last executing test programs: 2.695760107s ago: executing program 1 (id=406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (rerun: 64) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xf) (async) perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x158000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2.588245879s ago: executing program 1 (id=398): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x10000000, 0xfffffffd) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "560ebaafa30c3b16d9f032f4eb9720f0f377ca8225d7fe6287b9c3299eceae63cb57d4098ec125033b16a5d39cb75ac473f3ea8fa647d63eb1631511ee585981", 0x20040021}, 0x48, 0xfffffffffffffffc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d9) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a0087550b02000000", @ANYRES16=r2, @ANYBLOB="874bcbe19ed8906b776c4b99111de9a558493958f1d0b025f735442d00b8f2fb85c4d228a9931f54c103b1b934e6f37cff9f0dca9dfdf3628db5770f0bea54a857c212996b314e8bfb012763193437c9019222dc6ed5acb7e57bc45aa67e8eddc5055203155644b025abcf05d298171c956c9fc560b5026216b24115d7b6c2cacacd6edc85839b9e2528a05e7a0ce7747c", @ANYRES32=r5], 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="fce713ef1e737251acfb4f741bc1195d5d0fa1fc41263425d9f11294753e815d2f8b311d99b9eb0aa6e1ae15a0b48e8ea47ee9826eae28dcb4e54fe1d2b56f139981c4e63ef6584836bb1379ba5b2eab"], &(0x7f0000000300)='GPL\x00', 0xca, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x3, 0x10}, 0x10, 0x24ddf, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r2, r2], 0x0, 0x10, 0x50b}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000010000000b71c0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) r9 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, 0x0) keyctl$unlink(0x9, r3, r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r11, 0x890c, 0x0) connect$inet(r10, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='L', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="a0fc2e5915d59000", 0x8}], 0x1, &(0x7f00000007c0)=ANY=[@ANYRES64=r4], 0x10}}], 0x2, 0x4000cc2) 2.51435649s ago: executing program 1 (id=402): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="38000000bba938f7f101ef24f1a0114a5bb32513835cf15192", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040), 0x4) r4 = msgget(0x2, 0x4) msgsnd(r4, &(0x7f00000001c0), 0x8, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000400001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009ea10000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x890c, &(0x7f0000000200)=@generic={0x2, 0x10000000000002, 0x1}) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r9}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000c6661af1000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000004000000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) connect$inet(r11, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r11, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000100)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r10, 0x0, 0xf7}, 0x18) socket(0x1e, 0x4, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x101800) 2.415559231s ago: executing program 0 (id=404): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x1179, &(0x7f0000001240)={0x0, 0x10008cc8, 0x200, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_emit_ethernet(0x237, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd602a1c9902013c0000000000000000000000000000000000ff0200000000000000000000000000015c1e000000000000c9"], 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) io_uring_enter(r0, 0x7a98, 0x20000000, 0x0, 0x0, 0xfffffffffffffc76) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) io_setup(0x6, &(0x7f0000000040)=0x0) io_cancel(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r8 = socket$kcm(0x11, 0x0, 0x300) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, &(0x7f00000000c0)) 2.167288625s ago: executing program 0 (id=409): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x390, 0x460, 0x1f0, 0x2c0, 0x1f0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x6, 0x9, 0x2, 0x1, 'syz0\x00', 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], 'bond_slave_0\x00', 'wg1\x00', {}, {}, 0x87, 0x6, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @mcast2, [0xffffffff, 0xff000000, 0xff000000, 0xff0000ff], [0xff, 0xff000000, 0xffffff00, 0xffffff00], 'lo\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x16, 0x9f, 0x1, 0x51}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) pread64(r2, &(0x7f0000001100)=""/213, 0xd5, 0x405) r3 = socket(0x10, 0x803, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x103a02, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r8, @ANYBLOB="8304050000000000300012800b000100697036677265000020000200000000000000000014000600fc00"/56], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) 2.145595166s ago: executing program 0 (id=410): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, 0x0, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f00000001c0)='THAWED\x00', 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000000), 0x5005) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xffa8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085", @ANYBLOB="8121d3adf3309d5be20ab95e2cb296f34cedf34e019542ade4aab33cf2bbbc6497b9b54cb6b1cc1a55f79a18cfbf4d7a0ac693da9d59c7000000000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) 1.656788913s ago: executing program 1 (id=413): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='sessionid\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f0000000040)=""/96, 0x60}], 0x1, 0x10000000, 0xfffffffd) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "560ebaafa30c3b16d9f032f4eb9720f0f377ca8225d7fe6287b9c3299eceae63cb57d4098ec125033b16a5d39cb75ac473f3ea8fa647d63eb1631511ee585981", 0x20040021}, 0x48, 0xfffffffffffffffc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d9) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a0087550b02000000", @ANYRES16=r2, @ANYBLOB="874bcbe19ed8906b776c4b99111de9a558493958f1d0b025f735442d00b8f2fb85c4d228a9931f54c103b1b934e6f37cff9f0dca9dfdf3628db5770f0bea54a857c212996b314e8bfb012763193437c9019222dc6ed5acb7e57bc45aa67e8eddc5055203155644b025abcf05d298171c956c9fc560b5026216b24115d7b6c2cacacd6edc85839b9e2528a05e7a0ce7747c", @ANYRES32=r5], 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="fce713ef1e737251acfb4f741bc1195d5d0fa1fc41263425d9f11294753e815d2f8b311d99b9eb0aa6e1ae15a0b48e8ea47ee9826eae28dcb4e54fe1d2b56f139981c4e63ef6584836bb1379ba5b2eab"], &(0x7f0000000300)='GPL\x00', 0xca, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24ddf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x50b}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000010000000b71c0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) r9 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, 0x0) keyctl$unlink(0x9, r3, r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r11, 0x890c, 0x0) connect$inet(r10, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='L', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="a0fc2e5915d59000", 0x8}], 0x1, &(0x7f00000007c0)=ANY=[@ANYRES64=r4], 0x10}}], 0x2, 0x4000cc2) 1.655013613s ago: executing program 1 (id=415): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000bc0)=""/249) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) syz_emit_ethernet(0x34, &(0x7f0000000300)=ANY=[], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) setgroups(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000000), 0x0}, 0x20) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c8}}, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000042, &(0x7f0000002240)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@mblk_io_submit}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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") 1.524724126s ago: executing program 1 (id=417): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) unlinkat(r1, &(0x7f0000000080)='./bus/file0\x00', 0x200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) 1.524224916s ago: executing program 4 (id=418): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x10000000, 0xfffffffd) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "560ebaafa30c3b16d9f032f4eb9720f0f377ca8225d7fe6287b9c3299eceae63cb57d4098ec125033b16a5d39cb75ac473f3ea8fa647d63eb1631511ee585981", 0x20040021}, 0x48, 0xfffffffffffffffc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d9) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a0087550b02000000", @ANYRES16=r2, @ANYBLOB="874bcbe19ed8906b776c4b99111de9a558493958f1d0b025f735442d00b8f2fb85c4d228a9931f54c103b1b934e6f37cff9f0dca9dfdf3628db5770f0bea54a857c212996b314e8bfb012763193437c9019222dc6ed5acb7e57bc45aa67e8eddc5055203155644b025abcf05d298171c956c9fc560b5026216b24115d7b6c2cacacd6edc85839b9e2528a05e7a0ce7747c", @ANYRES32=r5], 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="fce713ef1e737251acfb4f741bc1195d5d0fa1fc41263425d9f11294753e815d2f8b311d99b9eb0aa6e1ae15a0b48e8ea47ee9826eae28dcb4e54fe1d2b56f139981c4e63ef6584836bb1379ba5b2eab"], &(0x7f0000000300)='GPL\x00', 0xca, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x3, 0x10}, 0x10, 0x24ddf, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r2, r2], 0x0, 0x10, 0x50b}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000010000000b71c0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) r9 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, 0x0) keyctl$unlink(0x9, r3, r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r11, 0x890c, 0x0) connect$inet(r10, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='L', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="a0fc2e5915d59000", 0x8}], 0x1, &(0x7f00000007c0)=ANY=[@ANYRES64=r4], 0x10}}], 0x2, 0x4000cc2) 1.481992016s ago: executing program 2 (id=420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4000000000002ab}, 0x18) lremovexattr(&(0x7f0000000080)='./file1/file0\x00', &(0x7f00000000c0)=@random={'system.', '@*\\\x00'}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfff1, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 1.480986426s ago: executing program 4 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRES32, @ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000040)=ANY=[]) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe08, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000000)='./file1\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000903626e43925", 0x0, 0xc02, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r11, &(0x7f0000000180)=""/59, 0x3b, 0x1c) r12 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.420801607s ago: executing program 2 (id=422): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) 1.419688367s ago: executing program 2 (id=423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c009cf63580000900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000200000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000100000d000000000c0000000100"], 0x0, 0x3c, 0x0, 0xa}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x6, 0x0, 0x19) timer_gettime(0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000000)={0xa0000001}) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) openat$rtc(0xffffffffffffff9c, &(0x7f00000011c0), 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x4, 0x42f, &(0x7f0000000940)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) fallocate(r10, 0x8, 0x4000, 0x4000) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r9], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=r11, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x438afef074678e56}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r12}, 0x18) 1.376270838s ago: executing program 4 (id=425): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000280)=""/5, &(0x7f00000002c0)=0x5) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) listen(r0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x28, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0xb9, 0x0, 0x0, @binary="464e3b122b"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r9}, 0x38) syz_mount_image$ext4(&(0x7f0000000740)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f00000004c0)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@obj_role={'obj_role', 0x3d, '\a\x00\x92\xe1\x88\xb3\xddA\xe2\xf4\xfa\x80\x9c\'\x0fb\x80\xf7\xa1\x9b\xd9\x1c\xf4\xd8\x1epN3\x15jg\xec\xfd$5\x19\xae\x16\xc3\xd7\xdc\x04\xf6\x03E\x95\x85\x98\xe5\xb3\xaeG\xb1\xf8\xb9^\x93\xd3_U 6\xdeK#\xfdZ%\xdc\xb5NN\xe8E\a\x0fz\xfa\xb8\xd3\x8c?\x86b\x8b\xf7\xe3\xf4\xf1\x97\xb4$\xc9@HNW\xda\x99\xd7\xf5\xb6N\xb4\x94\x16N\x91\xc1\xa7\x8e\x85\xd28-2\b\xfd\xb5];uh\x1c)v\xdb\xdc3\a!7\xf0A\xbd\x9d\x9eW\x9f&|$\xeb\xc7\x8b\b\xad\x7f\x18+\xef\xc0,\x9e\xc5\xcf_I\xafQr\xe4y\xa4\r\xb1OD\xc6\xfb\xc4A\f\x14\xed\xf3%\xbdB\xdf\xcc\xf3uV3\xd0\xc3\xef\x7f\x198\x0f\xbdj\xc3\xc8\xd0\xfb\xa4'}}, {@uid_lt={'uid<', r6}}]}, 0x1, 0x731, &(0x7f0000000a00)="$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") 1.165632951s ago: executing program 0 (id=429): r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_read_part_table(0x405b, &(0x7f0000004080)="$eJzszjFKA1EUBdCbxMGvDARBK0EM9jJ2VrOL6SVrsFZxdmIZXIArsnQLIyhGEkW0CKicU73P5b1/wx9RltMoycP8fi/J8Sx907yGW2/5zvtSc5Zqt4xTJ7n8eLNbbL43AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwS41XXtdraVlO88P0V23O66QcTJPbSar2aJT9ZHb6yd1J8phklOQpSTfdUH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J+5WHltr8f1F6t3J+nb6mW8STIMw/Dtb0vSLX7SE57ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKMCAAD//wx/Es8=") fchdir(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x84000, 0x0) unshare(0x2040600) r2 = semget$private(0x0, 0x5, 0x0) semop(r2, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r2, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000001c0)) syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00') 1.090655193s ago: executing program 2 (id=430): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x1) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1004004, &(0x7f0000000300), 0x1, 0x572, &(0x7f0000000e40)="$eJzs3d9rW+UbAPDnpMl+dPt+18EYKiKFXTiZS9fWHxO8mJeiw4Hez9BmZTRdRpOOtQ62Xbgbb2QIIg7Ee733cvgP+FcMdDB0FHfhTeWkJ23aJm23Zm1mPh845XnPe9L3PDnnffOenIQE0LeG0z+5iJcj4usk4khEJFldPrLK4eXtFh/fmEiXJJaWPv0zaWyXlpv/q/m4Q1nhpYj49cuIU7mN7dbmF6ZLlUp5NiuP1GeujtTmF05fnilNlafKV8bGx8++PT723rvvdC3XNy48+e6T+x+e/erE4rc/Pzx6N4lzcTira81jB261FoZjOHtOCnFueVW+WTfahcZ6SbLVBjd3Zz94OgPZSVmIdAw4EgOrpyjwH5cOy0tAn0r0f+hTzXlA89q+S9fBL4xHHyxfAG3MP7/83kgcaFwbDS4ma66M0uvdoS60n7bxyx/37qZLdO99CIAt3bodEWfy+Y3jX5KNf8/uzDa2Wd+G8Q92z/10/vNmu/lPbmX+E23mP4fa9N1nsXX/zz3sQjMdpfO/99vOf1duWg0NZKX/NeZ8heTS5Uo5Hdv+HxEno7A/LW92P+fs4oOlTnWt8790SdtvzgWz/XiY37/2MZOlemknObd6dDvilbbz32Tl+Cdtjn/6fFzYZhvHy/de61S3df7P19KPEa+3Pf6rd7SSze9PjjTOh5HmWZH6a00bf985/lun9vc6//T4D26e/1DSer+29vRt/HDgn/KaFYXVcE3+sf3zf1/yWSPel627XqrXZ0cj9iUfb1w/tvrYZrm5fZr/yRObj3/tzv+DEfH5NvO/c+ynVzvV9cLxn3yq478+eNK5KgsefPTF953a397491YjOpmt2c74t8nurAl28twBAAAAAABAr8lFxOFIcsWVOJcrFpc/33EsBnOVaq1+6lJ17spkNL4rOxSFXPNO95GWz0OMZp+HbZbH1pXHI+JoRHwzcLBRLk5UK5N7nTwAAAAAAAAAAAAAAAAAAAD0iEMdvv+f+n1gr/cOeO785Df0r7b9/2ZL3I1fegJ6ktd/6F/6P/Qv/R/6l/4P/Wt9/x/co/0Adp/Xf+hf+j/0L/0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAuurC+fPpsrT4+MZEWp68Nj83Xb12erJcmy7OzE0UJ6qzV4tT1epUpVycqM5s9f8q1erV0bGYuz5SL9fqI7X5hYsz1bkr9YuXZ0pT5Yvlwq5kBQAAAAAAAAAAAAAAAAAAAC+W2vzCdKlSKc8KBM8U5HtjNwRdDvZ6ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVf8GAAD//46AOjY=") r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x2, 0x5}, 0x50) open_tree(0xffffffffffffff9c, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) getitimer(0x2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, r3, 0x0, 0x8) 951.911875ms ago: executing program 3 (id=432): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='sessionid\x00') preadv(r1, &(0x7f0000001b80), 0x0, 0x10000000, 0xfffffffd) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "560ebaafa30c3b16d9f032f4eb9720f0f377ca8225d7fe6287b9c3299eceae63cb57d4098ec125033b16a5d39cb75ac473f3ea8fa647d63eb1631511ee585981", 0x20040021}, 0x48, 0xfffffffffffffffc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d9) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a0087550b02000000", @ANYRES16=r2, @ANYBLOB="874bcbe19ed8906b776c4b99111de9a558493958f1d0b025f735442d00b8f2fb85c4d228a9931f54c103b1b934e6f37cff9f0dca9dfdf3628db5770f0bea54a857c212996b314e8bfb012763193437c9019222dc6ed5acb7e57bc45aa67e8eddc5055203155644b025abcf05d298171c956c9fc560b5026216b24115d7b6c2cacacd6edc85839b9e2528a05e7a0ce7747c", @ANYRES32=r5], 