last executing test programs:

3.169026417s ago: executing program 0 (id=2942):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10)
socket$inet6(0xa, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2)
fallocate(0xffffffffffffffff, 0x8, 0x4, 0x9)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080), 0x3, 0x4e2, &(0x7f0000000dc0)="$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")

3.121746502s ago: executing program 0 (id=2943):
r0 = epoll_create1(0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa0000007})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000313400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setresuid(0x0, 0xee00, 0x0)
syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58)
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff", 0xe)
socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a0000000500000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000580), 0x20075, r5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000954c1389edc1a3d22c61616428bd18353c61b2d43beb9fd610acfbfcca592346f3ac680c167daa77de3c4bd21b969319ca2fafb89460ecc07bb4ee867ab404085e89bcd49dd99310d55d609f1945caf668a48d3a66bd06f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setitimer(0x1, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r7 = fcntl$dupfd(r6, 0x0, r6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

2.119081591s ago: executing program 0 (id=2957):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400", @ANYRES32=0x1], 0x50)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4)
r4 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4})

2.112210102s ago: executing program 4 (id=2958):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000000000000000000000005000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

2.065629046s ago: executing program 4 (id=2960):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10)
setrlimit(0x8, &(0x7f0000000540)={0x3, 0x400})

2.023468361s ago: executing program 4 (id=2961):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7472616e733d66672c7266646eb53d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000'])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x3, 0x3, 0x7, 0xfeee, 0x2, "ee379d019ed09842717b20a96c0b2b773c5867", 0x4, 0x8})
writev(r3, &(0x7f0000003500)=[{&(0x7f0000002180)="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", 0x537}], 0x1)
unshare(0x2040400)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$inet(0x2, 0x2, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x70bd25, 0x21dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000)
sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024)

2.023052601s ago: executing program 0 (id=2962):
r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
pause()
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c000000040000000100008402f1ffff09000000030000000000000100000000000000010500000020000000000000000000000b02000000006100302e616100615f2e00"], 0x0, 0x58}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f0000000080)=r5}, 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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")
open(0x0, 0x16000, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]})
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2f5, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10)
uname(&(0x7f0000001600)=""/255)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='afs_cb_miss\x00', 0xffffffffffffffff, 0x0, 0xd4}, 0x18)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="66bb00fe0000010400000000000000000000131c", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d00000000140002800800020001000000080001000200000014000300"], 0x58}}, 0x0)

1.654229757s ago: executing program 1 (id=2967):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xfffffffe})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x4, 0x47, 0x1b0aa0000, 0x8, 0x1ff, 0x6, 0x4035})
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140))
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)

1.615918361s ago: executing program 4 (id=2968):
r0 = epoll_create1(0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa0000007})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000313400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setresuid(0x0, 0xee00, 0x0)
syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58)
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff", 0xe)
socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a0000000500000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000580), 0x20075, r5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000954c1389edc1a3d22c61616428bd18353c61b2d43beb9fd610acfbfcca592346f3ac680c167daa77de3c4bd21b969319ca2fafb89460ecc07bb4ee867ab404085e89bcd49dd99310d55d609f1945caf668a48d3a66bd06f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setitimer(0x1, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

1.41806166s ago: executing program 1 (id=2969):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x78)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00%'], 0x50)
socket$tipc(0x1e, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x4, 0x3355e513, 0x3, 0x6, 0xfffffffffffff000, 0x800, 0x7f, 0x4}, &(0x7f0000000340)={0xc, 0xe, 0x7, 0xffff, 0x8, 0x4, 0x1, 0x7456}, &(0x7f0000000380)={0x3, 0x7, 0x2, 0x4, 0x4, 0x3, 0x5, 0x7}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x400]}, 0x8})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c7c000066afeba142fdf1881d06ca790067c943c6c0228358ab87", @ANYRES16=r5, @ANYBLOB="0100000000040000000005000000180001801400020074756e6c3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10)
write(r6, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000a00)={0x1110, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xaa, 0xfc, "5590313adca076075308c1c05710c7420c11f5a12fcd965f2f67c1b7ec6c2fab7326dbf426abcdbc4494f93fa5b7c03ffa601e0a6d76b0828a8e889b3d5f4623df73452d848ece10f8666fb406d61ebd7557397e59332862b95e8b1d28b1af091cda164c39a855d61db3b3afa853ad0fe052ec76fab8546a53f15f0fbfd60dac4c5fe1330f1c7b5b709b843d43e0be6ec20455e78e9eb515ad0fdbca4a9f5e74598f59aa9cb0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "7aaf7e5df5cf67"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '\b'}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "c6d040aebe680360df8b252f96c1"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "24741cfc"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "81f947c273c771c4"}]]}, 0x1110}, 0x1, 0x0, 0x0, 0x4010}, 0x40080)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008051}, 0x8000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r11, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0)

1.243137948s ago: executing program 2 (id=2971):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31)
socket$caif_stream(0x25, 0x1, 0x5)
r2 = epoll_create1(0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8)
read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x100}, &(0x7f0000000040)=0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00')

1.160107526s ago: executing program 0 (id=2972):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400", @ANYRES32=0x1], 0x50)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4)
r4 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4})

1.091143953s ago: executing program 1 (id=2973):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10)
setrlimit(0x8, &(0x7f0000000540)={0x3, 0x400})

894.256122ms ago: executing program 1 (id=2975):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001000000", @ANYRES32, @ANYBLOB="0000f300000040000000e9ee17aa000000a50000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r2, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7a, r2})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8)
recvmsg(r4, &(0x7f0000001f00)={&(0x7f0000000d80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0}, 0x20)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x7}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000080)={r7, 0x0, 0x10, 0xaf7}, &(0x7f00000010c0)=0x18)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)={0x8000, 0x20, 0x8}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800e7b8c3c85637e6dd00000000c9821df20000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYBLOB="44c36e4dbeba2428e3f3374f9518c795188d30f007f72bbdf12d3a799f99af3789280f568c552cb55000549602bc98b92e596ae3a905e5ed79138df37f16da940695f642dc8b5086420f16114743a51914adef3f4e08789d4f5fbe78c25457b2e00e3e886af558c88bcaba6b7736ba96c0835d5c137b8159af850f3a53494ce6587fe056d1a722f9ba120172bdda3571b55f3773e52bab80b1a4cd7b82209d89accd243069"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x7d)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e4ea612fb7a728c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e)
syz_clone(0xc228ac00, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRESOCT=r8], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008044)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080), 0x4)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

893.416142ms ago: executing program 2 (id=2976):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000070000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x1, 0x1}, {0x6, 0x0, 0x0, 0xffffffff}]})
syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/")
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket(0xa, 0x3, 0xff)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000030000000085000000a90000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, r2, 0x5e5a000)

836.433258ms ago: executing program 0 (id=2978):
r0 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
close(r5)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='page_pool_release\x00', r6, 0x0, 0x7}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240))

596.527951ms ago: executing program 4 (id=2979):
socket(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000004080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000720000007b8af8ff00000000bfa2000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000009f3f1116dcd0b3c3919b578a5c0ae26eca644a167a26341c57340186486a2a4847a6d861a6db7be07124561097a0093e3a431d2cfc81f2adb52306d725acd51b256fd778ced912a6dae56261c814e3d9d97af2995b346c944ec83d4e39caf4fa3a791fb9896808b72e739c7b6b676eaf287f34f339358cbde576fd11f33bedca420e594b2b7537fb1d77b7d9ddf18548c16c77099270458a1b7fcf9cacf3b251b396707752ac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xa, 0x15, 0x363d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)="a95442a76f21fb5463af31779a253f5a0cbebff4131148e8c82b3e44e05097bc256e632cc26c87b46a0ca04ed0a160786ca9743e1ff9be271700a5ae785c399242adf4a0fa989bb8f3d68a0f397237120ed500a5abfb60fc604028e247930bc6da172502849c59f81e87e5542892ac4466f436c1affef71f0e6fb44584f2243450590f66a97e45642a2022cb8def2998909848adada51c07356fc4338f96f862c7e61ba54b6c6e72b1b490d57ae943ee9e1b7f208ca016d85ebdfbd8430cd8af6e114f709a5c730ac35a0c205999cddcbc0d11a8e3", &(0x7f0000000180)="f0d70dc0d64f27c324a8d77028e68d", 0x7ffe, r2}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20)
r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
setuid(0xee00)
unshare(0x28000600)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18)

528.572748ms ago: executing program 2 (id=2980):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x78)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00%'], 0x50)
socket$tipc(0x1e, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x4, 0x3355e513, 0x3, 0x6, 0xfffffffffffff000, 0x800, 0x7f, 0x4}, &(0x7f0000000340)={0xc, 0xe, 0x7, 0xffff, 0x8, 0x4, 0x1, 0x7456}, &(0x7f0000000380)={0x3, 0x7, 0x2, 0x4, 0x4, 0x3, 0x5, 0x7}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x400]}, 0x8})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c7c000066afeba142fdf1881d06ca790067c943c6c0228358ab87", @ANYRES16, @ANYBLOB="0100000000040000000005000000180001801400020074756e6c3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10)
write(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008051}, 0x8000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800)
r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe3cee10a85882cbecb29f2a22535ac50e64d95ecbab66f54373b94475e05b79a0a61bc2ae1e", 0x12d, r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r10, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0)

292.770761ms ago: executing program 2 (id=2982):
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="4017699168a308959fd6173cc25ce2e96899559b9ac0a28cf0ecf7a39c82bfca7b7225683054450b2c86f57ad075c90000000000000000f8d31f96880493dcbb93c946540c0c590207325c63303554c8a4f69b2a502164c5d9874122f0b2df484e2528fda97b6b6da150761241f5f9bcaa0a537ae1a687baf827290aeda7e95e6b2294a727a45273992e2a94c0bcaa650b", 0x91}], 0x5}, 0x0)

282.911172ms ago: executing program 3 (id=2983):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x5)
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

226.019348ms ago: executing program 2 (id=2984):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
unshare(0x26000400)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000de00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

