last executing test programs:

5.986337648s ago: executing program 0 (id=495):
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x28)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ioctl$TCSETS2(r4, 0x402c542b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0xf00)

5.920801974s ago: executing program 0 (id=496):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1, 0x0, 0x1}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

5.830179743s ago: executing program 0 (id=497):
gettid()
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x24dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x8, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc800)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0)

5.800103696s ago: executing program 0 (id=498):
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5.773615559s ago: executing program 0 (id=499):
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00"/11], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r4 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f00000003c0)="88f9b67164ec0f973bdeda751e5bf6bd3f439b", 0x13}, {&(0x7f0000000500)="6f8ce51da459aea9d31efd576e57e59afce45662d3de63e66d83fd2445187fb2464b0fbc100be50bd70b0257dbb6f78ced038e990607b19ce8b58f849d72c2e37aaf4b0965cbf61aa1f27f6d7cd273036b6e47c9330f3d539dde764a3b0bbf888b0e45dedd8c002c872bad9e7aa6ae958bb92b8f8a09dce36d709bcf535576f4863cd4778ea1a8aa861264ec95c03df1fb6c17ab466801913a5685f13512fe28bac7b573716f11fcae9b5e3678ffe8ee529141afc36ce9d8418882dc3afc864ca0280a70e497eaaec65115ca87356952b1b2c5555502b17fb5", 0xd9}, {&(0x7f0000000680)="d3cb4a8a0118f4582f8a04c76f6c799030f5bf2928004fe65c65bc1000f19ac674627faa5d37d2fc1fe06f82aef9cf0341af59cba1551439ea22dc4de61615f8bf31", 0x42}, {&(0x7f0000000d00)="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", 0x13f}, {&(0x7f0000000780)="27c74036a7b1e9e4856a9dcbaa51177d1130fcbaf3d2f649d35468d1dc56a1da8ee81d56598d06400fce94cf13898bb2c75f1a5a2cf3a3554969509e9199e988109f73a303aa704c6657fcc7d559cad76d5f3828e2", 0x55}, {&(0x7f0000000800)="51511ebe175846b78a397f48d79831caea8ff6b36e62fecf7d0bb07ff6a3e962d7932648589e023558107e7e6697cc697cfb90a0e0b452eb5f5d4b3aa76e80fff63fc082a20645dbe66f8a9c30b5a7a4", 0x50}, {&(0x7f00000009c0)="6ff831877a3ed664d909d88f4f5b78220fe16a8261f88f460550cd4b9487b3d26cf39cc94fe2b847ad2f53a75c35ae47eb3b377e71ca9053014e2fb2f4127f527e8dd38da0121aaa443e895eb64cf22e00c7313d13616a607f865255a292478f074fe0050c08f6b516dc6dfcfc6c7e200f2f9661afb9f00a72d84ec9b38916ef96a0b6c62dc0ab8c77040260253e673debb4ae8570082933f8bd126026526dae691e44df3598ccb07e880f817b4ebe33b2bf6147ce6606653fd97f9866df", 0xbe}, {&(0x7f0000000a80)="81fbd3f502949f4b3ef13a244a580cc82772cd6d17473fc0bd4a41c8d922ce3107e029107b37ed0a7f931ef7171b76364e76400c17eee854168adcf09bc59316f8968c81af5efe2b44da3bb90914007eadea2df492ea1ccdda9a12e6d44cad340e09254a176b01b6174d7be6f3be2bd254e2ee5b90927bb496079430df12e9437187d8a77c3a74ebecfdf50309dc0787e8", 0x91}, {&(0x7f0000000700)="66676facf5be3f9b528ec5f94b52335508ba9aeb844ec2c11b237885c77909065cee531bd3ec6dee9632f2828ed9f49881b60feae15bfdc2838c579fef6b57", 0x3f}], 0xa}, 0x8000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r5}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r6, 0x107, 0x12, 0x0, &(0x7f0000000380))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r7}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090603000000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

5.748172842s ago: executing program 0 (id=500):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@dev, @dev, <r6=>0x0}, &(0x7f0000000180)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r6, 0x8, 0x40, 0x1e, 0x4, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x6, 0x29, 0x0, @remote, @loopback, {[@cipso={0x86, 0x64, 0x3, [{0x2, 0x10, "48ab09847925c67fd9aa5c4c3506"}, {0x2, 0xd, "447e9badb909ca64a0ef4a"}, {0x0, 0x4, "c1fd"}, {0x6, 0x12, "c4a5e184ea7e850a1e45270b4c72f402"}, {0x6, 0x11, "9749a45bd7bb13b02bb45ececb78e8"}, {0x2, 0xc, "57c6d2f773a2606bb2e8"}, {0x5, 0x7, "f81e5127b5"}, {0x2, 0x7, "891bba7b18"}]}, @timestamp={0x44, 0x18, 0xa9, 0x0, 0xc, [0x5, 0x1, 0x17, 0xc3, 0x0]}, @ssrr={0x89, 0x1b, 0x28, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @multicast1, @multicast1]}, @generic={0x94, 0xf, "361f52b22364dd4b2db412d2a0"}, @timestamp={0x44, 0x18, 0x4f, 0x0, 0xf, [0x0, 0x9, 0x6, 0xfffffffa, 0xa]}]}}}}})
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc050)

2.244590158s ago: executing program 4 (id=532):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x20000000002}, 0x18)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x28}, 0x28)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x40, r5, 0x21, 0x70bd26, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'macvlan0\x00'}}, 0x1e)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x10001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r9, 0x3, '\x00', 0x0, r3, 0x3, 0x80}, 0x50)
r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
read(r10, &(0x7f00000019c0)=""/4097, 0x1001)

2.104786392s ago: executing program 1 (id=535):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8084)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)

1.776822254s ago: executing program 1 (id=537):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="b473050e11ec0bcd2c74b4ece6f5eea5319b47b0a2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18)
mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp'])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000900)='gpio_value\x00', r1}, 0x18)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)=@o_path={&(0x7f0000001d00)='./file0\x00', 0x0, 0x4000, r3}, 0x18)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000940)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000a00)="90396987e8ccdd9b2c80201aeff9d699199e96b29a8d9af75ce85f026b6d5ff44f3a693329bae63a27170598bd0709ba632b0c9b3307d9a8a405101143e3fc7b8219af1b4ebecbe3bf15af6979965d9ef106a3e9bcd8d734615c52ee167cd7cdcfefc09551475e41f1427dd43ac7eeb5adefd3d66d74dc8e8d860162bddb7ce8804f6fb00f8ef802b9e178cbcd09a11ad308ddc149b7196846c1462fe1ee34e3e65ff5d9d29f7c18419dc78040c2e646da8d505947b4a348bd3fbecd1dffed3eb5363da99069ef7a8e05851aff978583b3b7d8e5f2bef42d89d25fe0e9851abc4760b8c3762d5adc23940c04767a10a4013d5d35fc59500b6bbf63bc42fb477a0bee05e68daaa5704057d987c11f6eaf14b1533097ce48285f85c4605eb0d707cd6f53e1c99814a5d8f38e3bc420c8f0548ee42de9225c7359fe1f6f802ea0d031f07c5f5c9d85ae88a56b371620a771370319852dbf9a2630c3e6c2ea81adbd8732f83c5e339c215200a5e6f2a3200f7397eef7082a0f31037e5679b75811e2bcc77daa5ac0b9a7639584bed1f64755673ce30a8d303f97f6ac835ee5678b21aa9b63c1b0990c4e30628d3a92c4bcdb8cc351d4d3bb1f7468def1beba07a47aa18d021f2965b3e1e0eb08ea97abfb697d17861549e028e6b02f66ba82fe44c91ba702bd98e5927a175896980f5926ea1b187dafa7ce7fa4f6ac1e14d5ef77d022c8edad5ed3181c57ce40de95cf7afc56e0e180d44145a3bdde4e5a9663f6e5f3cf943e4f8b1301496adcd635992c5b229959d69fcd136d0a7ac9645bbd61915d0f6481d1542d565a76cfdb450579a248a09bef75e5995dd7e5decbeb298f38aba18b02520b5bc7a651ded5bbc01ac65c1de593caf82af909b102105351986f49ddcb17b2ef64374908161481c012750ec862b1b134685ead74a6c7a1ce72c96e175832c85813ffaca616fdf442067c284e84209a88ce6eab8350a3b76a918bca4d58a21b31fc10b7e6b32b85a9bd516a7563709306f44067e14ec6c514947cb9edc795a342e2e1c728fb33c3231918d1f9684b75b14ed83b5d887787443c0c4911f1504f24e7c142be2c5ed7bb36525e73213562011cd55c169b5edd830e3032948a71e9c3bbd4a942f84df21ce7aa9ccbb587fc43b89dd3a94ac65b505574bcda5dd004faa93702167e3fdf6b6163cfbb4561da21609915be3211d68c7f84914e87289a1b55d9b5b16c9fea59d9a4eaffd123d19b33bb4d6bb13c8693c8e735affeae2bde9e03ec98ecc7311c42ecfd2d0bb4390e63bd3569779742219044668b28be4e36e2f10318abbde74940a9cd889c86f2637f44c29368007ea1008daf218ae35336a9206e50694246d7790523b94461cc2b63ff8f0e5f6a84978b7a18e71fbe304dad58d6eba020bc0d69fbb89df754c5e2d9d98e4b86e09b4e45c4b335bb18e581ff7e3ac8981b3b431fc9d09ae5c50b6f984fa0337ce7667b35d7e061924a9a15e3fcc165003309d9ed8c47b8a9d35111a96b040ffc7a4c36e502519e894d6d8fbed0f56a415a1f823a718c3a8a049e839e9fe3202b542f573c832bbc68a334f23db868569cc8e15188d66572cf5b6ae0bf13b7030b0303e13fcc737f3d21aee49c7d252941e6d5b3eeea818e869e7b3e4ba87db6fc488493ae9ffb62afdc096765bd340444bc9cbcc4d9e5027b9da4e894b9d6e2e497e77782eb4b598aef914d2b2595a06924c198675caa94b454db7e30b3d17161bd94de47c3e2efd0f6503162ac07a522e02b970d9a437b98d0f298ab5acc7cb341ee2fd7d71310cfc0add9e1867fa4487a22a1cb6e12385655a1b3f0ab018b6b5085cccfea16283d00f707804f36535f029024cc9f4c44d126508f564bdd102bc6479e55a6790f4d4d1634f37194ff42c09e664fb7fbb9eafefebb68f92e7ee1c89e5b8e83827e8ada288645e05d107f020f65a99af74cf2caa551c89ace04b47a4bef81ba6befe4b91e25b46855b050fe1fea8bdb9829073a656781702670ef9d362b27abc5de5e8a9825754dbffcf5dcb3e6f67d5a40c389fe69007a7b66161a491c4055286c2b15b9fac1496b4382cff1c01b6ceb1c7c5b8ac508789147ddefb789809c0ca843df327a811d4cbe3892dad6cb45f0eea40905b3ee98157f3d6502bcdb73256b3ae707d489af73773a9b8b2ed8a460b096c1242c1da419e7a5c61c222e7b8f9c1ba98c4bd35efc6bceb228ffd2f3a35b8a092c5a070f5d95bee49a1c9fe5876b020273fee72c367d30e8d3b19a0e4471641230ef0e81bc1adfde0ee42a02ecb7d2d080fe39a3c1c6991c0cbd245e1e67449549c0d6e514daf7e67d453d8afb89978ddf884d89ffcf37be53387cc97315c336cac891b977522b9d3504ecdc7a227774c9233777da67ca0e1f719db3e54fe2fd0e36c5596eea502533ef6a223ac3e4f87c3c2269d1182ff76bd2f3a5c8f7c895f6780d794c774685b1308d8feb283e2b4026422ea1d22db3a2a674012b9246bf1e7d22ffd34906bd258976c6a7a0cbad716b71239c593cda21c695c075a009decf9b8e6092570e21120d1a24feeb9f280f4f52b345830b665e837fd90f43f0f728bdfea4d05d2962916fc2b5e27352da3b8f070eb58076ea7ba7b6e260203cf49b1f59b3a9e9bf1e17ab89ad1e133211ec11758d2604950180da523c3a420c738370aa3b2e2d171ee9dba73b875c683b9dc9100c3973dd880a49e489cecdafe81c35d32a992b957f5ca9dff6d8c062d96bbe3926b8ba12ca0384bce8966520752f321c65f5bb30686aadf51f326f2a0b835317236aedec608bdd8a616e2d8e894945d6f06d86927be7ed8c5f95acb0e7baabe0622a9d75666f3d0b26b8f263a392c196689f917064dfc95139df8a1cdee493cbe2fcc925baa31c06d1076a2ac91771e6ed8ab27485f6621cbe2da0b6c3d891e4f9a31427ffe22d7a05407a4629ed17c7e3fa2272c3f0de208b8153232271a9da4b6208f004395cb4b3a3867d578e2a271c8ef2e678a6571bdc4e9b0744c924cfcc2be3844b4df04fe95db5d5563e0ab68f75cbcab224ae55e2d856ec99bf56cfa6a7fce03f1ebbce4b9611669596a4d96ea2f85777a4a92f6cf5d0cf23e604620aa8c9136931f7b723673cd392c97940f541989921ae2d87a8a06835a17469d5de2c8fd83c268f0c1487760573cc59382bfd61d36aa5c86786eb06bb6d1296ced5bfa544e6b463b6007458e37baf4c6458b5553baa6a5c1a864830672cc6ca3970d06aa08fd67c7d3689c2872b15a9ed39cc4dee58aa0e3e4195eb63a60539dab706b9a9e058ea07e4b5f535ac3be50b3170e999d8306fbc652e7ea586502f4669b628d5156964e04c1ec81241a094a8ad9469c6158db0235b536e33efc3004dc376cacc073f3c18907c5879d7df578461243a05975868144ed4fcdde4a591bdfb1281322836a4886526c94d1456befb9f03d15f72aee071b0bfe8eca1249db28eee18e2d31f5b8c908c32c46a4340b80bf468e82b14baa4d5379a4ebfa43e0766f9d69a19fc016ac2ebacdcb8111ea5040c43aec218ceca9470f0b1a23ddc66729fdaeadeb48a5135539beed8a3e5c168015524a18f93598fc0d6324e39e9721d12c71f3e2f2744b0eb69a5965fe3302e2c01d30a3dcb9cafa6b3cd0b7f2dcd5727b9ad7935346fad6e2375acecdb2a483d983491cde4499d9166ddf0571b4835cee64f08153b95755891223848e698e5fa268db4debb9dbfd63ba7f6d56b76a477b9236a3294822ac67d374b60a9eed776ea50c3695bfa4531331b5169c45128754b3ae7c4d36e55c81b26cafc6c74b81d8445220757300ab849ebbebe30095ea8f3d599cf639414373d407bcb4bba4081d491892a3a37da2b94768e8f120ce3ef79b3361c64a4018b0cf08cc95ace7c32c389bfc852e34218d8469b0ee1c44d01ed83cc7ee71961a6d6854746174b086af7528f88e3f6470523bed5dc05f06a3214be569846b7c1cc9368fbc77adfb3b5abe9ce6cb6d0e419200a1a0034c25cbe043df99a4adf2325ab279965b758cab9fb2352419cbb5bb329918743bbb1e9ed827ee8f483e4bef675e28d3dbb74fd8b0991ba642fc1dea5c0bee9028157684f9ab563305cf226825e66bda0c2a543f16611ce7870d517162a243c853b61f49020caa8ae7140b03b67df563774f5c2110f236a5781399cd46ea276fa43d62be0f39aaf86e7a34ed2cb8b8c5366de9dc76e09624af2bfe7836b2c037b180f300b4ddcd0c542cbb432a56c56e51474301ef4100c9f31b279fe68f1961d8755e0fe65ecbf6350b70a0b65ec9c590a81c81e605f31adef98d84a9277a9e5f9a53a204dca71ea14748279ca8e01159411e4d21b40d3103d1cee5b1a530c3acfe0d98a4fc5e5d0d679bb91f5d91c39a538cfa06cc756c764de4f14d74e6476cb2af7a5a3d9d7dc93d20ef6a202346d0423b23f12230d7c4d13a59428c31c76b0d986c4aa48c0e1a9dfad474b561dcd33b0836a23a5f32ecc0b99d94f6ae5ea6d19cdfc9fe04702e81e443a8cd61018af849e8cc5b1988df70fd117185737727faac4a9611738a6edf7922ef7a7ea5c9228d0526da7786a24a77a8979c260f8c90b5656ebd93bf7cc1d8665bab68dad69f0851b5b11462cc088fce84ef7d51a373ce97b58dcd5df0d877b942433ee03923f73654387f416935a7053f724aacd62682abcf4fa2f954104cf158a0d43f59f3a260fb2d6f5ac22ee9f16f0581e142278005e86525c37b43fa7fb4ba71d67094c139d130e8d37b3199193d891e8fdfef23abd2338453de1c68425991e957cc1d394eef73261bbd2dbd832b477de3a5e6f56c7fd68bc54330fdf39fd248b9656648e32ad79b477b18ef8cd516657528f906e88a71c3f3d0ef0314500e9cf9d4238d2c820f122e4bd43d16ecb141acbc99971210baea51b72b50546f9a594f3e67c35ce3a1b7c6868cc9d52ece0aa6cb4fb786b08d1d8d55d4a29d8ef3762229d0cfdbc68b951accce434b08af73bc80e5e80a5e604bfb86c71c463c7a42e4a10fa4ef99ec3345719aa5be9379b2e31d9be1f67fff20edcb9e12d3cde837711ac002f99c65745215429873a418e895b04cf4574eb829c3877d7214482463e33885296f56e93f18ee92e3d10ede1c5a4bde94a7889d372ddefbe25f78074eaf27fc6119b1c55e534d6b910179d43048e21fbf4e1b9691d762f5555a3c1b68d724c43417108d079f970226af98d0a5f5a772feedef892498bf06d20eea76e9ffc8b5f30db4ffee4a41b5d040893655f9bc73add76a2f8ceb5b6cc39747000821fef7cd88445192af32f174a2e0a151c45cc6d40e016fbfd26471513e9a80aaddd1d37659b11fbffa5e0f6247943d521d03c6a099c9cafbc3aca111ec1879a0feb4dacea46567e91b7c73e88dcbbff17adf4d5a4af10d769214eabd8529021f8c05aa9108d0e785d3283346ba7fe3f7b411d02561b72014e113fda8e42f1ce3bf34b8aeba18532af5cc074bf6f3b5861766f72ceeed14473ff1564c26243dce458e3314f8e007ee905385f111c1c2b424d5aa98305954bea2638a5cf9b25e039a3c9480ba6b8af154065cf6b45fbdfcaafea4ca1c8c464082e39181db6a1aa7168a68acc02ec85cafda58101f87f8f6b9defc51c5413943cc66ba0839e2728e1216e5c29d5a904b3a1918effeeec4f3be08e4543d6ec016d5e020e51475395ab72a95aa0ee59cb72afb440e3654fff5c3d6d8cc00db851380e95123b2562127264080f33298ebe937a7d9c7f", 0x1000, r2}, 0x68)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', <r8=>0x0, 0x2f, 0x17, 0x5, 0x35f, 0x2, @empty, @mcast2, 0x700, 0x40, 0xc672, 0x401}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)={0x88, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x72}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x18}, 0x4004012)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)