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="fce713ef1e737251acfb4f741bc1195d5d0fa1fc41263425d9f11294753e815d2f8b311d99b9eb0aa6e1ae15a0b48e8ea47ee9826eae28dcb4e54fe1d2b56f139981c4e63ef6584836bb1379ba5b2eab"], &(0x7f0000000300)='GPL\x00', 0xca, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x3, 0x10}, 0x10, 0x24ddf, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r2, r2], 0x0, 0x10, 0x50b}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000010000000b71c0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) r9 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, 0x0) keyctl$unlink(0x9, r3, r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r11, 0x890c, 0x0) connect$inet(r10, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='L', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="a0fc2e5915d59000", 0x8}], 0x1, &(0x7f00000007c0)=ANY=[@ANYRES64=r4], 0x10}}], 0x2, 0x4000cc2) 950.002245ms ago: executing program 4 (id=433): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f00000001c0)=[0x39e], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000001e40)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x2, 0x0, 0x400000000007f, 0xf}) 912.435135ms ago: executing program 2 (id=434): r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x1) r1 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYRES64=r1, @ANYRES8=r2, @ANYRESHEX=r1], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1004004, &(0x7f0000000300), 0x1, 0x572, &(0x7f0000000e40)="$eJzs3d9rW+UbAPDnpMl+dPt+18EYKiKFXTiZS9fWHxO8mJeiw4Hez9BmZTRdRpOOtQ62Xbgbb2QIIg7Ee733cvgP+FcMdDB0FHfhTeWkJ23aJm23Zm1mPh845XnPe9L3PDnnffOenIQE0LeG0z+5iJcj4usk4khEJFldPrLK4eXtFh/fmEiXJJaWPv0zaWyXlpv/q/m4Q1nhpYj49cuIU7mN7dbmF6ZLlUp5NiuP1GeujtTmF05fnilNlafKV8bGx8++PT723rvvdC3XNy48+e6T+x+e/erE4rc/Pzx6N4lzcTira81jB261FoZjOHtOCnFueVW+WTfahcZ6SbLVBjd3Zz94OgPZSVmIdAw4EgOrpyjwH5cOy0tAn0r0f+hTzXlA89q+S9fBL4xHHyxfAG3MP7/83kgcaFwbDS4ma66M0uvdoS60n7bxyx/37qZLdO99CIAt3bodEWfy+Y3jX5KNf8/uzDa2Wd+G8Q92z/10/vNmu/lPbmX+E23mP4fa9N1nsXX/zz3sQjMdpfO/99vOf1duWg0NZKX/NeZ8heTS5Uo5Hdv+HxEno7A/LW92P+fs4oOlTnWt8790SdtvzgWz/XiY37/2MZOlemknObd6dDvilbbz32Tl+Cdtjn/6fFzYZhvHy/de61S3df7P19KPEa+3Pf6rd7SSze9PjjTOh5HmWZH6a00bf985/lun9vc6//T4D26e/1DSer+29vRt/HDgn/KaFYXVcE3+sf3zf1/yWSPel627XqrXZ0cj9iUfb1w/tvrYZrm5fZr/yRObj3/tzv+DEfH5NvO/c+ynVzvV9cLxn3yq478+eNK5KgsefPTF953a397491YjOpmt2c74t8nurAl28twBAAAAAABAr8lFxOFIcsWVOJcrFpc/33EsBnOVaq1+6lJ17spkNL4rOxSFXPNO95GWz0OMZp+HbZbH1pXHI+JoRHwzcLBRLk5UK5N7nTwAAAAAAAAAAAAAAAAAAAD0iEMdvv+f+n1gr/cOeO785Df0r7b9/2ZL3I1fegJ6ktd/6F/6P/Qv/R/6l/4P/Wt9/x/co/0Adp/Xf+hf+j/0L/0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAuurC+fPpsrT4+MZEWp68Nj83Xb12erJcmy7OzE0UJ6qzV4tT1epUpVycqM5s9f8q1erV0bGYuz5SL9fqI7X5hYsz1bkr9YuXZ0pT5Yvlwq5kBQAAAAAAAAAAAAAAAAAAAC+W2vzCdKlSKc8KBM8U5HtjNwRdDvZ6ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVf8GAAD//46AOjY=") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x2, 0x5}, 0x50) open_tree(0xffffffffffffff9c, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r10}, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) getitimer(0x2, &(0x7f0000000000)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = socket(0x18, 0x800, 0x0) sendfile(r12, r6, 0x0, 0x8) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x3) 910.941755ms ago: executing program 3 (id=435): r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x1) r1 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYRES64=r1, @ANYRES8=r2, @ANYRESHEX=r1], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1004004, &(0x7f0000000300), 0x1, 0x572, &(0x7f0000000e40)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x2, 0x5}, 0x50) open_tree(0xffffffffffffff9c, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r10}, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) getitimer(0x2, &(0x7f0000000000)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = socket(0x18, 0x800, 0x0) sendfile(r12, r6, 0x0, 0x8) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x3) 790.645217ms ago: executing program 3 (id=436): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x4000000) 777.311537ms ago: executing program 2 (id=437): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000002740)=""/4078}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) r5 = io_uring_setup(0x2ed6, &(0x7f0000000880)={0x0, 0xbea8, 0x4040, 0x1, 0xf6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000005c0)=[@ioring_restriction_sqe_op={0x1, 0x9}, @ioring_restriction_sqe_flags_allowed={0x2, 0x14}, @ioring_restriction_register_op={0x0, 0xd}], 0x3) epoll_create1(0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r10 = dup(r9) ioctl$PTP_EXTTS_REQUEST2(r10, 0x43403d05, 0x0) futex(0x0, 0xa, 0x301, 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmmsg(r6, &(0x7f0000000500)=[{{&(0x7f00000003c0)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f00000006c0)=""/169, 0xa9}], 0x2, &(0x7f0000000780)=""/246, 0xf6}}], 0x1, 0x2, &(0x7f0000000580)={0x0, 0x989680}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002026e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4$inet6(r10, &(0x7f0000000900)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000940)=0x1c, 0x80000) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='f2fs_readdir\x00', r13, 0x0, 0xf}, 0x18) 738.543908ms ago: executing program 3 (id=438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) 737.606088ms ago: executing program 3 (id=439): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) timer_create(0x3, 0x0, &(0x7f0000000400)=0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)="c62ac049b477f9612e29e975fee801ea4b4bc79d20e94370b3b3168c20892f8e72038be2cae0f6e9eb243ccdbca6998724f5d953ccbb64025288d093c94a81085a086f0bb3a285c7a081b847db9d446fb40de33db3784134fcadd8ae90648cb62d9dabbf09cf806e3d0ec607888e27ae", &(0x7f00000000c0)=@udp6=r1}, 0x20) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") timer_gettime(r4, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x98) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x4092}, 0x18) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x17f) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 292.387785ms ago: executing program 0 (id=440): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, 0x0) 263.151305ms ago: executing program 0 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c009cf63580000900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000200000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000100000d000000000c0000000100"], 0x0, 0x3c, 0x0, 0xa}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x6, 0x0, 0x19) timer_gettime(0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) openat$rtc(0xffffffffffffff9c, &(0x7f00000011c0), 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x4, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) fallocate(r8, 0x8, 0x4000, 0x4000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=r9, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x438afef074678e56}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r10}, 0x18) 100.019769ms ago: executing program 3 (id=442): getresuid(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000002000)={[{@utf8}, {@overriderock}, {@check_strict}, {@hide}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@hide}, {@sbsector={'sbsector', 0x3d, 0x6}}, {@unhide}, {@map_acorn}, {@map_normal}, {@map_normal}, {@sbsector={'sbsector', 0x3d, 0xc}}, {@nocompress}, {@session={'session', 0x3d, 0x45}}, {@map_acorn}, {@utf8}, {@uid}]}, 0x4, 0xa16, &(0x7f00000015c0)="$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") quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x312, &(0x7f0000003500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@mpls_mc={0x8848, {[{0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x81}], @ipv6=@icmpv6={0x8, 0x6, "be2a66", 0x2d0, 0x3a, 0xff, @rand_addr=' \x01\x00', @private2, {[@hopopts={0x2, 0x2f, '\x00', [@generic={0xf5, 0x37, "219746b6a0e076829e73a2d8b6f9e7e3eeff29a93a28cd4b060b51b81246d3eed2ac31b7468f42ac2a4542c6914d586f311d314f632b0d"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0x0, [0x100, 0x6, 0x9]}}, @pad1, @generic={0xba, 0xfd, "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"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @pad1, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x73, 0xc, 0x2, 0x69, 0x0, [@mcast1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x67, 0x8, 0x1, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}, @hopopts={0x84, 0x7, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x7, [0x7]}}, @enc_lim={0x4, 0x1, 0x40}, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x1, [0x2, 0xffffffffffffff80]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0xff, 0x0, '\x00', [@ra={0x5, 0x2, 0xc0}, @padn={0x1, 0x1, [0x0]}]}, @hopopts={0x2f, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x6}]}], @mld={0x83, 0x0, 0x0, 0x80, 0x200, @mcast2}}}}}}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r0, 0x0, 0x8000000c, 0x2) 8.42723ms ago: executing program 4 (id=443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400"], 0xa8}}, 0x0) 0s ago: executing program 4 (id=444): ioprio_set$pid(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x20048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) kernel console output (not intermixed with test programs): 9.348:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.2.45" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08ccd5e9a9 code=0x0 [ 43.695166][ T29] audit: type=1400 audit(1753572059.348:304): avc: denied { ioctl } for pid=3657 comm="syz.4.48" path="socket:[4798]" dev="sockfs" ino=4798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.729176][ T29] audit: type=1400 audit(1753572059.418:305): avc: denied { lock } for pid=3662 comm="syz.0.49" path="socket:[5215]" dev="sockfs" ino=5215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.758681][ T3661] loop4: detected capacity change from 0 to 1024 [ 43.778562][ T3661] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 43.800813][ T29] audit: type=1400 audit(1753572059.488:306): avc: denied { ioctl } for pid=3666 comm="syz.3.51" path="socket:[4819]" dev="sockfs" ino=4819 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.853678][ T29] audit: type=1400 audit(1753572059.518:307): avc: denied { lock } for pid=3662 comm="syz.0.49" path="socket:[5216]" dev="sockfs" ino=5216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 43.896414][ T29] audit: type=1400 audit(1753572059.578:308): avc: denied { setopt } for pid=3672 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.969670][ T3675] program syz.3.53 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.975440][ T3673] loop4: detected capacity change from 0 to 512 [ 43.991384][ T29] audit: type=1400 audit(1753572059.658:309): avc: denied { setopt } for pid=3672 comm="syz.4.52" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.011482][ T29] audit: type=1400 audit(1753572059.658:310): avc: denied { read } for pid=3672 comm="syz.4.52" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.034303][ T29] audit: type=1400 audit(1753572059.658:311): avc: denied { open } for pid=3672 comm="syz.4.52" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.034466][ T3665] loop1: detected capacity change from 0 to 32768 [ 44.064467][ T3673] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.079804][ T3673] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.085346][ T29] audit: type=1400 audit(1753572059.768:312): avc: denied { mounton } for pid=3664 comm="syz.1.50" path="/proc/32/task" dev="proc" ino=4822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 44.116524][ T3673] EXT4-fs (loop4): 1 truncate cleaned up [ 44.125412][ T3673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.128375][ T1027] hid (null): report_id 2983515997 is invalid [ 44.145556][ T3304] loop1: p1 p3 < > [ 44.152148][ T1027] hid-generic 0006:0008:599F654B.0001: report_id 2983515997 is invalid [ 44.160543][ T1027] hid-generic 0006:0008:599F654B.0001: item 0 4 1 8 parsing failed [ 44.169536][ T3665] loop1: p1 p3 < > [ 44.189847][ T1027] hid-generic 0006:0008:599F654B.0001: probe with driver hid-generic failed with error -22 [ 44.226312][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 44.237820][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 44.263889][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 44.274633][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 44.293210][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.330473][ T3682] syz.1.55 uses obsolete (PF_INET,SOCK_PACKET) [ 44.395134][ T3684] team0: entered promiscuous mode [ 44.400623][ T3684] team_slave_0: entered promiscuous mode [ 44.406448][ T3684] team_slave_1: entered promiscuous mode [ 44.412326][ T3684] team0: entered allmulticast mode [ 44.418127][ T3684] team_slave_0: entered allmulticast mode [ 44.423928][ T3684] team_slave_1: entered allmulticast mode [ 44.432958][ T3684] tipc: Started in network mode [ 44.437999][ T3684] tipc: Node identity eea7e96a5113, cluster identity 4711 [ 44.445218][ T3684] tipc: Enabled bearer , priority 0 [ 44.475814][ T3687] loop1: detected capacity change from 0 to 512 [ 44.488119][ T3687] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.498461][ T3687] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.505859][ T3683] tipc: Disabling bearer [ 44.515229][ T3687] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.57: corrupted inode contents [ 44.527882][ T3687] EXT4-fs (loop1): Remounting filesystem read-only [ 44.534800][ T3687] EXT4-fs (loop1): 1 truncate cleaned up [ 44.540722][ T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.551348][ T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.595345][ T3694] loop0: detected capacity change from 0 to 512 [ 44.600309][ T3696] FAULT_INJECTION: forcing a failure. [ 44.600309][ T3696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.618430][ T3696] CPU: 1 UID: 0 PID: 3696 Comm: syz.3.60 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 44.618463][ T3696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.618516][ T3696] Call Trace: [ 44.618524][ T3696] [ 44.618532][ T3696] __dump_stack+0x1d/0x30 [ 44.618554][ T3696] dump_stack_lvl+0xe8/0x140 [ 44.618572][ T3696] dump_stack+0x15/0x1b [ 44.618587][ T3696] should_fail_ex+0x265/0x280 [ 44.618705][ T3696] should_fail+0xb/0x20 [ 44.618732][ T3696] should_fail_usercopy+0x1a/0x20 [ 44.618766][ T3696] copy_folio_from_iter_atomic+0x278/0x1170 [ 44.618822][ T3696] ? shmem_write_begin+0xa8/0x190 [ 44.618859][ T3696] ? shmem_write_begin+0xe1/0x190 [ 44.618896][ T3696] generic_perform_write+0x2c2/0x490 [ 44.619003][ T3696] shmem_file_write_iter+0xc5/0xf0 [ 44.619029][ T3696] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 44.619130][ T3696] vfs_write+0x4a0/0x8e0 [ 44.619173][ T3696] ksys_write+0xda/0x1a0 [ 44.619209][ T3696] __x64_sys_write+0x40/0x50 [ 44.619321][ T3696] x64_sys_call+0x2cdd/0x2fb0 [ 44.619371][ T3696] do_syscall_64+0xd2/0x200 [ 44.619395][ T3696] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.619466][ T3696] ? clear_bhb_loop+0x40/0x90 [ 44.619494][ T3696] ? clear_bhb_loop+0x40/0x90 [ 44.619519][ T3696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.619545][ T3696] RIP: 0033:0x7fe00da8d45f [ 44.619566][ T3696] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 44.619589][ T3696] RSP: 002b:00007fe00c0f6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 44.619613][ T3696] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fe00da8d45f [ 44.619625][ T3696] RDX: 0000000000040000 RSI: 00007fe003cd7000 RDI: 0000000000000004 [ 44.619636][ T3696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000452 [ 44.619647][ T3696] R10: 00000000000003ba R11: 0000000000000293 R12: 0000000000000004 [ 44.619709][ T3696] R13: 00007fe00c0f6ef0 R14: 00007fe00c0f6eb0 R15: 00007fe003cd7000 [ 44.619792][ T3696] [ 44.622939][ T3696] loop3: detected capacity change from 0 to 512 [ 44.638921][ T51] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 44.650434][ T3696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.678817][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.719388][ T3696] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #17: comm syz.3.60: inline data xattr refers to an external xattr inode [ 44.742177][ T3687] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.748369][ T3694] EXT4-fs (loop0): 1 orphan inode deleted [ 44.751017][ T3696] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.60: couldn't read orphan inode 17 (err -117) [ 44.757386][ T3694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.764468][ T3696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.807123][ T3694] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.837071][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 44.894318][ T3694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 44.970870][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.019385][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.039061][ T3720] netlink: 'syz.4.64': attribute type 21 has an invalid length. [ 45.046821][ T3720] netlink: 128 bytes leftover after parsing attributes in process `syz.4.64'. [ 45.056217][ T3720] netlink: 'syz.4.64': attribute type 6 has an invalid length. [ 45.063879][ T3720] netlink: 3 bytes leftover after parsing attributes in process `syz.4.64'. [ 45.115733][ T3726] loop3: detected capacity change from 0 to 1024 [ 45.142648][ T3726] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 45.174610][ T3732] loop4: detected capacity change from 0 to 512 [ 45.231581][ T3732] EXT4-fs (loop4): 1 orphan inode deleted [ 45.248695][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 45.283119][ T3728] loop1: detected capacity change from 0 to 128 [ 45.283763][ T3732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.302660][ T3732] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.331935][ T3728] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.409854][ T3728] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.442028][ T3728] EXT4-fs (loop1): shut down requested (0) [ 45.454124][ T3732] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.67: iget: bogus i_mode (0) [ 45.469439][ T3732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 45.469823][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 45.488750][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 45.530297][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.572264][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.652334][ T3771] loop1: detected capacity change from 0 to 512 [ 45.669598][ T3771] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 45.680457][ T3771] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.689174][ T3771] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.74: corrupted inode contents [ 45.701302][ T3771] EXT4-fs (loop1): Remounting filesystem read-only [ 45.708117][ T3771] EXT4-fs (loop1): 1 truncate cleaned up [ 45.717120][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.727797][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.746182][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 45.747040][ T3771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.770735][ T3771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.808942][ T3778] loop0: detected capacity change from 0 to 512 [ 45.831694][ T3778] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.858108][ T3778] EXT4-fs (loop0): 1 truncate cleaned up [ 45.858540][ T3778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.904441][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.977619][ T3784] loop0: detected capacity change from 0 to 1024 [ 45.984792][ T3784] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 46.049897][ T3788] loop0: detected capacity change from 0 to 512 [ 46.057248][ T3788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.068517][ T3788] EXT4-fs (loop0): 1 truncate cleaned up [ 46.074843][ T3788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.102439][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.171907][ T3791] loop0: detected capacity change from 0 to 1024 [ 46.179159][ T3791] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 46.247675][ C0] hrtimer: interrupt took 27285 ns [ 46.265080][ T3797] SELinux: failed to load policy [ 46.282777][ T3796] Driver unsupported XDP return value 0 on prog (id 73) dev N/A, expect packet loss! [ 46.371781][ T3801] infiniband syz!: set active [ 46.376591][ T3801] infiniband syz!: added team_slave_0 [ 46.411194][ T3801] RDS/IB: syz!: added [ 46.415419][ T3801] smc: adding ib device syz! with port count 1 [ 46.421903][ T3801] smc: ib device syz! port 1 has pnetid [ 46.588889][ T3808] xt_CT: No such helper "pptp" [ 46.617166][ T3811] loop0: detected capacity change from 0 to 128 [ 46.664406][ T3813] loop0: detected capacity change from 0 to 512 [ 46.674600][ T3807] SELinux: failed to load policy [ 46.691300][ T3815] FAULT_INJECTION: forcing a failure. [ 46.691300][ T3815] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 46.704745][ T3815] CPU: 1 UID: 0 PID: 3815 Comm: syz.1.89 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 46.704776][ T3815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.704788][ T3815] Call Trace: [ 46.704945][ T3815] [ 46.704955][ T3815] __dump_stack+0x1d/0x30 [ 46.705037][ T3815] dump_stack_lvl+0xe8/0x140 [ 46.705060][ T3815] dump_stack+0x15/0x1b [ 46.705075][ T3815] should_fail_ex+0x265/0x280 [ 46.705178][ T3815] should_fail_alloc_page+0xf2/0x100 [ 46.705203][ T3815] __alloc_frozen_pages_noprof+0xff/0x360 [ 46.705239][ T3815] alloc_pages_mpol+0xb3/0x250 [ 46.705280][ T3815] vma_alloc_folio_noprof+0x1aa/0x300 [ 46.705316][ T3815] do_wp_page+0x673/0x2400 [ 46.705406][ T3815] ? __rcu_read_lock+0x37/0x50 [ 46.705431][ T3815] handle_mm_fault+0x77d/0x2be0 [ 46.705515][ T3815] ? mas_walk+0xf2/0x120 [ 46.705578][ T3815] do_user_addr_fault+0x636/0x1090 [ 46.705614][ T3815] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 46.705674][ T3815] exc_page_fault+0x62/0xa0 [ 46.705728][ T3815] asm_exc_page_fault+0x26/0x30 [ 46.705748][ T3815] RIP: 0033:0x7f8dd7eb0ca3 [ 46.705762][ T3815] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 46.705836][ T3815] RSP: 002b:00007f8dd66564a0 EFLAGS: 00010202 [ 46.705852][ T3815] RAX: 0000000000005005 RBX: 00007f8dd6656540 RCX: 00007f8dce237000 [ 46.705868][ T3815] RDX: 00007f8dd66566e0 RSI: 0000000000000003 RDI: 00007f8dd66565e0 [ 46.705883][ T3815] RBP: 00000000000000cf R08: 0000000000000008 R09: 00000000000000a5 [ 46.705968][ T3815] R10: 00000000000000c4 R11: 00007f8dd6656540 R12: 0000000000000001 [ 46.705980][ T3815] R13: 00007f8dd808c880 R14: 0000000000000010 R15: 00007f8dd66565e0 [ 46.705998][ T3815] [ 46.706007][ T3815] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 46.923951][ T3815] loop1: detected capacity change from 0 to 512 [ 46.959673][ T3824] loop2: detected capacity change from 0 to 1024 [ 46.966279][ T3815] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 46.978343][ T3813] EXT4-fs (loop0): 1 orphan inode deleted [ 46.984443][ T3813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.987208][ T3815] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.003482][ T1709] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 47.006575][ T3824] EXT4-fs: dax option not supported [ 47.029608][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.036775][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.038669][ T3815] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.044272][ T3813] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.064171][ T3815] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 47.076345][ T3815] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.89: bg 0: block 40: padding at end of block bitmap is not set [ 47.092304][ T3815] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 47.114303][ T3815] EXT4-fs (loop1): 1 truncate cleaned up [ 47.122346][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 47.124211][ T3815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.168187][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.176343][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.178460][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.235954][ T3820] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.245000][ T3820] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.254006][ T3820] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.263056][ T3820] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.305691][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.345144][ T3839] binfmt_misc: register: failed to install interpreter file ./file0 [ 47.431297][ T3844] program syz.1.97 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.514965][ T3846] program syz.0.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.595027][ T3852] tipc: Started in network mode [ 47.599986][ T3852] tipc: Node identity aadd2be7e8c2, cluster identity 4711 [ 47.607269][ T3852] tipc: Enabled bearer , priority 0 [ 47.614515][ T3852] FAULT_INJECTION: forcing a failure. [ 47.614515][ T3852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.624195][ T3850] tipc: Enabled bearer , priority 0 [ 47.627720][ T3852] CPU: 1 UID: 0 PID: 3852 Comm: syz.3.101 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 47.627761][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.627828][ T3852] Call Trace: [ 47.627836][ T3852] [ 47.627848][ T3852] __dump_stack+0x1d/0x30 [ 47.627877][ T3852] dump_stack_lvl+0xe8/0x140 [ 47.627912][ T3852] dump_stack+0x15/0x1b [ 47.627967][ T3852] should_fail_ex+0x265/0x280 [ 47.628010][ T3852] should_fail+0xb/0x20 [ 47.628047][ T3852] should_fail_usercopy+0x1a/0x20 [ 47.628106][ T3852] _copy_from_iter+0xcf/0xe40 [ 47.628163][ T3852] ? __build_skb_around+0x1a0/0x200 [ 47.628208][ T3852] skb_copy_datagram_from_iter+0xb1/0x490 [ 47.628242][ T3852] tun_get_user+0xa0e/0x2500 [ 47.628307][ T3852] ? __pfx_cmp_ex_search+0x10/0x10 [ 47.628338][ T3852] ? search_extable+0x53/0x80 [ 47.628365][ T3852] ? rep_movs_alternative+0xf/0x90 [ 47.628427][ T3852] ? ref_tracker_alloc+0x1f2/0x2f0 [ 47.628474][ T3852] tun_chr_write_iter+0x15e/0x210 [ 47.628511][ T3852] do_iter_readv_writev+0x421/0x4c0 [ 47.628602][ T3852] vfs_writev+0x2df/0x8b0 [ 47.628632][ T3852] ? copy_from_user_nofault+0xd5/0x120 [ 47.628709][ T3852] do_writev+0xe7/0x210 [ 47.628739][ T3852] __x64_sys_writev+0x45/0x50 [ 47.628762][ T3852] x64_sys_call+0x2006/0x2fb0 [ 47.628792][ T3852] do_syscall_64+0xd2/0x200 [ 47.628835][ T3852] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.628921][ T3852] ? clear_bhb_loop+0x40/0x90 [ 47.628949][ T3852] ? clear_bhb_loop+0x40/0x90 [ 47.628995][ T3852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.629023][ T3852] RIP: 0033:0x7fe00da8e9a9 [ 47.629042][ T3852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.629067][ T3852] RSP: 002b:00007fe00c0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 47.629091][ T3852] RAX: ffffffffffffffda RBX: 00007fe00dcb5fa0 RCX: 00007fe00da8e9a9 [ 47.629108][ T3852] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000003 [ 47.629156][ T3852] RBP: 00007fe00c0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.629173][ T3852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.629190][ T3852] R13: 0000000000000000 R14: 00007fe00dcb5fa0 R15: 00007ffe224f0928 [ 47.629210][ T3852] [ 47.867839][ T3851] tipc: Resetting bearer [ 47.901212][ T3851] tipc: Disabling bearer [ 47.911802][ T3847] tipc: Resetting bearer [ 47.916187][ T3861] loop0: detected capacity change from 0 to 512 [ 47.924856][ T3861] ======================================================= [ 47.924856][ T3861] WARNING: The mand mount option has been deprecated and [ 47.924856][ T3861] and is ignored by this kernel. Remove the mand [ 47.924856][ T3861] option from the mount to silence this warning. [ 47.924856][ T3861] ======================================================= [ 47.963213][ T3861] EXT4-fs (loop0): unsupported inode size: 0 [ 47.965016][ T3847] tipc: Disabling bearer [ 47.969298][ T3861] EXT4-fs (loop0): blocksize: 1024 [ 48.012154][ T3864] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 48.016764][ T3865] loop2: detected capacity change from 0 to 512 [ 48.064459][ T3865] EXT4-fs (loop2): 1 orphan inode deleted [ 48.077322][ T3865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.090729][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 48.111947][ T3865] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.126682][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 48.143206][ T3871] loop1: detected capacity change from 0 to 1024 [ 48.145187][ T3871] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 48.204101][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.226672][ T3875] loop0: detected capacity change from 0 to 512 [ 48.230880][ T3877] @: renamed from vlan0 [ 48.298774][ T3875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.312782][ T3874] SELinux: ebitmap: truncated map [ 48.313744][ T3874] SELinux: failed to load policy [ 48.375897][ T3875] EXT4-fs (loop0): 1 truncate cleaned up [ 48.399943][ T3882] program syz.4.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.458875][ T3884] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 48.480392][ T3884] SELinux: failed to load policy [ 48.483469][ T3875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.507416][ T3884] netlink: 'syz.1.112': attribute type 21 has an invalid length. [ 48.507527][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 48.512106][ T3884] openvswitch: netlink: Message has 6 unknown bytes. [ 48.601766][ T3888] loop4: detected capacity change from 0 to 512 [ 48.624878][ T3891] loop3: detected capacity change from 0 to 2048 [ 48.635938][ T3891] EXT4-fs (loop3): invalid inodes per group: 1 [ 48.635938][ T3891] [ 48.649212][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.660439][ T3888] EXT4-fs (loop4): 1 orphan inode deleted [ 48.666474][ T3888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.687475][ T37] __quota_error: 148 callbacks suppressed [ 48.687520][ T37] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 48.703127][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 48.714659][ T3888] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.732847][ T3897] loop1: detected capacity change from 0 to 1024 [ 48.765801][ T3899] loop0: detected capacity change from 0 to 1024 [ 48.772440][ T3897] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 48.795806][ T3899] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.806815][ T3899] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 48.821881][ T3899] JBD2: no valid journal superblock found [ 48.827781][ T3899] EXT4-fs (loop0): Could not load journal inode [ 48.885528][ T3888] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.113: iget: bogus i_mode (0) [ 48.898745][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 48.901087][ T3910] loop0: detected capacity change from 0 to 512 [ 48.920059][ T29] audit: type=1400 audit(1753572064.608:442): avc: denied { append } for pid=3907 comm="syz.1.120" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.943633][ T29] audit: type=1400 audit(1753572064.608:443): avc: denied { ioctl } for pid=3907 comm="syz.1.120" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.991191][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.017079][ T3910] EXT4-fs (loop0): 1 orphan inode deleted [ 49.026767][ T3910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.040567][ T1667] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 49.050472][ T1667] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 49.055030][ T3921] program syz.1.124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.103052][ T3910] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.123715][ T29] audit: type=1400 audit(1753572064.808:444): avc: denied { execmem } for pid=3923 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.165719][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.181918][ T29] audit: type=1400 audit(1753572064.868:445): avc: denied { getopt } for pid=3923 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.225131][ T3934] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 49.232860][ T29] audit: type=1400 audit(1753572064.868:446): avc: denied { name_bind } for pid=3923 comm="syz.4.122" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 49.248435][ T3934] SELinux: failed to load policy [ 49.262059][ T29] audit: type=1326 audit(1753572064.948:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd7fee9a9 code=0x7ffc0000 [ 49.286350][ T29] audit: type=1326 audit(1753572064.968:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8dd7fee9a9 code=0x7ffc0000 [ 49.309709][ T29] audit: type=1326 audit(1753572064.968:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd7fee9a9 code=0x7ffc0000 [ 49.310727][ T3938] netlink: 'syz.0.125': attribute type 21 has an invalid length. [ 49.406475][ T3934] openvswitch: netlink: Message has 6 unknown bytes. [ 49.423633][ T3949] loop1: detected capacity change from 0 to 128 [ 49.607795][ T3964] loop0: detected capacity change from 0 to 512 [ 49.625040][ T3969] loop3: detected