225.774118ms ago: executing program 2 (id=2985):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040)
ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000001b518190000f0438d341895", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00'], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18)
listen(r4, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1)
r8 = accept4$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)
recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32)
write(r9, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16)
sendfile(r9, r0, 0x0, 0x3ffff)

192.516951ms ago: executing program 3 (id=2986):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
unshare(0x2c020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000800000022"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x10)

169.979043ms ago: executing program 3 (id=2987):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@grpjquota}]}, 0x1, 0x3f1, &(0x7f00000011c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x100)
preadv2(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)

41.115766ms ago: executing program 3 (id=2988):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10)
setrlimit(0x8, &(0x7f0000000540)={0x3, 0x400})

40.706086ms ago: executing program 3 (id=2989):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0)

27.967447ms ago: executing program 1 (id=2990):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)

18.345329ms ago: executing program 3 (id=2991):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040)
ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000001b518190000f0438d341895", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1)
r8 = accept4$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)
recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32)
write(r9, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16)
sendfile(r9, r0, 0x0, 0x3ffff)
sendfile(r9, r0, 0x0, 0x7ffffffffffffffd)

446.75µs ago: executing program 4 (id=2992):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x10001, <r1=>0x0}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xb, [@enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x30, 0x2e, 0x2e, 0x30, 0x0, 0x5f, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000000c0)=""/184, 0x37, 0xb8, 0x1, 0x4, 0x10000}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r4, r5, 0x2, 0x2, 0x5}, 0x50)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_trace_dev_match', 0xa8981, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x1c, 0xf2, &(0x7f0000000300)="85e13c7c32f2c0e38e1d8f53c182f3616ed1cbe09a8a3eef1dde5be1", &(0x7f0000000740)=""/242, 0x0, 0x0, 0xb8, 0xf4, &(0x7f0000000980)="4ee3f0516a59f3d04bc7a2c0889d71e4db9812644af1bf67c59c2c78d507d0c477f5d6fd86d08b8252832767c2f010abc0a029ec8d167dc8d072757fd45eb9ea2ab0c3dd96959f79dddb3d6b0ba5da2fd69511e13600d78c1b64bc002252c7d8161d421c02d79480d8b7851291c31a57363a86ee770affa42c948965236697d5b2eb31ab473ac9fa1606bd8c60710466bec62bc32b7b64c2a662e7b9d788f9704edc67fc641dfd1a8ba495bd2630e72954cab52aa4d20e0d", &(0x7f0000000a40)="e02fe490748c636f2cf953dee601b98a24d3a294173725192342b931cba3a3ae4028e20bc070d1ecdeecd13f3f25c6f7e629a5b59da6ae6bcef2bf7b79c4b84dc340aad443a736c8162f462fcd4080f46c30be7415e9a0cc31e7cd6e27071de6ff590d2fd31b5666c1960c40ef579f4fa5a323af7b9471ab6806342d29c581544cd269bc8cd5ba15d8d30c12e26e1829d3bea86b05ac707ab690844671a052e2879baf4aa9b74ce3707ba0c488578f60a6f8ccce9d4e245631dddfe5f55a1fbd98da945489b3fc64e4e16ebdfb2c5bf494d44af39b589bb2d7075f83a49902358a39be06ee40c46e12dd46ce4008f5023fe3d771", 0x4, 0x0, 0x80000000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000700)='kfree\x00', r6, 0x0, 0x6}, 0x18)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r8 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x6, &(0x7f0000000040), 0x4)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055)
ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0)

0s ago: executing program 1 (id=2993):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x78)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00%'], 0x50)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x4, 0x3355e513, 0x3, 0x6, 0xfffffffffffff000, 0x800, 0x7f, 0x4}, &(0x7f0000000340)={0xc, 0xe, 0x7, 0xffff, 0x8, 0x4, 0x1, 0x7456}, &(0x7f0000000380)={0x3, 0x7, 0x2, 0x4, 0x4, 0x3, 0x5, 0x7}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x400]}, 0x8})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c7c000066afeba142fdf1881d06ca790067c943c6c0228358ab87", @ANYRES16, @ANYBLOB="0100000000040000000005000000180001801400020074756e6c3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10)
write(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008051}, 0x8000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800)
r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r10, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