1.525324969s ago: executing program 2 (id=539):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
socket$rds(0x15, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x3}, 0x18)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
sendfile(r2, r1, 0x0, 0x3ffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1})
sendfile(r2, r1, 0x0, 0x7ffff000)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000000ac0)=0xe, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='sys_enter\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18)
removexattr(0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)={[{@map_off}, {@session={'session', 0x3d, 0x17}, 0x0}, {@sbsector={'sbsector', 0x3d, 0x100000001}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@nojoliet, 0x41}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {}]}, 0xfa, 0x69f, &(0x7f0000000840)="$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")
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x7}, 0x18)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7, {0x6}}}, 0x24}}, 0x0)

1.51728256s ago: executing program 1 (id=540):
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r4 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f00000003c0)="88f9b67164ec0f973bdeda751e5bf6bd3f439b", 0x13}, {&(0x7f0000000500)="6f8ce51da459aea9d31efd576e57e59afce45662d3de63e66d83fd2445187fb2464b0fbc100be50bd70b0257dbb6f78ced038e990607b19ce8b58f849d72c2e37aaf4b0965cbf61aa1f27f6d7cd273036b6e47c9330f3d539dde764a3b0bbf888b0e45dedd8c002c872bad9e7aa6ae958bb92b8f8a09dce36d709bcf535576f4863cd4778ea1a8aa861264ec95c03df1fb6c17ab466801913a5685f13512fe28bac7b573716f11fcae9b5e3678ffe8ee529141afc36ce9d8418882dc3afc864ca0280a70e497eaaec65115ca87356952b1b2c5555502b17fb5", 0xd9}, {&(0x7f0000000680)="d3cb4a8a0118f4582f8a04c76f6c799030f5bf2928004fe65c65bc1000f19ac674627faa5d37d2fc1fe06f82aef9cf0341af59cba1551439ea22dc4de61615f8bf31", 0x42}, {&(0x7f0000000d00)="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", 0x13f}, {&(0x7f0000000780)="27c74036a7b1e9e4856a9dcbaa51177d1130fcbaf3d2f649d35468d1dc56a1da8ee81d56598d06400fce94cf13898bb2c75f1a5a2cf3a3554969509e9199e988109f73a303aa704c6657fcc7d559cad76d5f3828e2", 0x55}, {&(0x7f0000000800)="51511ebe175846b78a397f48d79831caea8ff6b36e62fecf7d0bb07ff6a3e962d7932648589e023558107e7e6697cc697cfb90a0e0b452eb5f5d4b3aa76e80fff63fc082a20645dbe66f8a9c30b5a7a4", 0x50}, {&(0x7f00000009c0)="6ff831877a3ed664d909d88f4f5b78220fe16a8261f88f460550cd4b9487b3d26cf39cc94fe2b847ad2f53a75c35ae47eb3b377e71ca9053014e2fb2f4127f527e8dd38da0121aaa443e895eb64cf22e00c7313d13616a607f865255a292478f074fe0050c08f6b516dc6dfcfc6c7e200f2f9661afb9f00a72d84ec9b38916ef96a0b6c62dc0ab8c77040260253e673debb4ae8570082933f8bd126026526dae691e44df3598ccb07e880f817b4ebe33b2bf6147ce6606653fd97f9866df", 0xbe}, {&(0x7f0000000a80)="81fbd3f502949f4b3ef13a244a580cc82772cd6d17473fc0bd4a41c8d922ce3107e029107b37ed0a7f931ef7171b76364e76400c17eee854168adcf09bc59316f8968c81af5efe2b44da3bb90914007eadea2df492ea1ccdda9a12e6d44cad340e09254a176b01b6174d7be6f3be2bd254e2ee5b90927bb496079430df12e9437187d8a77c3a74ebecfdf50309dc0787e8", 0x91}, {&(0x7f0000000700)="66676facf5be3f9b528ec5f94b52335508ba9aeb844ec2c11b237885c77909065cee531bd3ec6dee9632f2828ed9f49881b60feae15bfdc2838c579fef6b57", 0x3f}], 0xa}, 0x8000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r5}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r6, 0x107, 0x12, 0x0, &(0x7f0000000380))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r7}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090603000000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1.488793133s ago: executing program 1 (id=541):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400d7cff9a87218cf610000000000000a03000000004e2200010100ffff00000800000000000000000000ad448d018ab77be4e6fd8c8010baf33de1c9987331a2abfdb244565b722ccc6fe2e992384dfcd88e8f9a31f93c2afa957732a333fe9c86d9b56b4d8c51e26f0175c86de50fbf8397ea63", @ANYRES32=0x0, @ANYBLOB="050000000300000008000000000000000800030011000000"], 0x54}}, 0x20004010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000b80)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}, {&(0x7f0000002700)="d6f4de1bc9418695", 0x8}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x20000000, 0x6}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0)

1.368132985s ago: executing program 4 (id=543):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.266523035s ago: executing program 4 (id=545):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x6c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e0000001080002007f0000010c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000004000680"], 0x68}}, 0x0)

1.088013753s ago: executing program 4 (id=547):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
pivot_root(&(0x7f00000002c0)='.\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a000100000000000000001881000000004000000000000008000f"], 0x24}}, 0x10000000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x9}, 0x18)
syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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")
fchdir(r4)
write$binfmt_format(r2, &(0x7f0000000800)='-1\x00', 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="0de6410100000000183100400300667168ac7467170000000000000000008520000003000000"], &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000440)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r2, r2, r2, 0xffffffffffffffff, r2], &(0x7f0000000540)=[{0x1, 0x4, 0x5}, {0x2, 0x2, 0xc, 0xa}, {0x0, 0x1, 0xc, 0xb}, {0xa, 0x2, 0x0, 0x1}, {0x4, 0x4, 0xa, 0x1}], 0x10, 0x5}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000280)={[{@nouid32}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@init_itable}, {@nodiscard}, {@noquota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x40)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0)

935.277588ms ago: executing program 3 (id=548):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
syz_read_part_table(0x4086, &(0x7f0000008180)="$eJzszzFKA0EUBuB/TSJRomAtiMFetLPKLXIB8Qg2NhpM5zECNsEDeAOPZBoZWbOsSbBMEfD7inm7/7w38MJOePlsPu7qY7/NPx7W+46a+n77dpLkfJivUkr6SbobTy5KcnWd3mF/L4Mk9z9pb7VlPN/+JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM6p/o4nm1ed9fvXpp5m+jjKTVl6eu60U8PL5Ph3YFGSg/avWx+zjOfbWQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+FdKKaWu1UrWS9JdhlUyafNBZheZjs6q9L/Zn2MTAEAYCIBBEOewcSPncXWLgOgAdndVmvzzEX3cKeucLf9fNVtm+bQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYKAAA//8LyCdz")

644.853406ms ago: executing program 2 (id=549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x1, 0x7ffc1ff9}]})
shmat(0x0, &(0x7f0000ff7000/0x4000)=nil, 0x1000)

593.192381ms ago: executing program 1 (id=550):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_setup(0x6839, &(0x7f0000000680)={0x0, 0x201b23, 0x0, 0x1, 0x2351})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x65)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x39d}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="63202a3a2a207277c6"], 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)
socket$kcm(0x11, 0x3, 0x0)

541.021586ms ago: executing program 2 (id=551):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="b473050e11ec0bcd2c74b4ece6f5eea5319b47b0a2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18)
mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp'])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000900)='gpio_value\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)=@o_path={&(0x7f0000001d00)='./file0\x00', 0x0, 0x4000, r3}, 0x18)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000940)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000a00)="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", 0x1000, r2}, 0x68)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', <r8=>0x0, 0x2f, 0x17, 0x5, 0x35f, 0x2, @empty, @mcast2, 0x700, 0x40, 0xc672, 0x401}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)={0x88, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x72}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x18}, 0x4004012)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)

492.514011ms ago: executing program 1 (id=552):
socket$key(0xf, 0x3, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000001c0)={r3})

491.150651ms ago: executing program 4 (id=553):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_setup(0x6839, &(0x7f0000000680)={0x0, 0x201b23, 0x0, 0x1, 0x2351})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x65)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x39d}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="63202a3a2a207277c6"], 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)
socket$kcm(0x11, 0x3, 0x0)

348.412596ms ago: executing program 3 (id=554):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
getpid() (async)
r2 = getpid()
r3 = mq_open(&(0x7f0000000200)='\x00', 0x2, 0x80, &(0x7f0000000240)={0x12, 0xfffffffffffffff9, 0xd14e, 0x1})
tee(r3, r0, 0xff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
semop(0x0, 0x0, 0x0) (async)
semop(0x0, 0x0, 0x0)
semctl$SETVAL(0x0, 0x1, 0x10, 0x0)
unshare(0x34020300)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
semget(0x0, 0x2, 0x41)
unshare(0x22020600)
memfd_create(0x0, 0x7) (async)
memfd_create(0x0, 0x7)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e}, 0x28)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

331.539677ms ago: executing program 2 (id=555):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

266.673604ms ago: executing program 4 (id=556):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8084)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)

189.624701ms ago: executing program 2 (id=557):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74)

89.323471ms ago: executing program 3 (id=558):
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r4 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f00000003c0)="88f9b67164ec0f973bdeda751e5bf6bd3f439b", 0x13}, {&(0x7f0000000500)="6f8ce51da459aea9d31efd576e57e59afce45662d3de63e66d83fd2445187fb2464b0fbc100be50bd70b0257dbb6f78ced038e990607b19ce8b58f849d72c2e37aaf4b0965cbf61aa1f27f6d7cd273036b6e47c9330f3d539dde764a3b0bbf888b0e45dedd8c002c872bad9e7aa6ae958bb92b8f8a09dce36d709bcf535576f4863cd4778ea1a8aa861264ec95c03df1fb6c17ab466801913a5685f13512fe28bac7b573716f11fcae9b5e3678ffe8ee529141afc36ce9d8418882dc3afc864ca0280a70e497eaaec65115ca87356952b1b2c5555502b17fb5", 0xd9}, {&(0x7f0000000680)="d3cb4a8a0118f4582f8a04c76f6c799030f5bf2928004fe65c65bc1000f19ac674627faa5d37d2fc1fe06f82aef9cf0341af59cba1551439ea22dc4de61615f8bf31", 0x42}, {&(0x7f0000000d00)="2a6a796db1a4975064f70e5137ae5352e9763b36266e965fbbb0da8297e49d5563c41e61bfe666da9907fcd803573071f307e5ec89dd04d6df58fe62c05812cfc96bba48a7cbe722d562de20eaf8d945324af2de271f52b22594cc31a16cb3619f8a3129c160cbf1693ab0eedaf0b5efe0854f13e34b90194dad6b5016cb04c7da2e42b984aa6e3f4d17d5c476a5264900c86fe0abbaab00436a1370c4fdea79fa9406d3103f7d5a95ea684ee4b6f8e2835e0c86a6ce4db9dccc222316068b709f948b49b763bf1706d7a5a093a11e6ec74bffb9705ac416cb417885840d9b14749ea664ceb32be44fc0eab9cfe24a74ee8f6c2290c8ecbea39c826f7b49a39cde1e2eba0d4bbe29d5b75d1a944f0f42d50ae5737d0c6a35ec3dd438b20835686937eea0d3731d1b3b011d37f2f7f60bae690ec76ce7a2feb2eedfc42d6e60", 0x13f}, {&(0x7f0000000780)="27c74036a7b1e9e4856a9dcbaa51177d1130fcbaf3d2f649d35468d1dc56a1da8ee81d56598d06400fce94cf13898bb2c75f1a5a2cf3a3554969509e9199e988109f73a303aa704c6657fcc7d559cad76d5f3828e2", 0x55}, {&(0x7f0000000800)="51511ebe175846b78a397f48d79831caea8ff6b36e62fecf7d0bb07ff6a3e962d7932648589e023558107e7e6697cc697cfb90a0e0b452eb5f5d4b3aa76e80fff63fc082a20645dbe66f8a9c30b5a7a4", 0x50}, {&(0x7f00000009c0)="6ff831877a3ed664d909d88f4f5b78220fe16a8261f88f460550cd4b9487b3d26cf39cc94fe2b847ad2f53a75c35ae47eb3b377e71ca9053014e2fb2f4127f527e8dd38da0121aaa443e895eb64cf22e00c7313d13616a607f865255a292478f074fe0050c08f6b516dc6dfcfc6c7e200f2f9661afb9f00a72d84ec9b38916ef96a0b6c62dc0ab8c77040260253e673debb4ae8570082933f8bd126026526dae691e44df3598ccb07e880f817b4ebe33b2bf6147ce6606653fd97f9866df", 0xbe}, {&(0x7f0000000a80)="81fbd3f502949f4b3ef13a244a580cc82772cd6d17473fc0bd4a41c8d922ce3107e029107b37ed0a7f931ef7171b76364e76400c17eee854168adcf09bc59316f8968c81af5efe2b44da3bb90914007eadea2df492ea1ccdda9a12e6d44cad340e09254a176b01b6174d7be6f3be2bd254e2ee5b90927bb496079430df12e9437187d8a77c3a74ebecfdf50309dc0787e8", 0x91}, {&(0x7f0000000700)="66676facf5be3f9b528ec5f94b52335508ba9aeb844ec2c11b237885c77909065cee531bd3ec6dee9632f2828ed9f49881b60feae15bfdc2838c579fef6b57", 0x3f}], 0xa}, 0x8000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r5}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r6, 0x107, 0x12, 0x0, &(0x7f0000000380))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r7}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090603000000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