capacity change from 0 to 512 [ 49.653043][ T3969] EXT4-fs (loop3): 1 orphan inode deleted [ 49.653484][ T3969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.654081][ T3964] EXT4-fs (loop0): 1 orphan inode deleted [ 49.655330][ T3964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.656080][ T3964] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.657188][ T3969] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.682865][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 49.733059][ T3974] loop4: detected capacity change from 0 to 512 [ 49.734820][ T3974] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.762972][ T3974] EXT4-fs (loop4): 1 truncate cleaned up [ 49.763336][ T3974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.786523][ T3964] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.134: iget: bogus i_mode (0) [ 49.805581][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.840839][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.873417][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.906554][ T3982] loop4: detected capacity change from 0 to 512 [ 49.949198][ T3986] __nla_validate_parse: 6 callbacks suppressed [ 49.949286][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 49.964979][ T3982] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 49.973218][ T3983] loop0: detected capacity change from 0 to 512 [ 49.975447][ T3982] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.980389][ T3983] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.005309][ T3982] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.139: corrupted inode contents [ 50.018462][ T3982] EXT4-fs (loop4): Remounting filesystem read-only [ 50.025190][ T3982] EXT4-fs (loop4): 1 truncate cleaned up [ 50.052081][ T3990] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 50.062071][ T3990] SELinux: failed to load policy [ 50.067440][ T3990] netlink: 'syz.3.142': attribute type 21 has an invalid length. [ 50.075461][ T3990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 50.086568][ T3990] openvswitch: netlink: Message has 6 unknown bytes. [ 50.130997][ T3983] EXT4-fs (loop0): 1 truncate cleaned up [ 50.137403][ T3983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.184710][ T3995] netlink: 88 bytes leftover after parsing attributes in process `syz.3.144'. [ 50.197091][ T1667] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.207692][ T1667] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.222951][ T3998] loop3: detected capacity change from 0 to 512 [ 50.229355][ T1667] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.241204][ T3982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.255200][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.255820][ T3998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.264689][ T3982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.286042][ T3998] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.349692][ T4002] FAULT_INJECTION: forcing a failure. [ 50.349692][ T4002] name failslab, interval 1, probability 0, space 0, times 0 [ 50.351621][ T3949] syz.1.128 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 50.362382][ T4002] CPU: 1 UID: 0 PID: 4002 Comm: syz.0.145 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 50.362421][ T4002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.362433][ T4002] Call Trace: [ 50.362439][ T4002] [ 50.362471][ T4002] __dump_stack+0x1d/0x30 [ 50.362501][ T4002] dump_stack_lvl+0xe8/0x140 [ 50.362529][ T4002] dump_stack+0x15/0x1b [ 50.362553][ T4002] should_fail_ex+0x265/0x280 [ 50.362597][ T4002] should_failslab+0x8c/0xb0 [ 50.362697][ T4002] kmem_cache_alloc_node_noprof+0x57/0x320 [ 50.362734][ T4002] ? __alloc_skb+0x101/0x320 [ 50.362778][ T4002] __alloc_skb+0x101/0x320 [ 50.362821][ T4002] inet_rtm_getroute+0x805/0x1510 [ 50.362878][ T4002] ? __kfree_skb+0x109/0x150 [ 50.362941][ T4002] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 50.363049][ T4002] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 50.363086][ T4002] netlink_rcv_skb+0x123/0x220 [ 50.363161][ T4002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 50.363246][ T4002] rtnetlink_rcv+0x1c/0x30 [ 50.363274][ T4002] netlink_unicast+0x5a8/0x680 [ 50.363330][ T4002] netlink_sendmsg+0x58b/0x6b0 [ 50.363371][ T4002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.363398][ T4002] __sock_sendmsg+0x142/0x180 [ 50.363433][ T4002] ____sys_sendmsg+0x31e/0x4e0 [ 50.363464][ T4002] ___sys_sendmsg+0x17b/0x1d0 [ 50.363564][ T4002] __x64_sys_sendmsg+0xd4/0x160 [ 50.363595][ T4002] x64_sys_call+0x2999/0x2fb0 [ 50.363623][ T4002] do_syscall_64+0xd2/0x200 [ 50.363648][ T4002] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.363722][ T4002] ? clear_bhb_loop+0x40/0x90 [ 50.363749][ T4002] ? clear_bhb_loop+0x40/0x90 [ 50.363852][ T4002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.363880][ T4002] RIP: 0033:0x7f9f46d9e9a9 [ 50.363900][ T4002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.363925][ T4002] RSP: 002b:00007f9f453ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.364064][ T4002] RAX: ffffffffffffffda RBX: 00007f9f46fc5fa0 RCX: 00007f9f46d9e9a9 [ 50.364081][ T4002] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 50.364098][ T4002] RBP: 00007f9f453ff090 R08: 0000000000000000 R09: 0000000000000000 [ 50.364114][ T4002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.364130][ T4002] R13: 0000000000000000 R14: 00007f9f46fc5fa0 R15: 00007ffcc10b4b78 [ 50.364156][ T4002] [ 50.544161][ T3997] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.146: corrupted inode contents [ 50.546662][ T3949] CPU: 0 UID: 0 PID: 3949 Comm: syz.1.128 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 50.546708][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.546723][ T3949] Call Trace: [ 50.546730][ T3949] [ 50.546739][ T3949] __dump_stack+0x1d/0x30 [ 50.546764][ T3949] dump_stack_lvl+0xe8/0x140 [ 50.546787][ T3949] dump_stack+0x15/0x1b [ 50.546806][ T3949] dump_header+0x81/0x220 [ 50.546972][ T3949] oom_kill_process+0x334/0x3f0 [ 50.547010][ T3949] out_of_memory+0x979/0xb80 [ 50.547053][ T3949] try_charge_memcg+0x5e6/0x9e0 [ 50.547112][ T3949] obj_cgroup_charge_pages+0xa6/0x150 [ 50.547223][ T3949] __memcg_kmem_charge_page+0x9f/0x170 [ 50.547333][ T3949] __alloc_frozen_pages_noprof+0x188/0x360 [ 50.547381][ T3949] alloc_pages_mpol+0xb3/0x250 [ 50.547424][ T3949] alloc_pages_noprof+0x90/0x130 [ 50.547483][ T3949] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 50.547574][ T3949] __kvmalloc_node_noprof+0x30f/0x4e0 [ 50.547610][ T3949] ? ip_set_alloc+0x1f/0x30 [ 50.547713][ T3949] ? ip_set_alloc+0x1f/0x30 [ 50.547827][ T3949] ? __kmalloc_cache_noprof+0x189/0x320 [ 50.547871][ T3949] ip_set_alloc+0x1f/0x30 [ 50.547910][ T3949] hash_netiface_create+0x282/0x740 [ 50.547955][ T3949] ? __pfx_hash_netiface_create+0x10/0x10 [ 50.548041][ T3949] ip_set_create+0x3c9/0x960 [ 50.548107][ T3949] ? __nla_parse+0x40/0x60 [ 50.548135][ T3949] nfnetlink_rcv_msg+0x4c6/0x590 [ 50.548201][ T3949] ? selinux_capable+0x1f9/0x270 [ 50.548281][ T3949] netlink_rcv_skb+0x123/0x220 [ 50.548328][ T3949] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 50.548393][ T3949] nfnetlink_rcv+0x16b/0x1690 [ 50.548428][ T3949] ? __dquot_free_space+0x52d/0x800 [ 50.548518][ T3949] ? xas_find+0x15e/0x3e0 [ 50.548544][ T3949] ? xas_load+0x405/0x430 [ 50.548598][ T3949] ? find_get_entry+0x374/0x380 [ 50.548650][ T3949] ? should_fail_ex+0x30/0x280 [ 50.548748][ T3949] ? __rcu_read_unlock+0x34/0x70 [ 50.548778][ T3949] ? context_to_sid+0x2da/0x310 [ 50.548811][ T3949] ? sidtab_context_to_sid+0x5d/0x5e0 [ 50.548847][ T3949] ? chacha_permute+0x4ec/0x520 [ 50.548934][ T3949] ? should_fail_ex+0x30/0x280 [ 50.548975][ T3949] ? selinux_nlmsg_lookup+0x99/0x890 [ 50.549020][ T3949] ? selinux_netlink_send+0x59f/0x5f0 [ 50.549103][ T3949] ? __rcu_read_unlock+0x34/0x70 [ 50.549135][ T3949] ? __netlink_lookup+0x266/0x2a0 [ 50.549168][ T3949] netlink_unicast+0x5a8/0x680 [ 50.549229][ T3949] netlink_sendmsg+0x58b/0x6b0 [ 50.549258][ T3949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.549287][ T3949] __sock_sendmsg+0x142/0x180 [ 50.549369][ T3949] ____sys_sendmsg+0x31e/0x4e0 [ 50.549393][ T3949] ___sys_sendmsg+0x17b/0x1d0 [ 50.549425][ T3949] __x64_sys_sendmsg+0xd4/0x160 [ 50.549458][ T3949] x64_sys_call+0x2999/0x2fb0 [ 50.549487][ T3949] do_syscall_64+0xd2/0x200 [ 50.549539][ T3949] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.549614][ T3949] ? clear_bhb_loop+0x40/0x90 [ 50.549725][ T3949] ? clear_bhb_loop+0x40/0x90 [ 50.549758][ T3949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.549852][ T3949] RIP: 0033:0x7f8dd7fee9a9 [ 50.549874][ T3949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.549900][ T3949] RSP: 002b:00007f8dd6657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.549927][ T3949] RAX: ffffffffffffffda RBX: 00007f8dd8215fa0 RCX: 00007f8dd7fee9a9 [ 50.549984][ T3949] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000005 [ 50.550054][ T3949] RBP: 00007f8dd8070d69 R08: 0000000000000000 R09: 0000000000000000 [ 50.550074][ T3949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.550089][ T3949] R13: 0000000000000000 R14: 00007f8dd8215fa0 R15: 00007ffdfaa0e978 [ 50.550116][ T3949] [ 50.550169][ T3949] memory: usage 307200kB, limit 307200kB, failcnt 195 [ 50.568626][ T3997] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.146: mark_inode_dirty error [ 50.574896][ T3949] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0 [ 50.592186][ T3997] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.146: corrupted inode contents [ 50.598895][ T3949] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 50.598914][ T3949] Memory cgroup stats for /syz1 [ 50.608849][ T3997] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.146: mark_inode_dirty error [ 50.614904][ T3949] : [ 51.066421][ T3949] cache 0 [ 51.069528][ T3949] rss 0 [ 51.072480][ T3949] shmem 0 [ 51.075442][ T3949] mapped_file 0 [ 51.078985][ T3949] dirty 0 [ 51.081926][ T3949] writeback 4096 [ 51.085528][ T3949] workingset_refault_anon 40 [ 51.090166][ T3949] workingset_refault_file 181 [ 51.094844][ T3949] swap 405504 [ 51.098164][ T3949] swapcached 4096 [ 51.101803][ T3949] pgpgin 15685 [ 51.105184][ T3949] pgpgout 15683 [ 51.108771][ T3949] pgfault 21438 [ 51.112242][ T3949] pgmajfault 65 [ 51.115706][ T3949] inactive_anon 0 [ 51.119381][ T3949] active_anon 4096 [ 51.123139][ T3949] inactive_file 0 [ 51.126837][ T3949] active_file 4096 [ 51.130689][ T3949] unevictable 0 [ 51.133131][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.134153][ T3949] hierarchical_memory_limit 314572800 [ 51.148683][ T3949] hierarchical_memsw_limit 9223372036854771712 [ 51.154970][ T3949] total_cache 0 [ 51.158640][ T3949] total_rss 0 [ 51.161983][ T3949] total_shmem 0 [ 51.161994][ T3949] total_mapped_file 0 [ 51.162003][ T3949] total_dirty 0 [ 51.162013][ T3949] total_writeback 4096 [ 51.177273][ T3949] total_workingset_refault_anon 40 [ 51.177287][ T3949] total_workingset_refault_file 181 [ 51.177297][ T3949] total_swap 405504 [ 51.177307][ T3949] total_swapcached 4096 [ 51.177314][ T3949] total_pgpgin 15685 [ 51.177320][ T3949] total_pgpgout 15683 [ 51.177327][ T3949] total_pgfault 21438 [ 51.177370][ T3949] total_pgmajfault 65 [ 51.177378][ T3949] total_inactive_anon 0 [ 51.177387][ T3949] total_active_anon 4096 [ 51.177395][ T3949] total_inactive_file 0 [ 51.177402][ T3949] total_active_file 4096 [ 51.177408][ T3949] total_unevictable 0 [ 51.177415][ T3949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.128,pid=3948,uid=0 [ 51.177507][ T3949] Memory cgroup out of memory: Killed process 3948 (syz.1.128) total-vm:93628kB, anon-rss:944kB, file-rss:22372kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 51.228915][ T4018] loop2: detected capacity change from 0 to 512 [ 51.242179][ T4018] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.248155][ T4018] EXT4-fs (loop2): 1 truncate cleaned up [ 51.248551][ T4018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.314796][ T4022] loop3: detected capacity change from 0 to 1024 [ 51.419672][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.429003][ T4022] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 51.450710][ T3949] syz.1.128 (3949) used greatest stack depth: 4832 bytes left [ 51.569935][ T4042] netlink: 140 bytes leftover after parsing attributes in process `syz.1.159'. [ 51.595069][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 51.636324][ T4044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=541 sclass=netlink_route_socket pid=4044 comm=syz.1.159 [ 52.084725][ T4046] loop3: detected capacity change from 0 to 8192 [ 52.091628][ T4046] SELinux: security_context_str_to_sid (poot) failed with errno=-22 [ 52.119139][ T4048] loop4: detected capacity change from 0 to 512 [ 52.128853][ T4048] EXT4-fs (loop4): 1 orphan inode deleted [ 52.135282][ T4048] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.147831][ T1667] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 52.213454][ T4057] tipc: Enabled bearer , priority 0 [ 52.220811][ T4057] FAULT_INJECTION: forcing a failure. [ 52.220811][ T4057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.220896][ T4048] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.161: iget: bogus i_mode (0) [ 52.221818][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'. [ 52.234058][ T4057] CPU: 1 UID: 0 PID: 4057 Comm: syz.3.164 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 52.234135][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.234152][ T4057] Call Trace: [ 52.234159][ T4057] [ 52.234168][ T4057] __dump_stack+0x1d/0x30 [ 52.234197][ T4057] dump_stack_lvl+0xe8/0x140 [ 52.234223][ T4057] dump_stack+0x15/0x1b [ 52.234246][ T4057] should_fail_ex+0x265/0x280 [ 52.234344][ T4057] should_fail+0xb/0x20 [ 52.234444][ T4057] should_fail_usercopy+0x1a/0x20 [ 52.234486][ T4057] _copy_from_iter+0xcf/0xe40 [ 52.234553][ T4057] ? __build_skb_around+0x1a0/0x200 [ 52.234597][ T4057] skb_copy_datagram_from_iter+0xb1/0x490 [ 52.234706][ T4057] tun_get_user+0xa0e/0x2500 [ 52.234745][ T4057] ? __kernel_text_address+0xd/0x40 [ 52.234847][ T4057] ? ref_tracker_alloc+0x1f2/0x2f0 [ 52.234901][ T4057] tun_chr_write_iter+0x15e/0x210 [ 52.234960][ T4057] do_iter_readv_writev+0x421/0x4c0 [ 52.235010][ T4057] vfs_writev+0x2df/0x8b0 [ 52.235052][ T4057] do_writev+0xe7/0x210 [ 52.235084][ T4057] __x64_sys_writev+0x45/0x50 [ 52.235121][ T4057] x64_sys_call+0x2006/0x2fb0 [ 52.235202][ T4057] do_syscall_64+0xd2/0x200 [ 52.235237][ T4057] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.235272][ T4057] ? clear_bhb_loop+0x40/0x90 [ 52.235436][ T4057] ? clear_bhb_loop+0x40/0x90 [ 52.235489][ T4057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.235594][ T4057] RIP: 0033:0x7fe00da8e9a9 [ 52.235616][ T4057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.235636][ T4057] RSP: 002b:00007fe00c0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 52.235656][ T4057] RAX: ffffffffffffffda RBX: 00007fe00dcb5fa0 RCX: 00007fe00da8e9a9 [ 52.235667][ T4057] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000006 [ 52.235682][ T4057] RBP: 00007fe00c0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.235700][ T4057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.235717][ T4057] R13: 0000000000000000 R14: 00007fe00dcb5fa0 R15: 00007ffe224f0928 [ 52.235798][ T4057] [ 52.460828][ T4060] netlink: 88 bytes leftover after parsing attributes in process `syz.2.165'. [ 52.518990][ T4056] tipc: Resetting bearer [ 52.547424][ T4056] tipc: Disabling bearer [ 52.585578][ T4066] program syz.0.