ler
[  322.568828][T15666] siw: device registration error -23
[  322.676845][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.772174][T15675] loop0: detected capacity change from 0 to 512
[  322.779540][T15675] EXT4-fs: Ignoring removed oldalloc option
[  322.785955][T15675] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  322.798866][T15675] EXT4-fs (loop0): 1 truncate cleaned up
[  322.805235][T15675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.124625][   T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.144005][   T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.161735][   T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.179534][   T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.190437][T15678] loop4: detected capacity change from 0 to 128
[  323.507966][T15689] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.548343][T15689] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.564913][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.577007][T15690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.586731][T15690] tipc: Disabling bearer <eth:syzkaller0>
[  323.598262][T15689] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.625156][T15678] syz.4.2506: attempt to access beyond end of device
[  323.625156][T15678] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[  323.638998][T15678] Buffer I/O error on dev loop4, logical block 128, lost async page write
[  323.668492][T15689] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.684650][T15693] loop0: detected capacity change from 0 to 1024
[  323.693059][T15693] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  323.705592][T15693] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2511: Invalid block bitmap block 0 in block_group 0
[  323.719755][T15693] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2511: Failed to acquire dquot type 0
[  323.731604][T15693] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.2511: Freeing blocks not in datazone - block = 0, count = 4096
[  323.745817][T15693] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2511: Invalid inode bitmap blk 0 in block_group 0
[  323.759418][   T31] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0
[  323.784951][   T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.793514][T15693] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  323.802384][   T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.810913][T15693] EXT4-fs (loop0): 1 orphan inode deleted
[  323.817212][T15693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.818735][   T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.840992][T15693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.851142][   T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.888479][T15701] xt_ecn: cannot match TCP bits for non-tcp packets
[  323.982961][T15706] loop4: detected capacity change from 0 to 512
[  323.990119][T15706] EXT4-fs: Ignoring removed oldalloc option
[  323.996732][T15706] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  324.007996][T15706] EXT4-fs (loop4): 1 truncate cleaned up
[  324.014069][T15706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.180552][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'.
[  324.234721][T15713] loop3: detected capacity change from 0 to 512
[  324.243272][T15713] EXT4-fs (loop3): failed to initialize system zone (-117)
[  324.250995][T15713] EXT4-fs (loop3): mount failed
[  324.474351][T15729] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.518528][T15729] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.535003][T15730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.543599][T15730] tipc: Disabling bearer <eth:syzkaller0>
[  324.567751][T15729] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.604620][T15733] siw: device registration error -23
[  324.627671][T15729] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.673593][   T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.686618][   T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.703431][   T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.707738][T15735] loop3: detected capacity change from 0 to 128
[  324.712173][   T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.771536][T15737] netlink: 'syz.2.2527': attribute type 10 has an invalid length.
[  324.783505][T15737] team0: Device ipvlan0 failed to register rx_handler
[  324.795749][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.105464][T15735] syz.3.2526: attempt to access beyond end of device
[  325.105464][T15735] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[  325.119394][T15735] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  325.215473][T15766] netlink: 'syz.4.2538': attribute type 10 has an invalid length.
[  325.225335][T15766] team0: Device ipvlan0 failed to register rx_handler
[  325.364927][T15773] loop1: detected capacity change from 0 to 512
[  325.371989][T15773] EXT4-fs: Ignoring removed oldalloc option
[  325.378585][T15773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  325.424553][T15773] EXT4-fs (loop1): 1 truncate cleaned up
[  325.430997][T15773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.591139][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2544'.
[  325.896988][T15787] loop2: detected capacity change from 0 to 32768
[  325.932294][T15781] loop3: detected capacity change from 0 to 32768
[  325.939547][T15787]  loop2: p1 p2 p3 < p5 p6 >
[  325.945372][T15787] loop2: p2 size 16775168 extends beyond EOD, truncated
[  325.954604][T15787] loop2: p5 start 4294970168 is beyond EOD, truncated
[  325.986677][T15781]  loop3: p1 p2 p3 < p5 p6 >
[  325.992161][T15781] loop3: p2 size 16775168 extends beyond EOD, truncated
[  326.000762][T15781] loop3: p5 start 4294970168 is beyond EOD, truncated
[  326.088814][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.144820][T15797] loop2: detected capacity change from 0 to 1024
[  326.160286][T15799] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.166961][T15797] EXT4-fs: Ignoring removed bh option
[  326.176891][T15797] EXT4-fs: inline encryption not supported
[  326.183916][T15797] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  326.206513][T15797] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  326.223205][T15802] siw: device registration error -23
[  326.252353][T15797] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2550: lblock 2 mapped to illegal pblock 2 (length 1)
[  326.266657][T15797] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2550: lblock 0 mapped to illegal pblock 48 (length 1)
[  326.282970][T15797] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2550: Failed to acquire dquot type 0
[  326.284147][T15799] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.304441][T15797] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  326.315107][T15797] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2550: mark_inode_dirty error
[  326.327198][T15801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.327288][T15797] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  326.344292][T15797] EXT4-fs (loop2): 1 orphan inode deleted
[  326.351379][T15801] tipc: Disabling bearer <eth:syzkaller0>
[  326.359387][T15797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.365045][   T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  326.386538][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0
[  326.400443][T15799] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.412156][T15804] loop4: detected capacity change from 0 to 128
[  326.421460][T15804] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  326.434887][T15804] ext4 filesystem being mounted at /527/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  326.480836][T15797] netlink: 'syz.2.2550': attribute type 49 has an invalid length.
[  326.497913][T15799] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.509071][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  326.574595][   T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.586671][   T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.610135][   T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.619612][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.632635][   T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.646116][T15815] loop3: detected capacity change from 0 to 512
[  326.647202][ T3322] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  326.666396][ T3322] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  326.676677][T15815] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.2558: corrupted in-inode xattr: invalid ea_ino
[  326.690244][ T3322] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  326.708736][T15815] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2558: couldn't read orphan inode 15 (err -117)
[  326.736798][T15815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.770780][T15828] loop2: detected capacity change from 0 to 512
[  326.780495][T15829] loop4: detected capacity change from 0 to 1024
[  326.791030][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.800832][T15829] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  326.817464][T15828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.833366][T15835] loop1: detected capacity change from 0 to 256
[  326.833366][T15838] loop3: detected capacity change from 0 to 128
[  326.841690][T15829] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2563: lblock 2 mapped to illegal pblock 2 (length 1)
[  326.847055][T15828] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.861661][T15829] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2563: lblock 0 mapped to illegal pblock 48 (length 1)
[  326.885501][T15835] FAT-fs (loop1): codepage cp869 not found
[  326.901461][T15829] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2563: Failed to acquire dquot type 0
[  326.907771][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.922433][T15829] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  326.923419][T15838] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  326.934318][T15829] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2563: mark_inode_dirty error
[  326.956902][T15829] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  326.967139][T15838] ext4 filesystem being mounted at /572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  326.967321][T15829] EXT4-fs (loop4): 1 orphan inode deleted
[  326.999754][   T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  327.015498][T15829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.019486][   T29] kauditd_printk_skb: 207 callbacks suppressed
[  327.019507][   T29] audit: type=1400 audit(1760602194.334:8166): avc:  denied  { write } for  pid=15836 comm="syz.3.2564" path="/572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  327.042975][T15844] loop1: detected capacity change from 0 to 512
[  327.082636][   T29] audit: type=1400 audit(1760602194.334:8167): avc:  denied  { setattr } for  pid=15836 comm="syz.3.2564" path="/572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  327.134219][   T31] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  327.142810][   T31] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0
[  327.154564][   T29] audit: type=1400 audit(1760602194.474:8168): avc:  denied  { create } for  pid=15827 comm="syz.4.2563" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  327.179160][T15844] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  327.180285][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.196793][T15844] EXT4-fs (loop1): orphan cleanup on readonly fs
[  327.198966][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  327.203247][   T37] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  327.212906][T15844] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present
[  327.237137][T15844] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  327.237358][T15847] loop2: detected capacity change from 0 to 512
[  327.246681][T15844] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2569: Failed to acquire dquot type 1
[  327.253678][T15847] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  327.265440][T15844] EXT4-fs (loop1): Remounting filesystem read-only
[  327.276192][   T37] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  327.282887][T15844] EXT4-fs (loop1): 1 truncate cleaned up
[  327.291262][   T37] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0
[  327.308751][   T29] audit: type=1400 audit(1760602194.624:8169): avc:  denied  { mount } for  pid=15846 comm="syz.2.2567" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  327.320853][ T3324] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  327.331242][   T29] audit: type=1400 audit(1760602194.634:8170): avc:  denied  { unmount } for  pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  327.365225][T15844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  327.378245][ T3324] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  327.388053][ T3324] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  327.407374][T15844] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=16
[  327.414718][T15853] loop3: detected capacity change from 0 to 512
[  327.424673][T15844] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=16
[  327.435917][   T29] audit: type=1400 audit(1760602194.764:8171): avc:  denied  { read } for  pid=15843 comm="syz.1.2569" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  327.459388][T15856] binfmt_misc: register: failed to install interpreter file ./file0/file1/../file0
[  327.471367][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.481581][T15853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.494296][T15853] ext4 filesystem being mounted at /574/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.508701][T15857] loop2: detected capacity change from 0 to 128
[  327.553488][T15868] loop1: detected capacity change from 0 to 4096
[  327.561829][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.576403][T15872] loop4: detected capacity change from 0 to 1024
[  327.584545][T15868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.597256][T15875] loop2: detected capacity change from 0 to 512
[  327.597470][T15872] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  327.604890][T15875] EXT4-fs: Ignoring removed bh option
[  327.616915][T15868] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2575: corrupted inode contents
[  327.619509][T15875] EXT4-fs: Ignoring removed mblk_io_submit option
[  327.638734][T15875] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  327.649060][T15868] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.2575: mark_inode_dirty error
[  327.663026][T15875] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  327.668051][T15879] loop3: detected capacity change from 0 to 1024
[  327.671851][T15872] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2579: lblock 2 mapped to illegal pblock 2 (length 1)
[  327.678943][T15868] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2575: corrupted inode contents
[  327.692175][T15875] EXT4-fs (loop2): orphan cleanup on readonly fs
[  327.704965][T15872] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2579: lblock 0 mapped to illegal pblock 48 (length 1)
[  327.710387][T15868] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.2575: mark_inode_dirty error
[  327.725335][T15872] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2579: Failed to acquire dquot type 0