71.027233ms ago: executing program 2 (id=559):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
syz_read_part_table(0x4086, &(0x7f0000008180)="$eJzszzFKA0EUBuB/TSJRomAtiMFetLPKLXIB8Qg2NhpM5zECNsEDeAOPZBoZWbOsSbBMEfD7inm7/7w38MJOePlsPu7qY7/NPx7W+46a+n77dpLkfJivUkr6SbobTy5KcnWd3mF/L4Mk9z9pb7VlPN/+JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM6p/o4nm1ed9fvXpp5m+jjKTVl6eu60U8PL5Ph3YFGSg/avWx+zjOfbWQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+FdKKaWu1UrWS9JdhlUyafNBZheZjs6q9L/Zn2MTAEAYCIBBEOewcSPncXWLgOgAdndVmvzzEX3cKeucLf9fNVtm+bQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYKAAA//8LyCdz")

67.836253ms ago: executing program 3 (id=560):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000640)="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", 0x29b}, {&(0x7f0000000300)="2e0fd87d8d84b93c7803a87df5acd511ee50b0a0d0d9e3fc8345949042d5449c61a2b530aeea469c70772df880777d6e1744da498487c5", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ffbcf4974a4a645c6d8cd8ef2dde80a53f40daf5ec8c7b36eb6b4d4d5286a436a562f1656469c511aaadc7389df3d1518794", 0x32}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000140)="050843cb10087b3d2217d41cb7a292b19944", 0x12}, {&(0x7f0000000900)="f742c97e8353ef9d8afd344747fb058fea97deff79dbb8e7b56b20a2d430240bf6d32e802d80bb22b247cbad7cbbc4ec0293eb6e0c35c044ad426db18e9403dc1b6b93bfb0ea8f4cb3f3f9cf3a2379cbb191560885ad9a829313c85064a06bc36da8d9a89b20656f349ba2f202c322bd93c50ad4a2d407383bfb6bef053dbb620324f60dfce9383279f82f5e7148e317cfa432eb7d7d38db6d1c70af445a17b02ad505e48cde584306bdc40bb021c3957e83336c68286d2fccc1dfa976d5a08b894e72aed5ee5efd350810f8a85f02545d4c6aea8d82606c2cb6984876e3", 0xde}, {&(0x7f0000000a40)="9502d92394027a53ed87f498965bb80e4b19c3d35fdef593e6b27023c930b5128b33fc6c3176978e6d6236fd33d41b30c3ba02f9ced9d3b0885326b4465606c6d4bd89c93cf8a9eaaba9a30a68e937b951be4e2935a30af461bd442f11f4b66d4c0146", 0x63}, {&(0x7f0000000b80)="924a47d58460977aa3ca02e00a7f5a29c19a836ac747ed79c3facf74da5489e37c7fb07ad69ad60d07747b3d7069380431087eb6b1baaf69904a056fbcd9210ec4942a8eff38f64d9254fcf620ee3f30d95f4ff1843135bbe3ea9944510eaab3cdb691dcfa857098dfd130e17be1d332b6474474591d8f2fad7272cf9949129985045b51c0f6ecc979e9426e205bb3c5f12385ed84b144fc9195bae4f738b65adb697161b8f2ff3823aa80635e8ff785dd4ae007bcc5d1d7d7da4073275fadf5e43f63efa7a87b4beb26d7ee83c4c57f1cec59e2aef5dca5a85f68d7dbf373f802", 0xe1}, {&(0x7f0000000ac0)="e08357325e84dba723519f3e6e3e0761f7caefa653e91de50496c9b80ffda48854378c32d884", 0x26}], 0x5}}], 0x3, 0x40408e0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

985.99µs ago: executing program 3 (id=561):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)