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.602537][ T4064] loop2: detected capacity change from 0 to 1024 [ 52.611027][ T4064] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 52.635172][ T4068] program syz.4.170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.675017][ T4076] loop3: detected capacity change from 0 to 512 [ 52.681670][ T4072] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 52.689937][ T4072] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 52.719097][ T4076] EXT4-fs (loop3): 1 orphan inode deleted [ 52.737039][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 52.754448][ T4076] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.773350][ T4072] loop0: detected capacity change from 0 to 8192 [ 52.784093][ T4088] loop2: detected capacity change from 0 to 1024 [ 52.784198][ T4072] msdos: Unknown parameter '¶±ù¨Ñl® [ 52.876760][ T4092] __dump_stack+0x1d/0x30 [ 52.876788][ T4092] dump_stack_lvl+0xe8/0x140 [ 52.876827][ T4092] dump_stack+0x15/0x1b [ 52.876850][ T4092] should_fail_ex+0x265/0x280 [ 52.876897][ T4092] should_fail+0xb/0x20 [ 52.876935][ T4092] should_fail_usercopy+0x1a/0x20 [ 52.877018][ T4092] strncpy_from_user+0x25/0x230 [ 52.877049][ T4092] ? kmem_cache_alloc_noprof+0x186/0x310 [ 52.877084][ T4092] ? getname_flags+0x80/0x3b0 [ 52.877129][ T4092] getname_flags+0xae/0x3b0 [ 52.877157][ T4092] __x64_sys_mknodat+0x4f/0x70 [ 52.877194][ T4092] x64_sys_call+0x2355/0x2fb0 [ 52.877275][ T4092] do_syscall_64+0xd2/0x200 [ 52.877351][ T4092] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.877388][ T4092] ? clear_bhb_loop+0x40/0x90 [ 52.877417][ T4092] ? clear_bhb_loop+0x40/0x90 [ 52.877445][ T4092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.877553][ T4092] RIP: 0033:0x7f9f46d9e9a9 [ 52.877580][ T4092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.877604][ T4092] RSP: 002b:00007f9f453ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 52.877629][ T4092] RAX: ffffffffffffffda RBX: 00007f9f46fc5fa0 RCX: 00007f9f46d9e9a9 [ 52.877646][ T4092] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 52.877709][ T4092] RBP: 00007f9f453ff090 R08: 0000000000000000 R09: 0000000000000000 [ 52.877724][ T4092] R10: 0000000000000701 R11: 0000000000000246 R12: 0000000000000001 [ 52.877740][ T4092] R13: 0000000000000000 R14: 00007f9f46fc5fa0 R15: 00007ffcc10b4b78 [ 52.877794][ T4092] [ 52.928617][ T4094] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.173: iget: bogus i_mode (0) [ 52.931268][ T4090] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.176: Failed to acquire dquot type 1 [ 52.943153][ T4096] netlink: 88 bytes leftover after parsing attributes in process `syz.0.178'. [ 52.979892][ T4090] EXT4-fs (loop4): 1 truncate cleaned up [ 53.169752][ T4103] program syz.1.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.201426][ T4108] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.176: deleted inode referenced: 12 [ 53.378601][ T4126] loop4: detected capacity change from 0 to 2048 [ 53.495084][ T4127] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.510376][ T4127] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 53.523124][ T4127] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.523124][ T4127] [ 53.532894][ T4127] EXT4-fs (loop4): Total free blocks count 0 [ 53.538923][ T4127] EXT4-fs (loop4): Free/Dirty block details [ 53.545075][ T4127] EXT4-fs (loop4): free_blocks=2415919104 [ 53.550832][ T4127] EXT4-fs (loop4): dirty_blocks=2096 [ 53.556189][ T4127] EXT4-fs (loop4): Block reservation details [ 53.562211][ T4127] EXT4-fs (loop4): i_reserved_data_blocks=131 [ 53.589613][ T4134] netlink: 88 bytes leftover after parsing attributes in process `syz.2.190'. [ 53.600845][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 53.613649][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.613649][ T12] [ 53.645946][ T4138] netlink: 100 bytes leftover after parsing attributes in process `syz.4.191'. [ 53.760143][ T4144] loop4: detected capacity change from 0 to 512 [ 53.767171][ T4144] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.778969][ T4144] EXT4-fs (loop4): 1 truncate cleaned up [ 53.782885][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 53.782903][ T29] audit: type=1326 audit(1753572069.468:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ccd5e9a9 code=0x7ffc0000 [ 53.816653][ T29] audit: type=1326 audit(1753572069.498:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f08ccd5e9a9 code=0x7ffc0000 [ 53.840183][ T29] audit: type=1326 audit(1753572069.498:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ccd5e9a9 code=0x7ffc0000 [ 53.863606][ T29] audit: type=1326 audit(1753572069.498:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f08ccd5e9a9 code=0x7ffc0000 [ 53.886972][ T29] audit: type=1326 audit(1753572069.498:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ccd5e9a9 code=0x7ffc0000 [ 53.887008][ T29] audit: type=1326 audit(1753572069.498:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08ccd5e9a9 code=0x7ffc0000 [ 53.887035][ T29] audit: type=1326 audit(1753572069.498:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ccd5e9a9 code=0x7ffc0000 [ 53.887067][ T29] audit: type=1326 audit(1753572069.498:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f08ccd5e9a9 code=0x7ffc0000 [ 53.887090][ T29] audit: type=1326 audit(1753572069.498:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ccd5e9a9 code=0x7ffc0000 [ 53.887121][ T29] audit: type=1326 audit(1753572069.498:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08ccd5e9a9 code=0x7ffc0000 [ 54.092534][ T4157] FAULT_INJECTION: forcing a failure. [ 54.092534][ T4157] name failslab, interval 1, probability 0, space 0, times 0 [ 54.105306][ T4157] CPU: 1 UID: 0 PID: 4157 Comm: syz.3.202 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 54.105339][ T4157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.105353][ T4157] Call Trace: [ 54.105359][ T4157] [ 54.105367][ T4157] __dump_stack+0x1d/0x30 [ 54.105388][ T4157] dump_stack_lvl+0xe8/0x140 [ 54.105407][ T4157] dump_stack+0x15/0x1b [ 54.105489][ T4157] should_fail_ex+0x265/0x280 [ 54.105525][ T4157] should_failslab+0x8c/0xb0 [ 54.105552][ T4157] kmem_cache_alloc_noprof+0x50/0x310 [ 54.105583][ T4157] ? sk_prot_alloc+0x3f/0x190 [ 54.105694][ T4157] ? should_failslab+0x8c/0xb0 [ 54.105723][ T4157] sk_prot_alloc+0x3f/0x190 [ 54.105764][ T4157] sk_alloc+0x34/0x360 [ 54.105803][ T4157] inet_create+0x3c0/0x780 [ 54.105862][ T4157] __sock_create+0x2e9/0x5b0 [ 54.105897][ T4157] sock_create_kern+0x38/0x50 [ 54.105926][ T4157] mptcp_subflow_create_socket+0x84/0x630 [ 54.105956][ T4157] ? avc_has_perm_noaudit+0x1b1/0x200 [ 54.106016][ T4157] __mptcp_nmpc_sk+0xb3/0x3b0 [ 54.106059][ T4157] mptcp_connect+0x58/0x860 [ 54.106146][ T4157] __inet_stream_connect+0x166/0x7e0 [ 54.106179][ T4157] ? _raw_spin_unlock_bh+0x36/0x40 [ 54.106214][ T4157] ? release_sock+0x116/0x150 [ 54.106280][ T4157] ? _raw_spin_unlock_bh+0x36/0x40 [ 54.106304][ T4157] ? lock_sock_nested+0x112/0x140 [ 54.106331][ T4157] ? selinux_netlbl_socket_connect+0x115/0x130 [ 54.106361][ T4157] inet_stream_connect+0x44/0x70 [ 54.106465][ T4157] ? __pfx_inet_stream_connect+0x10/0x10 [ 54.106508][ T4157] __sys_connect+0x1f2/0x2b0 [ 54.106550][ T4157] __x64_sys_connect+0x3f/0x50 [ 54.106587][ T4157] x64_sys_call+0x1daa/0x2fb0 [ 54.106623][ T4157] do_syscall_64+0xd2/0x200 [ 54.106645][ T4157] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.106679][ T4157] ? clear_bhb_loop+0x40/0x90 [ 54.106753][ T4157] ? clear_bhb_loop+0x40/0x90 [ 54.106780][ T4157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.106804][ T4157] RIP: 0033:0x7fe00da8e9a9 [ 54.106819][ T4157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.106838][ T4157] RSP: 002b:00007fe00c0f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 54.106861][ T4157] RAX: ffffffffffffffda RBX: 00007fe00dcb5fa0 RCX: 00007fe00da8e9a9 [ 54.107002][ T4157] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000007 [ 54.107019][ T4157] RBP: 00007fe00c0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.107033][ T4157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.107044][ T4157] R13: 0000000000000000 R14: 00007fe00dcb5fa0 R15: 00007ffe224f0928 [ 54.107068][ T4157] [ 54.418992][ T4160] loop4: detected capacity change from 0 to 1024 [ 54.427698][ T4160] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 54.552845][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.560197][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.604757][ T4169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.615317][ T4169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.653217][ T4169] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.662248][ T4169] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.671200][ T4169] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.680086][ T4169] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.727385][ T4176] loop0: detected capacity change from 0 to 2048 [ 54.778224][ T4176] loop0: p4 < > [ 54.847772][ T4182] lo speed is unknown, defaulting to 1000 [ 54.853631][ T4182] lo speed is unknown, defaulting to 1000 [ 54.859868][ T4182] lo speed is unknown, defaulting to 1000 [ 54.865959][ T4182] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.873567][ T4182] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 54.883473][ T4182] lo speed is unknown, defaulting to 1000 [ 54.889889][ T4182] lo speed is unknown, defaulting to 1000 [ 54.897515][ T4182] lo speed is unknown, defaulting to 1000 [ 54.903799][ T4182] lo speed is unknown, defaulting to 1000 [ 54.904550][ T4183] FAULT_INJECTION: forcing a failure. [ 54.904550][ T4183] name failslab, interval 1, probability 0, space 0, times 0 [ 54.922334][ T4183] CPU: 0 UID: 0 PID: 4183 Comm: syz.0.209 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 54.922368][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.922385][ T4183] Call Trace: [ 54.922392][ T4183] [ 54.922400][ T4183] __dump_stack+0x1d/0x30 [ 54.922424][ T4183] dump_stack_lvl+0xe8/0x140 [ 54.922467][ T4183] dump_stack+0x15/0x1b [ 54.922481][ T4183] should_fail_ex+0x265/0x280 [ 54.922508][ T4183] should_failslab+0x8c/0xb0 [ 54.922528][ T4183] __kmalloc_noprof+0xa5/0x3e0 [ 54.922576][ T4183] ? bitmap_zalloc+0x29/0x40 [ 54.922600][ T4183] bitmap_zalloc+0x29/0x40 [ 54.922621][ T4183] dev_prep_valid_name+0x13a/0x550 [ 54.922724][ T4183] register_netdevice+0x1b3/0xf00 [ 54.922751][ T4183] ? validate_linkmsg+0x4f2/0x570 [ 54.922781][ T4183] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 54.922836][ T4183] batadv_meshif_newlink+0x7d/0x90 [ 54.922855][ T4183] rtnl_newlink_create+0x1b9/0x620 [ 54.922878][ T4183] ? security_capable+0x83/0x90 [ 54.922902][ T4183] ? netlink_ns_capable+0x86/0xa0 [ 54.922977][ T4183] rtnl_newlink+0xf29/0x12d0 [ 54.923083][ T4183] ? css_rstat_updated+0xcd/0x5b0 [ 54.923108][ T4183] ? __rcu_read_unlock+0x4f/0x70 [ 54.923127][ T4183] ? __account_obj_stock+0x211/0x350 [ 54.923159][ T4183] ? __rcu_read_unlock+0x4f/0x70 [ 54.923177][ T4183] ? avc_has_perm_noaudit+0x1b1/0x200 [ 54.923245][ T4183] ? selinux_capable+0x1f9/0x270 [ 54.923275][ T4183] ? security_capable+0x83/0x90 [ 54.923354][ T4183] ? ns_capable+0x7d/0xb0 [ 54.923377][ T4183] ? __pfx_rtnl_newlink+0x10/0x10 [ 54.923410][ T4183] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 54.923505][ T4183] ? avc_has_perm_noaudit+0x1b1/0x200 [ 54.923531][ T4183] netlink_rcv_skb+0x123/0x220 [ 54.923573][ T4183] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 54.923609][ T4183] rtnetlink_rcv+0x1c/0x30 [ 54.923697][ T4183] netlink_unicast+0x5a8/0x680 [ 54.923749][ T4183] netlink_sendmsg+0x58b/0x6b0 [ 54.923768][ T4183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.923816][ T4183] __sock_sendmsg+0x142/0x180 [ 54.923838][ T4183] ____sys_sendmsg+0x31e/0x4e0 [ 54.923857][ T4183] ___sys_sendmsg+0x17b/0x1d0 [ 54.923886][ T4183] __x64_sys_sendmsg+0xd4/0x160 [ 54.923934][ T4183] x64_sys_call+0x2999/0x2fb0 [ 54.923953][ T4183] do_syscall_64+0xd2/0x200 [ 54.923969][ T4183] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.923991][ T4183] ? clear_bhb_loop+0x40/0x90 [ 54.924010][ T4183] ? clear_bhb_loop+0x40/0x90 [ 54.924087][ T4183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.924105][ T4183] RIP: 0033:0x7f9f46d9e9a9 [ 54.924118][ T4183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.924133][ T4183] RSP: 002b:00007f9f453de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.924149][ T4183] RAX: ffffffffffffffda RBX: 00007f9f46fc6080 RCX: 00007f9f46d9e9a9 [ 54.924160][ T4183] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 54.924178][ T4183] RBP: 00007f9f453de090 R08: 0000000000000000 R09: 0000000000000000 [ 54.924190][ T4183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.924201][ T4183] R13: 0000000000000000 R14: 00007f9f46fc6080 R15: 00007ffcc10b4b78 [ 54.924287][ T4183] [ 54.924397][ T4182] lo speed is unknown, defaulting to 1000 [ 55.275967][ T4185] loop4: detected capacity change from 0 to 512 [ 55.283269][ T4185] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.302737][ T4187] loop2: detected capacity change from 0 to 512 [ 55.312966][ T4185] EXT4-fs (loop4): 1 truncate cleaned up [ 55.328429][ T4187] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 55.337006][ T4187] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.360672][ T4187] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm þ3Ù+_r00˜*ÓT: corrupted inode contents [ 55.381929][ T4195] loop3: detected capacity change from 0 to 512 [ 55.399325][ T4187] EXT4-fs (loop2): Remounting filesystem read-only [ 55.406571][ T4187] EXT4-fs (loop2): 1 truncate cleaned up [ 55.414346][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.418806][ T4195] EXT4-fs (loop3): 1 orphan inode deleted [ 55.425070][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.433672][ T4195] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.455064][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 55.481523][ T4200] loop1: detected capacity change from 0 to 512 [ 55.498327][ T4200] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 55.506635][ T4200] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.514922][ T4200] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm þ3Ù+_r00˜*ÓT: corrupted inode contents [ 55.528464][ T4195] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.213: iget: bogus i_mode (0) [ 55.542203][ T4200] EXT4-fs (loop1): Remounting filesystem read-only [ 55.549302][ T4195] __nla_validate_parse: 2 callbacks suppressed [ 55.549319][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 55.565957][ T4200] EXT4-fs (loop1): 1 truncate cleaned up [ 55.572221][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.582840][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.596093][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 55.676867][ T4217] program syz.2.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.716360][ T4226] loop3: detected capacity change from 0 to 164 [ 55.730325][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 55.748062][ T4226] Unable to read rock-ridge attributes [ 55.769868][ T4231] FAULT_INJECTION: forcing a failure. [ 55.769868][ T4231] name failslab, interval 1, probability 0, space 0, times 0 [ 55.782730][ T4231] CPU: 1 UID: 0 PID: 4231 Comm: syz.0.224 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 55.782900][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.782912][ T4231] Call Trace: [ 55.782918][ T4231] [ 55.782926][ T4231] __dump_stack+0x1d/0x30 [ 55.782951][ T4231] dump_stack_lvl+0xe8/0x140 [ 55.782975][ T4231] dump_stack+0x15/0x1b [ 55.782995][ T4231] should_fail_ex+0x265/0x280 [ 55.783059][ T4231] should_failslab+0x8c/0xb0 [ 55.783089][ T4231] kmem_cache_alloc_node_noprof+0x57/0x320 [ 55.783125][ T4231] ? __alloc_skb+0x101/0x320 [ 55.783165][ T4231] __alloc_skb+0x101/0x320 [ 55.783253][ T4231] netlink_alloc_large_skb+0xba/0xf0 [ 55.783299][ T4231] netlink_sendmsg+0x3cf/0x6b0 [ 55.783362][ T4231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.783387][ T4231] __sock_sendmsg+0x142/0x180 [ 55.783418][ T4231] ____sys_sendmsg+0x31e/0x4e0 [ 55.783523][ T4231] ___sys_sendmsg+0x17b/0x1d0 [ 55.783613][ T4231] __x64_sys_sendmsg+0xd4/0x160 [ 55.783646][ T4231] x64_sys_call+0x2999/0x2fb0 [ 55.783675][ T4231] do_syscall_64+0xd2/0x200 [ 55.783699][ T4231] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.783775][ T4231] ? clear_bhb_loop+0x40/0x90 [ 55.783795][ T4231] ? clear_bhb_loop+0x40/0x90 [ 55.783815][ T4231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.783895][ T4231] RIP: 0033:0x7f9f46d9e9a9 [ 55.783943][ T4231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.783967][ T4231] RSP: 002b:00007f9f453ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.784011][ T4231] RAX: ffffffffffffffda RBX: 00007f9f46fc5fa0 RCX: 00007f9f46d9e9a9 [ 55.784026][ T4231] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 55.784039][ T4231] RBP: 00007f9f453ff090 R08: 0000000000000000 R09: 0000000000000000 [ 55.784054][ T4231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.784068][ T4231] R13: 0000000000000000 R14: 00007f9f46fc5fa0 R15: 00007ffcc10b4b78 [ 55.784164][ T4231] [ 56.054267][ T4245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.086367][ T4245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 56.103660][ T4245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.106228][ T4239] loop4: detected capacity change from 0 to 1024 [ 56.119865][ T4239] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 56.161111][ T4251] FAULT_INJECTION: forcing a failure. [ 56.161111][ T4251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.174236][ T4251] CPU: 1 UID: 0 PID: 4251 Comm: syz.2.231 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 56.174355][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.174367][ T4251] Call Trace: [ 56.174380][ T4251] [ 56.174387][ T4251] __dump_stack+0x1d/0x30 [ 56.174482][ T4251] dump_stack_lvl+0xe8/0x140 [ 56.174502][ T4251] dump_stack+0x15/0x1b [ 56.174518][ T4251] should_fail_ex+0x265/0x280 [ 56.174550][ T4251] should_fail+0xb/0x20 [ 56.174578][ T4251] should_fail_usercopy+0x1a/0x20 [ 56.174651][ T4251] _copy_to_user+0x20/0xa0 [ 56.174672][ T4251] simple_read_from_buffer+0xb5/0x130 [ 56.174744][ T4251] proc_fail_nth_read+0x100/0x140 [ 56.174779][ T4251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.174849][ T4251] vfs_read+0x1a0/0x6f0 [ 56.174881][ T4251] ? __rcu_read_unlock+0x4f/0x70 [ 56.174981][ T4251] ? __rcu_read_unlock+0x4f/0x70 [ 56.175003][ T4251] ? __fget_files+0x184/0x1c0 [ 56.175025][ T4251] ksys_read+0xda/0x1a0 [ 56.175133][ T4251] __x64_sys_read+0x40/0x50 [ 56.175164][ T4251] x64_sys_call+0x2d77/0x2fb0 [ 56.175185][ T4251] do_syscall_64+0xd2/0x200 [ 56.175204][ T4251] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.175302][ T4251] ? clear_bhb_loop+0x40/0x90 [ 56.175343][ T4251] ? clear_bhb_loop+0x40/0x90 [ 56.175420][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.175441][ T4251] RIP: 0033:0x7f08ccd5d3bc [ 56.175456][ T4251] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.175473][ T4251] RSP: 002b:00007f08cb3bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.175545][ T4251] RAX: ffffffffffffffda RBX: 00007f08ccf85fa0 RCX: 00007f08ccd5d3bc [ 56.175557][ T4251] RDX: 000000000000000f RSI: 00007f08cb3bf0a0 RDI: 0000000000000003 [ 56.175569][ T4251] RBP: 00007f08cb3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 56.175655][ T4251] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 56.175667][ T4251] R13: 0000000000000000 R14: 00007f08ccf85fa0 R15: 00007ffe42d863a8 [ 56.175751][ T4251] [ 56.178541][ T4258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 56.192552][ T4256] program syz.3.