285][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 57.879754][ T4752] netlink: 68 bytes leftover after parsing attributes in process `syz.1.325'. [ 57.906643][ T3500] Process accounting resumed [ 57.946392][ T4760] tipc: Started in network mode [ 57.951345][ T4760] tipc: Node identity 1e2d1bb6bbf2, cluster identity 4711 [ 57.958757][ T4760] tipc: Enabled bearer , priority 0 [ 57.987125][ T4761] bridge_slave_0: left allmulticast mode [ 57.992891][ T4761] bridge_slave_0: left promiscuous mode [ 57.998609][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.013340][ T4761] bridge_slave_1: left allmulticast mode [ 58.019339][ T4761] bridge_slave_1: left promiscuous mode [ 58.025029][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.025923][ T3330] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 58.040491][ T3330] FAT-fs (loop4): Filesystem has been set read-only [ 58.052087][ T4761] bond0: (slave bond_slave_0): Releasing backup interface [ 58.072804][ T4761] bond0: (slave bond_slave_1): Releasing backup interface [ 58.088993][ T4761] team0: Port device team_slave_0 removed [ 58.106459][ T4774] loop3: detected capacity change from 0 to 1024 [ 58.113780][ T4774] EXT4-fs: inline encryption not supported [ 58.119885][ T4774] EXT4-fs: Ignoring removed orlov option [ 58.126793][ T4761] team0: Port device team_slave_1 removed [ 58.134855][ T4774] EXT4-fs: Invalid want_extra_isize 7 [ 58.143415][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.151062][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.171651][ T4777] random: crng reseeded on system resumption [ 58.221856][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.229401][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.276575][ T4761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 58.292690][ T3409] lo speed is unknown, defaulting to 1000 [ 58.299851][ T4772] : renamed from veth0_to_bond (while UP) [ 58.323823][ T4759] tipc: Disabling bearer [ 58.490471][ T4782] netdevsim netdevsim0: Direct firmware load for ./file1 failed with error -2 [ 58.512901][ T4785] netlink: 'syz.5.336': attribute type 3 has an invalid length. [ 58.607758][ T4796] EXT4-fs: Invalid commit interval 521085580, must be smaller than 21474836 [ 58.672239][ T4803] iso9660: Unknown parameter '94RV^˝nf 2f.7Ys' [ 58.927138][ T4825] random: crng reseeded on system resumption [ 58.959460][ T4824] lo speed is unknown, defaulting to 1000 [ 59.068002][ T3689] bridge_slave_1: left allmulticast mode [ 59.073836][ T3689] bridge_slave_1: left promiscuous mode [ 59.079841][ T3689] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.097739][ T3689] bridge_slave_0: left allmulticast mode [ 59.103664][ T3689] bridge_slave_0: left promiscuous mode [ 59.109487][ T3689] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.118105][ T4835] EXT4-fs: error -4 creating inode table initialization thread [ 59.126198][ T4835] EXT4-fs (loop1): mount failed [ 59.146689][ T4843] EXT4-fs (loop3): 1 truncate cleaned up [ 59.190952][ T4851] xt_hashlimit: max too large, truncated to 1048576 [ 59.222093][ T3689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.232705][ T3689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.249345][ T3689] bond0 (unregistering): (slave veth0_virt_wifi): Releasing backup interface [ 59.265080][ T3689] bond0 (unregistering): Released all slaves [ 59.272978][ T4863] process 'syz.0.357' launched './file0' with NULL argv: empty string added [ 59.297292][ T4863] Invalid argument reading file caps for ./file0 [ 59.325954][ T3689] tipc: Disabling bearer [ 59.331350][ T3689] tipc: Left network mode [ 59.344492][ T4829] lo speed is unknown, defaulting to 1000 [ 59.350625][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 59.350641][ T29] audit: type=1326 audit(1766232429.541:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39d14665e7 code=0x7ffc0000 [ 59.381614][ T4868] macvtap0: refused to change device tx_queue_len [ 59.381898][ T29] audit: type=1326 audit(1766232429.571:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39d140b829 code=0x7ffc0000 [ 59.412308][ T29] audit: type=1326 audit(1766232429.571:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39d14665e7 code=0x7ffc0000 [ 59.435855][ T29] audit: type=1326 audit(1766232429.571:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39d140b829 code=0x7ffc0000 [ 59.459468][ T29] audit: type=1326 audit(1766232429.571:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f39d146f749 code=0x7ffc0000 [ 59.483594][ T29] audit: type=1326 audit(1766232429.681:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39d14665e7 code=0x7ffc0000 [ 59.483753][ T4868] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.517604][ T29] audit: type=1326 audit(1766232429.701:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39d140b829 code=0x7ffc0000 [ 59.541083][ T29] audit: type=1326 audit(1766232429.701:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39d14665e7 code=0x7ffc0000 [ 59.564586][ T29] audit: type=1326 audit(1766232429.701:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39d140b829 code=0x7ffc0000 [ 59.567161][ T4873] netlink: 'syz.0.359': attribute type 5 has an invalid length. [ 59.588710][ T29] audit: type=1326 audit(1766232429.701:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f39d146f749 code=0x7ffc0000 [ 59.621476][ T4868] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.358: invalid indirect mapped block 4294967295 (level 0) [ 59.635650][ T3689] hsr_slave_0: left promiscuous mode [ 59.647836][ T4868] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.358: invalid indirect mapped block 4294967295 (level 1) [ 59.662323][ T3689] hsr_slave_1: left promiscuous mode [ 59.668173][ T4868] EXT4-fs (loop5): 1 orphan inode deleted [ 59.668351][ T3689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.674016][ T4868] EXT4-fs (loop5): 1 truncate cleaned up [ 59.687727][ T3689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.703676][ T4868] unsupported nla_type 65024 [ 59.732828][ T3689] team0 (unregistering): Port device team_slave_1 removed [ 59.744108][ T3689] team0 (unregistering): Port device team_slave_0 removed [ 59.805499][ T4882] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.817158][ T4882] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.828427][ T4882] JBD2: no valid journal superblock found [ 59.834349][ T4882] EXT4-fs (loop3): Could not