0s ago: executing program 3 (id=562):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00"/14], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c", 0x1b}, {&(0x7f0000000300)="6677283d830977a1ca8574d5e6673039", 0x10}], 0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts.
[   21.364463][   T29] audit: type=1400 audit(1761381868.710:62): avc:  denied  { mounton } for  pid=3271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.387391][   T29] audit: type=1400 audit(1761381868.730:63): avc:  denied  { mount } for  pid=3271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.388115][ T3271] cgroup: Unknown subsys name 'net'
[   21.415052][   T29] audit: type=1400 audit(1761381868.760:64): avc:  denied  { unmount } for  pid=3271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.511644][ T3271] cgroup: Unknown subsys name 'cpuset'
[   21.517738][ T3271] cgroup: Unknown subsys name 'rlimit'
[   21.646225][   T29] audit: type=1400 audit(1761381868.990:65): avc:  denied  { setattr } for  pid=3271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.669556][   T29] audit: type=1400 audit(1761381868.990:66): avc:  denied  { create } for  pid=3271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   21.690124][   T29] audit: type=1400 audit(1761381868.990:67): avc:  denied  { write } for  pid=3271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   21.695694][ T3306] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.710488][   T29] audit: type=1400 audit(1761381868.990:68): avc:  denied  { read } for  pid=3271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.739396][   T29] audit: type=1400 audit(1761381868.990:69): avc:  denied  { mounton } for  pid=3271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.751846][ T3271] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.764334][   T29] audit: type=1400 audit(1761381868.990:70): avc:  denied  { mount } for  pid=3271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.796477][   T29] audit: type=1400 audit(1761381869.060:71): avc:  denied  { relabelto } for  pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.927774][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   22.989582][ T3318] chnl_net:caif_netlink_parms(): no params data found
[   23.002424][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   23.055815][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   23.088509][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   23.103700][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.110964][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.118187][ T3312] bridge_slave_0: entered allmulticast mode
[   23.124645][ T3312] bridge_slave_0: entered promiscuous mode
[   23.134631][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.141723][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.148928][ T3312] bridge_slave_1: entered allmulticast mode
[   23.155471][ T3312] bridge_slave_1: entered promiscuous mode
[   23.169123][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.176251][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.183366][ T3318] bridge_slave_0: entered allmulticast mode
[   23.189698][ T3318] bridge_slave_0: entered promiscuous mode
[   23.196745][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.204239][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.211408][ T3318] bridge_slave_1: entered allmulticast mode
[   23.217676][ T3318] bridge_slave_1: entered promiscuous mode
[   23.256089][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.267699][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.274953][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.282108][ T3313] bridge_slave_0: entered allmulticast mode
[   23.288394][ T3313] bridge_slave_0: entered promiscuous mode
[   23.304087][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.313375][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.320405][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.327549][ T3313] bridge_slave_1: entered allmulticast mode
[   23.334066][ T3313] bridge_slave_1: entered promiscuous mode
[   23.341090][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.367448][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.396666][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.403764][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.411029][ T3321] bridge_slave_0: entered allmulticast mode
[   23.417435][ T3321] bridge_slave_0: entered promiscuous mode
[   23.424047][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.431149][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.438286][ T3321] bridge_slave_1: entered allmulticast mode
[   23.444547][ T3321] bridge_slave_1: entered promiscuous mode
[   23.451937][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.465908][ T3312] team0: Port device team_slave_0 added
[   23.481141][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.494202][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.501382][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.508494][ T3316] bridge_slave_0: entered allmulticast mode
[   23.514898][ T3316] bridge_slave_0: entered promiscuous mode
[   23.522002][ T3312] team0: Port device team_slave_1 added
[   23.527774][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.534852][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.542052][ T3316] bridge_slave_1: entered allmulticast mode
[   23.548678][ T3316] bridge_slave_1: entered promiscuous mode
[   23.555378][ T3318] team0: Port device team_slave_0 added
[   23.566334][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.585585][ T3318] team0: Port device team_slave_1 added
[   23.595852][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.618145][ T3313] team0: Port device team_slave_0 added
[   23.628725][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.635691][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.662084][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.673811][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.687860][ T3313] team0: Port device team_slave_1 added
[   23.697530][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.704593][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.730845][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.742610][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.751920][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.758843][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.784888][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.800536][ T3321] team0: Port device team_slave_0 added
[   23.809233][ T3321] team0: Port device team_slave_1 added
[   23.819455][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.826417][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.852315][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.882246][ T3316] team0: Port device team_slave_0 added
[   23.888273][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.895263][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.921158][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.932878][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.939834][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   23.965818][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.976752][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.983714][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.009707][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   24.021473][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.028400][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.054515][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.066012][ T3316] team0: Port device team_slave_1 added
[   24.111784][ T3312] hsr_slave_0: entered promiscuous mode
[   24.117712][ T3312] hsr_slave_1: entered promiscuous mode
[   24.130163][ T3318] hsr_slave_0: entered promiscuous mode
[   24.136121][ T3318] hsr_slave_1: entered promiscuous mode
[   24.141947][ T3318] debugfs: 'hsr0' already exists in 'hsr'
[   24.147661][ T3318] Cannot create hsr debugfs directory
[   24.153420][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   24.160344][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.186236][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   24.197735][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.204766][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   24.230809][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.264582][ T3313] hsr_slave_0: entered promiscuous mode
[   24.270568][ T3313] hsr_slave_1: entered promiscuous mode
[   24.276476][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   24.282223][ T3313] Cannot create hsr debugfs directory
[   24.294578][ T3321] hsr_slave_0: entered promiscuous mode
[   24.300722][ T3321] hsr_slave_1: entered promiscuous mode
[   24.306772][ T3321] debugfs: 'hsr0' already exists in 'hsr'
[   24.312508][ T3321] Cannot create hsr debugfs directory
[   24.353770][ T3316] hsr_slave_0: entered promiscuous mode
[   24.359904][ T3316] hsr_slave_1: entered promiscuous mode
[   24.365794][ T3316] debugfs: 'hsr0' already exists in 'hsr'
[   24.371544][ T3316] Cannot create hsr debugfs directory
[   24.528126][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   24.536549][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   24.547099][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   24.559851][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   24.577425][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   24.585979][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   24.594724][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   24.606212][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   24.626723][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   24.642901][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   24.659170][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   24.669488][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   24.689489][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   24.698325][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   24.708040][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   24.725302][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   24.760675][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   24.772777][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.780315][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   24.788996][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   24.797799][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   24.833336][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.842037][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   24.854358][ T1756] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.861497][ T1756] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.874864][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.887914][ T1756] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.895514][ T1756] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.907177][ T3318] 8021q: adding VLAN 0 to HW filter on device team0
[   24.920064][ T1756] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.927156][ T1756] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.943322][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.950377][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.959260][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   24.974877][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.993635][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.000838][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.015383][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   25.027346][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.034614][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.053518][ T1756] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.060575][ T1756] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.076237][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.091133][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.098206][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.132014][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   25.142566][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.160101][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.197188][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.216943][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   25.226949][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.239112][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.246218][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.259731][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.266888][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.300059][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.316987][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   25.327523][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.384577][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.439273][ T3312] veth0_vlan: entered promiscuous mode
[   25.456054][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.469729][ T3316] veth0_vlan: entered promiscuous mode
[   25.480121][ T3316] veth1_vlan: entered promiscuous mode
[   25.502548][ T3318] veth0_vlan: entered promiscuous mode
[   25.508958][ T3312] veth1_vlan: entered promiscuous mode
[   25.519351][ T3318] veth1_vlan: entered promiscuous mode
[   25.538036][ T3316] veth0_macvtap: entered promiscuous mode
[   25.556944][ T3316] veth1_macvtap: entered promiscuous mode
[   25.567346][ T3321] veth0_vlan: entered promiscuous mode
[   25.577616][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.592815][ T3321] veth1_vlan: entered promiscuous mode
[   25.602674][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.612349][ T3312] veth0_macvtap: entered promiscuous mode
[   25.627101][ T3313] veth0_vlan: entered promiscuous mode
[   25.636785][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.647693][ T3312] veth1_macvtap: entered promiscuous mode
[   25.654576][ T3318] veth0_macvtap: entered promiscuous mode
[   25.662138][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.674262][ T3318] veth1_macvtap: entered promiscuous mode
[   25.682209][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.691301][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.706310][ T3321] veth0_macvtap: entered promiscuous mode
[   25.714811][ T3321] veth1_macvtap: entered promiscuous mode
[   25.723126][ T3313] veth1_vlan: entered promiscuous mode
[   25.730093][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.742980][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.759360][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.773683][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.774286][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   25.799431][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.807273][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.832636][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.845703][ T3313] veth0_macvtap: entered promiscuous mode
[   25.858003][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.872734][ T3313] veth1_macvtap: entered promiscuous mode
[   25.884606][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.905817][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.926754][ T3486] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   25.934554][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.944812][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.967796][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.010539][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.024514][ T3486] loop3: detected capacity change from 0 to 2048
[   26.043049][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.059713][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.059828][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.059860][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.059948][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.059980][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.060011][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.060102][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.060186][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.060254][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.104764][ T3302]  loop3: p1 p2 p3
[   26.182539][ T3498] loop2: detected capacity change from 0 to 512
[   26.187103][ T3486]  loop3: p1 p2 p3
[   26.204205][ T3498] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   26.209887][ T3498] SELinux:  policydb string Rqueue0 does not match my string SE Linux
[   26.253339][ T3512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1114 sclass=netlink_route_socket pid=3512 comm=syz.3.10
[   26.256538][ T3498] SELinux: failed to load policy
[   26.322426][ T3516] loop4: detected capacity change from 0 to 512
[   26.377449][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   26.392060][ T3516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   26.394310][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   26.416777][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   26.427138][   T29] kauditd_printk_skb: 128 callbacks suppressed
[   26.427149][   T29] audit: type=1400 audit(1761381873.770:200): avc:  denied  { mount } for  pid=3515 comm="syz.4.11" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   26.457092][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   26.461193][ T3516] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   26.468631][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   26.485330][ T3516] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.11: corrupted inode contents
[   26.504345][ T3529] loop0: detected capacity change from 0 to 2048
[   26.514634][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   26.533603][   T29] audit: type=1400 audit(1761381873.820:201): avc:  denied  { setattr } for  pid=3515 comm="syz.4.11" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.558157][ T3516] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #4: comm syz.4.11: mark_inode_dirty error
[   26.560773][   T29] audit: type=1400 audit(1761381873.880:202): avc:  denied  { ioctl } for  pid=3530 comm="syz.2.16" path="socket:[4018]" dev="sockfs" ino=4018 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.577236][ T3516] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.11: corrupted inode contents
[   26.594567][   T29] audit: type=1400 audit(1761381873.880:203): avc:  denied  { write } for  pid=3530 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.626352][   T29] audit: type=1400 audit(1761381873.900:204): avc:  denied  { add_name } for  pid=3515 comm="syz.4.11" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.668464][   T29] audit: type=1400 audit(1761381873.900:205): avc:  denied  { create } for  pid=3515 comm="syz.4.11" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   26.734441][ T3529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   26.793332][ T3516] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.11: mark_inode_dirty error
[   26.817608][ T3529] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   26.839983][ T3516] Quota error (device loop4): write_blk: dquota write failed
[   26.847441][ T3516] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   26.857436][ T3516] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.11: Failed to acquire dquot type 1
[   26.919414][   T29] audit: type=1400 audit(1761381874.120:206): avc:  denied  { setattr } for  pid=3521 comm="syz.0.14" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   26.941667][   T29] audit: type=1400 audit(1761381874.240:207): avc:  denied  { write } for  pid=3515 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   26.971232][ T3533] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.11: corrupted inode contents
[   27.014237][ T3533] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #4: comm syz.4.11: mark_inode_dirty error
[   27.026190][ T3533] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.11: corrupted inode contents
[   27.079691][ T3533] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.11: mark_inode_dirty error
[   27.091939][ T3533] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.11: Failed to acquire dquot type 1
[   27.155333][ T3516] syz.4.11 (3516) used greatest stack depth: 9920 bytes left
[   27.246723][ T3535] syz.4.11 (3535) used greatest stack depth: 9856 bytes left
[   27.255495][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   27.261988][ T3549] veth0: mtu less than device minimum
[   27.316475][ T3549] xt_hashlimit: max too large, truncated to 1048576
[   27.466292][ T3570] loop4: detected capacity change from 0 to 1024