[  327.736867][T15875] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2581: Failed to acquire dquot type 1
[  327.747971][T15872] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  327.759472][T15875] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2581: Invalid block bitmap block 0 in block_group 0
[  327.769786][T15879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.782824][T15872] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2579: mark_inode_dirty error
[  327.804017][T15879] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  327.806145][T15875] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2581: Invalid block bitmap block 0 in block_group 0
[  327.821501][T15879] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28
[  327.835183][T15868] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2575: corrupted inode contents
[  327.847165][T15879] EXT4-fs (loop3): This should not happen!! Data will be lost
[  327.847165][T15879] 
[  327.847188][T15879] EXT4-fs (loop3): Total free blocks count 0
[  327.859573][T15872] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  327.869080][T15879] EXT4-fs (loop3): Free/Dirty block details
[  327.869124][T15879] EXT4-fs (loop3): free_blocks=68451041280
[  327.869138][T15879] EXT4-fs (loop3): dirty_blocks=16
[  327.869150][T15879] EXT4-fs (loop3): Block reservation details
[  327.869161][T15879] EXT4-fs (loop3): i_reserved_data_blocks=1
[  327.875833][T15875] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2581: Invalid block bitmap block 0 in block_group 0
[  327.885987][T15868] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.2575: mark_inode_dirty error
[  327.892057][T15872] EXT4-fs (loop4): 1 orphan inode deleted
[  327.945454][ T1817] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  327.945467][T15875] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2581: Failed to acquire dquot type 1
[  327.945579][ T1817] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0
[  327.959851][T15868] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2575: corrupted inode contents
[  327.971811][T15872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.012412][T15875] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2581: Failed to acquire dquot type 1
[  328.017362][T15884] loop0: detected capacity change from 0 to 512
[  328.023825][T15868] EXT4-fs error (device loop1): ext4_truncate:4637: inode #15: comm syz.1.2575: mark_inode_dirty error
[  328.041438][T15875] EXT4-fs (loop2): 1 orphan inode deleted
[  328.048187][T15875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  328.061077][T15868] EXT4-fs error (device loop1) in ext4_setattr:6050: Corrupt filesystem
[  328.070783][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.080188][T15884] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  328.088289][T15884] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  328.096547][   T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  328.106328][T15884] System zones: 0-1, 15-15, 18-18, 34-34
[  328.108958][ T1817] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  328.114758][T15884] EXT4-fs (loop0): orphan cleanup on readonly fs
[  328.136681][ T1817] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0
[  328.139189][T15884] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  328.163460][T15884] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  328.170744][T15875] syz.2.2581 (15875) used greatest stack depth: 8992 bytes left
[  328.173316][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.190150][T15884] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2582: bg 0: block 40: padding at end of block bitmap is not set
[  328.198789][ T3324] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  328.224372][T15884] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  328.233907][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.235272][ T3324] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  328.248433][T15890] loop3: detected capacity change from 0 to 512
[  328.253104][ T3324] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  328.270591][T15884] EXT4-fs (loop0): 1 truncate cleaned up
[  328.271917][T15889] loop1: detected capacity change from 0 to 256
[  328.276854][T15884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  328.304517][T15889] FAT-fs (loop1): IO charset cp857 not found
[  328.312339][T15890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.329622][T15884] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.2582: bad symlink.
[  328.341949][T15890] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.378848][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.381161][T15900] loop4: detected capacity change from 0 to 1024
[  328.400408][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.412572][T15900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.445368][T15910] loop0: detected capacity change from 0 to 512
[  328.445705][T15911] loop2: detected capacity change from 0 to 512
[  328.458480][T15910] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  328.469237][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.494952][T15911] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2592: iget: bad i_size value: 38620345925642
[  328.511026][T15910] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0002]
[  328.519280][T15910] System zones: 0-2, 18-18, 34-35
[  328.521676][T15913] loop1: detected capacity change from 0 to 2048
[  328.525158][T15910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.544915][T15910] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.545061][T15911] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2592: couldn't read orphan inode 15 (err -117)
[  328.571232][T15910] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  328.581849][T15913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.595532][T15911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.608244][T15927] loop4: detected capacity change from 0 to 512
[  328.615132][T15913] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  328.639435][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.650747][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.660848][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.671782][T15927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.684769][T15927] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.703988][T15937] loop2: detected capacity change from 0 to 512
[  328.711398][T15937] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  328.723094][T15937] EXT4-fs (loop2): 1 truncate cleaned up
[  328.729412][T15937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.735103][T15941] loop1: detected capacity change from 0 to 512
[  328.749271][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.761227][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.777715][T15944] loop4: detected capacity change from 0 to 1024
[  328.777870][T15941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.784789][T15944] EXT4-fs: Ignoring removed oldalloc option
[  328.803039][T15944] EXT4-fs: Ignoring removed bh option
[  328.823563][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.839967][T15944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  328.845606][T15950] loop1: detected capacity change from 0 to 128
[  328.870215][T15944] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.2603: bad entry in directory: inode out of bounds - offset=0, inode=1073741837, rec_len=16, size=56 fake=0
[  328.920516][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  328.954159][T15955] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.010954][T15955] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.069450][T15955] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.128509][T15955] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.156509][T15950] syz.1.2605: attempt to access beyond end of device
[  329.156509][T15950] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[  329.170022][T15950] Buffer I/O error on dev loop1, logical block 128, lost async page write
[  329.180374][T15952] syz.1.2605: attempt to access beyond end of device
[  329.180374][T15952] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[  329.193953][T15952] Buffer I/O error on dev loop1, logical block 128, lost async page write
[  329.194266][T15953] loop2: detected capacity change from 0 to 32768
[  329.203156][T15952] syz.1.2605: attempt to access beyond end of device
[  329.203156][T15952] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[  329.222917][T15952] Buffer I/O error on dev loop1, logical block 128, lost async page write
[  329.240774][   T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.246807][T15953]  loop2: p1 p2 p3 < p5 p6 >
[  329.258664][   T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.260485][T15953] loop2: p2 size 16775168 extends beyond EOD, truncated
[  329.282601][ T1817] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.292725][T15953] loop2: p5 start 4294970168 is beyond EOD, truncated
[  329.299874][ T1817] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.317534][T15960] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.341938][T15962] loop4: detected capacity change from 0 to 512
[  329.348918][T15962] EXT4-fs: Ignoring removed bh option
[  329.354862][T15962] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  329.363992][T15962] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  329.373215][T15962] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  329.378555][T15960] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.383008][T15962] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006]
[  329.400739][T15962] System zones: 0-2, 18-18, 34-35
[  329.413570][T15963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.422507][T15963] tipc: Disabling bearer <eth:syzkaller0>
[  329.440694][T15968] loop4: detected capacity change from 0 to 512
[  329.458557][T15960] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.473172][T15968] ext4 filesystem being mounted at /544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  329.519739][T15968] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.2610: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  329.540380][T15968] EXT4-fs (loop4): Remounting filesystem read-only
[  329.555624][T15977] loop3: detected capacity change from 0 to 512
[  329.566230][T15979] loop0: detected capacity change from 0 to 512
[  329.577925][T15979] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  329.588131][T15980] loop2: detected capacity change from 0 to 1024
[  329.595589][T15980] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  329.597094][T15977] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.616858][T15960] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.617495][T15979] EXT4-fs (loop0): 1 truncate cleaned up
[  329.641842][T15980] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2612: Invalid block bitmap block 0 in block_group 0
[  329.681116][T15980] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2612: Failed to acquire dquot type 0
[  329.747194][T15991] loop3: detected capacity change from 0 to 2048
[  329.756992][T15980] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.2612: Freeing blocks not in datazone - block = 0, count = 4096
[  329.783092][T15991] EXT4-fs: Ignoring removed bh option
[  329.808283][T15980] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2612: Invalid inode bitmap blk 0 in block_group 0
[  329.822427][T15980] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  329.831369][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0
[  329.848560][T15991] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  329.864071][T15980] EXT4-fs (loop2): 1 orphan inode deleted
[  329.870393][T15991] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28
[  329.882817][T15991] EXT4-fs (loop3): This should not happen!! Data will be lost
[  329.882817][T15991] 
[  329.892502][T15991] EXT4-fs (loop3): Total free blocks count 0
[  329.898614][T15991] EXT4-fs (loop3): Free/Dirty block details
[  329.904518][T15991] EXT4-fs (loop3): free_blocks=2415919104
[  329.910401][T15991] EXT4-fs (loop3): dirty_blocks=32
[  329.915542][T15991] EXT4-fs (loop3): Block reservation details
[  329.921564][T15991] EXT4-fs (loop3): i_reserved_data_blocks=2
[  330.006837][T16000] loop3: detected capacity change from 0 to 1024
[  330.022219][T16000] EXT4-fs: Ignoring removed oldalloc option
[  330.030257][T16000] EXT4-fs: Ignoring removed bh option
[  330.083233][T16005] loop3: detected capacity change from 0 to 1024
[  330.221067][T16012] loop3: detected capacity change from 0 to 128
[  330.247224][T16012] ext4 filesystem being mounted at /588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  330.421068][T16027] loop3: detected capacity change from 0 to 512
[  330.427652][T16006] loop0: detected capacity change from 0 to 32768
[  330.440529][T16028] loop4: detected capacity change from 0 to 512
[  330.451340][T16025] loop2: detected capacity change from 0 to 4096
[  330.459706][T16028] EXT4-fs: Ignoring removed oldalloc option
[  330.464678][T16025] EXT4-fs (loop2): shut down requested (1)
[  330.466322][T16028] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  330.484789][T16028] EXT4-fs (loop4): 1 truncate cleaned up
[  330.494088][T16006]  loop0: p1 p2 p3 < p5 p6 >
[  330.506534][T16006] loop0: p2 size 16775168 extends beyond EOD, truncated
[  330.510419][T16033] loop3: detected capacity change from 0 to 2048
[  330.521828][T16006] loop0: p5 start 4294970168 is beyond EOD, truncated
[  330.594831][T16037] loop3: detected capacity change from 0 to 512
[  330.608859][T16040] loop2: detected capacity change from 0 to 1024
[  330.610514][T16041] loop0: detected capacity change from 0 to 1024
[  330.618449][T16037] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2632: bg 0: block 248: padding at end of block bitmap is not set
[  330.622632][T16041] EXT4-fs: Ignoring removed oldalloc option
[  330.637486][T16037] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2632: Failed to acquire dquot type 1
[  330.642612][T16041] EXT4-fs: Ignoring removed bh option
[  330.655873][T16037] EXT4-fs (loop3): 1 truncate cleaned up
[  330.667171][T16037] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.695884][T16049] loop2: detected capacity change from 0 to 128
[  330.705493][T16049] ext4 filesystem being mounted at /524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  330.745577][T16052] loop0: detected capacity change from 0 to 512
[  330.752877][T16052] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  330.771439][T16052] EXT4-fs (loop0): 1 truncate cleaned up
[  330.781296][T16057] loop3: detected capacity change from 0 to 512
[  330.788329][T16057] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  330.809743][T16057] ext4 filesystem being mounted at /595/file3 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.823402][T16057] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2637: corrupted xattr block 32: bad e_name length
[  330.837596][T16057] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  330.849316][T16065] loop2: detected capacity change from 0 to 512
[  330.872037][T16067] loop0: detected capacity change from 0 to 1024
[  330.880720][T16067] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  330.893599][T16067] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2639: Invalid block bitmap block 0 in block_group 0
[  330.914000][T16067] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2639: Failed to acquire dquot type 0