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.404634][ T4263] netlink: 88 bytes leftover after parsing attributes in process `syz.0.235'. [ 56.507780][ T4260] lo speed is unknown, defaulting to 1000 [ 56.610840][ T4268] FAULT_INJECTION: forcing a failure. [ 56.610840][ T4268] name failslab, interval 1, probability 0, space 0, times 0 [ 56.623592][ T4268] CPU: 0 UID: 0 PID: 4268 Comm: syz.3.238 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 56.623618][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.623630][ T4268] Call Trace: [ 56.623636][ T4268] [ 56.623642][ T4268] __dump_stack+0x1d/0x30 [ 56.623667][ T4268] dump_stack_lvl+0xe8/0x140 [ 56.623694][ T4268] dump_stack+0x15/0x1b [ 56.623709][ T4268] should_fail_ex+0x265/0x280 [ 56.623744][ T4268] should_failslab+0x8c/0xb0 [ 56.623770][ T4268] kmem_cache_alloc_node_noprof+0x57/0x320 [ 56.623833][ T4268] ? __alloc_skb+0x101/0x320 [ 56.623871][ T4268] __alloc_skb+0x101/0x320 [ 56.623935][ T4268] netlink_alloc_large_skb+0xba/0xf0 [ 56.623971][ T4268] netlink_sendmsg+0x3cf/0x6b0 [ 56.623997][ T4268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.624052][ T4268] __sock_sendmsg+0x142/0x180 [ 56.624083][ T4268] ____sys_sendmsg+0x31e/0x4e0 [ 56.624110][ T4268] ___sys_sendmsg+0x17b/0x1d0 [ 56.624140][ T4268] __x64_sys_sendmsg+0xd4/0x160 [ 56.624168][ T4268] x64_sys_call+0x2999/0x2fb0 [ 56.624273][ T4268] do_syscall_64+0xd2/0x200 [ 56.624290][ T4268] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.624319][ T4268] ? clear_bhb_loop+0x40/0x90 [ 56.624346][ T4268] ? clear_bhb_loop+0x40/0x90 [ 56.624433][ T4268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.624458][ T4268] RIP: 0033:0x7fe00da8e9a9 [ 56.624475][ T4268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.624492][ T4268] RSP: 002b:00007fe00c0f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.624509][ T4268] RAX: ffffffffffffffda RBX: 00007fe00dcb5fa0 RCX: 00007fe00da8e9a9 [ 56.624521][ T4268] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 56.624532][ T4268] RBP: 00007fe00c0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.624574][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.624588][ T4268] R13: 0000000000000000 R14: 00007fe00dcb5fa0 R15: 00007ffe224f0928 [ 56.624605][ T4268] [ 56.838091][ T4265] netlink: 88 bytes leftover after parsing attributes in process `syz.4.236'. [ 56.930690][ T4282] FAULT_INJECTION: forcing a failure. [ 56.930690][ T4282] name failslab, interval 1, probability 0, space 0, times 0 [ 56.943417][ T4282] CPU: 1 UID: 0 PID: 4282 Comm: syz.4.244 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 56.943517][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.943579][ T4282] Call Trace: [ 56.943585][ T4282] [ 56.943591][ T4282] __dump_stack+0x1d/0x30 [ 56.943612][ T4282] dump_stack_lvl+0xe8/0x140 [ 56.943630][ T4282] dump_stack+0x15/0x1b [ 56.943651][ T4282] should_fail_ex+0x265/0x280 [ 56.943721][ T4282] ? qdisc_get_rtab+0x1a5/0x2d0 [ 56.943780][ T4282] should_failslab+0x8c/0xb0 [ 56.943808][ T4282] __kmalloc_cache_noprof+0x4c/0x320 [ 56.943841][ T4282] qdisc_get_rtab+0x1a5/0x2d0 [ 56.943890][ T4282] tbf_change+0x16f/0xcd0 [ 56.943929][ T4282] ? stack_trace_save+0x5e/0x90 [ 56.943967][ T4282] ? __list_add_valid_or_report+0x38/0xe0 [ 56.943992][ T4282] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 56.944046][ T4282] ? rtnetlink_rcv+0x1c/0x30 [ 56.944070][ T4282] ? netlink_unicast+0x5a8/0x680 [ 56.944105][ T4282] ? netlink_sendmsg+0x58b/0x6b0 [ 56.944167][ T4282] ? __sock_sendmsg+0x142/0x180 [ 56.944197][ T4282] ? read_tsc+0x9/0x20 [ 56.944226][ T4282] ? __pfx_tbf_init+0x10/0x10 [ 56.944328][ T4282] tbf_init+0x72/0x90 [ 56.944356][ T4282] qdisc_create+0x591/0x9e0 [ 56.944387][ T4282] tc_modify_qdisc+0xf2e/0x1420 [ 56.944442][ T4282] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 56.944475][ T4282] rtnetlink_rcv_msg+0x65a/0x6d0 [ 56.944504][ T4282] ? avc_has_perm_noaudit+0x1b1/0x200 [ 56.944543][ T4282] netlink_rcv_skb+0x123/0x220 [ 56.944600][ T4282] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 56.944637][ T4282] rtnetlink_rcv+0x1c/0x30 [ 56.944657][ T4282] netlink_unicast+0x5a8/0x680 [ 56.944693][ T4282] netlink_sendmsg+0x58b/0x6b0 [ 56.944749][ T4282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.944775][ T4282] __sock_sendmsg+0x142/0x180 [ 56.944807][ T4282] ____sys_sendmsg+0x31e/0x4e0 [ 56.944832][ T4282] ___sys_sendmsg+0x17b/0x1d0 [ 56.944871][ T4282] __x64_sys_sendmsg+0xd4/0x160 [ 56.944910][ T4282] x64_sys_call+0x2999/0x2fb0 [ 56.944936][ T4282] do_syscall_64+0xd2/0x200 [ 56.944953][ T4282] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.945061][ T4282] ? clear_bhb_loop+0x40/0x90 [ 56.945080][ T4282] ? clear_bhb_loop+0x40/0x90 [ 56.945159][ T4282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.945180][ T4282] RIP: 0033:0x7f4534d0e9a9 [ 56.945195][ T4282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.945213][ T4282] RSP: 002b:00007f4533377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.945235][ T4282] RAX: ffffffffffffffda RBX: 00007f4534f35fa0 RCX: 00007f4534d0e9a9 [ 56.945247][ T4282] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 56.945312][ T4282] RBP: 00007f4533377090 R08: 0000000000000000 R09: 0000000000000000 [ 56.945322][ T4282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.945333][ T4282] R13: 0000000000000000 R14: 00007f4534f35fa0 R15: 00007ffe595fb678 [ 56.945351][ T4282] [ 56.945371][ T4282] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 57.322035][ T4289] loop1: detected capacity change from 0 to 512 [ 57.345943][ T4295] loop2: detected capacity change from 0 to 128 [ 57.354976][ T4291] loop3: detected capacity change from 0 to 1024 [ 57.365087][ T4289] EXT4-fs (loop1): 1 orphan inode deleted [ 57.371170][ T4291] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 57.382884][ T1709] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 57.398164][ T4289] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.398941][ T4293] lo speed is unknown, defaulting to 1000 [ 57.477083][ T4300] netlink: 88 bytes leftover after parsing attributes in process `syz.3.251'. [ 57.520814][ T4289] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.249: iget: bogus i_mode (0) [ 57.595021][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 57.807596][ T4309] loop1: detected capacity change from 0 to 512 [ 57.846960][ T4309] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.872251][ T4309] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 57.886751][ T4309] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 57.899213][ T4309] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.899213][ T4309] [ 57.909031][ T4309] EXT4-fs (loop1): Total free blocks count 0 [ 57.915130][ T4309] EXT4-fs (loop1): Free/Dirty block details [ 57.921086][ T4309] EXT4-fs (loop1): free_blocks=65280 [ 57.926432][ T4309] EXT4-fs (loop1): dirty_blocks=33 [ 57.931583][ T4309] EXT4-fs (loop1): Block reservation details [ 57.937584][ T4309] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 57.968696][ T4326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.036032][ T4326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.099380][ T4326] wireguard0: entered promiscuous mode [ 58.104962][ T4326] wireguard0: entered allmulticast mode [ 58.158760][ T4340] netlink: 56 bytes leftover after parsing attributes in process `syz.4.257'. [ 58.171873][ T4340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.257'. [ 58.194241][ T4340] loop4: detected capacity change from 0 to 512 [ 58.225692][ T4340] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.327745][ T4354] loop1: detected capacity change from 0 to 1024 [ 58.350719][ T4354] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 58.399420][ T4366] loop3: detected capacity change from 0 to 1024 [ 58.409769][ T4366] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 58.669207][ T4421] loop2: detected capacity change from 0 to 1024 [ 58.683828][ T4421] syz_tun: entered allmulticast mode [ 58.690499][ T4421] syz_tun: left allmulticast mode [ 58.728039][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 58.728056][ T29] audit: type=1400 audit(1753572842.586:1807): avc: denied { bind } for pid=4420 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.762120][ T4433] loop0: detected capacity change from 0 to 1024 [ 58.782547][ T4433] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 58.815316][ T4443] loop3: detected capacity change from 0 to 1024 [ 58.841451][ T4446] netlink: 'syz.2.276': attribute type 4 has an invalid length. [ 58.844911][ T4443] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 58.877410][ T4446] netlink: 'syz.2.276': attribute type 4 has an invalid length. [ 58.926352][ T29] audit: type=1400 audit(1753572842.798:1808): avc: denied { create } for pid=4445 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.964874][ T4463] loop3: detected capacity change from 0 to 1024 [ 58.973547][ T4463] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 58.988598][ T29] audit: type=1400 audit(1753572842.798:1809): avc: denied { write } for pid=4445 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.051904][ T4471] FAULT_INJECTION: forcing a failure. [ 59.051904][ T4471] name failslab, interval 1, probability 0, space 0, times 0 [ 59.051942][ T4471] CPU: 1 UID: 0 PID: 4471 Comm: syz.3.281 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 59.051981][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.051998][ T4471] Call Trace: [ 59.052005][ T4471] [ 59.052014][ T4471] __dump_stack+0x1d/0x30 [ 59.052043][ T4471] dump_stack_lvl+0xe8/0x140 [ 59.052085][ T4471] dump_stack+0x15/0x1b [ 59.052201][ T4471] should_fail_ex+0x265/0x280 [ 59.052244][ T4471] should_failslab+0x8c/0xb0 [ 59.052328][ T4471] kmem_cache_alloc_noprof+0x50/0x310 [ 59.052363][ T4471] ? security_inode_alloc+0x37/0x100 [ 59.052434][ T4471] security_inode_alloc+0x37/0x100 [ 59.052496][ T4471] inode_init_always_gfp+0x4b7/0x500 [ 59.052542][ T4471] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 59.052656][ T4471] alloc_inode+0x58/0x170 [ 59.052698][ T4471] new_inode+0x1d/0xe0 [ 59.052734][ T4471] hugetlbfs_get_inode+0x7b/0x370 [ 59.052819][ T4471] hugetlb_file_setup+0x192/0x3d0 [ 59.052858][ T4471] ksys_mmap_pgoff+0x157/0x310 [ 59.052902][ T4471] x64_sys_call+0x1602/0x2fb0 [ 59.052930][ T4471] do_syscall_64+0xd2/0x200 [ 59.053025][ T4471] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.053155][ T4471] ? clear_bhb_loop+0x40/0x90 [ 59.053184][ T4471] ? clear_bhb_loop+0x40/0x90 [ 59.053214][ T4471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.053244][ T4471] RIP: 0033:0x7fe00da8e9a9 [ 59.053296][ T4471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.053394][ T4471] RSP: 002b:00007fe00c0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 59.053419][ T4471] RAX: ffffffffffffffda RBX: 00007fe00dcb5fa0 RCX: 00007fe00da8e9a9 [ 59.053436][ T4471] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 59.053467][ T4471] RBP: 00007fe00c0f7090 R08: ffffffffffffffff R09: 0000000000000000 [ 59.053486][ T4471] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 59.053538][ T4471] R13: 0000000000000000 R14: 00007fe00dcb5fa0 R15: 00007ffe224f0928 [ 59.053575][ T4471] [ 59.092877][ T29] audit: type=1326 audit(1753572842.967:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4473 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00da8e9a9 code=0x7ffc0000 [ 59.092920][ T29] audit: type=1326 audit(1753572842.967:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4473 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe00da8e9a9 code=0x7ffc0000 [ 59.092949][ T29] audit: type=1326 audit(1753572842.967:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4473 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00da8e9a9 code=0x7ffc0000 [ 59.093054][ T29] audit: type=1326 audit(1753572842.967:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4473 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fe00da8e9a9 code=0x7ffc0000 [ 59.093104][ T29] audit: type=1326 audit(1753572842.967:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4473 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00da8e9a9 code=0x7ffc0000 [ 59.093129][ T29] audit: type=1326 audit(1753572842.967:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4473 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe00da8e9a9 code=0x7ffc0000 [ 59.093153][ T29] audit: type=1326 audit(1753572842.967:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4473 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00da8e9a9 code=0x7ffc0000 [ 59.097142][ T4472] loop0: detected capacity change from 0 to 512 [ 59.097787][ T4472] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.114691][ T4472] EXT4-fs (loop0): 1 truncate cleaned up [ 59.217182][ T4489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=4489 comm=syz.3.285 [ 59.268472][ T4493] loop2: detected capacity change from 0 to 1024 [ 59.544568][ T4493] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 59.562976][ T4522] FAULT_INJECTION: forcing a failure. [ 59.562976][ T4522] name failslab, interval 1, probability 0, space 0, times 0 [ 59.575726][ T4522] CPU: 0 UID: 0 PID: 4522 Comm: syz.0.288 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 59.575764][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.575780][ T4522] Call Trace: [ 59.575787][ T4522] [ 59.575796][ T4522] __dump_stack+0x1d/0x30 [ 59.575888][ T4522] dump_stack_lvl+0xe8/0x140 [ 59.575909][ T4522] dump_stack+0x15/0x1b [ 59.575928][ T4522] should_fail_ex+0x265/0x280 [ 59.575960][ T4522] should_failslab+0x8c/0xb0 [ 59.575986][ T4522] kmem_cache_alloc_node_noprof+0x57/0x320 [ 59.576037][ T4522] ? __alloc_skb+0x101/0x320 [ 59.576074][ T4522] __alloc_skb+0x101/0x320 [ 59.576111][ T4522] netlink_alloc_large_skb+0xba/0xf0 [ 59.576151][ T4522] netlink_sendmsg+0x3cf/0x6b0 [ 59.576291][ T4522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.576318][ T4522] __sock_sendmsg+0x142/0x180 [ 59.576380][ T4522] ____sys_sendmsg+0x31e/0x4e0 [ 59.576408][ T4522] ___sys_sendmsg+0x17b/0x1d0 [ 59.576441][ T4522] __x64_sys_sendmsg+0xd4/0x160 [ 59.576465][ T4522] x64_sys_call+0x2999/0x2fb0 [ 59.576503][ T4522] do_syscall_64+0xd2/0x200 [ 59.576528][ T4522] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.576563][ T4522] ? clear_bhb_loop+0x40/0x90 [ 59.576630][ T4522] ? clear_bhb_loop+0x40/0x90 [ 59.576654][ T4522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.576681][ T4522] RIP: 0033:0x7f9f46d9e9a9 [ 59.576701][ T4522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.576724][ T4522] RSP: 002b:00007f9f453ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.576748][ T4522] RAX: ffffffffffffffda RBX: 00007f9f46fc5fa0 RCX: 00007f9f46d9e9a9 [ 59.576842][ T4522] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 59.576860][ T4522] RBP: 00007f9f453ff090 R08: 0000000000000000 R09: 0000000000000000 [ 59.576875][ T4522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.576890][ T4522] R13: 0000000000000000 R14: 00007f9f46fc5fa0 R15: 00007ffcc10b4b78 [ 59.576913][ T4522] [ 59.793060][ T4525] program syz.2.290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.885757][ T4540] bridge_slave_0: invalid flags given to default FDB implementation [ 59.911338][ T4545] loop0: detected capacity change from 0 to 512 [ 59.938497][ T4545] EXT4-fs (loop0): 1 orphan inode deleted [ 59.954604][ T1709] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 59.978291][ T4545] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.020441][ T4557] loop3: detected capacity change from 0 to 4096 [ 60.078513][ T4545] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.296: iget: bogus i_mode (0) [ 60.138889][ T4572] loop0: detected capacity change from 0 to 128 [ 60.444330][ T4588] program syz.1.