[   27.490173][ T3570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   27.764303][ T3589] process 'syz.1.38' launched './file0' with NULL argv: empty string added
[   27.932377][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   27.978401][ T3607] loop4: detected capacity change from 0 to 512
[   28.027585][ T3607] EXT4-fs: Ignoring removed nobh option
[   28.045315][ T3611] loop2: detected capacity change from 0 to 2048
[   28.052378][ T3607] EXT4-fs (loop4): failed to initialize system zone (-117)
[   28.059726][ T3607] EXT4-fs (loop4): mount failed
[   28.099327][ T3607] loop4: detected capacity change from 0 to 512
[   28.117000][ T3611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   28.151769][ T3607] ------------[ cut here ]------------
[   28.157320][ T3607] EA inode 11 i_nlink=2
[   28.157559][ T3607] WARNING: CPU: 1 PID: 3607 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380
[   28.171972][ T3607] Modules linked in:
[   28.175875][ T3607] CPU: 1 UID: 0 PID: 3607 Comm: syz.4.46 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   28.185488][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   28.195592][ T3607] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380
[   28.202332][ T3607] Code: 90 49 8d 7e 40 e8 b6 fe b8 ff 4d 8b 6e 40 4c 89 e7 e8 ca f9 b8 ff 41 8b 56 48 48 c7 c7 a4 c7 55 86 4c 89 ee e8 07 fd 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 88 ca b5 03 0f 1f 84 00 00 00 00 00
[   28.222003][ T3607] RSP: 0018:ffffc900011bf5a0 EFLAGS: 00010246
[   28.228335][ T3607] RAX: 93c937012b77f400 RBX: ffff88811a49d760 RCX: 0000000000080000
[   28.236465][ T3607] RDX: ffffc900046e2000 RSI: 0000000000004235 RDI: 0000000000004236
[   28.244463][ T3607] RBP: 0000000000000002 R08: 0001c900011bf427 R09: 0000000000000000
[   28.252557][ T3607] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a49d710
[   28.260525][ T3607] R13: 000000000000000b R14: ffff88811a49d6c8 R15: 0000000000000001
[   28.268528][ T3607] FS:  00007f79f165f6c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000
[   28.277492][ T3607] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   28.284128][ T3607] CR2: 00007f2565e9a000 CR3: 000000011bbb0000 CR4: 00000000003506f0
[   28.292278][ T3607] Call Trace:
[   28.295548][ T3607]  <TASK>
[   28.298472][ T3607]  ext4_xattr_set_entry+0x77f/0x1020
[   28.304009][ T3607]  ext4_xattr_ibody_set+0x184/0x3c0
[   28.309357][ T3607]  ext4_expand_extra_isize_ea+0xcbb/0x11f0
[   28.315275][ T3607]  __ext4_expand_extra_isize+0x246/0x280
[   28.321042][ T3607]  __ext4_mark_inode_dirty+0x29d/0x3f0
[   28.326544][ T3607]  ext4_evict_inode+0x80e/0xd90
[   28.331453][ T3607]  ? __pfx_ext4_evict_inode+0x10/0x10
[   28.336981][ T3607]  evict+0x2e3/0x550
[   28.340943][ T3607]  ? __dquot_initialize+0x146/0x7c0
[   28.346169][ T3607]  iput+0x4ed/0x650
[   28.350057][ T3607]  ext4_process_orphan+0x1a9/0x1c0
[   28.355221][ T3607]  ext4_orphan_cleanup+0x6a8/0xa00
[   28.360343][ T3607]  ext4_fill_super+0x3483/0x3810
[   28.365321][ T3607]  ? snprintf+0x86/0xb0
[   28.369490][ T3607]  ? set_blocksize+0x1a8/0x310
[   28.374303][ T3607]  ? sb_set_blocksize+0xe3/0x100
[   28.379247][ T3607]  ? setup_bdev_super+0x30e/0x370
[   28.384313][ T3607]  ? __pfx_ext4_fill_super+0x10/0x10
[   28.389594][ T3607]  get_tree_bdev_flags+0x291/0x300
[   28.394724][ T3607]  ? __pfx_ext4_fill_super+0x10/0x10
[   28.400102][ T3607]  get_tree_bdev+0x1f/0x30
[   28.404573][ T3607]  ext4_get_tree+0x1c/0x30
[   28.408986][ T3607]  vfs_get_tree+0x57/0x1d0
[   28.413488][ T3607]  do_new_mount+0x24d/0x660
[   28.418062][ T3607]  path_mount+0x4a5/0xb70
[   28.422475][ T3607]  ? user_path_at+0x109/0x130
[   28.427160][ T3607]  __se_sys_mount+0x28c/0x2e0
[   28.431931][ T3607]  ? do_mkdirat+0x3ac/0x3f0
[   28.436448][ T3607]  __x64_sys_mount+0x67/0x80
[   28.441148][ T3607]  x64_sys_call+0x2b51/0x3000
[   28.445908][ T3607]  do_syscall_64+0xd2/0x200
[   28.450484][ T3607]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   28.456698][ T3607]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   28.462446][ T3607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   28.468334][ T3607] RIP: 0033:0x7f79f2c0076a
[   28.472892][ T3607] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   28.492561][ T3607] RSP: 002b:00007f79f165ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   28.501007][ T3607] RAX: ffffffffffffffda RBX: 00007f79f165eef0 RCX: 00007f79f2c0076a
[   28.508998][ T3607] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f79f165eeb0
[   28.517017][ T3607] RBP: 0000200000000180 R08: 00007f79f165eef0 R09: 0000000001800700
[   28.525009][ T3607] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0
[   28.533029][ T3607] R13: 00007f79f165eeb0 R14: 000000000000047c R15: 00002000000004c0
[   28.541065][ T3607]  </TASK>
[   28.544089][ T3607] ---[ end trace 0000000000000000 ]---
[   28.553562][ T3607] EXT4-fs (loop4): 1 orphan inode deleted
[   28.559791][ T3607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   28.674163][ T3621] loop1: detected capacity change from 0 to 512
[   28.682648][ T3621] =======================================================
[   28.682648][ T3621] WARNING: The mand mount option has been deprecated and
[   28.682648][ T3621]          and is ignored by this kernel. Remove the mand
[   28.682648][ T3621]          option from the mount to silence this warning.
[   28.682648][ T3621] =======================================================
[   28.751220][ T3621] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   28.782575][ T3621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   28.835555][ T3621] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.873488][ T3621] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   28.911103][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   28.951612][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.021846][ T3632] 9pnet_fd: Insufficient options for proto=fd
[   29.067412][ T3635] loop3: detected capacity change from 0 to 1024
[   29.092010][ T3635] EXT4-fs: Ignoring removed bh option
[   29.104217][ T3635] EXT4-fs: inline encryption not supported
[   29.132268][ T3635] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   29.163403][ T3635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   29.183937][ T3635] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.54: lblock 2 mapped to illegal pblock 2 (length 1)
[   29.220835][ T3635] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.54: lblock 0 mapped to illegal pblock 48 (length 1)
[   29.255338][ T3635] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.54: Failed to acquire dquot type 0
[   29.290967][ T3635] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem
[   29.316606][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.330954][ T3635] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.54: mark_inode_dirty error
[   29.362154][ T3635] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   29.373755][ T3635] EXT4-fs (loop3): 1 orphan inode deleted
[   29.428857][ T1756] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[   29.443562][ T3646] Driver unsupported XDP return value 0 on prog  (id 46) dev N/A, expect packet loss!
[   29.455276][ T3642] loop1: detected capacity change from 0 to 32768
[   29.462141][ T3635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.496071][ T1756] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0
[   29.497773][ T3649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.57'.
[   29.519308][ T3635] sg_write: data in/out 131036/10 bytes for SCSI command 0xfa-- guessing data in;
[   29.519308][ T3635]    program syz.3.54 not setting count and/or reply_len properly
[   29.544562][ T3496]  loop1: p1 p2 p3 < p5 p6 >
[   29.550128][ T3496] loop1: p2 size 16775168 extends beyond EOD, truncated
[   29.557552][ T3635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.54'.
[   29.567319][ T3496] loop1: p5 start 4294970168 is beyond EOD, truncated
[   29.578251][ T3642]  loop1: p1 p2 p3 < p5 p6 >
[   29.583825][ T3642] loop1: p2 size 16775168 extends beyond EOD, truncated
[   29.591866][ T3642] loop1: p5 start 4294970168 is beyond EOD, truncated
[   29.608935][ T3650] netlink: 'syz.0.57': attribute type 4 has an invalid length.
[   29.617583][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.650041][ T3316] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[   29.664156][ T3316] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem
[   29.674473][ T3316] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[   29.674789][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.780610][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[   29.781404][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   29.791486][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   29.810277][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   29.820201][ T3660] loop1: detected capacity change from 0 to 128
[   29.841042][ T3662] loop3: detected capacity change from 0 to 512
[   29.930137][ T3662] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.62: bg 0: block 159: padding at end of block bitmap is not set
[   29.951816][ T3660] syz.1.61: attempt to access beyond end of device
[   29.951816][ T3660] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128
[   29.956342][ T3662] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   29.968345][ T3660] syz.1.61: attempt to access beyond end of device
[   29.968345][ T3660] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128
[   29.991529][ T3662] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.62: corrupted inode contents
[   30.003417][ T3660] syz.1.61: attempt to access beyond end of device
[   30.003417][ T3660] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128
[   30.016834][ T3660] syz.1.61: attempt to access beyond end of device
[   30.016834][ T3660] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128
[   30.036748][ T3660] syz.1.61: attempt to access beyond end of device
[   30.036748][ T3660] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128
[   30.050276][ T3660] syz.1.61: attempt to access beyond end of device
[   30.050276][ T3660] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128
[   30.050922][ T3662] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[   30.064130][ T3660] syz.1.61: attempt to access beyond end of device
[   30.064130][ T3660] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128
[   30.086943][ T3660] syz.1.61: attempt to access beyond end of device
[   30.086943][ T3660] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128
[   30.100675][ T3662] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.62: corrupted inode contents
[   30.120430][ T3660] syz.1.61: attempt to access beyond end of device
[   30.120430][ T3660] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128
[   30.134775][ T3660] syz.1.61: attempt to access beyond end of device
[   30.134775][ T3660] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128
[   30.137136][ T3662] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.62: mark_inode_dirty error
[   30.171077][ T3662] EXT4-fs (loop3): 1 orphan inode deleted
[   30.183133][ T3662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.223066][ T3688] team0: No ports can be present during mode change
[   30.230126][ T3688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'.
[   30.267838][ T3688] team0 (unregistering): Port device team_slave_0 removed
[   30.277098][ T3688] team0 (unregistering): Port device team_slave_1 removed
[   30.293557][ T3690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'.
[   30.302441][ T3690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'.
[   30.313731][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.314136][ T3690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'.
[   30.331772][ T3690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'.
[   30.332523][ T3675] loop4: detected capacity change from 0 to 32768
[   30.411141][ T3305]  loop4: p1 p2 p3 < p5 p6 >
[   30.416285][ T3305] loop4: p2 size 16775168 extends beyond EOD, truncated
[   30.424110][ T3305] loop4: p5 start 4294970168 is beyond EOD, truncated
[   30.435028][ T3675]  loop4: p1 p2 p3 < p5 p6 >
[   30.440595][ T3675] loop4: p2 size 16775168 extends beyond EOD, truncated
[   30.451796][ T3675] loop4: p5 start 4294970168 is beyond EOD, truncated
[   30.461705][ T3700] loop3: detected capacity change from 0 to 2048
[   30.574387][ T3700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.622932][ T3719] loop4: detected capacity change from 0 to 1024
[   30.632970][ T3719] EXT4-fs: Ignoring removed nobh option
[   30.638582][ T3719] EXT4-fs: Ignoring removed bh option
[   30.672851][ T3719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.783101][ T3725] xt_CT: You must specify a L4 protocol and not use inversions on it
[   31.509035][   T29] kauditd_printk_skb: 414 callbacks suppressed
[   31.509051][   T29] audit: type=1400 audit(1761381878.850:613): avc:  denied  { mount } for  pid=3734 comm="syz.2.84" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   31.738882][   T29] audit: type=1400 audit(1761381878.890:614): avc:  denied  { unmount } for  pid=3734 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   31.758829][   T29] audit: type=1326 audit(1761381878.930:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   31.782406][   T29] audit: type=1326 audit(1761381878.930:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   31.805580][   T29] audit: type=1326 audit(1761381878.930:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   31.828815][   T29] audit: type=1326 audit(1761381878.930:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   31.852149][   T29] audit: type=1326 audit(1761381878.930:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   31.875405][   T29] audit: type=1326 audit(1761381878.930:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   31.898851][   T29] audit: type=1326 audit(1761381878.940:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   31.922097][   T29] audit: type=1326 audit(1761381878.950:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   31.951060][ T3718] delete_channel: no stack
[   32.002974][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.039529][ T3749] loop4: detected capacity change from 0 to 512
[   32.118585][ T3749] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   32.152995][ T3749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   32.199460][ T3749] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.288256][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   32.322004][ T3764] loop1: detected capacity change from 0 to 2048
[   32.336304][ T3740] loop0: detected capacity change from 0 to 32768
[   32.363527][ T3305]  loop1: p2 < > p3 < p5 > p4
[   32.368236][ T3305] loop1: partition table partially beyond EOD, truncated
[   32.384137][ T3305] loop1: p2 start 4278190080 is beyond EOD, truncated
[   32.393774][ T3305] loop1: p4 size 8192 extends beyond EOD, truncated
[   32.406801][ T3305] loop1: p5 size 8192 extends beyond EOD, truncated
[   32.414781][ T3740]  loop0: p1 p2 p3 < >
[   32.420164][ T3764]  loop1: p2 < > p3 < p5 > p4
[   32.424946][ T3764] loop1: partition table partially beyond EOD, truncated
[   32.436267][ T3740] loop0: p2 size 16775168 extends beyond EOD, truncated
[   32.440933][ T3764] loop1: p2 start 4278190080 is beyond EOD, truncated
[   32.449953][ T3771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'.
[   32.450615][ T3764] loop1: p4 size 8192 extends beyond EOD, truncated
[   32.468060][ T3764] loop1: p5 size 8192 extends beyond EOD, truncated
[   32.480310][ T3004]  loop1: p2 < > p3 < p5 > p4
[   32.485037][ T3004] loop1: partition table partially beyond EOD, truncated
[   32.492247][ T3004] loop1: p2 start 4278190080 is beyond EOD, truncated
[   32.492923][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.499519][ T3004] loop1: p4 size 8192 extends beyond EOD, truncated
[   32.515187][ T3004] loop1: p5 size 8192 extends beyond EOD, truncated
[   32.538738][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   32.552372][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   32.566404][ T3775] udevd[3775]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   32.632113][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   32.636200][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[   32.642205][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   32.699507][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[   32.701831][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   32.720659][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   32.723713][ T3786] loop1: detected capacity change from 0 to 1764
[   32.747784][ T3793] loop2: detected capacity change from 0 to 512
[   32.761816][ T3793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   32.786883][ T3793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   32.800536][ T3794] loop3: detected capacity change from 0 to 2048
[   32.801027][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[   32.823138][ T3793] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.841920][ T3496]  loop3: p2 < > p3 < p5 > p4
[   32.846634][ T3496] loop3: partition table partially beyond EOD, truncated
[   32.886548][ T3496] loop3: p2 start 4278190080 is beyond EOD, truncated
[   32.897331][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   32.931742][ T3496] loop3: p4 size 8192 extends beyond EOD, truncated
[   32.940169][ T3801] loop1: detected capacity change from 0 to 2048
[   32.948091][ T3496] loop3: p5 size 8192 extends beyond EOD, truncated
[   32.956257][ T3798] loop0: detected capacity change from 0 to 32768
[   32.973891][ T3801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.997785][ T3794]  loop3: p2 < > p3 < p5 > p4
[   33.002550][ T3794] loop3: partition table partially beyond EOD, truncated
[   33.014105][ T3502]  loop0: p1 p2 p3 < p5 p6 >
[   33.019453][ T3502] loop0: p2 size 16775168 extends beyond EOD, truncated
[   33.027796][ T3794] loop3: p2 start 4278190080 is beyond EOD, truncated
[   33.036161][ T3502] loop0: p5 start 4294970168 is beyond EOD, truncated
[   33.044037][ T3794] loop3: p4 size 8192 extends beyond EOD, truncated
[   33.062097][ T3798]  loop0: p1 p2 p3 < p5 p6 >
[   33.068627][ T3794] loop3: p5 size 8192 extends beyond EOD, truncated
[   33.082356][ T3798] loop0: p2 size 16775168 extends beyond EOD, truncated
[   33.096548][ T3798] loop0: p5 start 4294970168 is beyond EOD, truncated
[   33.176091][ T3813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.112'.
[   33.232025][ T3815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'.
[   33.285617][ T3825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3825 comm=syz.0.113
[   33.366943][ T3829] FAULT_INJECTION: forcing a failure.
[   33.366943][ T3829] name failslab, interval 1, probability 0, space 0, times 1
[   33.379617][ T3829] CPU: 1 UID: 0 PID: 3829 Comm: syz.0.119 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   33.379762][ T3829] Tainted: [W]=WARN
[   33.379767][ T3829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   33.379818][ T3829] Call Trace:
[   33.379824][ T3829]  <TASK>
[   33.379830][ T3829]  __dump_stack+0x1d/0x30
[   33.379853][ T3829]  dump_stack_lvl+0xe8/0x140
[   33.379871][ T3829]  dump_stack+0x15/0x1b
[   33.379885][ T3829]  should_fail_ex+0x265/0x280
[   33.379902][ T3829]  should_failslab+0x8c/0xb0
[   33.379933][ T3829]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   33.379967][ T3829]  ? __alloc_skb+0x101/0x320
[   33.379994][ T3829]  __alloc_skb+0x101/0x320
[   33.380049][ T3829]  netlink_alloc_large_skb+0xbf/0xf0
[   33.380076][ T3829]  netlink_sendmsg+0x3cf/0x6b0
[   33.380165][ T3829]  ? __pfx_netlink_sendmsg+0x10/0x10
[   33.380181][ T3829]  __sock_sendmsg+0x145/0x180
[   33.380201][ T3829]  __sys_sendto+0x268/0x330
[   33.380235][ T3829]  __x64_sys_sendto+0x76/0x90
[   33.380272][ T3829]  x64_sys_call+0x2d14/0x3000
[   33.380294][ T3829]  do_syscall_64+0xd2/0x200
[   33.380313][ T3829]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   33.380337][ T3829]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   33.380426][ T3829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.380443][ T3829] RIP: 0033:0x7febf181efc9
[   33.380512][ T3829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.380528][ T3829] RSP: 002b:00007febf027f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   33.380592][ T3829] RAX: ffffffffffffffda RBX: 00007febf1a75fa0 RCX: 00007febf181efc9
[   33.380606][ T3829] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003
[   33.380618][ T3829] RBP: 00007febf027f090 R08: 0000000000000000 R09: 0000000000000000
[   33.380631][ T3829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.380643][ T3829] R13: 00007febf1a76038 R14: 00007febf1a75fa0 R15: 00007ffdf1ef7b38