[  330.926065][T16067] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.2639: Freeing blocks not in datazone - block = 0, count = 4096
[  330.927067][T16073] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.940250][T16067] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2639: Invalid inode bitmap blk 0 in block_group 0
[  330.954101][T16075] loop2: detected capacity change from 0 to 2048
[  330.963163][T16067] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  330.978069][   T52] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0
[  330.980474][T16067] EXT4-fs (loop0): 1 orphan inode deleted
[  330.999487][T16076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.009241][T16076] tipc: Disabling bearer <eth:syzkaller0>
[  331.044465][T16073] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.108157][T16073] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.134304][   T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.147114][   T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.158035][T16082] siw: device registration error -23
[  331.165745][T16073] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.184821][   T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.194250][   T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.234855][T16088] loop4: detected capacity change from 0 to 128
[  331.252990][T16088] ext4 filesystem being mounted at /546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  331.266448][T16090] loop2: detected capacity change from 0 to 512
[  331.285556][   T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.294031][T16090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  331.310656][   T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.318911][   T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.328909][T16090] EXT4-fs (loop2): 1 truncate cleaned up
[  331.349290][   T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.394255][T16100] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.417972][T16103] loop2: detected capacity change from 0 to 2048
[  331.438044][T16100] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.453015][T16108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.488400][T16115] siw: device registration error -23
[  331.490047][T16108] tipc: Disabling bearer <eth:syzkaller0>
[  331.492498][T16100] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.557975][T16124] loop4: detected capacity change from 0 to 128
[  331.566914][T16124] ext4 filesystem being mounted at /552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  331.600346][T16100] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.634501][T16128] loop2: detected capacity change from 0 to 1024
[  331.640123][T16130] loop4: detected capacity change from 0 to 512
[  331.648105][T16130] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  331.661805][T16128] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  331.669523][T16130] EXT4-fs (loop4): 1 truncate cleaned up
[  331.678544][T16133] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.691128][T16128] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2663: lblock 2 mapped to illegal pblock 2 (length 1)
[  331.706472][T16128] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2663: lblock 0 mapped to illegal pblock 48 (length 1)
[  331.721599][T16136] loop0: detected capacity change from 0 to 1024
[  331.729951][T16128] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2663: Failed to acquire dquot type 0
[  331.731197][T16133] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.742214][T16128] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  331.763783][T16128] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2663: mark_inode_dirty error
[  331.768490][T16137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.781231][T16141] loop4: detected capacity change from 0 to 1024
[  331.788479][T16128] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  331.799666][T16128] EXT4-fs (loop2): 1 orphan inode deleted
[  331.799969][   T37] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  331.820771][   T37] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0
[  331.845802][T16137] tipc: Disabling bearer <eth:syzkaller0>
[  331.852677][ T3322] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  331.866790][ T3322] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  331.878756][T16133] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.891029][ T3322] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  331.892023][T16145] loop0: detected capacity change from 0 to 2048
[  331.964175][T16157] loop4: detected capacity change from 0 to 512
[  331.972311][T16133] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.990274][T16157] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.003011][T16162] siw: device registration error -23
[  332.011980][T16161] loop0: detected capacity change from 0 to 128
[  332.028766][T16161] ext4 filesystem being mounted at /486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  332.147744][T16174] loop0: detected capacity change from 0 to 128
[  332.154483][T16175] loop2: detected capacity change from 0 to 1024
[  332.176744][T16175] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  332.188876][T16175] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2677: Invalid block bitmap block 0 in block_group 0
[  332.206465][T16175] __quota_error: 77 callbacks suppressed
[  332.206483][T16175] Quota error (device loop2): write_blk: dquota write failed
[  332.206500][T16175] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  332.234427][T16175] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2677: Failed to acquire dquot type 0
[  332.256881][T16175] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.2677: Freeing blocks not in datazone - block = 0, count = 4096
[  332.271618][T16175] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2677: Invalid inode bitmap blk 0 in block_group 0
[  332.284924][T16175] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  332.292793][T16180] loop4: detected capacity change from 0 to 1024
[  332.294209][T16175] EXT4-fs (loop2): 1 orphan inode deleted
[  332.300815][   T60] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7
[  332.315664][   T60] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0
[  332.317934][T16180] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  332.340156][T16180] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2680: lblock 2 mapped to illegal pblock 2 (length 1)
[  332.354799][T16180] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  332.363215][T16180] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2680: lblock 0 mapped to illegal pblock 48 (length 1)
[  332.377709][T16180] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  332.386726][T16180] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2680: Failed to acquire dquot type 0
[  332.398959][T16180] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  332.408684][T16180] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2680: mark_inode_dirty error
[  332.420737][T16180] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  332.431262][T16180] EXT4-fs (loop4): 1 orphan inode deleted
[  332.446308][   T37] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  332.465377][   T37] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  332.473944][   T37] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0
[  332.474917][T16178] syz.0.2678: attempt to access beyond end of device
[  332.474917][T16178] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[  332.498989][T16178] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  332.507891][T16174] syz.0.2678: attempt to access beyond end of device
[  332.507891][T16174] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[  332.509312][ T3324] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  332.521495][T16174] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  332.543211][ T3324] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  332.553444][ T3324] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  332.578517][T16186] loop4: detected capacity change from 0 to 1024
[  332.610678][T16193] loop0: detected capacity change from 0 to 256
[  332.625877][T16193] FAT-fs (loop0): Directory bread(block 64) failed
[  332.632781][T16193] FAT-fs (loop0): Directory bread(block 65) failed
[  332.639737][T16193] FAT-fs (loop0): Directory bread(block 66) failed
[  332.646646][T16193] FAT-fs (loop0): Directory bread(block 67) failed
[  332.653214][T16193] FAT-fs (loop0): Directory bread(block 68) failed
[  332.659987][T16193] FAT-fs (loop0): Directory bread(block 69) failed
[  332.666792][T16193] FAT-fs (loop0): Directory bread(block 70) failed
[  332.673527][T16193] FAT-fs (loop0): Directory bread(block 71) failed
[  332.680224][T16193] FAT-fs (loop0): Directory bread(block 72) failed
[  332.687018][T16193] FAT-fs (loop0): Directory bread(block 73) failed
[  332.689108][   T29] audit: type=1326 audit(1760602200.014:8227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.4.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  332.721123][T16196] loop4: detected capacity change from 0 to 512
[  332.728144][   T29] audit: type=1326 audit(1760602200.044:8228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.4.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  332.728443][T16196] EXT4-fs: Ignoring removed oldalloc option
[  332.752441][   T29] audit: type=1326 audit(1760602200.044:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.4.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  332.759243][T16196] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  332.782626][   T29] audit: type=1326 audit(1760602200.044:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.4.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  332.818511][T16196] EXT4-fs (loop4): 1 truncate cleaned up
[  332.824445][T16199] loop0: detected capacity change from 0 to 128
[  332.832882][T16199] ext4 filesystem being mounted at /492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  332.925021][T16202] loop0: detected capacity change from 0 to 512
[  333.072803][T16217] loop0: detected capacity change from 0 to 512
[  333.080345][T16217] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  333.092153][T16217] EXT4-fs (loop0): 1 truncate cleaned up
[  333.136729][T16221] loop0: detected capacity change from 0 to 1024
[  333.288835][T16233] loop0: detected capacity change from 0 to 1024
[  333.295764][T16233] EXT4-fs: Ignoring removed oldalloc option
[  333.302150][T16233] EXT4-fs: Ignoring removed bh option
[  333.339462][T16237] loop0: detected capacity change from 0 to 512
[  333.347408][T16237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  333.355565][T16237] System zones: 1-12
[  333.359876][T16237] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.2699: Directory hole found for htree index block 0
[  333.372929][T16237] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[  333.381166][T16237] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.2699: Directory hole found for htree index block 0
[  333.394207][T16237] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  333.404758][T16237] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.2699: Directory hole found for htree index block 0
[  333.494971][T16243] loop0: detected capacity change from 0 to 1024
[  333.502294][T16243] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  333.514808][T16243] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2700: Invalid block bitmap block 0 in block_group 0
[  333.528658][T16243] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2700: Failed to acquire dquot type 0
[  333.540500][T16243] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.2700: Freeing blocks not in datazone - block = 0, count = 4096
[  333.554618][T16243] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2700: Invalid inode bitmap blk 0 in block_group 0
[  333.567769][T16243] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  333.576614][   T37] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0
[  333.576734][T16243] EXT4-fs (loop0): 1 orphan inode deleted
[  333.669496][T16254] loop4: detected capacity change from 0 to 512
[  333.687952][T16254] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2706: bg 0: block 248: padding at end of block bitmap is not set
[  333.702808][T16254] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2706: Failed to acquire dquot type 1
[  333.714881][T16254] EXT4-fs (loop4): 1 truncate cleaned up
[  333.721231][T16254] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.733306][T16254] No source specified
[  333.843254][T16262] loop4: detected capacity change from 0 to 512
[  333.851724][T16262] EXT4-fs: Ignoring removed oldalloc option
[  333.858287][T16262] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  333.870477][T16262] EXT4-fs (loop4): 1 truncate cleaned up
[  333.924590][T16269] loop2: detected capacity change from 0 to 4096
[  334.181780][T16285] loop2: detected capacity change from 0 to 512
[  334.198209][T16285] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2718: bg 0: block 248: padding at end of block bitmap is not set
[  334.212934][T16285] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2718: Failed to acquire dquot type 1
[  334.225455][T16285] EXT4-fs (loop2): 1 truncate cleaned up
[  334.231786][T16285] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.286476][T16292] loop0: detected capacity change from 0 to 512
[  334.298726][T16292] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.336440][T16297] loop0: detected capacity change from 0 to 2048
[  334.350425][T16297] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  334.365554][T16297] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  334.377889][T16297] EXT4-fs (loop0): This should not happen!! Data will be lost
[  334.377889][T16297] 
[  334.387925][T16297] EXT4-fs (loop0): Total free blocks count 0
[  334.394031][T16297] EXT4-fs (loop0): Free/Dirty block details
[  334.400091][T16297] EXT4-fs (loop0): free_blocks=2415919504
[  334.405908][T16297] EXT4-fs (loop0): dirty_blocks=32
[  334.411065][T16297] EXT4-fs (loop0): Block reservation details
[  334.417198][T16297] EXT4-fs (loop0): i_reserved_data_blocks=2
[  334.432665][   T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  334.445468][   T37] EXT4-fs (loop0): This should not happen!! Data will be lost
[  334.445468][   T37] 
[  334.469600][T16301] loop0: detected capacity change from 0 to 512
[  334.488569][T16301] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.512951][T16301] lo speed is unknown, defaulting to 1000
[  334.562329][T16305] loop0: detected capacity change from 0 to 512
[  334.570526][T16305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  334.578956][T16305] System zones: 1-12
[  334.592808][T16305] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.2723: Directory hole found for htree index block 0
[  334.605648][T16305] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[  334.614487][T16305] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.2723: Directory hole found for htree index block 0
[  334.627560][T16305] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  334.638239][T16305] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.2723: Directory hole found for htree index block 0
[  334.668492][T16308] loop4: detected capacity change from 0 to 1024