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.496643][ T4590] __nla_validate_parse: 5 callbacks suppressed [ 60.496718][ T4590] netlink: 88 bytes leftover after parsing attributes in process `syz.1.303'. [ 60.633802][ T4596] loop0: detected capacity change from 0 to 1024 [ 60.662113][ T4596] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 60.693076][ T4602] loop3: detected capacity change from 0 to 1024 [ 60.700409][ T4602] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 60.719798][ T4604] loop1: detected capacity change from 0 to 512 [ 60.732554][ T4606] syz.0.308 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.747911][ T4606] loop0: detected capacity change from 0 to 512 [ 60.749655][ T4608] FAULT_INJECTION: forcing a failure. [ 60.749655][ T4608] name failslab, interval 1, probability 0, space 0, times 0 [ 60.754634][ T4606] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.766883][ T4608] CPU: 1 UID: 0 PID: 4608 Comm: syz.3.309 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 60.766957][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.767026][ T4608] Call Trace: [ 60.767034][ T4608] [ 60.767044][ T4608] __dump_stack+0x1d/0x30 [ 60.767073][ T4608] dump_stack_lvl+0xe8/0x140 [ 60.767150][ T4608] dump_stack+0x15/0x1b [ 60.767252][ T4608] should_fail_ex+0x265/0x280 [ 60.767294][ T4608] should_failslab+0x8c/0xb0 [ 60.767369][ T4608] kmem_cache_alloc_node_noprof+0x57/0x320 [ 60.767404][ T4608] ? __alloc_skb+0x101/0x320 [ 60.767445][ T4608] __alloc_skb+0x101/0x320 [ 60.767492][ T4608] netlink_alloc_large_skb+0xba/0xf0 [ 60.767580][ T4608] netlink_sendmsg+0x3cf/0x6b0 [ 60.767636][ T4608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.767663][ T4608] __sock_sendmsg+0x142/0x180 [ 60.767697][ T4608] ____sys_sendmsg+0x31e/0x4e0 [ 60.767782][ T4608] ___sys_sendmsg+0x17b/0x1d0 [ 60.767825][ T4608] __x64_sys_sendmsg+0xd4/0x160 [ 60.767854][ T4608] x64_sys_call+0x2999/0x2fb0 [ 60.767884][ T4608] do_syscall_64+0xd2/0x200 [ 60.767913][ T4608] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.767953][ T4608] ? clear_bhb_loop+0x40/0x90 [ 60.767981][ T4608] ? clear_bhb_loop+0x40/0x90 [ 60.768029][ T4608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.768056][ T4608] RIP: 0033:0x7fe00da8e9a9 [ 60.768076][ T4608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.768100][ T4608] RSP: 002b:00007fe00c0f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.768173][ T4608] RAX: ffffffffffffffda RBX: 00007fe00dcb5fa0 RCX: 00007fe00da8e9a9 [ 60.768189][ T4608] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 60.768205][ T4608] RBP: 00007fe00c0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.768284][ T4608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.768298][ T4608] R13: 0000000000000000 R14: 00007fe00dcb5fa0 R15: 00007ffe224f0928 [ 60.768323][ T4608] [ 60.820832][ T4604] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.825671][ T4606] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.047598][ T4606] EXT4-fs (loop0): 1 truncate cleaned up [ 61.077823][ T4619] loop1: detected capacity change from 0 to 512 [ 61.102326][ T4622] program syz.3.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.129992][ T4619] EXT4-fs (loop1): 1 orphan inode deleted [ 61.133862][ T4628] loop3: detected capacity change from 0 to 512 [ 61.136375][ T4619] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.152843][ T4628] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.162266][ T4628] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.173508][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 61.198026][ T4628] EXT4-fs (loop3): 1 truncate cleaned up [ 61.216748][ T4636] loop0: detected capacity change from 0 to 1024 [ 61.242499][ T4636] EXT4-fs: Ignoring removed orlov option [ 61.256092][ T4619] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.311: iget: bogus i_mode (0) [ 61.285940][ T4623] loop4: detected capacity change from 0 to 512 [ 61.315472][ T4623] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.327922][ T4642] loop1: detected capacity change from 0 to 512 [ 61.340239][ T4623] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 61.342130][ T4648] loop3: detected capacity change from 0 to 128 [ 61.356477][ T4623] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 61.373446][ T4623] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.373446][ T4623] [ 61.383153][ T4623] EXT4-fs (loop4): Total free blocks count 0 [ 61.389191][ T4623] EXT4-fs (loop4): Free/Dirty block details [ 61.395153][ T4623] EXT4-fs (loop4): free_blocks=65280 [ 61.400590][ T4623] EXT4-fs (loop4): dirty_blocks=33 [ 61.405864][ T4623] EXT4-fs (loop4): Block reservation details [ 61.412072][ T4623] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 61.422235][ T4649] program syz.2.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.435863][ T4642] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.451963][ T4636] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm : bg 0: block 88: padding at end of block bitmap is not set [ 61.688564][ T4667] loop1: detected capacity change from 0 to 1024 [ 61.810758][ T4673] lo speed is unknown, defaulting to 1000 [ 61.932780][ T4673] lo speed is unknown, defaulting to 1000 [ 62.346491][ T4667] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 62.482798][ T4677] loop2: detected capacity change from 0 to 512 [ 62.526329][ T4677] EXT4-fs (loop2): 1 orphan inode deleted [ 62.541304][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 62.564902][ T4677] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.591460][ T4685] netlink: 88 bytes leftover after parsing attributes in process `syz.4.332'. [ 62.663254][ T4687] loop0: detected capacity change from 0 to 128 [ 62.690103][ T4677] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.329: iget: bogus i_mode (0) [ 62.732099][ T4690] openvswitch: netlink: Message has 6 unknown bytes. [ 62.782197][ T4692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.334'. [ 62.823814][ T4690] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.334'. [ 62.887097][ T4702] loop3: detected capacity change from 0 to 1024 [ 62.895428][ T4702] EXT4-fs: Ignoring removed bh option [ 62.948664][ T4706] netlink: 96 bytes leftover after parsing attributes in process `syz.4.340'. [ 62.993052][ T4712] FAULT_INJECTION: forcing a failure. [ 62.993052][ T4712] name failslab, interval 1, probability 0, space 0, times 0 [ 63.005885][ T4712] CPU: 0 UID: 0 PID: 4712 Comm: syz.1.343 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 63.005921][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.005936][ T4712] Call Trace: [ 63.005943][ T4712] [ 63.006030][ T4712] __dump_stack+0x1d/0x30 [ 63.006100][ T4712] dump_stack_lvl+0xe8/0x140 [ 63.006125][ T4712] dump_stack+0x15/0x1b [ 63.006140][ T4712] should_fail_ex+0x265/0x280 [ 63.006171][ T4712] should_failslab+0x8c/0xb0 [ 63.006259][ T4712] kmem_cache_alloc_node_noprof+0x57/0x320 [ 63.006286][ T4712] ? __alloc_skb+0x101/0x320 [ 63.006342][ T4712] __alloc_skb+0x101/0x320 [ 63.006381][ T4712] netlink_alloc_large_skb+0xba/0xf0 [ 63.006423][ T4712] netlink_sendmsg+0x3cf/0x6b0 [ 63.006443][ T4712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.006462][ T4712] __sock_sendmsg+0x142/0x180 [ 63.006491][ T4712] ____sys_sendmsg+0x31e/0x4e0 [ 63.006519][ T4712] ___sys_sendmsg+0x17b/0x1d0 [ 63.006586][ T4712] __x64_sys_sendmsg+0xd4/0x160 [ 63.006610][ T4712] x64_sys_call+0x2999/0x2fb0 [ 63.006655][ T4712] do_syscall_64+0xd2/0x200 [ 63.006675][ T4712] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.006784][ T4712] ? clear_bhb_loop+0x40/0x90 [ 63.006867][ T4712] ? clear_bhb_loop+0x40/0x90 [ 63.006888][ T4712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.006910][ T4712] RIP: 0033:0x7f8dd7fee9a9 [ 63.006924][ T4712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.006944][ T4712] RSP: 002b:00007f8dd6657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.007010][ T4712] RAX: ffffffffffffffda RBX: 00007f8dd8215fa0 RCX: 00007f8dd7fee9a9 [ 63.007034][ T4712] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 63.007049][ T4712] RBP: 00007f8dd6657090 R08: 0000000000000000 R09: 0000000000000000 [ 63.007064][ T4712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.007150][ T4712] R13: 0000000000000000 R14: 00007f8dd8215fa0 R15: 00007ffdfaa0e978 [ 63.007174][ T4712] [ 63.248168][ T4719] netlink: 88 bytes leftover after parsing attributes in process `syz.4.346'. [ 63.266713][ T4702] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 63.282673][ T4702] EXT4-fs (loop3): Remounting filesystem read-only [ 63.335500][ T4726] xt_hashlimit: size too large, truncated to 1048576 [ 63.345277][ T4728] loop3: detected capacity change from 0 to 512 [ 63.361127][ T4730] loop2: detected capacity change from 0 to 128 [ 63.439586][ T4728] EXT4-fs (loop3): 1 orphan inode deleted [ 63.446351][ T4728] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.458137][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 63.523589][ T4714] lo speed is unknown, defaulting to 1000 [ 63.583132][ T4737] loop0: detected capacity change from 0 to 2048 [ 63.590020][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 63.612875][ T4726] program syz.4.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.647246][ T4726] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 63.658761][ T4737] Alternate GPT is invalid, using primary GPT. [ 63.665146][ T4737] loop0: p2 p3 p7 [ 63.669034][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 63.669049][ T29] audit: type=1326 audit(1753573615.808:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4534d0e9a9 code=0x7ffc0000 [ 63.698816][ T29] audit: type=1326 audit(1753573615.808:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f4534d0e9a9 code=0x7ffc0000 [ 63.722247][ T29] audit: type=1326 audit(1753573615.808:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4534d0e9a9 code=0x7ffc0000 [ 63.745676][ T29] audit: type=1326 audit(1753573615.808:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4534d0e9a9 code=0x7ffc0000 [ 63.768973][ T29] audit: type=1326 audit(1753573615.808:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4534d0e9a9 code=0x7ffc0000 [ 63.792511][ T29] audit: type=1326 audit(1753573615.808:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4534d0e9a9 code=0x7ffc0000 [ 63.815829][ T29] audit: type=1326 audit(1753573615.808:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4534d0e9a9 code=0x7ffc0000 [ 63.839222][ T29] audit: type=1326 audit(1753573615.808:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4534d0e9a9 code=0x7ffc0000 [ 63.862777][ T29] audit: type=1326 audit(1753573615.808:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4534d0e9a9 code=0x7ffc0000 [ 63.886137][ T29] audit: type=1326 audit(1753573615.808:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f4534d0e9a9 code=0x7ffc0000 [ 63.964394][ T4743] loop1: detected capacity change from 0 to 512 [ 63.972190][ T4743] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.002291][ T4743] EXT4-fs (loop1): 1 truncate cleaned up [ 64.110113][ T4758] netlink: 88 bytes leftover after parsing attributes in process `syz.1.358'. [ 64.188938][ T4764] loop1: detected capacity change from 0 to 512 [ 64.224547][ T4764] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.243606][ T4764] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.272062][ T4764] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.322096][ T4764] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 64.334725][ T4767] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.342062][ T4767] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.353743][ T4764] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.361: bg 0: block 40: padding at end of block bitmap is not set [ 64.373973][ T4764] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 64.400117][ T4764] EXT4-fs (loop1): 1 truncate cleaned up [ 64.446490][ T4770] loop2: detected capacity change from 0 to 1024 [ 64.469907][ T4770] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 64.488584][ T4767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.502397][ T4767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.526462][ T4776] loop1: detected capacity change from 0 to 128 [ 64.552107][ T4776] FAULT_INJECTION: forcing a failure. [ 64.552107][ T4776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.565427][ T4776] CPU: 1 UID: 0 PID: 4776 Comm: syz.1.364 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 64.565459][ T4776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.565470][ T4776] Call Trace: [ 64.565477][ T4776] [ 64.565487][ T4776] __dump_stack+0x1d/0x30 [ 64.565514][ T4776] dump_stack_lvl+0xe8/0x140 [ 64.565539][ T4776] dump_stack+0x15/0x1b [ 64.565559][ T4776] should_fail_ex+0x265/0x280 [ 64.565664][ T4776] should_fail+0xb/0x20 [ 64.565698][ T4776] should_fail_usercopy+0x1a/0x20 [ 64.565730][ T4776] strncpy_from_user+0x25/0x230 [ 64.565807][ T4776] ? kmem_cache_alloc_noprof+0x186/0x310 [ 64.565838][ T4776] ? getname_flags+0x80/0x3b0 [ 64.565913][ T4776] getname_flags+0xae/0x3b0 [ 64.565940][ T4776] __x64_sys_renameat2+0x6c/0x90 [ 64.566040][ T4776] x64_sys_call+0x2bf6/0x2fb0 [ 64.566069][ T4776] do_syscall_64+0xd2/0x200 [ 64.566087][ T4776] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.566189][ T4776] ? clear_bhb_loop+0x40/0x90 [ 64.566212][ T4776] ? clear_bhb_loop+0x40/0x90 [ 64.566236][ T4776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.566260][ T4776] RIP: 0033:0x7f8dd7fee9a9 [ 64.566276][ T4776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.566321][ T4776] RSP: 002b:00007f8dd6657038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 64.566341][ T4776] RAX: ffffffffffffffda RBX: 00007f8dd8215fa0 RCX: 00007f8dd7fee9a9 [ 64.566354][ T4776] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 64.566367][ T4776] RBP: 00007f8dd6657090 R08: 0000000000000000 R09: 0000000000000000 [ 64.566380][ T4776] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.566393][ T4776] R13: 0000000000000000 R14: 00007f8dd8215fa0 R15: 00007ffdfaa0e978 [ 64.566436][ T4776] [ 64.567647][ T4767] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.764526][ T4767] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.773471][ T4767] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.782444][ T4767] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.803527][ T4785] loop1: detected capacity change from 0 to 512 [ 64.812697][ T4783] loop4: detected capacity change from 0 to 1024 [ 64.820798][ T4783] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 64.847578][ T4785] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.366: corrupted in-inode xattr: invalid ea_ino [ 64.904454][ T4790] loop3: detected capacity change from 0 to 1024 [ 64.913341][ T4790] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 64.931507][ T4785] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.366: couldn't read orphan inode 15 (err -117) [ 64.962833][ T4791] loop2: detected capacity change from 0 to 512 [ 64.996699][ T4791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.045940][ T4795] program syz.3.