[   33.380663][ T3829]  </TASK>
[   33.442904][ T3831] loop4: detected capacity change from 0 to 2048
[   33.756897][ T3836] team0 (unregistering): Port device team_slave_0 removed
[   33.772763][ T3831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.801691][ T3836] team0 (unregistering): Port device team_slave_1 removed
[   34.031041][ T3854] xt_CT: You must specify a L4 protocol and not use inversions on it
[   34.150219][ T3842] loop2: detected capacity change from 0 to 32768
[   34.201100][ T3305]  loop2: p1 p2 p3 < p5 p6 >
[   34.206553][ T3305] loop2: p2 size 16775168 extends beyond EOD, truncated
[   34.221622][ T3305] loop2: p5 start 4294970168 is beyond EOD, truncated
[   34.239020][ T3842]  loop2: p1 p2 p3 < p5 p6 >
[   34.244575][ T3842] loop2: p2 size 16775168 extends beyond EOD, truncated
[   34.260543][ T3842] loop2: p5 start 4294970168 is beyond EOD, truncated
[   34.278123][ T3854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.287044][ T3854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.315888][ T3854] loop3: detected capacity change from 0 to 1024
[   34.325954][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.362160][ T3854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.438339][ T3854] can: request_module (can-proto-0) failed.
[   34.527032][ T3867] __nla_validate_parse: 2 callbacks suppressed
[   34.527047][ T3867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'.
[   34.575049][ T3869] loop2: detected capacity change from 0 to 1764
[   34.583619][ T3867] 8021q: adding VLAN 0 to HW filter on device bond1
[   34.643367][ T3873] loop2: detected capacity change from 0 to 1764
[   34.842830][ T3889] capability: warning: `syz.1.139' uses 32-bit capabilities (legacy support in use)
[   35.003973][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'.
[   35.066662][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.086002][ T3901] FAULT_INJECTION: forcing a failure.
[   35.086002][ T3901] name failslab, interval 1, probability 0, space 0, times 0
[   35.098698][ T3901] CPU: 0 UID: 0 PID: 3901 Comm: syz.3.144 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   35.098733][ T3901] Tainted: [W]=WARN
[   35.098740][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   35.098751][ T3901] Call Trace:
[   35.098759][ T3901]  <TASK>
[   35.098765][ T3901]  __dump_stack+0x1d/0x30
[   35.098796][ T3901]  dump_stack_lvl+0xe8/0x140
[   35.098812][ T3901]  dump_stack+0x15/0x1b
[   35.098845][ T3901]  should_fail_ex+0x265/0x280
[   35.098861][ T3901]  ? virtio_transport_do_socket_init+0x39/0x190
[   35.098960][ T3901]  should_failslab+0x8c/0xb0
[   35.098986][ T3901]  __kmalloc_cache_noprof+0x4c/0x4a0
[   35.099105][ T3901]  ? kfree+0xdb/0x400
[   35.099127][ T3901]  virtio_transport_do_socket_init+0x39/0x190
[   35.099154][ T3901]  vsock_assign_transport+0x442/0x4b0
[   35.099239][ T3901]  vsock_connect+0x3c5/0x820
[   35.099258][ T3901]  ? __pfx_autoremove_wake_function+0x10/0x10
[   35.099353][ T3901]  ? __pfx_vsock_connect+0x10/0x10
[   35.099451][ T3901]  __sys_connect+0x1f2/0x2b0
[   35.099483][ T3901]  __x64_sys_connect+0x3f/0x50
[   35.099505][ T3901]  x64_sys_call+0x2c0c/0x3000
[   35.099529][ T3901]  do_syscall_64+0xd2/0x200
[   35.099612][ T3901]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   35.099635][ T3901]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   35.099663][ T3901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.099680][ T3901] RIP: 0033:0x7f73fb8cefc9
[   35.099710][ T3901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.099724][ T3901] RSP: 002b:00007f73fa337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   35.099741][ T3901] RAX: ffffffffffffffda RBX: 00007f73fbb25fa0 RCX: 00007f73fb8cefc9
[   35.099777][ T3901] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 0000000000000006
[   35.099867][ T3901] RBP: 00007f73fa337090 R08: 0000000000000000 R09: 0000000000000000
[   35.099877][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.099887][ T3901] R13: 00007f73fbb26038 R14: 00007f73fbb25fa0 R15: 00007ffc6f4c4538
[   35.099939][ T3901]  </TASK>
[   35.602767][ T3915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'.
[   35.611829][ T3915] netlink: 'syz.3.149': attribute type 1 has an invalid length.
[   35.687536][ T3921] SELinux: security_context_str_to_sid (s) failed with errno=-22
[   35.714127][ T3921] loop2: detected capacity change from 0 to 4096
[   35.725435][ T3921] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4635: metadata_csum and uninit_bg are redundant flags; please run fsck.
[   35.738929][ T3921] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   35.854550][ T3931] loop1: detected capacity change from 0 to 512
[   35.877039][ T3931] EXT4-fs (loop1): orphan cleanup on readonly fs
[   35.885118][ T3931] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.155: bad orphan inode 13
[   35.895461][ T3931] ext4_test_bit(bit=12, block=18) = 1
[   35.900855][ T3931] is_bad_inode(inode)=0
[   35.904988][ T3931] NEXT_ORPHAN(inode)=2130706432
[   35.909947][ T3931] max_ino=32
[   35.913197][ T3931] i_nlink=1
[   35.916783][ T3931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   35.967496][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'.
[   36.018001][ T3931] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   36.030284][ T3931] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.155: bg 0: block 248: padding at end of block bitmap is not set
[   36.047337][ T3939] loop0: detected capacity change from 0 to 2048
[   36.054742][ T3931] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.155: Failed to acquire dquot type 1
[   36.066369][ T3931] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   36.094663][ T3931] syz.1.155 (3931) used greatest stack depth: 9248 bytes left
[   36.103965][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.114739][ T3305]  loop0: p2 < > p3 < p5 > p4
[   36.119412][ T3305] loop0: partition table partially beyond EOD, truncated
[   36.126778][ T3305] loop0: p2 start 4278190080 is beyond EOD, truncated
[   36.141752][ T3305] loop0: p4 size 8192 extends beyond EOD, truncated
[   36.156366][ T3305] loop0: p5 size 8192 extends beyond EOD, truncated
[   36.171456][ T3939]  loop0: p2 < > p3 < p5 > p4
[   36.176252][ T3939] loop0: partition table partially beyond EOD, truncated
[   36.188156][ T3939] loop0: p2 start 4278190080 is beyond EOD, truncated
[   36.196201][ T3939] loop0: p4 size 8192 extends beyond EOD, truncated
[   36.203670][ T3939] loop0: p5 size 8192 extends beyond EOD, truncated
[   36.223419][ T3944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'.
[   36.232731][ T3944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'.
[   36.432809][ T3959] loop0: detected capacity change from 0 to 512
[   36.490373][ T3959] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[   36.555491][ T3970] loop2: detected capacity change from 0 to 2048
[   36.567751][ T3959] System zones: 1-12
[   36.588519][ T3959] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.167: Directory hole found for htree index block 0
[   36.611907][ T3973] FAULT_INJECTION: forcing a failure.
[   36.611907][ T3973] name failslab, interval 1, probability 0, space 0, times 0
[   36.624818][ T3973] CPU: 1 UID: 0 PID: 3973 Comm: syz.3.173 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   36.624931][ T3973] Tainted: [W]=WARN
[   36.624937][ T3973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   36.624978][ T3973] Call Trace:
[   36.624983][ T3973]  <TASK>
[   36.624989][ T3973]  __dump_stack+0x1d/0x30
[   36.625007][ T3973]  dump_stack_lvl+0xe8/0x140
[   36.625023][ T3973]  dump_stack+0x15/0x1b
[   36.625051][ T3973]  should_fail_ex+0x265/0x280
[   36.625066][ T3973]  should_failslab+0x8c/0xb0
[   36.625088][ T3973]  kmem_cache_alloc_noprof+0x50/0x480
[   36.625111][ T3973]  ? getname_flags+0x80/0x3b0
[   36.625164][ T3973]  getname_flags+0x80/0x3b0
[   36.625187][ T3973]  io_mkdirat_prep+0x12d/0x190
[   36.625218][ T3973]  io_submit_sqes+0x5ef/0x1060
[   36.625251][ T3973]  __se_sys_io_uring_enter+0x1c1/0x1b70
[   36.625286][ T3973]  ? 0xffffffff81000000
[   36.625299][ T3973]  ? __rcu_read_unlock+0x4f/0x70
[   36.625320][ T3973]  ? get_pid_task+0x96/0xd0
[   36.625342][ T3973]  ? proc_fail_nth_write+0x13b/0x160
[   36.625371][ T3973]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   36.625468][ T3973]  ? vfs_write+0x7e8/0x960
[   36.625525][ T3973]  ? __rcu_read_unlock+0x4f/0x70
[   36.625552][ T3973]  ? __fget_files+0x184/0x1c0
[   36.625640][ T3973]  ? __x64_sys_io_uring_enter+0x2c/0x90
[   36.625744][ T3973]  __x64_sys_io_uring_enter+0x78/0x90
[   36.625784][ T3973]  x64_sys_call+0x2df0/0x3000
[   36.625845][ T3973]  do_syscall_64+0xd2/0x200
[   36.625861][ T3973]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   36.625883][ T3973]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   36.625908][ T3973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.625951][ T3973] RIP: 0033:0x7f73fb8cefc9
[   36.625965][ T3973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.626017][ T3973] RSP: 002b:00007f73fa337038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   36.626036][ T3973] RAX: ffffffffffffffda RBX: 00007f73fbb25fa0 RCX: 00007f73fb8cefc9
[   36.626047][ T3973] RDX: 0000000000003acd RSI: 0000000000005535 RDI: 0000000000000005
[   36.626057][ T3973] RBP: 00007f73fa337090 R08: 0000000000000000 R09: 0000000000000000
[   36.626067][ T3973] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001
[   36.626077][ T3973] R13: 00007f73fbb26038 R14: 00007f73fbb25fa0 R15: 00007ffc6f4c4538
[   36.626094][ T3973]  </TASK>
[   36.888395][ T3959] EXT4-fs (loop0): Remounting filesystem read-only
[   36.901743][ T3959] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[   36.916907][ T3959] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   36.927906][ T3959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.936232][ T3970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.961655][ T3970] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.982527][ T3975] loop1: detected capacity change from 0 to 2048
[   37.022936][ T3959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.167'.
[   37.100133][ T3975]  loop1: p2 < > p3 < p5 > p4
[   37.104887][ T3975] loop1: partition table partially beyond EOD, truncated
[   37.126693][ T3985] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.170: bg 0: block 345: padding at end of block bitmap is not set
[   37.141529][ T3987] tmpfs: Unknown parameter 'nP_blocks'
[   37.147026][   T29] kauditd_printk_skb: 352 callbacks suppressed
[   37.147036][   T29] audit: type=1400 audit(1761381884.490:973): avc:  denied  { mounton } for  pid=3986 comm="syz.3.177" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   37.189635][ T3975] loop1: p2 start 4278190080 is beyond EOD, truncated
[   37.204890][ T3985] EXT4-fs (loop2): Remounting filesystem read-only
[   37.228085][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.247332][ T3975] loop1: p4 size 8192 extends beyond EOD, truncated
[   37.268577][ T3975] loop1: p5 size 8192 extends beyond EOD, truncated
[   37.282322][ T1756] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   37.382533][ T3004]  loop1: p2 < > p3 < p5 > p4
[   37.387240][ T3004] loop1: partition table partially beyond EOD, truncated
[   37.413652][ T3004] loop1: p2 start 4278190080 is beyond EOD, truncated
[   37.421796][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.448925][ T3004] loop1: p4 size 8192 extends beyond EOD, truncated
[   37.458067][ T3004] loop1: p5 size 8192 extends beyond EOD, truncated
[   37.525157][   T29] audit: type=1400 audit(1761381884.870:974): avc:  denied  { connect } for  pid=3995 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   37.575370][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   37.577318][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[   37.600317][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   37.639711][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   37.654762][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[   37.693277][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   37.735695][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.867462][ T4013] syz.1.189 uses obsolete (PF_INET,SOCK_PACKET)
[   37.909881][ T4013] loop1: detected capacity change from 0 to 1024
[   37.937076][ T4013] EXT4-fs: Ignoring removed orlov option
[   37.996123][ T4013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.011899][ T4024] FAULT_INJECTION: forcing a failure.
[   38.011899][ T4024] name failslab, interval 1, probability 0, space 0, times 0
[   38.024602][ T4024] CPU: 0 UID: 0 PID: 4024 Comm: syz.0.192 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   38.024707][ T4024] Tainted: [W]=WARN
[   38.024712][ T4024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   38.024722][ T4024] Call Trace:
[   38.024728][ T4024]  <TASK>
[   38.024735][ T4024]  __dump_stack+0x1d/0x30
[   38.024798][ T4024]  dump_stack_lvl+0xe8/0x140
[   38.024818][ T4024]  dump_stack+0x15/0x1b
[   38.024855][ T4024]  should_fail_ex+0x265/0x280
[   38.024874][ T4024]  should_failslab+0x8c/0xb0
[   38.024901][ T4024]  kmem_cache_alloc_noprof+0x50/0x480
[   38.024928][ T4024]  ? dup_fd+0x3a/0x540
[   38.025002][ T4024]  dup_fd+0x3a/0x540
[   38.025023][ T4024]  ? __rcu_read_unlock+0x4f/0x70
[   38.025047][ T4024]  ? __fget_files+0x184/0x1c0
[   38.025076][ T4024]  __se_sys_close_range+0x103/0x470
[   38.025096][ T4024]  ? fput+0x8f/0xc0
[   38.025111][ T4024]  ? ksys_write+0x192/0x1a0
[   38.025199][ T4024]  __x64_sys_close_range+0x43/0x50
[   38.025219][ T4024]  x64_sys_call+0x2acd/0x3000
[   38.025236][ T4024]  do_syscall_64+0xd2/0x200
[   38.025252][ T4024]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   38.025336][ T4024]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   38.025362][ T4024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.025440][ T4024] RIP: 0033:0x7febf181efc9
[   38.025456][ T4024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.025472][ T4024] RSP: 002b:00007febf027f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   38.025491][ T4024] RAX: ffffffffffffffda RBX: 00007febf1a75fa0 RCX: 00007febf181efc9
[   38.025501][ T4024] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: 0000000000000003
[   38.025511][ T4024] RBP: 00007febf027f090 R08: 0000000000000000 R09: 0000000000000000
[   38.025521][ T4024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.025531][ T4024] R13: 00007febf1a76038 R14: 00007febf1a75fa0 R15: 00007ffdf1ef7b38
[   38.025596][ T4024]  </TASK>
[   38.030102][ T4013] netlink: 'syz.1.189': attribute type 1 has an invalid length.
[   38.105664][   T29] audit: type=1400 audit(1761381885.370:975): avc:  denied  { create } for  pid=4012 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   38.212416][ T4013] 8021q: adding VLAN 0 to HW filter on device bond2
[   38.269894][ T4022] loop3: detected capacity change from 0 to 128
[   38.301937][ T4022] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   38.314377][ T4022] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   38.325878][ T4013] netlink: 148 bytes leftover after parsing attributes in process `syz.1.189'.
[   38.341154][ T4013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.189'.
[   38.394277][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.403833][ T4035] loop2: detected capacity change from 0 to 2048
[   38.456087][ T4035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.482320][ T4046] loop4: detected capacity change from 0 to 2048
[   38.508953][ T4050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'.
[   38.520460][ T4046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.609105][   T29] audit: type=1326 audit(1761381885.950:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7fc00000
[   39.129956][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.246371][   T29] audit: type=1400 audit(1761381886.590:977): avc:  denied  { create } for  pid=4065 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   39.313892][   T29] audit: type=1326 audit(1761381886.630:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febf181efc9 code=0x7fc00000
[   39.338150][   T29] audit: type=1326 audit(1761381886.630:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7fc00000
[   39.362451][   T29] audit: type=1326 audit(1761381886.630:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7fc00000
[   39.385685][   T29] audit: type=1326 audit(1761381886.630:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7fc00000
[   39.408921][   T29] audit: type=1326 audit(1761381886.630:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7fc00000
[   39.458056][ T4070] 9pnet: Could not find request transport: fd<r=
[   39.671377][ T4093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.699761][ T4095] loop0: detected capacity change from 0 to 512
[   39.713492][ T4095] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   39.732450][ T4095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   39.745047][ T4095] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.762487][ T4093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.783420][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   39.816880][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.857992][ T4093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.886544][ T4100] loop0: detected capacity change from 0 to 2048
[   39.923904][ T4093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.934754][ T4100]  loop0: p2 < > p3 < p5 > p4
[   39.939586][ T4100] loop0: partition table partially beyond EOD, truncated
[   39.956980][ T4100] loop0: p2 start 4278190080 is beyond EOD, truncated
[   39.965122][ T4100] loop0: p4 size 8192 extends beyond EOD, truncated
[   39.974508][ T4100] loop0: p5 size 8192 extends beyond EOD, truncated
[   40.010676][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.047728][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.080876][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.089226][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.233417][ T4112] loop3: detected capacity change from 0 to 256
[   40.260652][ T4112] Zero length message leads to an empty skb
[   40.576455][ T4119] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   40.587146][ T4123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.223'.
[   40.684291][ T4131] netlink: 8 bytes leftover after parsing attributes in process `gtp'.
[   40.729208][ T4133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'.
[   41.073822][ T4149] loop2: detected capacity change from 0 to 32768
[   41.131655][ T4149]  loop2: p1 p2 p3 < p5 p6 >
[   41.138016][ T4149] loop2: p2 size 16775168 extends beyond EOD, truncated
[   41.146036][ T4149] loop2: p5 start 4294970168 is beyond EOD, truncated
[   41.148912][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.181146][ T4151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.235'.
[   41.248732][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   41.249232][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   41.268628][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   41.280013][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   41.389466][ T4162] loop3: detected capacity change from 0 to 2048
[   41.399589][ T4170] capability: warning: `syz.2.243' uses deprecated v2 capabilities in a way that may be insecure
[   41.503601][ T4180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.246'.
[   41.544349][ T3305]  loop3: unable to read partition table
[   41.550077][ T3305] loop3: partition table beyond EOD, truncated
[   41.596489][ T4162]  loop3: unable to read partition table
[   41.608372][ T4185] loop1: detected capacity change from 0 to 2048
[   41.620886][ T4162] loop3: partition table beyond EOD, truncated
[   41.627184][ T4162] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[   41.685443][ T4185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.790609][ T4171] loop4: detected capacity change from 0 to 32768
[   41.892400][ T4171]  loop4: p1 p2 p3 < p5 p6 >
[   41.898210][ T4171] loop4: p2 size 16775168 extends beyond EOD, truncated
[   41.905807][ T4203] loop3: detected capacity change from 0 to 2048
[   41.913428][ T4171] loop4: p5 start 4294970168 is beyond EOD, truncated
[   41.961089][ T3496]  loop3: p2 < > p3 < p5 > p4
[   41.965847][ T3496] loop3: partition table partially beyond EOD, truncated
[   41.976708][ T3496] loop3: p2 start 4278190080 is beyond EOD, truncated
[   42.020528][ T3496] loop3: p4 size 8192 extends beyond EOD, truncated
[   42.048107][ T3496] loop3: p5 size 8192 extends beyond EOD, truncated
[   42.066795][ T4203]  loop3: p2 < > p3 < p5 > p4