[  334.675707][T16308] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  334.690894][T16310] loop0: detected capacity change from 0 to 512
[  334.699316][T16308] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2724: lblock 2 mapped to illegal pblock 2 (length 1)
[  334.713601][T16308] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2724: lblock 0 mapped to illegal pblock 48 (length 1)
[  334.714696][T16310] EXT4-fs (loop0): failed to initialize system zone (-117)
[  334.728509][T16308] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2724: Failed to acquire dquot type 0
[  334.735622][T16310] EXT4-fs (loop0): mount failed
[  334.747049][T16308] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  334.761483][T16308] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2724: mark_inode_dirty error
[  334.773263][T16308] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  334.783674][T16308] EXT4-fs (loop4): 1 orphan inode deleted
[  334.807883][   T60] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  334.822649][   T60] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0
[  334.834874][ T3324] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  334.848127][ T3324] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  334.858020][ T3324] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  334.908611][T16318] loop4: detected capacity change from 0 to 2048
[  334.915774][T16318] EXT4-fs: Ignoring removed bh option
[  334.994156][T16327] loop0: detected capacity change from 0 to 512
[  335.001252][T16327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  335.012727][T16327] EXT4-fs (loop0): 1 truncate cleaned up
[  335.014523][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2730'.
[  335.049714][T16330] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2732'.
[  335.059564][T16332] loop4: detected capacity change from 0 to 512
[  335.089658][T16332] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.114950][T16332] lo speed is unknown, defaulting to 1000
[  335.125743][T16339] loop2: detected capacity change from 0 to 512
[  335.138007][T16339] ext4 filesystem being mounted at /554/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  335.182992][T16342] loop0: detected capacity change from 0 to 512
[  335.190821][T16342] EXT4-fs: Ignoring removed oldalloc option
[  335.197074][T16342] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  335.208808][T16342] EXT4-fs (loop0): 1 truncate cleaned up
[  335.217603][T16345] loop2: detected capacity change from 0 to 128
[  335.236200][T16345] ext4 filesystem being mounted at /555/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  335.251721][T16348] loop4: detected capacity change from 0 to 4096
[  335.351297][T16359] loop2: detected capacity change from 0 to 512
[  335.359142][T16359] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  335.371466][T16359] EXT4-fs (loop2): 1 truncate cleaned up
[  335.412475][T16365] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2745'.
[  335.419776][T16366] loop2: detected capacity change from 0 to 1024
[  335.441598][T16366] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  335.458926][T16369] loop1: detected capacity change from 0 to 512
[  335.468616][T16366] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2744: lblock 2 mapped to illegal pblock 2 (length 1)
[  335.483159][T16366] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2744: lblock 0 mapped to illegal pblock 48 (length 1)
[  335.500751][T16366] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2744: Failed to acquire dquot type 0
[  335.513151][T16366] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  335.515003][T16369] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.523048][T16366] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2744: mark_inode_dirty error
[  335.544958][T16366] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  335.550408][T16369] lo speed is unknown, defaulting to 1000
[  335.555529][T16366] EXT4-fs (loop2): 1 orphan inode deleted
[  335.566947][   T52] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  335.581591][   T52] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0
[  335.625733][   T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.651774][ T3322] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  335.666693][   T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.670715][ T3322] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  335.687912][   T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.706957][ T3322] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  335.708329][   T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.727771][T16381] loop1: detected capacity change from 0 to 512
[  335.753443][T16381] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2751: bg 0: block 248: padding at end of block bitmap is not set
[  335.769871][T16381] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2751: Failed to acquire dquot type 1
[  335.782655][T16381] EXT4-fs (loop1): 1 truncate cleaned up
[  335.791757][T16386] loop2: detected capacity change from 0 to 512
[  335.809392][T16381] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.835426][T16386] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.880653][T16396] loop1: detected capacity change from 0 to 512
[  335.899615][T16396] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  335.930408][T16404] loop4: detected capacity change from 0 to 512
[  335.930634][T16396] EXT4-fs (loop1): 1 truncate cleaned up
[  335.956667][T16404] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.973489][T16407] loop2: detected capacity change from 0 to 512
[  335.975069][T16389] lo speed is unknown, defaulting to 1000
[  336.000316][T16407] EXT4-fs: Ignoring removed bh option
[  336.005841][T16407] EXT4-fs: Ignoring removed mblk_io_submit option
[  336.017913][T16407] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  336.061008][T16407] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  336.061155][T16407] EXT4-fs (loop2): orphan cleanup on readonly fs
[  336.103653][T16418] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2760'.
[  336.125587][T16389] chnl_net:caif_netlink_parms(): no params data found
[  336.126801][T16407] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2756: Failed to acquire dquot type 1
[  336.173009][T16423] loop1: detected capacity change from 0 to 1024
[  336.178183][T16428] loop0: detected capacity change from 0 to 512
[  336.188399][T16407] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2756: Invalid block bitmap block 0 in block_group 0
[  336.203116][T16407] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2756: Invalid block bitmap block 0 in block_group 0
[  336.217503][T16407] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2756: Invalid block bitmap block 0 in block_group 0
[  336.225469][T16428] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2763: bg 0: block 248: padding at end of block bitmap is not set
[  336.231948][T16407] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2756: Failed to acquire dquot type 1
[  336.258079][T16435] loop4: detected capacity change from 0 to 1024
[  336.258765][T16389] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.265031][T16435] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  336.271778][T16389] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.273433][T16428] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2763: Failed to acquire dquot type 1
[  336.300175][T16389] bridge_slave_0: entered allmulticast mode
[  336.305189][T16428] EXT4-fs (loop0): 1 truncate cleaned up
[  336.308008][T16407] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2756: Failed to acquire dquot type 1
[  336.313522][T16428] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.325515][T16389] bridge_slave_0: entered promiscuous mode
[  336.342150][T16435] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2762: Invalid block bitmap block 0 in block_group 0
[  336.343822][T16389] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.356691][T16435] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2762: Failed to acquire dquot type 0
[  336.363381][T16389] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.375531][T16435] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2762: Freeing blocks not in datazone - block = 0, count = 4096
[  336.383144][T16407] EXT4-fs (loop2): 1 orphan inode deleted
[  336.396610][T16389] bridge_slave_1: entered allmulticast mode
[  336.402617][T16435] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2762: Invalid inode bitmap blk 0 in block_group 0
[  336.408717][T16389] bridge_slave_1: entered promiscuous mode
[  336.426759][   T60] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0
[  336.438964][T16435] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  336.462404][T16435] EXT4-fs (loop4): 1 orphan inode deleted
[  336.470131][T16389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.492677][T16389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.502258][   T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.518632][T16442] loop2: detected capacity change from 0 to 512
[  336.538021][T16389] team0: Port device team_slave_0 added
[  336.544163][   T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.545404][T16442] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.552442][   T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.580584][T16389] team0: Port device team_slave_1 added
[  336.593948][T16443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.607653][   T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.617955][T16443] tipc: Disabling bearer <eth:syzkaller0>
[  336.625357][T16389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.632464][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.658952][T16389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  336.676199][T16451] loop0: detected capacity change from 0 to 512
[  336.683250][T16451] EXT4-fs: Ignoring removed oldalloc option
[  336.696690][T16451] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  336.709031][T16451] EXT4-fs (loop0): 1 truncate cleaned up
[  336.726360][T16389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  336.733511][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.759628][T16389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.783710][T16455] loop1: detected capacity change from 0 to 128
[  336.801280][T16389] hsr_slave_0: entered promiscuous mode
[  336.807850][T16389] hsr_slave_1: entered promiscuous mode
[  336.824057][T16389] debugfs: 'hsr0' already exists in 'hsr'
[  336.829905][T16389] Cannot create hsr debugfs directory
[  336.935205][T16389] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.998161][T16389] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.058504][T16389] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.120367][T16389] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.247559][   T29] kauditd_printk_skb: 221 callbacks suppressed
[  337.247662][   T29] audit: type=1326 audit(1760602204.574:8426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  337.281476][T16475] loop4: detected capacity change from 0 to 512
[  337.296527][   T29] audit: type=1326 audit(1760602204.604:8427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  337.296952][T16475] EXT4-fs: Ignoring removed oldalloc option
[  337.320217][   T29] audit: type=1326 audit(1760602204.604:8428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  337.339743][T16455] syz.1.2769: attempt to access beyond end of device
[  337.339743][T16455] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[  337.349777][   T29] audit: type=1326 audit(1760602204.604:8429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  337.363375][T16455] Buffer I/O error on dev loop1, logical block 128, lost async page write
[  337.387217][   T29] audit: type=1326 audit(1760602204.604:8430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  337.419803][   T29] audit: type=1326 audit(1760602204.604:8431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  337.444153][   T29] audit: type=1326 audit(1760602204.604:8432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  337.468247][   T29] audit: type=1326 audit(1760602204.604:8433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcbf4d0eec9 code=0x7ffc0000
[  337.473154][T16475] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  337.492254][   T29] audit: type=1326 audit(1760602204.604:8434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbf4d0ef03 code=0x7ffc0000
[  337.492337][   T29] audit: type=1326 audit(1760602204.604:8435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcbf4d0d97f code=0x7ffc0000
[  337.549962][T16475] EXT4-fs (loop4): 1 truncate cleaned up
[  337.606971][T16483] loop1: detected capacity change from 0 to 512
[  337.627394][T16483] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2780: bg 0: block 248: padding at end of block bitmap is not set
[  337.646177][T16486] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.658120][T16483] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2780: Failed to acquire dquot type 1
[  337.670249][T16483] EXT4-fs (loop1): 1 truncate cleaned up
[  337.676601][T16483] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.698565][T16486] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.718434][T16488] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.728106][T16488] tipc: Disabling bearer <eth:syzkaller0>
[  337.758071][T16486] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.798962][T16499] loop2: detected capacity change from 0 to 512
[  337.820578][T16499] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.834503][T16486] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.883268][T16506] siw: device registration error -23
[  337.935421][ T1817] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.948498][ T1817] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.957902][T16510] loop1: detected capacity change from 0 to 512
[  337.966114][T16510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  337.968931][   T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.974369][T16510] System zones: 1-12
[  337.986992][T16510] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2790: Directory hole found for htree index block 0
[  337.988765][   T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.017996][T16510] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  338.032278][T16510] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2790: Directory hole found for htree index block 0
[  338.046506][T16510] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  338.109659][T16510] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2790: Directory hole found for htree index block 0
[  338.124799][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2793'.
[  338.195034][T16526] loop2: detected capacity change from 0 to 2048
[  338.266714][T16526] EXT4-fs: Ignoring removed bh option
[  338.296351][T16538] loop1: detected capacity change from 0 to 128
[  338.337808][T16538] ext4 filesystem being mounted at /509/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  338.435297][T16549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2805'.
[  338.477965][T16552] loop2: detected capacity change from 0 to 512
[  338.485145][T16552] EXT4-fs: Ignoring removed oldalloc option
[  338.503685][T16552] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  338.519692][T16552] EXT4-fs (loop2): 1 truncate cleaned up