load journal inode [ 59.845494][ T4882] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 59.855564][ T4878] netlink: 'syz.1.360': attribute type 12 has an invalid length. [ 59.871741][ T4829] chnl_net:caif_netlink_parms(): no params data found [ 59.933989][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.941458][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.948950][ T4829] bridge_slave_0: entered allmulticast mode [ 59.955873][ T4829] bridge_slave_0: entered promiscuous mode [ 59.963255][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.970580][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.978612][ T4829] bridge_slave_1: entered allmulticast mode [ 59.980767][ T4893] set_capacity_and_notify: 8 callbacks suppressed [ 59.980784][ T4893] loop0: detected capacity change from 0 to 2048 [ 59.985481][ T4829] bridge_slave_1: entered promiscuous mode [ 59.992161][ T4892] random: crng reseeded on system resumption [ 60.010673][ T4893] EXT4-fs: Ignoring removed bh option [ 60.020091][ T4829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.031010][ T4893] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 60.031015][ T4829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.062782][ T4829] team0: Port device team_slave_0 added [ 60.069896][ T4829] team0: Port device team_slave_1 added [ 60.080336][ T4893] EXT4-fs (loop0): failed to initialize system zone (-117) [ 60.089939][ T4893] EXT4-fs (loop0): mount failed [ 60.103671][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.111056][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.138601][ T4829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.196112][ T4906] loop3: detected capacity change from 0 to 128 [ 60.256489][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.264110][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.290726][ T4829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.370132][ T4911] __nla_validate_parse: 7 callbacks suppressed [ 60.370168][ T4911] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.370'. [ 60.397152][ T4911] netlink: zone id is out of range [ 60.402364][ T4911] netlink: zone id is out of range [ 60.402801][ T4912] netlink: 14 bytes leftover after parsing attributes in process `syz.0.369'. [ 60.411208][ T4911] netlink: zone id is out of range [ 60.418820][ T4915] loop3: detected capacity change from 0 to 128 [ 60.445759][ T4829] hsr_slave_0: entered promiscuous mode [ 60.453127][ T4829] hsr_slave_1: entered promiscuous mode [ 60.459364][ T4829] debugfs: 'hsr0' already exists in 'hsr' [ 60.465260][ T4829] Cannot create hsr debugfs directory [ 60.474062][ T4915] veth0: entered promiscuous mode [ 60.493944][ T4911] netlink: zone id is out of range [ 60.512695][ T4911] netlink: set zone limit has 8 unknown bytes [ 60.540780][ T4915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 60.770653][ T4829] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 60.781826][ T4829] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 60.792330][ T4829] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 60.813597][ T4829] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 60.862493][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.869799][ T4829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.877757][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.884972][ T4829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.902123][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.925136][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.944346][ T4945] loop1: detected capacity change from 0 to 128 [ 60.990405][ T4829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.998314][ T4947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 61.014732][ T4829] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.029502][ T4947] random: crng reseeded on system resumption [ 61.050804][ T3669] kworker/u8:24: attempt to access beyond end of device [ 61.050804][ T3669] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 61.063844][ T4829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.076832][ T4829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.085806][ T3669] kworker/u8:24: attempt to access beyond end of device [ 61.085806][ T3669] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 61.103695][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.111619][ T3703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.128523][ T4908] syz.0.369 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 61.134453][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.139679][ T4908] CPU: 1 UID: 0 PID: 4908 Comm: syz.0.369 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.139713][ T4908] Tainted: [W]=WARN [ 61.139720][ T4908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.139772][ T4908] Call Trace: [ 61.139779][ T4908] [ 61.139787][ T4908] __dump_stack+0x1d/0x30 [ 61.139814][ T4908] dump_stack_lvl+0xe8/0x140 [ 61.139851][ T4908] dump_stack+0x15/0x1b [ 61.139872][ T4908] dump_header+0x81/0x240 [ 61.139894][ T4908] oom_kill_process+0x295/0x350 [ 61.139939][ T4908] out_of_memory+0x97b/0xb80 [ 61.139965][ T4908] try_charge_memcg+0x610/0xa10 [ 61.139993][ T4908] charge_memcg+0x51/0xc0 [ 61.140036][ T4908] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 61.140071][ T4908] __read_swap_cache_async+0x17b/0x2d0 [ 61.140105][ T4908] swap_cluster_readahead+0x262/0x3c0 [ 61.140171][ T4908] swapin_readahead+0xde/0x820 [ 61.140201][ T4908] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 61.140298][ T4908] ? lruvec_stat_mod_folio+0xd6/0x120 [ 61.140323][ T4908] ? __rcu_read_unlock+0x4f/0x70 [ 61.140345][ T4908] ? swap_cache_get_folio+0x277/0x280 [ 61.140419][ T4908] do_swap_page+0x2b4/0x21e0 [ 61.140454][ T4908] ? __pfx_default_wake_function+0x10/0x10 [ 61.140507][ T4908] handle_mm_fault+0x9d8/0x2c60 [ 61.140587][ T4908] do_user_addr_fault+0x630/0x1080 [ 61.140619][ T4908] exc_page_fault+0x62/0xa0 [ 61.140725][ T4908] asm_exc_page_fault+0x26/0x30 [ 61.140746][ T4908] RIP: 0033:0x7fc76e8f1fb3 [ 61.140764][ T4908] Code: 0d 09 00 48 8d 3d 36 0d 09 00 e8 e8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 61.140782][ T4908] RSP: 002b:00007fffc2fb1448 EFLAGS: 00010293 [ 61.140852][ T4908] RAX: 00000000fffffffa RBX: 00007fc76eb15fa0 RCX: 0000000000000000 [ 61.140866][ T4908] RDX: 00007fffc2fb1460 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.140878][ T4908] RBP: 00007fc76eb17da0 R08: 000000000170e284 R09: 7fffffffffffffff [ 61.140892][ T4908] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000ee8a [ 61.140905][ T4908] R13: 00007fc76eb16090 R14: ffffffffffffffff R15: 00007fffc2fb15a0 [ 61.140924][ T4908] [ 61.140931][ T4908] memory: usage 307200kB, limit 307200kB, failcnt 260 [ 61.146755][ T3703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.158047][ T4908] memory+swap: usage 307476kB, limit 9007199254740988kB, failcnt 0 [ 61.172474][ T3669] kworker/u8:24: attempt to access beyond end of device [ 61.172474][ T3669] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 61.175522][ T4908] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 61.178664][ T3669] kworker/u8:24: attempt to access beyond end of device [ 61.178664][ T3669] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 61.183439][ T4908] Memory cgroup stats for /syz0: [ 61.188263][ T3669] kworker/u8:24: attempt to access beyond end of device [ 61.188263][ T3669] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 61.198482][ T4908] cache 0 [ 61.236856][ T3669] kworker/u8:24: attempt to access beyond end of device [ 61.236856][ T3669] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 61.240340][ T4908] rss 0 [ 61.252403][ T3669] kworker/u8:24: attempt to access beyond end of device [ 61.252403][ T3669] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 61.256644][ T4908] shmem 0 [ 61.256656][ T4908] mapped_file 0 [ 61.256665][ T4908] dirty 0 [ 61.256673][ T4908] writeback 8192 [ 61.267747][ T3669] kworker/u8:24: attempt to access beyond end of device [ 61.267747][ T3669] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 61.272243][ T4908] workingset_refault_anon 9 [ 61.288417][ T3669] kworker/u8:24: attempt to access beyond end of device [ 61.288417][ T3669] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 61.288480][ T4908] workingset_refault_file 14 [ 61.298397][ T3669] kworker/u8:24: attempt to access beyond end of device [ 61.298397][ T3669] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 61.302642][ T4908] swap 282624 [ 61.441057][ T4829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.449379][ T4908] swapcached 28672 [ 61.449393][ T4908] pgpgin 24453 [ 61.460863][ T4961] loop3: detected capacity change from 0 to 512 [ 61.466305][ T4908] pgpgout 24446 [ 61.573787][ T4908] pgfault 20690 [ 61.573801][ T4908] pgmajfault 5 [ 61.573811][ T4908] inactive_anon 28672 [ 61.584771][ T4908] active_anon 0 [ 61.588334][ T4908] inactive_file 0 [ 61.592092][ T4908] active_file 0 [ 61.595879][ T4908] unevictable 0 [ 61.599405][ T4908] hierarchical_memory_limit 314572800 [ 61.604793][ T4908] hierarchical_memsw_limit 9223372036854771712 [ 61.611180][ T4908] total_cache 0 [ 61.614654][ T4908] total_rss 0 [ 61.618223][ T4908] total_shmem 0 [ 61.620553][ T4975] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 61.621816][ T4908] total_mapped_file 0 [ 61.633595][ T4908] total_dirty 0 [ 61.637063][ T4908] total_writeback 8192 [ 61.641234][ T4908] total_workingset_refault_anon 9 [ 61.646399][ T4908] total_workingset_refault_file 14 [ 61.651642][ T4908] total_swap 282624 [ 61.655469][ T4908] total_swapcached 28672 [ 61.659779][ T4908] total_pgpgin 24453 [ 61.663830][ T4908] total_pgpgout 24446 [ 61.667921][ T4908] total_pgfault 20690 [ 61.672315][ T4908] total_pgmajfault 5 [ 61.676526][ T4908] total_inactive_anon 28672 [ 61.681197][ T4908] total_active_anon 0 [ 61.685196][ T4908] total_inactive_file 0 [ 61.689516][ T4908] total_active_file 0 [ 61.693526][ T4908] total_unevictable 0 [ 61.697646][ T4908] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.369,pid=4908,uid=0 [ 61.710789][ T4829] veth0_vlan: entered promiscuous mode [ 61.713245][ T4908] Memory cgroup out of memory: Killed process 4908 (syz.0.369) total-vm:93968kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 61.727756][ T4829] veth1_vlan: entered promiscuous mode [ 61.757408][ T4829] veth0_macvtap: entered promiscuous mode [ 61.765290][ T4829] veth1_macvtap: entered promiscuous mode [ 61.776899][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.779625][ T4985] loop1: detected capacity change from 0 to 512 [ 61.789430][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.802932][ T3691] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.818019][ T3682] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.836742][ T3682] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.846991][ T4985] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.857572][ T3682] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.881671][ T4909] syz.0.369 (4909) used greatest stack depth: 6312 bytes left [ 61.906593][ T4985] EXT4-fs (loop1): 1 truncate cleaned up [ 61.932326][ T4985] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 62.001119][ T4993] lo speed is unknown, defaulting to 1000 [ 62.083651][ T5001] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.097681][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.391'. [ 62.107761][ T5008] random: crng reseeded on system resumption [ 62.177388][ T5017] syz.0.395: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 62.192308][ T5017] CPU: 1 UID: 0 PID: 5017 Comm: syz.0.395 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 62.192346][ T5017] Tainted: [W]=WARN [ 62.192353][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.192423][ T5017] Call Trace: [ 62.192429][ T5017] [ 62.192438][ T5017] __dump_stack+0x1d/0x30 [ 62.192468][ T5017] dump_stack_lvl+0xe8/0x140 [ 62.192494][ T5017] dump_stack+0x15/0x1b [ 62.192519][ T5017] warn_alloc+0x12b/0x1a0 [ 62.192608][ T5017] __vmalloc_node_range_noprof+0xa0/0x1310 [ 62.192656][ T5017] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 62.192689][ T5017] ? finish_task_switch+0x7a/0x2a0 [ 62.192729][ T5017] ? should_fail_ex+0x30/0x280 [ 62.192755][ T5017] ? should_failslab+0x8c/0xb0 [ 62.192834][ T5017] vmalloc_user_noprof+0x7d/0xb0 [ 62.192866][ T5017] ? xskq_create+0x80/0xe0 [ 62.192889][ T5017] xskq_create+0x80/0xe0 [ 62.192910][ T5017] xsk_init_queue+0x95/0xf0 [ 62.192957][ T5017] xsk_setsockopt+0x3f5/0x640 [ 62.192991][ T5017] ? __pfx_xsk_setsockopt+0x10/0x10 [ 62.193043][ T5017] __sys_setsockopt+0x184/0x200 [ 62.193121][ T5017] ? __secure_computing+0x82/0x150 [ 62.193168][ T5017] __x64_sys_setsockopt+0x64/0x80 [ 62.193203][ T5017] x64_sys_call+0x21d5/0x3000 [ 62.193244][ T5017] do_syscall_64+0xd8/0x2c0 [ 62.193359][ T5017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.193404][ T5017] RIP: 0033:0x7fc76e8bf749 [ 62.193476][ T5017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.193499][ T5017] RSP: 002b:00007fc76d327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 62.193524][ T5017] RAX: ffffffffffffffda RBX: 00007fc76eb15fa0 RCX: 00007fc76e8bf749 [ 62.193541][ T5017] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 62.193556][ T5017] RBP: 00007fc76e943f91 R08: 0000000000000004 R09: 0000000000000000 [ 62.193569][ T5017] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.193581][ T5017] R13: 00007fc76eb16038 R14: 00007fc76eb15fa0 R15: 00007fffc2fb1328 [ 62.193684][ T5017] [ 62.193692][ T5017] Mem-Info: [ 62.409203][ T5017] active_anon:5328 inactive_anon:8 isolated_anon:0 [ 62.409203][ T5017] active_file:17409 inactive_file:2272 isolated_file:0 [ 62.409203][ T5017] unevictable:0 dirty:15 writeback:2 [ 62.409203][ T5017] slab_reclaimable:3392 slab_unreclaimable:29795 [ 62.409203][ T5017] mapped:28969 shmem:1318 pagetables:1269 [ 62.409203][ T5017] sec_pagetables:0 bounce:0 [ 62.409203][ T5017] kernel_misc_reclaimable:0 [ 62.409203][ T5017] free:1828142 free_pcp:46941 free_cma:0 [ 62.454933][ T5017] Node 0 active_anon:21312kB inactive_anon:32kB active_file:69636kB inactive_file:9088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115876kB dirty:60kB writeback:8kB shmem:5272kB kernel_stack:4560kB pagetables:5076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 62.483248][ T5017] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 62.513444][ T5017] lowmem_reserve[]: 0 2880 7859 7859 [ 62.519016][ T5017] Node 0 DMA32 free:2945864kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949496kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 62.550952][ T5017] lowmem_reserve[]: 0 0 4978 4978 [ 62.556040][ T5017] Node 0 Normal free:4351344kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21312kB inactive_anon:32kB active_file:69636kB inactive_file:9088kB unevictable:0kB writepending:68kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:184120kB local_pcp:94840kB free_cma:0kB [ 62.589722][ T5017] lowmem_reserve[]: 0 0 0 0 [ 62.594277][ T5017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 62.607555][ T5017] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945864kB [ 62.623881][ T5017] Node 0 Normal: 2256*4kB (UM) 984*8kB (UME) 487*16kB (UME) 314*32kB (UM) 202*64kB (UME) 127*128kB (UME) 84*256kB (UM) 56*512kB (UME) 38*1024kB (UME) 36*2048kB (UM) 1007*4096kB (UM) = 4351408kB [ 62.643473][ T5017] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 62.653011][ T5017] 20999 total pagecache pages [ 62.657792][ T5017] 8 pages in swap cache [ 62.662080][ T5017] Free swap = 124884kB [ 62.666330][ T5017] Total swap = 124996kB [ 62.670757][ T5017] 2097051 pages RAM [ 62.674689][ T5017] 0 pages HighMem/MovableOnly [ 62.679406][ T5017] 81277 pages reserved [ 62.694777][ T5001] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.744382][ T5030] No source specified [ 62.780306][ T5001] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.801136][ T5036] 8021q: VLANs not supported on lo [ 62.836800][ T5001] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.858755][ T5025] lo speed is unknown, defaulting to 1000 [ 62.883506][ T5046] loop6: detected capacity change from 0 to 512 [ 62.901369][ T5046] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 62.936702][ T5046] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.398: invalid indirect mapped block 4294967295 (level 0) [ 62.952027][ T5046] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.398: invalid indirect mapped block 4294967295 (level 1) [ 62.969562][ T5046] EXT4-fs (loop6): 1 orphan inode deleted [ 62.975346][ T5046] EXT4-fs (loop6): 1 truncate cleaned up [ 62.997001][ T3691] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.030449][ T5064] loop3: detected capacity change from 0 to 512 [ 63.038009][ T5064] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.050709][ T5064] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.052387][ T5061] lo speed is unknown, defaulting to 1000 [ 63.065103][ T3715] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.089572][ T5064] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.410: Allocating blocks 41-42 which overlap fs metadata [ 63.108878][ T3715] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.112331][ T5064] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.410: Allocating blocks 41-42 which overlap fs metadata [ 63.124381][ T3715] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.150464][ T5064] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.410: Failed to acquire dquot type 1 [ 63.162251][ T5064] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 63.177362][ T5064] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.410: corrupted inode contents [ 63.190398][ T5064] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.410: mark_inode_dirty error [ 63.202176][ T5064] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.410: corrupted inode contents [ 63.237408][ T5079] netlink: 'syz.5.414': attribute type 10 has an invalid length. [ 63.249753][ T5079] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.274433][ T5064] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.410: mark_inode_dirty error [ 63.287525][ T5064] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.410: corrupted inode contents [ 63.301115][ T5064] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 63.310092][ T5064] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.410: corrupted inode contents [ 63.324440][ T5090] loop6: detected capacity change from 0 to 512 [ 63.332926][ T5090] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.365415][ T5087] loop5: detected capacity change from 0 to 8192 [ 63.372723][ T5064] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.410: mark_inode_dirty error [ 63.385081][ T5087] msdos: Unknown parameter 'ame' [ 63.394895][ T5064] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 63.406882][ T5090] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 63.424204][ T5064] EXT4-fs (loop3): 1 truncate cleaned up [ 63.426952][ T5090] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.417: bg 0: block 248: padding at end of block bitmap is not set [ 63.447143][ T5090] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.417: Failed to acquire dquot type 1 [ 63.448271][ T5064] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #16: comm syz.3.410: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 63.460195][ T5090] EXT4-fs (loop6): 1 truncate cleaned up [ 63.521552][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.420'. [ 63.558094][ T5108] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 63.579975][ T5108] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.422: bad orphan inode 15 [ 63.592168][ T5108] ext4_test_bit(bit=14, block=18) = 1 [ 63.597870][ T5108] is_bad_inode(inode)=0 [ 63.602582][ T5108] NEXT_ORPHAN(inode)=1023 [ 63.607017][ T5108] max_ino=32 [ 63.610416][ T5108] i_nlink=0 [ 63.615141][ T5108] ext2 filesystem being mounted at /74/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 63.648632][ T5108] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #12: comm syz.0.422: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 61(61) [ 63.697978][ T5116] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 63.891493][ T5128] lo speed is unknown, defaulting to 1000 [ 64.087429][ T5152] GUP no longer grows the stack in syz.3.434 (5152): 200000009000-200000018000 (200000006000) [ 64.097808][ T5152] CPU: 1 UID: 0 PID: 5152 Comm: syz.3.434 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.097842][ T5152] Tainted: [W]=WARN [ 64.097850][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.097927][ T5152] Call Trace: [ 64.097937][ T5152] [ 64.097946][ T5152] __dump_stack+0x1d/0x30 [ 64.097977][ T5152] dump_stack_lvl+0xe8/0x140 [ 64.098057][ T5152] dump_stack+0x15/0x1b [ 64.098082][ T5152] __get_user_pages+0x1979/0x1ed0 [ 64.098128][ T5152] __gup_longterm_locked+0x2fb/0xe60 [ 64.098219][ T5152] ? try_grab_folio_fast+0x24e/0x370 [ 64.098242][ T5152] gup_fast_fallback+0x1ee/0x1480 [ 64.098310][ T5152] pin_user_pages_fast+0x5f/0x90 [ 64.098408][ T5152] io_pin_pages+0xba/0x170 [ 64.098434][ T5152] io_region_pin_pages+0x58/0xf0 [ 64.098464][ T5152] io_create_region+0x2c4/0x330 [ 64.098535][ T5152] io_allocate_scq_urings+0x10e/0x390 [ 64.098570][ T5152] ? selinux_capable+0x31/0x40 [ 64.098603][ T5152] io_uring_create+0x2d4/0x4e0 [ 64.098670][ T5152] __se_sys_io_uring_setup+0x1be/0x1d0 [ 64.098752][ T5152] __x64_sys_io_uring_setup+0x31/0x40 [ 64.098774][ T5152] x64_sys_call+0x244c/0x3000 [ 64.098805][ T5152] do_syscall_64+0xd8/0x2c0 [ 64.098865][ T5152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.098975][ T5152] RIP: 0033:0x7f39d146f749 [ 64.099005][ T5152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.099026][ T5152] RSP: 002b:00007f39cfed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 64.099058][ T5152] RAX: ffffffffffffffda RBX: 00007f39d16c5fa0 RCX: 00007f39d146f749 [ 64.099074][ T5152] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000004fee [ 64.099090][ T5152] RBP: 00007f39d14f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 64.099132][ T5152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.099144][ T5152] R13: 00007f39d16c6038 R14: 00007f39d16c5fa0 R15: 00007ffcb26daba8 [ 64.099163][ T5152] [ 64.303656][ T5155] lo speed is unknown, defaulting to 1000 [ 64.310544][ T5155] lo speed is unknown, defaulting to 1000 [ 64.316897][ T5155] lo speed is unknown, defaulting to 1000 [ 64.349426][ T5155] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.370434][ T5155] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 64.498554][ T5155] lo speed is unknown, defaulting to 1000 [ 64.531001][ T5155] lo speed is unknown, defaulting to 1000 [ 64.613378][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 64.613451][ T29] audit: type=1326 audit(1766232434.801:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa480ff749 code=0x7ffc0000 [ 64.626799][ T5155] lo speed is unknown, defaulting to 1000 [ 64.666593][ T29] audit: type=1326 audit(1766232434.841:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faa480ff749 code=0x7ffc0000 [ 64.690044][ T29] audit: type=1326 audit(1766232434.841:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa480ff783 code=0x7ffc0000 [ 64.713595][ T29] audit: type=1326 audit(1766232434.841:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa480ff783 code=0x7ffc0000 [ 64.737121][ T29] audit: type=1326 audit(1766232434.841:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa480ff749 code=0x7ffc0000 [ 64.761167][ T29] audit: type=1326 audit(1766232434.841:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa480ff749 code=0x7ffc0000 [ 64.784853][ T29] audit: type=1326 audit(1766232434.841:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa480ff749 code=0x7ffc0000 [ 64.808718][ T29] audit: type=1326 audit(1766232434.841:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa480ff749 code=0x7ffc0000 [ 64.832683][ T29] audit: type=1326 audit(1766232434.841:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faa480ff749 code=0x7ffc0000 [ 64.856413][ T29] audit: type=1326 audit(1766232434.841:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5179 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa480ff749 code=0x7ffc0000 [ 64.882313][ T5155] lo speed is unknown, defaulting to 1000 [ 64.888415][ T5155] lo speed is unknown, defaulting to 1000 [ 64.894557][ T5155] lo speed is unknown, defaulting to 1000 [ 65.004622][ T5191] netlink: 20 bytes leftover after parsing attributes in process `'. [ 65.024020][ T5191] lo speed is unknown, defaulting to 1000 [ 65.128130][ T5191] lo speed is unknown, defaulting to 1000 [ 65.371307][ T5207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.446'. [ 65.398967][ T5207] random: crng reseeded on system resumption [ 65.533465][ T3489] Process accounting resumed [ 65.795707][ T5223] lo speed is unknown, defaulting to 1000 [ 65.814351][ T5214] set_capacity_and_notify: 3 callbacks suppressed [ 65.814404][ T5214] loop6: detected capacity change from 0 to 512 [ 65.882908][ T5214] EXT4-fs: Ignoring removed bh option [ 65.909855][ T5214] ext3: Unknown parameter 'uid>00000000000000000000' [ 65.981411][ T5223] lo speed is unknown, defaulting to 1000 [ 66.047401][ T5231] loop0: detected capacity change from 0 to 1024 [ 66.348978][ T5249] netlink: 488 bytes leftover after parsing attributes in process `syz.6.458'. [ 66.358122][ T5249] netlink: 488 bytes leftover after parsing attributes in process `syz.6.458'. [ 66.382823][ T5252] loop6: detected capacity change from 0 to 128 [ 66.397379][ T5252] msdos: Unknown parameter 'noP&' [ 66.407358][ T5252] netlink: 'syz.6.459': attribute type 1 has an invalid length. [ 66.436776][ T5258] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.454: missing EA_INODE flag [ 66.454386][ T5258] EXT4-fs (loop0): Remounting filesystem read-only [ 66.503831][ T5266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 66.511412][ T5268] loop3: detected capacity change from 0 to 1024 [ 66.521455][ T5266] random: crng reseeded on system resumption [ 66.527974][ T5268] EXT4-fs: Ignoring removed orlov option [ 66.587924][ T5275] loop5: detected capacity change from 0 to 512 [ 66.597307][ T5275] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 66.615295][ T5275] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.465: invalid block [ 66.632792][ T5275] EXT4-fs (loop5): Remounting filesystem read-only [ 66.639736][ T5275] EXT4-fs (loop5): 1 truncate cleaned up [ 66.646954][ T5268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.655861][ T5268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.678255][ T5268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.462'. [ 66.726811][ T5275] lo speed is unknown, defaulting to 1000 [ 66.736958][ T5283] loop6: detected capacity change from 0 to 512 [ 66.745351][ T5283] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.762247][ T5292] loop0: detected capacity change from 0 to 512 [ 66.774502][ T5292] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.779899][ T5283] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.800081][ T5275] lo speed is unknown, defaulting to 1000 [ 66.839835][ T5292] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 66.862808][ T5292] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.468: bg 0: block 248: padding at end of block bitmap is not set [ 66.877613][ T5292] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.468: Failed to acquire dquot type 1 [ 66.890281][ T5292] EXT4-fs (loop0): 1 truncate cleaned up [ 66.967316][ T5301] loop1: detected capacity change from 0 to 128 [ 66.984639][ T5301] vfat: Unknown parameter 'utf80$utf8' [ 67.025712][ T5316] loop1: detected capacity change from 0 to 512 [ 67.064860][ T3689] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:44: Failed to release dquot type 1 [ 67.089893][ T5321] serio: Serial port ptm0 [ 67.146868][ T5329] netlink: 664 bytes leftover after parsing attributes in process `syz.1.477'. [ 67.164790][ T5330] loop0: detected capacity change from 0 to 512 [ 67.174619][ T5330] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.476: dx entry: limit 1024 != root limit 124 [ 67.186889][ T5330] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.476: Corrupt directory, running e2fsck is recommended [ 67.205848][ T5330] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 67.230753][ T5330] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.476: corrupted in-inode xattr: invalid ea_ino [ 67.271084][ T5336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.480'. [ 67.279494][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.479'. [ 67.290743][ T5330] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.476: couldn't read orphan inode 15 (err -117) [ 67.306463][ T5337] random: crng reseeded on system resumption [ 67.339507][ T5336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.480'. [ 67.523850][ T5341] siw: device registration error -23 [ 67.569953][ T5341] smc: removing ib device syz1 [ 67.785191][ T5344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.793781][ T5344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.142723][ T5362] iso9660: Unknown parameter 'nojzlied' [ 68.161176][ T5362] ext4: Unknown parameter 'audit' [ 68.301878][ T5371] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.389886][ T5385] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.491: iget: bad i_size value: 2533274857506816 [ 68.488444][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 68.540590][ T5389] random: crng reseeded on system resumption [ 68.670242][ T5394] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 68.682639][ T5394] EXT4-fs (loop6): 1 truncate cleaned up [ 68.727251][ T5398] lo speed is unknown, defaulting to 1000 [ 68.810047][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.498'. [ 68.834603][ T5401] random: crng reseeded on system resumption [ 68.935738][ T5413] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.052637][ T5420] netlink: 'syz.6.509': attribute type 1 has an invalid length. [ 69.090437][ T5420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.120259][ T5420] vlan0: entered allmulticast mode [ 69.125520][ T5420] veth0_vlan: entered allmulticast mode [ 69.132160][ T5419] bio_check_eod: 53 callbacks suppressed [ 69.132204][ T5419] syz.5.508: attempt to access beyond end of device [ 69.132204][ T5419] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 69.154617][ T5419] syz.5.508: attempt to access beyond end of device [ 69.154617][ T5419] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 69.168491][ T5419] syz.5.508: attempt to access beyond end of device [ 69.168491][ T5419] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 69.183063][ T5419] syz.5.508: attempt to access beyond end of device [ 69.183063][ T5419] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 69.198701][ T5419] syz.5.508: attempt to access beyond end of device [ 69.198701][ T5419] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 69.212645][ T5419] syz.5.508: attempt to access beyond end of device [ 69.212645][ T5419] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 69.226464][ T5419] syz.5.508: attempt to access beyond end of device [ 69.226464][ T5419] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 69.240303][ T5419] syz.5.508: attempt to access beyond end of device [ 69.240303][ T5419] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 69.275138][ T5419] syz.5.508: attempt to access beyond end of device [ 69.275138][ T5419] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 69.301934][ T5419] syz.5.508: attempt to access beyond end of device [ 69.301934][ T5419] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 69.316703][ T5445] unsupported nlmsg_type 40 [ 69.340926][ T5440] loop6: p2 p3 p7 [ 69.399750][ T5451] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 69.449293][ T5456] EXT4-fs: test_dummy_encryption option not supported [ 69.542288][ T5459] lo speed