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.083426][ T4797] loop1: detected capacity change from 0 to 1024 [ 65.097828][ T4801] loop4: detected capacity change from 0 to 512 [ 65.104981][ T4797] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 65.105151][ T4791] EXT4-fs (loop2): 1 truncate cleaned up [ 65.130933][ T4804] loop3: detected capacity change from 0 to 128 [ 65.149839][ T4801] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.169180][ T4804] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.202506][ T4801] bridge_slave_0: left allmulticast mode [ 65.208540][ T4801] bridge_slave_0: left promiscuous mode [ 65.214224][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.237907][ T4801] bridge_slave_1: left allmulticast mode [ 65.243840][ T4801] bridge_slave_1: left promiscuous mode [ 65.249710][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.274457][ T4811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4811 comm=syz.1.376 [ 65.331927][ T4801] bond0: (slave bond_slave_0): Releasing backup interface [ 65.341105][ T4801] bond0: (slave bond_slave_1): Releasing backup interface [ 65.351930][ T4801] team_slave_0: left promiscuous mode [ 65.357582][ T4801] team_slave_0: left allmulticast mode [ 65.364089][ T4801] team0: Port device team_slave_0 removed [ 65.370474][ T4801] team_slave_1: left promiscuous mode [ 65.376062][ T4801] team_slave_1: left allmulticast mode [ 65.390429][ T4819] netlink: 'syz.1.376': attribute type 5 has an invalid length. [ 65.410456][ T4801] team0: Port device team_slave_1 removed [ 65.412321][ T4822] netlink: 88 bytes leftover after parsing attributes in process `syz.2.379'. [ 65.427031][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.435335][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.459368][ T4811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.376'. [ 65.468434][ T4815] netlink: 22 bytes leftover after parsing attributes in process `syz.1.376'. [ 65.502120][ T4819] ip6erspan0: entered promiscuous mode [ 65.542950][ T4827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 65.551968][ T4827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 65.560987][ T4827] netlink: 50 bytes leftover after parsing attributes in process `syz.3.381'. [ 65.611505][ T4830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 65.621997][ T4831] FAULT_INJECTION: forcing a failure. [ 65.621997][ T4831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.635302][ T4831] CPU: 1 UID: 0 PID: 4831 Comm: syz.4.382 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 65.635419][ T4831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.635433][ T4831] Call Trace: [ 65.635440][ T4831] [ 65.635450][ T4831] __dump_stack+0x1d/0x30 [ 65.635520][ T4831] dump_stack_lvl+0xe8/0x140 [ 65.635562][ T4831] dump_stack+0x15/0x1b [ 65.635584][ T4831] should_fail_ex+0x265/0x280 [ 65.635623][ T4831] should_fail+0xb/0x20 [ 65.635657][ T4831] should_fail_usercopy+0x1a/0x20 [ 65.635743][ T4831] strncpy_from_user+0x25/0x230 [ 65.635774][ T4831] ? kmem_cache_alloc_noprof+0x28f/0x310 [ 65.635806][ T4831] ? getname_flags+0x80/0x3b0 [ 65.635835][ T4831] getname_flags+0xae/0x3b0 [ 65.635863][ T4831] do_sys_openat2+0x60/0x110 [ 65.635910][ T4831] __x64_sys_openat+0xf2/0x120 [ 65.635993][ T4831] x64_sys_call+0x1af/0x2fb0 [ 65.636020][ T4831] do_syscall_64+0xd2/0x200 [ 65.636044][ T4831] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.636079][ T4831] ? clear_bhb_loop+0x40/0x90 [ 65.636103][ T4831] ? clear_bhb_loop+0x40/0x90 [ 65.636153][ T4831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.636186][ T4831] RIP: 0033:0x7f4534d0d310 [ 65.636205][ T4831] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 65.636227][ T4831] RSP: 002b:00007f4533376f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 65.636251][ T4831] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4534d0d310 [ 65.636266][ T4831] RDX: 0000000000000002 RSI: 00007f4533376fa0 RDI: 00000000ffffff9c [ 65.636297][ T4831] RBP: 00007f4533376fa0 R08: 0000000000000000 R09: 0000000000000000 [ 65.636312][ T4831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 65.636323][ T4831] R13: 0000000000000000 R14: 00007f4534f35fa0 R15: 00007ffe595fb678 [ 65.636347][ T4831] [ 65.948409][ T4845] loop4: detected capacity change from 0 to 512 [ 65.955560][ T4845] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.990580][ T4845] EXT4-fs (loop4): 1 truncate cleaned up [ 66.058554][ T4858] netlink: 88 bytes leftover after parsing attributes in process `syz.0.391'. [ 66.082723][ T4857] program syz.4.390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.112323][ T4862] loop4: detected capacity change from 0 to 128 [ 66.128198][ T4855] loop1: detected capacity change from 0 to 512 [ 66.135395][ T4855] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.147969][ T4855] EXT4-fs (loop1): 1 truncate cleaned up [ 66.183027][ T4865] loop0: detected capacity change from 0 to 512 [ 66.199883][ T4865] EXT4-fs error (device loop0): __ext4_iget:5379: inode #4: block 193290: comm syz.0.394: invalid block [ 66.214579][ T4865] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.394: Bad quota inode: 4, type: 1 [ 66.226659][ T4865] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.242664][ T4865] EXT4-fs (loop0): mount failed [ 66.264077][ T4865] netlink: '+}[@': attribute type 13 has an invalid length. [ 66.445940][ T4885] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 66.458264][ T4885] SELinux: failed to load policy [ 66.493676][ T4888] loop0: detected capacity change from 0 to 128 [ 66.509062][ T4884] loop2: detected capacity change from 0 to 8192 [ 66.576714][ T4893] netlink: 88 bytes leftover after parsing attributes in process `syz.0.403'. [ 66.654958][ T4897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 66.788803][ T4902] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 66.857215][ T4906] netlink: 'syz.0.409': attribute type 27 has an invalid length. [ 67.027632][ T4908] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 67.099875][ T4912] loop0: detected capacity change from 0 to 512 [ 67.109575][ T4911] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 67.116131][ T4911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.123708][ T4911] vhci_hcd vhci_hcd.0: Device attached [ 67.134433][ T4912] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.146304][ T4913] vhci_hcd: connection closed [ 67.146520][ T12] vhci_hcd: stop threads [ 67.155519][ T12] vhci_hcd: release socket [ 67.160090][ T12] vhci_hcd: disconnect device [ 67.182734][ T4918] smc: removing ib device syz! [ 67.250521][ T4919] lo speed is unknown, defaulting to 1000 [ 67.282736][ T4920] netlink: 'syz.4.412': attribute type 12 has an invalid length. [ 67.405326][ T4928] loop1: detected capacity change from 0 to 512 [ 67.412140][ T4928] EXT4-fs: Ignoring removed oldalloc option [ 67.418175][ T4928] EXT4-fs: inline encryption not supported [ 67.424056][ T4928] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.431521][ T4928] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.448052][ T4928] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.415: bg 0: block 64: padding at end of block bitmap is not set [ 67.462705][ T4933] loop2: detected capacity change from 0 to 1024 [ 67.463825][ T4928] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.415: Failed to acquire dquot type 0 [ 67.470247][ T4933] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 67.480511][ T4928] EXT4-fs (loop1): 1 truncate cleaned up [ 67.527921][ T4939] loop1: detected capacity change from 0 to 128 [ 67.562332][ T4941] netlink: 'syz.2.420': attribute type 3 has an invalid length. [ 67.599923][ T4943] program syz.4.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.690971][ T4951] loop4: detected capacity change from 0 to 512 [ 67.762780][ T4947] loop2: detected capacity change from 0 to 512 [ 67.797860][ T4947] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.808845][ T3311] EXT4-fs unmount: 71 callbacks suppressed [ 67.808862][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.837665][ T4960] loop3: detected capacity change from 0 to 764 [ 67.845435][ T4951] EXT4-fs (loop4): 1 orphan inode deleted [ 67.845752][ T1709] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 67.856508][ T4951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.875819][ T4951] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.897586][ T4960] capability: warning: `syz.3.428' uses deprecated v2 capabilities in a way that may be insecure [ 67.908851][ T4947] EXT4-fs (loop2): 1 truncate cleaned up [ 67.915116][ T4947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.951415][ T4951] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.425: iget: bogus i_mode (0) [ 67.963162][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.019238][ T4966] loop2: detected capacity change from 0 to 1024 [ 68.057179][ T4966] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 68.090840][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.179525][ T4973] loop2: detected capacity change from 0 to 1024 [ 68.185962][ T4977] loop3: detected capacity change from 0 to 1024 [ 68.192626][ T4977] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 68.214199][ T4973] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 68.269950][ T4963] loop0: detected capacity change from 0 to 32768 [ 68.316395][ T4963] loop0: p1 p3 < > [ 68.328451][ T4993] netlink: 'syz.2.437': attribute type 83 has an invalid length. [ 68.447713][ T3314] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 68.458750][ T3314] CPU: 0 UID: 0 PID: 3314 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 68.458781][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.458792][ T3314] Call Trace: [ 68.458849][ T3314] [ 68.458857][ T3314] __dump_stack+0x1d/0x30 [ 68.458890][ T3314] dump_stack_lvl+0xe8/0x140 [ 68.458908][ T3314] dump_stack+0x15/0x1b [ 68.458923][ T3314] dump_header+0x81/0x220 [ 68.459115][ T3314] oom_kill_process+0x334/0x3f0 [ 68.459147][ T3314] out_of_memory+0x979/0xb80 [ 68.459177][ T3314] try_charge_memcg+0x5e6/0x9e0 [ 68.459357][ T3314] charge_memcg+0x51/0xc0 [ 68.459394][ T3314] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 68.459436][ T3314] __read_swap_cache_async+0x1df/0x350 [ 68.459499][ T3314] swap_cluster_readahead+0x277/0x3e0 [ 68.459546][ T3314] swapin_readahead+0xde/0x6f0 [ 68.459575][ T3314] ? __filemap_get_folio+0x4f7/0x6b0 [ 68.459601][ T3314] ? next_uptodate_folio+0x81c/0x890 [ 68.459717][ T3314] ? swap_cache_get_folio+0x77/0x200 [ 68.459753][ T3314] do_swap_page+0x301/0x2430 [ 68.459915][ T3314] ? css_rstat_updated+0xcd/0x5b0 [ 68.459945][ T3314] ? __pfx_default_wake_function+0x10/0x10 [ 68.459983][ T3314] handle_mm_fault+0x9a5/0x2be0 [ 68.460052][ T3314] ? mas_walk+0xf2/0x120 [ 68.460091][ T3314] do_user_addr_fault+0x636/0x1090 [ 68.460125][ T3314] exc_page_fault+0x62/0xa0 [ 68.460213][ T3314] asm_exc_page_fault+0x26/0x30 [ 68.460232][ T3314] RIP: 0033:0x7f8dd7ec59e7 [ 68.460246][ T3314] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 b8 fd e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d c9 fc e7 00 48 01 d1 39 7c 24 [ 68.460268][ T3314] RSP: 002b:00007ffdfaa0ed00 EFLAGS: 00010206 [ 68.460291][ T3314] RAX: 0000001b32620000 RBX: 00000000000000dd RCX: 0000000000010d88 [ 68.460306][ T3314] RDX: 00000000012d54b6 RSI: 00007ffdfaa0ed90 RDI: 000000000000000b [ 68.460318][ T3314] RBP: 00007ffdfaa0ed3c R08: 00000000047d7c76 R09: 7fffffffffffffff [ 68.460404][ T3314] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 68.460415][ T3314] R13: 00000000000927c0 R14: 0000000000010a64 R15: 00007ffdfaa0ed90 [ 68.460432][ T3314] [ 68.460439][ T3314] memory: usage 307200kB, limit 307200kB, failcnt 598 [ 68.501944][ T4992] loop3: detected capacity change from 0 to 32768 [ 68.502580][ T3314] memory+swap: usage 307616kB, limit 9007199254740988kB, failcnt 0 [ 68.502598][ T3314] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 68.704312][ T3314] Memory cgroup stats for /syz1: [ 68.705403][ T3314] cache 0 [ 68.713339][ T3314] rss 0 [ 68.716165][ T3314] shmem 0 [ 68.719227][ T3314] mapped_file 0 [ 68.722714][ T3314] dirty 0 [ 68.725758][ T3314] writeback 0 [ 68.729056][ T3314] workingset_refault_anon 107 [ 68.733759][ T3314] workingset_refault_file 282 [ 68.738476][ T3314] swap 425984 [ 68.741782][ T3314] swapcached 0 [ 68.745239][ T3314] pgpgin 26513 [ 68.748765][ T3314] pgpgout 26511 [ 68.752400][ T3314] pgfault 34860 [ 68.755908][ T3314] pgmajfault 137 [ 68.759472][ T3314] inactive_anon 0 [ 68.763127][ T3314] active_anon 0 [ 68.766597][ T3314] inactive_file 8192 [ 68.770559][ T3314] active_file 0 [ 68.774033][ T3314] unevictable 0 [ 68.777660][ T3314] hierarchical_memory_limit 314572800 [ 68.783154][ T3314] hierarchical_memsw_limit 9223372036854771712 [ 68.789525][ T3314] total_cache 0 [ 68.793036][ T3314] total_rss 0 [ 68.796343][ T3314] total_shmem 0 [ 68.799870][ T3314] total_mapped_file 0 [ 68.803904][ T3314] total_dirty 0 [ 68.803916][ T3314] total_writeback 0 [ 68.803925][ T3314] total_workingset_refault_anon 107 [ 68.803935][ T3314] total_workingset_refault_file 282 [ 68.821707][ T3314] total_swap 425984 [ 68.821719][ T3314] total_swapcached 0 [ 68.821728][ T3314] total_pgpgin 26516 [ 68.821736][ T3314] total_pgpgout 26514 [ 68.821816][ T3314] total_pgfault 38958 [ 68.821825][ T3314] total_pgmajfault 137 [ 68.821834][ T3314] total_inactive_anon 0 [ 68.821843][ T3314] total_active_anon 0 [ 68.821852][ T3314] total_inactive_file 8192 [ 68.821862][ T3314] total_active_file 0 [ 68.821871][ T3314] total_unevictable 0 [ 68.821880][ T3314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg= [ 68.859063][ T4999] loop0: detected capacity change from 0 to 512 [ 68.862239][ T3314] /syz1,task_memcg=/syz1,task=syz.1.417,pid=4938,uid=0 [ 68.862284][ T3314] Memory cgroup out of memory: Killed process 4938 (syz.1.417) total-vm:95676kB, anon-rss:944kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 68.868479][ T4999] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.930497][ T4991] process '/newroot/98/file0' started with executable stack [ 68.954840][ T4999] EXT4-fs (loop0): 1 truncate cleaned up [ 68.955185][ T4999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.044408][ T3314] ================================================================== [ 69.052534][ T3314] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 69.062390][ T3314] [ 69.064725][ T3314] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 69.072796][ T3314] tick_do_update_jiffies64+0x113/0x1c0 [ 69.078363][ T3314] tick_nohz_handler+0x7f/0x2d0 [ 69.083230][ T3314] __hrtimer_run_queues+0x20c/0x5a0 [ 69.088445][ T3314] hrtimer_interrupt+0x21a/0x460 [ 69.093396][ T3314] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 69.099309][ T3314] sysvec_apic_timer_interrupt+0x32/0x80 [ 69.104963][ T3314] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 69.111079][ T3314] [ 69.113409][ T3314] read to 0xffffffff868099c0 of 8 bytes by task 3314 on cpu 1: [ 69.120956][ T3314] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 69.127214][ T3314] count_shadow_nodes+0x6a/0x230 [ 69.132177][ T3314] do_shrink_slab+0x60/0x680 [ 69.136783][ T3314] shrink_slab+0x448/0x760 [ 69.141215][ T3314] shrink_node+0x6c3/0x2120 [ 69.145729][ T3314] do_try_to_free_pages+0x3f6/0xcd0 [ 69.150934][ T3314] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 69.156840][ T3314] try_charge_memcg+0x358/0x9e0 [ 69.161715][ T3314] charge_memcg+0x51/0xc0 [ 69.166065][ T3314] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 69.172066][ T3314] __read_swap_cache_async+0x1df/0x350 [ 69.177548][ T3314] swap_cluster_readahead+0x277/0x3e0 [ 69.182945][ T3314] swapin_readahead+0xde/0x6f0 [ 69.187729][ T3314] do_swap_page+0x301/0x2430 [ 69.192325][ T3314] handle_mm_fault+0x9a5/0x2be0 [ 69.197190][ T3314] do_user_addr_fault+0x636/0x1090 [ 69.202327][ T3314] exc_page_fault+0x62/0xa0 [ 69.206882][ T3314] asm_exc_page_fault+0x26/0x30 [ 69.211744][ T3314] [ 69.214071][ T3314] value changed: 0x00000000ffffa5df -> 0x00000000ffffa5e0 [ 69.221181][ T3314] [ 69.223507][ T3314] Reported by Kernel Concurrency Sanitizer on: [ 69.229661][ T3314] CPU: 1 UID: 0 PID: 3314 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 69.242262][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.252331][ T3314] ================================================================== [ 69.286251][ T5005] loop3: detected capacity change from 0 to 1764 [ 69.295552][ T5005] iso9660: Bad value for 'session' [ 69.305509][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.