[  338.528051][T16556] loop1: detected capacity change from 0 to 512
[  338.539817][T16556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  338.548145][T16556] System zones: 1-12
[  338.552376][T16556] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2808: Directory hole found for htree index block 0
[  338.565490][T16555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2807'.
[  338.565554][T16556] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  338.565595][T16556] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2808: Directory hole found for htree index block 0
[  338.595609][T16556] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  338.608182][T16556] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2808: Directory hole found for htree index block 0
[  338.661652][T16564] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.675836][T16568] loop0: detected capacity change from 0 to 128
[  338.684362][T16568] ext4 filesystem being mounted at /519/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  338.721965][T16570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.730219][T16570] tipc: Disabling bearer <eth:syzkaller0>
[  338.739322][T16571] loop4: detected capacity change from 0 to 1024
[  338.739754][T16564] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.746816][T16571] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  338.768266][T16571] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2813: Invalid block bitmap block 0 in block_group 0
[  338.784275][T16571] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2813: Failed to acquire dquot type 0
[  338.796388][T16571] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2813: Freeing blocks not in datazone - block = 0, count = 4096
[  338.810302][T16571] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2813: Invalid inode bitmap blk 0 in block_group 0
[  338.823328][T16571] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  338.832170][   T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0
[  338.833323][T16564] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.844281][T16571] EXT4-fs (loop4): 1 orphan inode deleted
[  338.897960][T16564] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.196000][T16579] loop2: detected capacity change from 0 to 512
[  339.274602][T16582] siw: device registration error -23
[  339.529935][T16589] loop4: detected capacity change from 0 to 512
[  339.567536][T16592] loop4: detected capacity change from 0 to 512
[  339.575602][T16592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  339.583665][T16592] System zones: 1-12
[  339.588359][T16592] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.2820: Directory hole found for htree index block 0
[  339.601709][T16592] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  339.616612][T16592] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.2820: Directory hole found for htree index block 0
[  339.632623][T16592] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  339.643590][T16389] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  339.653062][T16389] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  339.662984][T16592] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.2820: Directory hole found for htree index block 0
[  339.682794][T16389] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  339.698773][T16389] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  339.719345][T16609] loop4: detected capacity change from 0 to 512
[  339.746496][T16389] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.761183][T16389] 8021q: adding VLAN 0 to HW filter on device team0
[  339.771277][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.778411][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.781018][T16614] loop2: detected capacity change from 0 to 512
[  339.796936][T16613] loop4: detected capacity change from 0 to 2048
[  339.799411][T16389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  339.804447][T16614] EXT4-fs: Ignoring removed oldalloc option
[  339.813934][T16389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  339.830515][T16614] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  339.842404][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.849548][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.870023][T16614] EXT4-fs (loop2): 1 truncate cleaned up
[  339.904285][T16389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.995443][T16389] veth0_vlan: entered promiscuous mode
[  340.005782][T16389] veth1_vlan: entered promiscuous mode
[  340.025502][T16389] veth0_macvtap: entered promiscuous mode
[  340.034382][T16389] veth1_macvtap: entered promiscuous mode
[  340.041146][T16634] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2829'.
[  340.057469][T16389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.073252][T16389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.085476][   T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.098193][T16636] loop4: detected capacity change from 0 to 512
[  340.107241][   T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.108517][T16636] EXT4-fs (loop4): failed to initialize system zone (-117)
[  340.123597][T16636] EXT4-fs (loop4): mount failed
[  340.128296][   T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.140289][   T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.221946][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2831'.
[  340.280157][T16652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.317435][T16644] lo speed is unknown, defaulting to 1000
[  340.380318][T16644] chnl_net:caif_netlink_parms(): no params data found
[  340.421676][T16644] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.428819][T16644] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.436614][T16644] bridge_slave_0: entered allmulticast mode
[  340.443504][T16644] bridge_slave_0: entered promiscuous mode
[  340.450746][T16644] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.458110][T16644] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.467810][T16644] bridge_slave_1: entered allmulticast mode
[  340.474272][T16644] bridge_slave_1: entered promiscuous mode
[  340.493904][T16644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.504614][T16644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.532577][T16644] team0: Port device team_slave_0 added
[  340.540133][T16644] team0: Port device team_slave_1 added
[  340.559127][T16644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.566197][T16644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.566814][T16665] loop2: detected capacity change from 0 to 2048
[  340.592540][T16644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.593613][T16644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.616906][T16644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.626833][T16665] EXT4-fs: Ignoring removed bh option
[  340.643140][T16644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.668084][T16644] hsr_slave_0: entered promiscuous mode
[  340.674606][T16644] hsr_slave_1: entered promiscuous mode
[  340.680740][T16644] debugfs: 'hsr0' already exists in 'hsr'
[  340.686602][T16644] Cannot create hsr debugfs directory
[  340.711711][T16670] loop2: detected capacity change from 0 to 1024
[  340.755505][T16644] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.817907][T16644] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.879492][T16674] loop2: detected capacity change from 0 to 32768
[  340.887950][T16644] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.916837][T16674]  loop2: p1 p2 p3 < p5 p6 >
[  340.922345][T16674] loop2: p2 size 16775168 extends beyond EOD, truncated
[  340.930667][T16674] loop2: p5 start 4294970168 is beyond EOD, truncated
[  340.931463][T16644] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.011336][T16676] loop2: detected capacity change from 0 to 128
[  341.019725][T16644] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  341.031680][T16644] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  341.041541][T16644] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  341.053034][T16644] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  341.067362][ T1817] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.085064][ T1817] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.085125][ T1817] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.116641][   T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.155688][T16688] loop1: detected capacity change from 0 to 512
[  341.163889][T16688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  341.172352][T16688] System zones: 1-12
[  341.177326][T16688] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2841: Directory hole found for htree index block 0
[  341.191386][T16688] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  341.191837][T16644] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.206379][T16688] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2841: Directory hole found for htree index block 0
[  341.212217][T16644] 8021q: adding VLAN 0 to HW filter on device team0
[  341.228426][T16688] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  341.232111][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.243913][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.254668][T16688] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2841: Directory hole found for htree index block 0
[  341.279176][ T1817] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.286366][ T1817] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.329888][T16697] loop2: detected capacity change from 0 to 512
[  341.341692][T16697] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  341.356166][T16697] EXT4-fs (loop2): 1 truncate cleaned up
[  341.386393][T16707] loop1: detected capacity change from 0 to 1024
[  341.397060][T16710] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2847'.
[  341.410423][T16644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.491618][T16724] loop1: detected capacity change from 0 to 1024
[  341.511727][T16724] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  341.539007][T16724] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2850: lblock 2 mapped to illegal pblock 2 (length 1)
[  341.561847][T16644] veth0_vlan: entered promiscuous mode
[  341.567788][T16724] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2850: lblock 0 mapped to illegal pblock 48 (length 1)
[  341.570663][T16644] veth1_vlan: entered promiscuous mode
[  341.592281][T16724] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2850: Failed to acquire dquot type 0
[  341.613698][T16724] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  341.624400][T16644] veth0_macvtap: entered promiscuous mode
[  341.632238][T16644] veth1_macvtap: entered promiscuous mode
[  341.638647][T16724] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2850: mark_inode_dirty error
[  341.651126][T16724] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  341.652902][T16644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.673829][T16724] EXT4-fs (loop1): 1 orphan inode deleted
[  341.683846][T16644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.693466][   T52] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  341.708275][T16714] loop2: detected capacity change from 0 to 32768
[  341.708839][   T52] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0
[  341.727222][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.737670][   T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.748103][   T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.756848][T16714]  loop2: p1 p2 p3 < p5 p6 >
[  341.762543][   T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.762618][T16714] loop2: p2 size 16775168 extends beyond EOD, truncated
[  341.778477][  T300] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  341.784494][T16714] loop2: p5 start 4294970168 is beyond EOD, truncated
[  341.800089][  T300] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0
[  341.818436][ T3313] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  341.844076][ T3313] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  341.854591][ T3313] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  341.880898][T16737] loop0: detected capacity change from 0 to 4096
[  341.920459][T16743] loop1: detected capacity change from 0 to 512
[  341.929505][T16743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  341.939501][T16743] System zones: 1-12
[  341.943764][T16743] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2854: Directory hole found for htree index block 0
[  341.958856][T16743] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  341.967360][T16743] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2854: Directory hole found for htree index block 0
[  341.967505][T16749] loop2: detected capacity change from 0 to 2048
[  341.981504][T16743] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  341.987281][T16749] EXT4-fs: Ignoring removed bh option
[  341.998167][T16743] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.2854: Directory hole found for htree index block 0
[  342.111991][T16759] loop0: detected capacity change from 0 to 512
[  342.120416][T16758] loop2: detected capacity change from 0 to 1024
[  342.128167][T16759] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  342.149125][T16759] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  342.163932][T16759] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2856: bg 0: block 248: padding at end of block bitmap is not set
[  342.179357][T16759] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2856: Failed to acquire dquot type 1
[  342.191836][T16759] EXT4-fs (loop0): 1 truncate cleaned up
[  342.232891][  T300] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1
[  342.265095][T16773] siw: device registration error -23
[  342.372288][T16782] loop0: detected capacity change from 0 to 4096
[  342.383467][T16652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.449593][T16796] loop0: detected capacity change from 0 to 2048
[  342.460398][T16796] EXT4-fs: Ignoring removed bh option
[  342.468615][T16783] lo speed is unknown, defaulting to 1000
[  342.564515][T16783] chnl_net:caif_netlink_parms(): no params data found
[  342.617815][T16783] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.624968][T16783] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.632420][T16783] bridge_slave_0: entered allmulticast mode
[  342.639040][T16783] bridge_slave_0: entered promiscuous mode
[  342.646066][T16783] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.653367][T16783] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.661130][T16783] bridge_slave_1: entered allmulticast mode
[  342.668154][T16783] bridge_slave_1: entered promiscuous mode
[  342.690087][T16783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.703324][T16783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.715752][T16812] loop0: detected capacity change from 0 to 512
[  342.724344][T16812] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  342.736108][T16783] team0: Port device team_slave_0 added
[  342.743278][T16783] team0: Port device team_slave_1 added
[  342.743766][T16812] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  342.764521][T16812] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2872: bg 0: block 248: padding at end of block bitmap is not set