is unknown, defaulting to 1000 [ 69.620919][ T5459] cgroup2: Unknown parameter 'me_hugew@3DӸ)tlb_accoun{T4' [ 69.659248][ T29] kauditd_printk_skb: 592 callbacks suppressed [ 69.659271][ T29] audit: type=1400 audit(1766232439.811:3204): avc: denied { mounton } for pid=5433 comm="syz.0.513" path="/syzcgroup/net/syz0/cgroup.procs" dev="cgroup" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 69.895156][ T5464] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.931272][ T5466] team0 (unregistering): Port device team_slave_0 removed [ 69.954414][ T5465] ext4: Unknown parameter 'obj_type' [ 69.968802][ T5466] team0 (unregistering): Port device team_slave_1 removed [ 69.982444][ T5464] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.522: invalid indirect mapped block 4294967295 (level 0) [ 70.005709][ T5464] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.522: invalid indirect mapped block 4294967295 (level 1) [ 70.024785][ T5464] EXT4-fs (loop5): 1 orphan inode deleted [ 70.030639][ T5464] EXT4-fs (loop5): 1 truncate cleaned up [ 70.037824][ T5464] EXT4-fs mount: 38 callbacks suppressed [ 70.037840][ T5464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.151541][ T5464] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.522: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 70.189657][ T5472] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.522: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 70.232901][ T5483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.246877][ T5483] EXT4-fs (loop3): 1 truncate cleaned up [ 70.256266][ T5483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.270852][ T29] audit: type=1400 audit(1766232440.461:3205): avc: denied { write } for pid=5475 comm=77DEA305FF07 name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.364799][ T29] audit: type=1400 audit(1766232440.551:3206): avc: denied { rename } for pid=5478 comm="syz.3.528" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.376469][ T5483] SELinux: failed to load policy [ 70.387538][ T29] audit: type=1400 audit(1766232440.551:3207): avc: denied { load_policy } for pid=5478 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.409461][ T5500] random: crng reseeded on system resumption [ 70.481359][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.602511][ T5524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.618475][ T29] audit: type=1400 audit(1766232440.811:3208): avc: denied { read } for pid=5523 comm="syz.3.541" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 70.675791][ T5531] lo speed is unknown, defaulting to 1000 [ 70.760913][ T4363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.798283][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.019274][ T5557] SELinux: policydb version 1307887389 does not match my version range 15-35 [ 71.028846][ T5557] SELinux: failed to load policy [ 71.043217][ T5557] set_capacity_and_notify: 15 callbacks suppressed [ 71.043237][ T5557] loop5: detected capacity change from 0 to 1024 [ 71.081894][ T5557] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 71.097423][ T5557] loop5: detected capacity change from 0 to 1024 [ 71.114988][ T5557] EXT4-fs: inline encryption not supported [ 71.144250][ T5557] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 71.153301][ T29] audit: type=1326 audit(1766232441.351:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.3.557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39d146f749 code=0x0 [ 71.181096][ T5557] System zones: 0-1, 3-12 [ 71.186166][ T5557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.200910][ T5566] netlink: 'syz.1.554': attribute type 10 has an invalid length. [ 71.216897][ T29] audit: type=1400 audit(1766232441.401:3210): avc: denied { mounton } for pid=5556 comm=244B2D2D292F2DF65C23 path="/48/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.242259][ T29] audit: type=1400 audit(1766232441.401:3211): avc: denied { setopt } for pid=5556 comm=244B2D2D292F2DF65C23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.263054][ T29] audit: type=1400 audit(1766232441.401:3212): avc: denied { getopt } for pid=5556 comm=244B2D2D292F2DF65C23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.283739][ T29] audit: type=1400 audit(1766232441.401:3213): avc: denied { read } for pid=5556 comm=244B2D2D292F2DF65C23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.307814][ T5566] team0 (unregistering): Port device team_slave_0 removed [ 71.323698][ T5566] team0 (unregistering): Port device team_slave_1 removed [ 71.333939][ T5588] loop6: detected capacity change from 0 to 128 [ 71.342767][ T4363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.362274][ T5588] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 71.394484][ T5588] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.409417][ T5588] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.436574][ T5596] __nla_validate_parse: 12 callbacks suppressed [ 71.436591][ T5596] netlink: 44 bytes leftover after parsing attributes in process `syz.6.562'. [ 71.503333][ T5605] netlink: 'syz.5.564': attribute type 13 has an invalid length. [ 71.590498][ T5605] netlink: 20 bytes leftover after parsing attributes in process `syz.5.564'. [ 71.659618][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.564'. [ 71.761959][ T5632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'. [ 71.770926][ T5632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'. [ 71.775111][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 71.780625][ T5635] bond0: Caught tx_queue_len zero misconfig [ 71.795109][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.575'. [ 71.812312][ T5633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.849197][ T5641] loop0: detected capacity change from 0 to 1024 [ 71.856185][ T5641] EXT4-fs: Ignoring removed bh option [ 71.862235][ T5641] EXT4-fs: inline encryption not supported [ 71.868755][ T5641] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.880607][ T5641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e018, mo2=0000] [ 71.888899][ T5641] System zones: 0-1, 3-12 [ 71.895021][ T5641] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #3: block 1: comm syz.0.577: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.909256][ T5641] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.577: Failed to acquire dquot type 0 [ 71.921376][ T5641] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.577: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.934970][ T5641] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.577: Invalid inode bitmap blk 0 in block_group 0 [ 71.947709][ T3715] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:66: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.947851][ T5641] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 71.963338][ T3715] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:66: Failed to release dquot type 0 [ 71.971276][ T5641] EXT4-fs (loop0): 1 orphan inode deleted [ 71.989700][ T5641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.012067][ T3681] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.027077][ T3681] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:36: Failed to release dquot type 0 [ 72.040617][ T5641] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.046429][ T5648] netlink: 'syz.3.579': attribute type 4 has an invalid length. [ 72.058056][ T5641] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.577: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 72.088089][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.184935][ T5659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 72.197924][ T5659] random: crng reseeded on system resumption [ 72.212367][ T5657] netlink: 'syz.0.583': attribute type 13 has an invalid length. [ 72.537111][ T5740] gre1: entered allmulticast mode [ 72.547746][ T5737] atomic_op ffff888135973d28 conn xmit_atomic 0000000000000000 [ 72.564141][ T3662] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.591429][ T3662] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.607864][ T3662] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.656957][ T5729] infiniband !yz!: set active [ 72.661756][ T5729] infiniband !yz!: added team_slave_0 [ 72.673871][ T3662] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.688661][ T5729] RDS/IB: !yz!: added [ 72.693497][ T5729] smc: adding ib device !yz! with port count 1 [ 72.699986][ T5729] smc: ib device !yz! port 1 has no pnetid [ 72.786254][ T5760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.601'. [ 72.801324][ T5760] random: crng reseeded on system resumption [ 73.135072][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.616'. [ 73.163792][ T5801] ip6gre1: entered allmulticast mode [ 73.238589][ T5813] netlink: 'syz.5.620': attribute type 1 has an invalid length. [ 73.259842][ T5815] random: crng reseeded on system resumption [ 73.262225][ T5813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.293553][ T5813] bond1 (unregistering): Released all slaves [ 73.488692][ T5831] bond2: option mode: invalid value (7) [ 73.507793][ T5831] bond2 (unregistering): Released all slaves [ 73.535017][ T5835] loop3: detected capacity change from 0 to 128 [ 73.544539][ T5835] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.581380][ T5843] netlink: 'syz.6.628': attribute type 1 has an invalid length. [ 73.599398][ T5841] loop6: detected capacity change from 0 to 164 [ 73.606660][ T5835] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.630957][ T5841] ISOFS: unable to read i-node block [ 73.651420][ T5843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.671733][ T5841] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 73.671801][ T3670] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.680955][ T5841] ================================================================== [ 73.698051][ T5841] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 73.705834][ T5841] [ 73.708173][ T5841] write to 0xffffffff86a25d98 of 8 bytes by task 3670 on cpu 1: [ 73.715821][ T5841] console_flush_all+0x38a/0x6f0 [ 73.720789][ T5841] console_unlock+0xa1/0x2e0 [ 73.725415][ T5841] vprintk_emit+0x3ee/0x610 [ 73.729960][ T5841] vprintk_default+0x26/0x30 [ 73.734617][ T5841] vprintk+0x1d/0x30 [ 73.738728][ T5841] _printk+0x79/0xa0 [ 73.742702][ T5841] _fat_msg+0xa4/0xd0 [ 73.746884][ T5841] fat_clusters_flush+0x209/0x210 [ 73.752021][ T5841] fat_write_inode+0x73/0xd0 [ 73.756636][ T5841] __writeback_single_inode+0x324/0x7c0 [ 73.762404][ T5841] writeback_sb_inodes+0x4b0/0xb20 [ 73.767574][ T5841] wb_writeback+0x252/0x5c0 [ 73.772114][ T5841] wb_workfn+0x194/0x910 [ 73.776389][ T5841] process_scheduled_works+0x4ce/0x9d0 [ 73.781973][ T5841] worker_thread+0x582/0x770 [ 73.786760][ T5841] kthread+0x489/0x510 [ 73.790867][ T5841] ret_from_fork+0x149/0x290 [ 73.795589][ T5841] ret_from_fork_asm+0x1a/0x30 [ 73.800383][ T5841] [ 73.802769][ T5841] read to 0xffffffff86a25d98 of 8 bytes by task 5841 on cpu 0: [ 73.810594][ T5841] console_flush_all+0x56f/0x6f0 [ 73.815744][ T5841] console_unlock+0xa1/0x2e0 [ 73.820654][ T5841] vprintk_emit+0x3ee/0x610 [ 73.825283][ T5841] vprintk_default+0x26/0x30 [ 73.829926][ T5841] vprintk+0x1d/0x30 [ 73.833955][ T5841] _printk+0x79/0xa0 [ 73.837964][ T5841] isofs_fill_super+0x11d1/0x12b0 [ 73.843006][ T5841] get_tree_bdev_flags+0x291/0x300 [ 73.848263][ T5841] get_tree_bdev+0x1f/0x30 [ 73.852808][ T5841] isofs_get_tree+0x1c/0x30 [ 73.857359][ T5841] vfs_get_tree+0x57/0x1d0 [ 73.861788][ T5841] do_new_mount+0x24d/0x6a0 [ 73.866298][ T5841] path_mount+0x4ab/0xb80 [ 73.870629][ T5841] __se_sys_mount+0x28c/0x2e0 [ 73.875313][ T5841] __x64_sys_mount+0x67/0x80 [ 73.879997][ T5841] x64_sys_call+0x2cca/0x3000 [ 73.884685][ T5841] do_syscall_64+0xd8/0x2c0 [ 73.889216][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.895117][ T5841] [ 73.897437][ T5841] value changed: 0x0000000000000c21 -> 0x0000000000000c22 [ 73.904630][ T5841] [ 73.907131][ T5841] Reported by Kernel Concurrency Sanitizer on: [ 73.913287][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.6.628 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.924588][ T5841] Tainted: [W]=WARN [ 73.928577][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.938817][ T5841] ================================================================== [ 74.026564][ T5863] random: crng reseeded on system resumption [ 74.088944][ T5825] loop0: detected capacity change from 0 to 32768 [ 74.139552][ T5825] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 74.145217][ T5825] loop0: p1 start 460800 is beyond EOD, truncated [ 74.151821][ T5825] loop0: p2 size 83886080 extends beyond EOD, truncated [ 74.160826][ T5825] loop0: p5 start 460800 is beyond EOD, truncated [ 74.167322][ T5825] loop0: p6 size 83886080 extends beyond EOD, truncated