[   42.071536][ T4203] loop3: partition table partially beyond EOD, truncated
[   42.078767][ T4203] loop3: p2 start 4278190080 is beyond EOD, truncated
[   42.097477][ T4216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'.
[   42.097989][ T4203] loop3: p4 size 8192 extends beyond EOD, truncated
[   42.116818][ T4203] loop3: p5 size 8192 extends beyond EOD, truncated
[   42.229908][ T4218] loop2: detected capacity change from 0 to 1764
[   42.259372][   T29] kauditd_printk_skb: 299 callbacks suppressed
[   42.259384][   T29] audit: type=1400 audit(1761381889.600:1282): avc:  denied  { mount } for  pid=4217 comm="syz.2.261" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   42.384277][   T29] audit: type=1400 audit(1761381889.680:1283): avc:  denied  { unmount } for  pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   42.404403][   T29] audit: type=1326 audit(1761381889.690:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f2bfefc9 code=0x7ffc0000
[   42.427796][   T29] audit: type=1326 audit(1761381889.690:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f2bfefc9 code=0x7ffc0000
[   42.433508][ T4234] loop4: detected capacity change from 0 to 1024
[   42.451247][   T29] audit: type=1326 audit(1761381889.690:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f79f2bfefc9 code=0x7ffc0000
[   42.480741][   T29] audit: type=1326 audit(1761381889.690:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f2bfefc9 code=0x7ffc0000
[   42.504068][   T29] audit: type=1326 audit(1761381889.690:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f2bfefc9 code=0x7ffc0000
[   42.527398][   T29] audit: type=1400 audit(1761381889.700:1289): avc:  denied  { read } for  pid=4223 comm="syz.3.264" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   42.550185][   T29] audit: type=1400 audit(1761381889.700:1290): avc:  denied  { open } for  pid=4223 comm="syz.3.264" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   42.555627][ T4234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.573317][   T29] audit: type=1400 audit(1761381889.700:1291): avc:  denied  { create } for  pid=4223 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   42.672004][ T4239] loop2: detected capacity change from 0 to 1764
[   42.768932][ T4244] loop2: detected capacity change from 0 to 2048
[   42.781261][ T4247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.273'.
[   42.807284][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.923412][ T4244]  loop2: unable to read partition table
[   42.929194][ T4244] loop2: partition table beyond EOD, truncated
[   42.935483][ T4244] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[   43.085801][ T4257] loop2: detected capacity change from 0 to 512
[   43.144075][ T4257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[   43.152172][ T4257] System zones: 1-12
[   43.156365][ T4257] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.278: Directory hole found for htree index block 0
[   43.198249][ T4260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'.
[   43.213050][ T4260] team0 (unregistering): Port device team_slave_0 removed
[   43.223776][ T4260] team0 (unregistering): Port device team_slave_1 removed
[   43.231124][ T4257] EXT4-fs (loop2): Remounting filesystem read-only
[   43.248463][ T4257] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[   43.299259][ T4257] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   43.308185][ T4257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.313545][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'.
[   43.324004][ T4257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.278'.
[   43.343811][ T4265] bond_slave_0: entered promiscuous mode
[   43.349770][ T4265] bond_slave_1: entered promiscuous mode
[   43.356976][ T4265] macvtap1: entered promiscuous mode
[   43.362418][ T4265] bond0: entered promiscuous mode
[   43.367821][ T4265] macvtap1: entered allmulticast mode
[   43.373223][ T4265] bond0: entered allmulticast mode
[   43.378460][ T4265] bond_slave_0: entered allmulticast mode
[   43.384338][ T4265] bond_slave_1: entered allmulticast mode
[   43.411466][ T4265] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   43.431469][ T4270] bond0: left allmulticast mode
[   43.436357][ T4270] bond_slave_0: left allmulticast mode
[   43.441902][ T4270] bond_slave_1: left allmulticast mode
[   43.447508][ T4270] bond0: left promiscuous mode
[   43.452530][ T4270] bond_slave_0: left promiscuous mode
[   43.457896][ T4270] bond_slave_1: left promiscuous mode
[   43.463958][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.499849][ T4273] loop2: detected capacity change from 0 to 1024
[   43.529913][ T4273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.670172][ T4280] loop0: detected capacity change from 0 to 1024
[   43.693073][ T4280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.943406][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.990444][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.152495][ T4295] loop2: detected capacity change from 0 to 2048
[   44.209876][ T4304] loop3: detected capacity change from 0 to 1764
[   44.220189][ T4295]  loop2: p2 < > p3 < p5 > p4
[   44.225036][ T4295] loop2: partition table partially beyond EOD, truncated
[   44.250895][ T4295] loop2: p2 start 4278190080 is beyond EOD, truncated
[   44.270308][ T4295] loop2: p4 size 8192 extends beyond EOD, truncated
[   44.289995][ T4295] loop2: p5 size 8192 extends beyond EOD, truncated
[   44.319044][ T3004]  loop2: p2 < > p3 < p5 > p4
[   44.323837][ T3004] loop2: partition table partially beyond EOD, truncated
[   44.332836][ T3004] loop2: p2 start 4278190080 is beyond EOD, truncated
[   44.353089][ T3004] loop2: p4 size 8192 extends beyond EOD, truncated
[   44.370991][ T3004] loop2: p5 size 8192 extends beyond EOD, truncated
[   44.464422][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   44.472241][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   44.479361][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[   44.629796][ T4327] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   44.763069][ T4315] loop3: detected capacity change from 0 to 32768
[   44.832774][ T3305]  loop3: p1 p2 p3 < p5 p6 >
[   44.838209][ T3305] loop3: p2 size 16775168 extends beyond EOD, truncated
[   44.847177][ T3305] loop3: p5 start 4294970168 is beyond EOD, truncated
[   44.857610][ T4315]  loop3: p1 p2 p3 < p5 p6 >
[   44.864720][ T4315] loop3: p2 size 16775168 extends beyond EOD, truncated
[   44.881369][ T4315] loop3: p5 start 4294970168 is beyond EOD, truncated
[   44.936020][ T4331] loop0: detected capacity change from 0 to 1764
[   44.972015][ T4333] loop3: detected capacity change from 0 to 1764
[   45.044095][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   45.055731][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   45.056607][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   45.066972][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   45.122338][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   45.122366][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   45.143907][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   45.338277][ T4348] team0 (unregistering): Port device team_slave_0 removed
[   45.368782][ T4348] team0 (unregistering): Port device team_slave_1 removed
[   45.543811][ T4361] loop4: detected capacity change from 0 to 1764
[   45.592885][ T4363] loop4: detected capacity change from 0 to 1764
[   45.638995][ T4366] loop4: detected capacity change from 0 to 1024
[   45.655879][ T4366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.827881][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.964235][ T4359] loop2: detected capacity change from 0 to 32768
[   46.016542][ T4384] loop3: detected capacity change from 0 to 2048
[   46.023464][ T4359]  loop2: p1 p2 p3 < p5 p6 >
[   46.028817][ T4359] loop2: p2 size 16775168 extends beyond EOD, truncated
[   46.047146][ T4359] loop2: p5 start 4294970168 is beyond EOD, truncated
[   46.061845][ T3004]  loop2: p1 p2 p3 < p5 p6 >
[   46.067856][ T3004] loop2: p2 size 16775168 extends beyond EOD, truncated
[   46.081932][ T3004] loop2: p5 start 4294970168 is beyond EOD, truncated
[   46.127819][ T4386] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   46.152086][ T3496]  loop3: unable to read partition table
[   46.165200][ T3496] loop3: partition table beyond EOD, truncated
[   46.211477][ T4384]  loop3: unable to read partition table
[   46.219352][ T4384] loop3: partition table beyond EOD, truncated
[   46.225686][ T4384] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[   46.299889][ T3004]  loop3: unable to read partition table
[   46.312999][ T3004] loop3: partition table beyond EOD, truncated
[   46.325771][ T4390] __nla_validate_parse: 3 callbacks suppressed
[   46.325782][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'.
[   46.371968][ T4394] loop0: detected capacity change from 0 to 1764
[   46.982312][ T4412] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   47.111446][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.123168][ T4408] loop0: detected capacity change from 0 to 32768
[   47.161339][ T3496]  loop0: p1 p2 p3 < p5 p6 >
[   47.171480][ T3496] loop0: p2 size 16775168 extends beyond EOD, truncated
[   47.191648][ T3496] loop0: p5 start 4294970168 is beyond EOD, truncated
[   47.206733][ T4408]  loop0: p1 p2 p3 < p5 p6 >
[   47.212206][ T4408] loop0: p2 size 16775168 extends beyond EOD, truncated
[   47.222514][ T4408] loop0: p5 start 4294970168 is beyond EOD, truncated
[   47.282513][   T29] kauditd_printk_skb: 370 callbacks suppressed
[   47.282557][   T29] audit: type=1326 audit(1761381894.630:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   47.324096][   T29] audit: type=1326 audit(1761381894.630:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   47.347467][   T29] audit: type=1326 audit(1761381894.660:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   47.370755][   T29] audit: type=1326 audit(1761381894.660:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   47.394188][   T29] audit: type=1326 audit(1761381894.660:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf181efc9 code=0x7ffc0000
[   47.431943][ T4422] loop0: detected capacity change from 0 to 1764
[   47.469600][   T29] audit: type=1326 audit(1761381894.790:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f73fb8cda7f code=0x7ffc0000
[   47.524354][   T29] audit: type=1400 audit(1761381894.870:1668): avc:  denied  { bind } for  pid=4423 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   47.551884][   T29] audit: type=1400 audit(1761381894.890:1669): avc:  denied  { setopt } for  pid=4423 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   47.572862][   T29] audit: type=1400 audit(1761381894.890:1670): avc:  denied  { create } for  pid=4423 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.593081][   T29] audit: type=1400 audit(1761381894.890:1671): avc:  denied  { getopt } for  pid=4423 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.613085][ T4418] loop3: detected capacity change from 0 to 32768
[   47.637899][ T4427] loop0: detected capacity change from 0 to 2048
[   47.671888][ T4418]  loop3: p1 p2 p3 < p5 p6 >
[   47.677334][ T4418] loop3: p2 size 16775168 extends beyond EOD, truncated
[   47.685597][ T4418] loop3: p5 start 4294970168 is beyond EOD, truncated
[   47.706958][ T3305]  loop0: unable to read partition table
[   47.720651][ T3305] loop0: partition table beyond EOD, truncated
[   47.752085][ T4427]  loop0: unable to read partition table
[   47.757806][ T4427] loop0: partition table beyond EOD, truncated
[   47.764028][ T4427] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[   47.978813][ T4435] loop3: detected capacity change from 0 to 32768
[   48.059700][ T4446] loop1: detected capacity change from 0 to 2048
[   48.238991][ T4446]  loop1: p2 < > p3 < p5 > p4
[   48.243761][ T4446] loop1: partition table partially beyond EOD, truncated
[   48.251426][ T4435]  loop3: p1 p2 p3 < p5 p6 >
[   48.256834][ T4446] loop1: p2 start 4278190080 is beyond EOD, truncated
[   48.264524][ T4435] loop3: p2 size 16775168 extends beyond EOD, truncated
[   48.267769][ T4446] loop1: p4 size 8192 extends beyond EOD, truncated
[   48.278636][ T4446] loop1: p5 size 8192 extends beyond EOD, truncated
[   48.284607][ T4435] loop3: p5 start 4294970168 is beyond EOD, truncated
[   48.347046][ T4456] loop0: detected capacity change from 0 to 1024
[   48.373910][ T4456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.513043][    C1] hrtimer: interrupt took 56584 ns
[   48.940081][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.973673][ T4490] loop3: detected capacity change from 0 to 1764
[   49.111968][ T4485] loop4: detected capacity change from 0 to 32768
[   49.152761][ T3305]  loop4: p1 p2 p3 < p5 p6 >
[   49.163598][ T3305] loop4: p2 size 16775168 extends beyond EOD, truncated
[   49.182350][ T3305] loop4: p5 start 4294970168 is beyond EOD, truncated
[   49.217674][ T4485]  loop4: p1 p2 p3 < p5 p6 >
[   49.224573][ T4485] loop4: p2 size 16775168 extends beyond EOD, truncated
[   49.255141][ T4485] loop4: p5 start 4294970168 is beyond EOD, truncated
[   49.310579][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'.
[   49.347602][ T4512] erspan0: entered promiscuous mode
[   49.357541][ T4512] macvtap1: entered promiscuous mode
[   49.362967][ T4512] macvtap1: entered allmulticast mode
[   49.368393][ T4512] erspan0: entered allmulticast mode
[   49.401526][ T4519] erspan0: left allmulticast mode
[   49.406654][ T4519] erspan0: left promiscuous mode
[   49.473227][ T4522] loop4: detected capacity change from 0 to 1024
[   49.544786][ T4522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.934608][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.163036][ T4543] loop1: detected capacity change from 0 to 32768
[   50.202999][ T4543]  loop1: p1 p2 p3 < p5 p6 >
[   50.232177][ T4543] loop1: p2 size 16775168 extends beyond EOD, truncated
[   50.248101][ T4574] loop3: detected capacity change from 0 to 1764
[   50.282398][ T4543] loop1: p5 start 4294970168 is beyond EOD, truncated
[   50.313256][ T4550] loop4: detected capacity change from 0 to 32768
[   50.347605][ T4576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'.
[   50.361617][ T3496]  loop4: p1 p2 p3 < p5 p6 >
[   50.375186][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   50.386237][ T3496] loop4: p2 size 16775168 extends beyond EOD, truncated
[   50.393077][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   50.404380][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[   50.422426][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   50.438319][ T3496] loop4: p5 start 4294970168 is beyond EOD, truncated
[   50.467829][ T4550]  loop4: p1 p2 p3 < p5 p6 >
[   50.473271][ T4550] loop4: p2 size 16775168 extends beyond EOD, truncated
[   50.481056][ T4550] loop4: p5 start 4294970168 is beyond EOD, truncated
[   50.545024][ T4595] loop0: detected capacity change from 0 to 2048
[   50.581956][ T4595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.693007][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[   50.704292][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   50.715370][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   50.726197][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   50.762028][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   50.772252][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   50.949243][ T4608] loop1: detected capacity change from 0 to 1024
[   50.973605][ T4608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.420607][ T4617] loop2: detected capacity change from 0 to 1764
[   51.456048][ T4619] loop4: detected capacity change from 0 to 512
[   51.491508][ T4619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[   51.509755][ T4619] System zones: 1-12
[   51.530188][ T4619] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.419: Directory hole found for htree index block 0
[   51.551365][ T4619] EXT4-fs (loop4): Remounting filesystem read-only
[   51.557978][ T4619] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[   51.600141][ T4624] loop2: detected capacity change from 0 to 2048
[   51.629218][ T4619] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   51.671285][ T4619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.672568][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.724024][ T4624]  loop2: p2 < > p3 < p5 > p4
[   51.728741][ T4624] loop2: partition table partially beyond EOD, truncated
[   51.765638][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.775386][ T4624] loop2: p2 start 4278190080 is beyond EOD, truncated
[   51.784040][ T4624] loop2: p4 size 8192 extends beyond EOD, truncated
[   51.795520][ T4624] loop2: p5 size 8192 extends beyond EOD, truncated
[   51.846427][ T3004]  loop2: p2 < > p3 < p5 > p4
[   51.851152][ T3004] loop2: partition table partially beyond EOD, truncated
[   51.855589][ T4634] loop3: detected capacity change from 0 to 1024
[   51.861964][ T3004] loop2: p2 start 4278190080 is beyond EOD, truncated
[   51.872086][ T3004] loop2: p4 size 8192 extends beyond EOD, truncated
[   51.879282][ T3004] loop2: p5 size 8192 extends beyond EOD, truncated
[   51.898402][ T4634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.105741][ T4646] loop2: detected capacity change from 0 to 1764
[   52.139989][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'.
[   52.166847][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'.
[   52.175782][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'.
[   52.199760][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.729035][   T29] kauditd_printk_skb: 384 callbacks suppressed
[   52.729050][   T29] audit: type=1326 audit(1761381900.050:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0fa8c3da7f code=0x7ffc0000
[   52.840497][   T29] audit: type=1326 audit(1761381900.180:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2709aaefc9 code=0x7ffc0000
[   52.864166][   T29] audit: type=1326 audit(1761381900.180:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2709aaefc9 code=0x7ffc0000
[   52.864196][   T29] audit: type=1326 audit(1761381900.180:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2709aaefc9 code=0x7ffc0000
[   52.864221][   T29] audit: type=1326 audit(1761381900.180:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2709aaefc9 code=0x7ffc0000
[   52.864242][   T29] audit: type=1326 audit(1761381900.180:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2709aaefc9 code=0x7ffc0000
[   52.864314][   T29] audit: type=1326 audit(1761381900.180:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2709aaefc9 code=0x7ffc0000
[   52.864333][   T29] audit: type=1326 audit(1761381900.180:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2709aaefc9 code=0x7ffc0000
[   52.864351][   T29] audit: type=1326 audit(1761381900.180:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2709aaefc9 code=0x7ffc0000
[   52.864370][   T29] audit: type=1326 audit(1761381900.180:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2709aaefc9 code=0x7ffc0000
[   52.866799][ T4658] mmap: syz.4.434 (4658) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   52.905585][ T4651] loop2: detected capacity change from 0 to 32768
[   52.960191][ T4651]  loop2: p1 p2 p3 < p5 p6 >
[   52.960750][ T4651] loop2: p2 size 16775168 extends beyond EOD, truncated
[   52.962182][ T4651] loop2: p5 start 4294970168 is beyond EOD, truncated
[   53.151391][ T4674] loop3: detected capacity change from 0 to 1024
[   53.205905][ T4674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.424300][ T4679] loop2: detected capacity change from 0 to 32768
[   53.438871][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.471296][ T4679]  loop2: p1 p2 p3 < p5 p6 >
[   53.511895][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.528091][ T4679] loop2: p2 size 16775168 extends beyond EOD, truncated
[   53.555022][ T4679] loop2: p5 start 4294970168 is beyond EOD, truncated
[   53.728256][ T4694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'.
[   53.746415][ T4703] loop1: detected capacity change from 0 to 1764
[   53.766532][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'.
[   53.804249][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'.
[   53.851473][ T4709] loop3: detected capacity change from 0 to 1764
[   53.891761][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[   54.005693][ T4723] loop2: detected capacity change from 0 to 2048
[   54.168886][ T3305]  loop2: unable to read partition table
[   54.182608][ T3305] loop2: partition table beyond EOD, truncated
[   54.220747][ T4737] loop1: detected capacity change from 0 to 1764
[   54.279951][ T4723]  loop2: unable to read partition table
[   54.351037][ T4723] loop2: partition table beyond EOD, truncated
[   54.357231][ T4723] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[   54.556815][ T3004]  loop2: unable to read partition table
[   54.598039][ T3004] loop2: partition table beyond EOD, truncated
[   54.671255][ T4760] loop1: detected capacity change from 0 to 1024
[   54.721194][ T4760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.761864][ T4770] loop2: detected capacity change from 0 to 512
[   54.806557][ T4770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[   54.862642][ T4770] System zones: 1-12
[   54.866696][ T4770] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.478: Directory hole found for htree index block 0
[   54.951907][ T4770] EXT4-fs (loop2): Remounting filesystem read-only
[   54.967073][ T4770] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[   54.994536][ T4770] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   55.032345][ T4770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.046276][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.098327][ T4785] loop3: detected capacity change from 0 to 1764
[   55.166282][ T4783] loop1: detected capacity change from 0 to 2048
[   55.206065][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.223900][ T3305]  loop1: p2 < > p3 < p5 > p4
[   55.228640][ T3305] loop1: partition table partially beyond EOD, truncated
[   55.260848][ T3305] loop1: p2 start 4278190080 is beyond EOD, truncated
[   55.279707][ T3305] loop1: p4 size 8192 extends beyond EOD, truncated
[   55.288522][ T3305] loop1: p5 size 8192 extends beyond EOD, truncated
[   55.313682][ T4783]  loop1: p2 < > p3 < p5 > p4
[   55.318576][ T4783] loop1: partition table partially beyond EOD, truncated
[   55.350989][ T4783] loop1: p2 start 4278190080 is beyond EOD, truncated
[   55.361214][ T4783] loop1: p4 size 8192 extends beyond EOD, truncated
[   55.391190][ T4783] loop1: p5 size 8192 extends beyond EOD, truncated
[   55.506615][ T4788] loop4: detected capacity change from 0 to 32768
[   55.541164][ T4805] loop0: detected capacity change from 0 to 2048
[   55.562812][ T4807] loop1: detected capacity change from 0 to 2048
[   55.572090][ T4788]  loop4: p1 p2 p3 < p5 p6 >
[   55.577233][ T4788] loop4: p2 size 16775168 extends beyond EOD, truncated
[   55.585083][ T3502]  loop0: p2 < > p3 < p5 > p4
[   55.588727][ T4788] loop4: p5 start 4294970168 is beyond EOD, truncated
[   55.589781][ T3502] loop0: partition table partially beyond EOD, truncated
[   55.607119][ T3502] loop0: p2 start 4278190080 is beyond EOD, truncated
[   55.614078][ T4807]  loop1: p2 < > p3 < p5 > p4
[   55.618830][ T4807] loop1: partition table partially beyond EOD, truncated
[   55.626365][ T4807] loop1: p2 start 4278190080 is beyond EOD, truncated
[   55.638027][ T3502] loop0: p4 size 8192 extends beyond EOD, truncated
[   55.647265][ T4807] loop1: p4 size 8192 extends beyond EOD, truncated
[   55.654527][ T3502] loop0: p5 size 8192 extends beyond EOD, truncated
[   55.667955][ T4807] loop1: p5 size 8192 extends beyond EOD, truncated
[   55.668899][ T4805]  loop0: p2 < > p3 < p5 > p4
[   55.679433][ T4805] loop0: partition table partially beyond EOD, truncated
[   55.690398][ T4805] loop0: p2 start 4278190080 is beyond EOD, truncated
[   55.718056][ T4805] loop0: p4 size 8192 extends beyond EOD, truncated
[   55.746403][ T4805] loop0: p5 size 8192 extends beyond EOD, truncated
[   55.826212][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   55.828054][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   55.842199][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[   55.847855][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   55.874390][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   55.903710][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[   55.915325][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   55.921975][ T4820] loop1: detected capacity change from 0 to 164
[   55.938500][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   56.117372][ T4831] loop0: detected capacity change from 0 to 2048
[   56.366361][ T4837] loop3: detected capacity change from 0 to 1764
[   56.383890][ T4831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.445671][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'.
[   56.889986][ T4857] tipc: Started in network mode
[   56.894920][ T4857] tipc: Node identity a6ed744636de, cluster identity 4711
[   56.902432][ T4857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.961207][ T4847] tipc: Resetting bearer <eth:syzkaller0>
[   56.998083][ T4847] tipc: Disabling bearer <eth:syzkaller0>
[   57.122089][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'.
[   57.145424][ T4864] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   57.246339][ T4875] loop2: detected capacity change from 0 to 1024
[   57.259625][ T4875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.327104][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'.
[   57.590447][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.953464][   T29] kauditd_printk_skb: 349 callbacks suppressed
[   57.953479][   T29] audit: type=1400 audit(1761381905.300:2415): avc:  denied  { create } for  pid=4899 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   58.411284][ T4902] FAULT_INJECTION: forcing a failure.
[   58.411284][ T4902] name failslab, interval 1, probability 0, space 0, times 0
[   58.423959][ T4902] CPU: 1 UID: 0 PID: 4902 Comm: syz.4.523 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   58.423985][ T4902] Tainted: [W]=WARN
[   58.423990][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   58.424000][ T4902] Call Trace:
[   58.424006][ T4902]  <TASK>
[   58.424013][ T4902]  __dump_stack+0x1d/0x30
[   58.424033][ T4902]  dump_stack_lvl+0xe8/0x140
[   58.424074][ T4902]  dump_stack+0x15/0x1b
[   58.424088][ T4902]  should_fail_ex+0x265/0x280
[   58.424104][ T4902]  should_failslab+0x8c/0xb0
[   58.424126][ T4902]  __kmalloc_cache_node_noprof+0x54/0x4a0
[   58.424229][ T4902]  ? __get_vm_area_node+0x106/0x1d0
[   58.424254][ T4902]  __get_vm_area_node+0x106/0x1d0
[   58.424277][ T4902]  __vmalloc_node_range_noprof+0x28c/0xed0
[   58.424323][ T4902]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[   58.424470][ T4902]  ? __rcu_read_unlock+0x4f/0x70
[   58.424497][ T4902]  ? cred_has_capability+0x210/0x280
[   58.424588][ T4902]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[   58.424660][ T4902]  __vmalloc_noprof+0x83/0xc0
[   58.424737][ T4902]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[   58.424802][ T4902]  bpf_prog_alloc_no_stats+0x47/0x3b0
[   58.424863][ T4902]  ? bpf_prog_alloc+0x2a/0x150
[   58.424890][ T4902]  bpf_prog_alloc+0x3c/0x150
[   58.424917][ T4902]  bpf_prog_load+0x506/0x1100
[   58.424943][ T4902]  ? security_bpf+0x2b/0x90
[   58.425000][ T4902]  __sys_bpf+0x469/0x7c0
[   58.425055][ T4902]  __x64_sys_bpf+0x41/0x50
[   58.425080][ T4902]  x64_sys_call+0x2aee/0x3000
[   58.425115][ T4902]  do_syscall_64+0xd2/0x200
[   58.425133][ T4902]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.425163][ T4902]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   58.425189][ T4902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.425267][ T4902] RIP: 0033:0x7f79f2bfefc9
[   58.425279][ T4902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.425295][ T4902] RSP: 002b:00007f79f165f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   58.425313][ T4902] RAX: ffffffffffffffda RBX: 00007f79f2e55fa0 RCX: 00007f79f2bfefc9
[   58.425324][ T4902] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005
[   58.425335][ T4902] RBP: 00007f79f165f090 R08: 0000000000000000 R09: 0000000000000000
[   58.425346][ T4902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.425368][ T4902] R13: 00007f79f2e56038 R14: 00007f79f2e55fa0 R15: 00007fff84d89b48
[   58.425385][ T4902]  </TASK>
[   58.425466][ T4902] syz.4.523: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[   58.521133][   T29] audit: type=1326 audit(1761381905.870:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa8c3efc9 code=0x7ffc0000
[   58.522607][ T4902] ,cpuset=
[   58.534195][   T29] audit: type=1326 audit(1761381905.870:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa8c3efc9 code=0x7ffc0000
[   58.539256][ T4902] /,mems_allowed=0
[   58.539279][ T4902] CPU: 1 UID: 0 PID: 4902 Comm: syz.4.523 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   58.539320][ T4902] Tainted: [W]=WARN
[   58.539325][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   58.539335][ T4902] Call Trace:
[   58.539341][ T4902]  <TASK>
[   58.539394][ T4902]  __dump_stack+0x1d/0x30
[   58.539416][ T4902]  dump_stack_lvl+0xe8/0x140
[   58.539436][ T4902]  dump_stack+0x15/0x1b
[   58.539450][ T4902]  warn_alloc+0x12b/0x1a0
[   58.539479][ T4902]  __vmalloc_node_range_noprof+0x2b1/0xed0
[   58.539586][ T4902]  ? __rcu_read_unlock+0x4f/0x70
[   58.539612][ T4902]  ? cred_has_capability+0x210/0x280
[   58.539698][ T4902]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[   58.539773][ T4902]  __vmalloc_noprof+0x83/0xc0
[   58.539800][ T4902]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[   58.539864][ T4902]  bpf_prog_alloc_no_stats+0x47/0x3b0
[   58.539942][ T4902]  ? bpf_prog_alloc+0x2a/0x150
[   58.539969][ T4902]  bpf_prog_alloc+0x3c/0x150
[   58.539996][ T4902]  bpf_prog_load+0x506/0x1100
[   58.540021][ T4902]  ? security_bpf+0x2b/0x90
[   58.540094][ T4902]  __sys_bpf+0x469/0x7c0
[   58.540116][ T4902]  __x64_sys_bpf+0x41/0x50
[   58.540148][ T4902]  x64_sys_call+0x2aee/0x3000
[   58.540182][ T4902]  do_syscall_64+0xd2/0x200
[   58.540202][ T4902]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.540227][ T4902]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   58.540254][ T4902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.540302][ T4902] RIP: 0033:0x7f79f2bfefc9
[   58.540317][ T4902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.540332][ T4902] RSP: 002b:00007f79f165f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   58.540349][ T4902] RAX: ffffffffffffffda RBX: 00007f79f2e55fa0 RCX: 00007f79f2bfefc9
[   58.540361][ T4902] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005
[   58.540373][ T4902] RBP: 00007f79f165f090 R08: 0000000000000000 R09: 0000000000000000
[   58.540384][ T4902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.540454][ T4902] R13: 00007f79f2e56038 R14: 00007f79f2e55fa0 R15: 00007fff84d89b48
[   58.540471][ T4902]  </TASK>
[   58.540541][ T4902] Mem-Info:
[   58.544252][   T29] audit: type=1326 audit(1761381905.870:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa8c3efc9 code=0x7ffc0000
[   58.548748][ T4902] active_anon:24381 inactive_anon:0 isolated_anon:0
[   58.548748][ T4902]  active_file:18777 inactive_file:2246 isolated_file:0
[   58.548748][ T4902]  unevictable:0 dirty:54 writeback:0
[   58.548748][ T4902]  slab_reclaimable:3232 slab_unreclaimable:14652
[   58.548748][ T4902]  mapped:30340 shmem:16832 pagetables:1280
[   58.548748][ T4902]  sec_pagetables:0 bounce:0
[   58.548748][ T4902]  kernel_misc_reclaimable:0
[   58.548748][ T4902]  free:1861211 free_pcp:10848 free_cma:0
[   58.553458][   T29] audit: type=1326 audit(1761381905.870:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa8c3efc9 code=0x7ffc0000
[   58.557899][ T4902] Node 0 active_anon:97524kB inactive_anon:0kB active_file:75108kB inactive_file:8984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121360kB dirty:216kB writeback:0kB shmem:67328kB kernel_stack:3440kB pagetables:5120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   58.562185][   T29] audit: type=1326 audit(1761381905.870:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa8c3efc9 code=0x7ffc0000
[   58.566632][ T4902] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   58.571341][   T29] audit: type=1326 audit(1761381905.870:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa8c3efc9 code=0x7ffc0000
[   58.575843][ T4902] lowmem_reserve[]:
[   58.581901][   T29] audit: type=1326 audit(1761381905.870:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa8c3efc9 code=0x7ffc0000
[   58.587586][ T4902]  0 2881
[   58.593476][   T29] audit: type=1326 audit(1761381905.870:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa8c3efc9 code=0x7ffc0000
[   58.597875][ T4902]  7859 7859
[   58.750829][   T29] audit: type=1326 audit(1761381906.090:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4903 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73fb8cefc9 code=0x7ffc0000
[   58.751277][ T4902] 
[   58.762343][ T4904] netlink: 'syz.3.524': attribute type 4 has an invalid length.
[   58.764853][ T4902] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB
[   58.764963][ T4902] lowmem_reserve[]: 0 0 4978 4978
[   58.765005][ T4902] Node 0 Normal free:4482740kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:97408kB inactive_anon:0kB active_file:75108kB inactive_file:8984kB unevictable:0kB writepending:216kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:39832kB local_pcp:8268kB free_cma:0kB
[   59.058961][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'.
[   59.075222][ T4902] lowmem_reserve[]: 0 0 0 0
[   59.075254][ T4902] Node 0 DMA: 0*4kB 0*8kB 0*16kB 
[   59.098855][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'.
[   59.338889][ T4902] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   59.348877][ T4902] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB
[   59.365000][ T4902] Node 0 Normal: 531*4kB (UME) 447*8kB (UME) 87*16kB (UME) 32*32kB (UME) 20*64kB (UME) 30*128kB (UME) 71*256kB (UM) 70*512kB (UME) 48*1024kB (UM) 30*2048kB (UME) 1051*4096kB (UM) = 4482740kB
[   59.384151][ T4902] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   59.393434][ T4902] 37850 total pagecache pages
[   59.398091][ T4902] 0 pages in swap cache
[   59.402242][ T4902] Free swap  = 124996kB
[   59.406376][ T4902] Total swap = 124996kB
[   59.410542][ T4902] 2097051 pages RAM
[   59.414370][ T4902] 0 pages HighMem/MovableOnly
[   59.419038][ T4902] 81083 pages reserved
[   59.520648][ T4922] loop2: detected capacity change from 0 to 1764
[   59.605495][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'.
[   59.657008][ T4930] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   59.690718][ T4932] loop1: detected capacity change from 0 to 1024
[   59.701535][ T4932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.986833][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.117506][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'.
[   60.156482][ T4940] team0 (unregistering): Port device team_slave_0 removed
[   60.179250][ T4940] team0 (unregistering): Port device team_slave_1 removed
[   60.284381][ T4945] loop2: detected capacity change from 0 to 1024
[   60.312558][ T4945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.548531][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'.
[   60.566748][ T4963] loop4: detected capacity change from 0 to 1764
[   60.571608][ T4945] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.638071][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'.
[   60.663989][ T4967] bond1 (unregistering): Released all slaves
[   60.708364][ T4969] loop3: detected capacity change from 0 to 512
[   60.728952][ T4969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[   60.740036][ T4969] System zones: 1-12
[   60.746835][ T4969] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.546: Directory hole found for htree index block 0
[   60.761133][ T4969] EXT4-fs (loop3): Remounting filesystem read-only
[   60.767792][ T4969] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[   60.777684][ T4969] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   60.786323][ T4969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.854214][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.928338][ T4971] loop4: detected capacity change from 0 to 2048
[   61.017806][ T4971]  loop4: unable to read partition table
[   61.031140][ T4971] loop4: partition table beyond EOD, truncated
[   61.037523][ T4971] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[   61.100250][ T3004]  loop4: unable to read partition table
[   61.117026][ T3004] loop4: partition table beyond EOD, truncated
[   61.145096][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.257553][ T4975] loop3: detected capacity change from 0 to 32768
[   61.261623][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'.
[   61.319411][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'.
[   61.336233][ T4975]  loop3: p1 p2 p3 < p5 p6 >
[   61.337968][ T4988] bond_slave_0: entered promiscuous mode
[   61.346512][ T4988] bond_slave_1: entered promiscuous mode
[   61.352875][ T4975] loop3: p2 size 16775168 extends beyond EOD, truncated
[   61.354954][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'.
[   61.369249][ T4988] macvtap1: entered promiscuous mode
[   61.374592][ T4988] bond0: entered promiscuous mode
[   61.379944][ T4988] macvtap1: entered allmulticast mode
[   61.385368][ T4988] bond0: entered allmulticast mode
[   61.390467][ T4988] bond_slave_0: entered allmulticast mode
[   61.396219][ T4988] bond_slave_1: entered allmulticast mode
[   61.403591][ T4975] loop3: p5 start 4294970168 is beyond EOD, truncated
[   61.404605][ T4988] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   61.536929][ T5001] loop4: detected capacity change from 0 to 1024
[   61.564581][ T5001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.600439][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   61.611679][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   61.623338][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   61.634319][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   61.887711][ T5001] ==================================================================
[   61.895825][ T5001] BUG: KCSAN: data-race in filemap_read / filemap_read
[   61.902776][ T5001] 
[   61.905100][ T5001] read to 0xffff888121776168 of 8 bytes by task 5010 on cpu 0:
[   61.912633][ T5001]  filemap_read+0x6f/0xa00
[   61.917050][ T5001]  generic_file_read_iter+0x79/0x330
[   61.922340][ T5001]  ext4_file_read_iter+0x1cc/0x290
[   61.927560][ T5001]  copy_splice_read+0x442/0x660
[   61.932420][ T5001]  splice_direct_to_actor+0x290/0x680
[   61.937780][ T5001]  do_splice_direct+0xda/0x150
[   61.942531][ T5001]  do_sendfile+0x380/0x650
[   61.946942][ T5001]  __x64_sys_sendfile64+0x105/0x150
[   61.952146][ T5001]  x64_sys_call+0x2bb4/0x3000
[   61.956810][ T5001]  do_syscall_64+0xd2/0x200
[   61.961296][ T5001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.967176][ T5001] 
[   61.969485][ T5001] write to 0xffff888121776168 of 8 bytes by task 5001 on cpu 1:
[   61.977095][ T5001]  filemap_read+0x974/0xa00
[   61.981590][ T5001]  generic_file_read_iter+0x79/0x330
[   61.986873][ T5001]  ext4_file_read_iter+0x1cc/0x290
[   61.991971][ T5001]  copy_splice_read+0x442/0x660
[   61.996808][ T5001]  splice_direct_to_actor+0x290/0x680
[   62.002168][ T5001]  do_splice_direct+0xda/0x150
[   62.006918][ T5001]  do_sendfile+0x380/0x650
[   62.011335][ T5001]  __x64_sys_sendfile64+0x105/0x150
[   62.016525][ T5001]  x64_sys_call+0x2bb4/0x3000
[   62.021189][ T5001]  do_syscall_64+0xd2/0x200
[   62.025682][ T5001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.031570][ T5001] 
[   62.033878][ T5001] value changed: 0x0000000000000323 -> 0x0000000000000324
[   62.040962][ T5001] 
[   62.043266][ T5001] Reported by Kernel Concurrency Sanitizer on:
[   62.049400][ T5001] CPU: 1 UID: 0 PID: 5001 Comm: syz.4.556 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   62.060582][ T5001] Tainted: [W]=WARN
[   62.064369][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   62.074407][ T5001] ==================================================================
[   62.116228][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.129786][ T5018] tipc: Started in network mode
[   62.134733][ T5018] tipc: Node identity b6061b2e4705, cluster identity 4711
[   62.142018][ T5018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.182734][ T5016] tipc: Resetting bearer <eth:syzkaller0>
[   62.211440][ T5016] tipc: Disabling bearer <eth:syzkaller0>
[   62.223309][ T5009] loop2: detected capacity change from 0 to 32768
[   62.253740][ T5009]  loop2: p1 p2 p3 < p5 p6 >
[   62.260902][ T5009] loop2: p2 size 16775168 extends beyond EOD, truncated
[   62.269540][ T5009] loop2: p5 start 4294970168 is beyond EOD, truncated
[   62.338977][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   62.341837][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   62.349919][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   62.369568][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   62.379628][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.