[  342.780416][T16783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.787579][T16783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  342.813692][T16783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.824683][T16812] __quota_error: 154 callbacks suppressed
[  342.824703][T16812] Quota error (device loop0): write_blk: dquota write failed
[  342.835924][T16817] loop4: detected capacity change from 0 to 512
[  342.838055][T16812] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  342.854537][T16812] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2872: Failed to acquire dquot type 1
[  342.857416][T16783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.872994][T16783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  342.878695][T16812] EXT4-fs (loop0): 1 truncate cleaned up
[  342.899147][T16783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.935899][ T1817] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5
[  342.945150][ T1817] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1
[  342.969949][T16783] hsr_slave_0: entered promiscuous mode
[  342.976190][T16783] hsr_slave_1: entered promiscuous mode
[  342.984069][T16783] debugfs: 'hsr0' already exists in 'hsr'
[  342.990043][T16783] Cannot create hsr debugfs directory
[  343.003136][T16820] loop0: detected capacity change from 0 to 512
[  343.012078][T16820] EXT4-fs (loop0): failed to initialize system zone (-117)
[  343.028723][T16820] EXT4-fs (loop0): mount failed
[  343.078157][T16783] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.098498][T16830] loop4: detected capacity change from 0 to 2048
[  343.105664][T16830] EXT4-fs: Ignoring removed bh option
[  343.128033][T16783] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.140522][T16836] loop0: detected capacity change from 0 to 128
[  343.149574][T16836] ext4 filesystem being mounted at /535/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  343.208143][T16783] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.218765][T16844] loop0: detected capacity change from 0 to 512
[  343.277068][T16850] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2885'.
[  343.299310][T16783] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.305856][T16852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2886'.
[  343.369537][T16858] loop0: detected capacity change from 0 to 128
[  343.387633][T16783] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  343.399190][T16783] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  343.409593][T16783] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  343.421229][T16783] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  343.477882][T16783] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.493181][T16783] 8021q: adding VLAN 0 to HW filter on device team0
[  343.504823][  T300] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.512050][  T300] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.526007][ T1817] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.533153][ T1817] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.632093][T16783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.731420][T16783] veth0_vlan: entered promiscuous mode
[  343.745808][T16783] veth1_vlan: entered promiscuous mode
[  343.756302][T16858] syz.0.2889: attempt to access beyond end of device
[  343.756302][T16858] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[  343.769858][T16858] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  343.779226][T16865] syz.0.2889: attempt to access beyond end of device
[  343.779226][T16865] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[  343.783050][T16783] veth0_macvtap: entered promiscuous mode
[  343.793012][T16865] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  343.801495][T16783] veth1_macvtap: entered promiscuous mode
[  343.814639][T16858] syz.0.2889: attempt to access beyond end of device
[  343.814639][T16858] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[  343.828175][T16858] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  343.842509][T16783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.855323][T16783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.871177][   T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.884172][   T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.896051][T16877] loop0: detected capacity change from 0 to 512
[  343.898126][   T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.912775][   T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.917030][   T29] audit: type=1400 audit(1760602211.244:8578): avc:  denied  { mounton } for  pid=16876 comm="syz.0.2890" path="/543/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  343.960908][   T29] audit: type=1400 audit(1760602211.284:8579): avc:  denied  { unlink } for  pid=3326 comm="syz-executor" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  343.983621][   T29] audit: type=1400 audit(1760602211.284:8580): avc:  denied  { rmdir } for  pid=3326 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  344.007103][   T29] audit: type=1400 audit(1760602211.284:8581): avc:  denied  { unlink } for  pid=3326 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  344.062984][T16886] loop4: detected capacity change from 0 to 128
[  344.072039][T16886] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  344.072832][T16888] loop0: detected capacity change from 0 to 512
[  344.137401][T16892] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.149236][T16894] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2895'.
[  344.168923][T16895] loop2: detected capacity change from 0 to 512
[  344.175756][T16895] EXT4-fs: Ignoring removed oldalloc option
[  344.181878][   T29] audit: type=1326 audit(1760602211.484:8582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae684eec9 code=0x7ffc0000
[  344.205699][   T29] audit: type=1326 audit(1760602211.484:8583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbae684eec9 code=0x7ffc0000
[  344.209163][T16895] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  344.229507][   T29] audit: type=1326 audit(1760602211.484:8584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae684eec9 code=0x7ffc0000
[  344.246011][T16896] tipc: Started in network mode
[  344.268159][T16896] tipc: Node identity 7ebbd202f49a, cluster identity 4711
[  344.275410][T16896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.283371][T16895] EXT4-fs (loop2): 1 truncate cleaned up
[  344.291195][T16896] tipc: Disabling bearer <eth:syzkaller0>
[  344.328366][T16902] loop0: detected capacity change from 0 to 128
[  344.539858][  T300] gretap0: left allmulticast mode
[  344.544974][  T300] gretap0: left promiscuous mode
[  344.550267][  T300] bridge0: port 1(gretap0) entered disabled state
[  344.658289][  T300] bond0 (unregistering): Released all slaves
[  344.671369][T16652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.707822][T16902] syz.0.2897: attempt to access beyond end of device
[  344.707822][T16902] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[  344.721625][T16902] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  344.737404][T16652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.750011][  T300] tipc: Left network mode
[  344.763890][  T300] hsr_slave_0: left promiscuous mode
[  344.770354][  T300] hsr_slave_1: left promiscuous mode
[  344.779539][  T300] veth1_macvtap: left promiscuous mode
[  344.785133][  T300] veth0_macvtap: left promiscuous mode
[  344.792486][  T300] veth1_vlan: left promiscuous mode
[  344.795780][T16906] loop0: detected capacity change from 0 to 128
[  344.797917][  T300] veth0_vlan: left promiscuous mode
[  344.872000][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2900'.
[  344.989862][   T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.028195][   T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.059282][   T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.067989][   T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.127145][T16906] syz.0.2899: attempt to access beyond end of device
[  345.127145][T16906] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[  345.141028][T16906] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  345.153795][T16909] syz.0.2899: attempt to access beyond end of device
[  345.153795][T16909] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[  345.167439][T16909] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  345.189222][T16909] syz.0.2899: attempt to access beyond end of device
[  345.189222][T16909] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[  345.202974][T16909] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  345.295068][T16928] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2909'.
[  345.335283][T16933] loop0: detected capacity change from 0 to 512
[  345.358284][T16933] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.381456][T16933] lo speed is unknown, defaulting to 1000
[  345.387568][T16937] loop1: detected capacity change from 0 to 1024
[  345.394872][T16937] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  345.407611][T16937] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2908: Invalid block bitmap block 0 in block_group 0
[  345.429432][T16938] loop2: detected capacity change from 0 to 512
[  345.436389][T16938] EXT4-fs: Ignoring removed oldalloc option
[  345.442885][T16938] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  345.443339][T16937] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2908: Failed to acquire dquot type 0
[  345.465461][T16937] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.2908: Freeing blocks not in datazone - block = 0, count = 4096
[  345.479178][T16937] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2908: Invalid inode bitmap blk 0 in block_group 0
[  345.480569][T16938] EXT4-fs (loop2): 1 truncate cleaned up
[  345.493050][T16937] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  345.507590][  T300] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0
[  345.521612][T16937] EXT4-fs (loop1): 1 orphan inode deleted
[  345.572889][T16947] loop0: detected capacity change from 0 to 512
[  345.584229][T16947] EXT4-fs (loop0): failed to initialize system zone (-117)
[  345.591823][T16947] EXT4-fs (loop0): mount failed
[  345.669543][T16892] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.719513][T16892] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.780874][T16892] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.792271][T16959] loop0: detected capacity change from 0 to 128
[  345.834483][  T300] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.847379][  T300] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.866341][  T300] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.880820][  T300] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.894834][T16961] loop4: detected capacity change from 0 to 128
[  346.199114][T16973] loop3: detected capacity change from 0 to 128
[  346.212977][T16973] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  346.280690][T16959] syz.0.2917: attempt to access beyond end of device
[  346.280690][T16959] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[  346.294406][T16959] Buffer I/O error on dev loop0, logical block 128, lost async page write
[  346.360267][T16964] syz.4.2918: attempt to access beyond end of device
[  346.360267][T16964] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[  346.373938][T16964] Buffer I/O error on dev loop4, logical block 128, lost async page write
[  346.388793][T16961] syz.4.2918: attempt to access beyond end of device
[  346.388793][T16961] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[  346.402435][T16961] Buffer I/O error on dev loop4, logical block 128, lost async page write
[  346.424619][T16989] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.488112][T16989] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.500951][T16998] loop4: detected capacity change from 0 to 512
[  346.501701][T16999] loop3: detected capacity change from 0 to 2048
[  346.532808][   T37] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  346.547853][   T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  346.560635][   T37] EXT4-fs (loop3): This should not happen!! Data will be lost
[  346.560635][   T37] 
[  346.570479][   T37] EXT4-fs (loop3): Total free blocks count 0
[  346.576644][   T37] EXT4-fs (loop3): Free/Dirty block details
[  346.582697][   T37] EXT4-fs (loop3): free_blocks=2415919504
[  346.588724][   T37] EXT4-fs (loop3): dirty_blocks=16
[  346.593865][   T37] EXT4-fs (loop3): Block reservation details
[  346.600003][   T37] EXT4-fs (loop3): i_reserved_data_blocks=1
[  346.620084][T16989] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.634042][T17008] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2936'.
[  346.669899][T17012] siw: device registration error -23
[  346.678875][T17014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2937'.
[  346.699554][T16989] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.717046][T17015] loop3: detected capacity change from 0 to 512
[  346.724190][T17015] EXT4-fs: Ignoring removed oldalloc option
[  346.730826][T17015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  346.743169][T17015] EXT4-fs (loop3): 1 truncate cleaned up
[  346.760355][T17020] loop2: detected capacity change from 0 to 128
[  346.777018][   T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.797393][   T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.806279][   T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.826385][   T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.838523][T17022] loop4: detected capacity change from 0 to 128
[  346.921576][T17026] loop0: detected capacity change from 0 to 512
[  346.930786][T17026] EXT4-fs (loop0): failed to initialize system zone (-117)
[  346.938589][T17026] EXT4-fs (loop0): mount failed
[  346.986548][T17030] netlink: 'syz.0.2943': attribute type 10 has an invalid length.
[  346.995983][T17030] team0: Device ipvlan0 failed to register rx_handler
[  347.274311][T17033] loop1: detected capacity change from 0 to 512
[  347.334645][T17033] EXT4-fs mount: 235 callbacks suppressed
[  347.334666][T17033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.401071][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.514343][T16389] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.543710][T17051] siw: device registration error -23
[  347.585342][T17050] siw: device registration error -23
[  347.605940][T17057] loop2: detected capacity change from 0 to 128
[  347.617586][T17055] loop3: detected capacity change from 0 to 512
[  347.626127][T17057] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  347.641917][T17060] loop1: detected capacity change from 0 to 128
[  347.673819][T17057] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  347.708303][T17055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.731705][T16783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  347.749182][T17055] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.872393][T17055] lo speed is unknown, defaulting to 1000
[  347.994290][T17071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2958'.
[  348.015610][T16389] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.074086][T17081] loop3: detected capacity change from 0 to 512
[  348.083779][T17081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.123367][T16389] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.159817][   T29] kauditd_printk_skb: 155 callbacks suppressed
[  348.159836][   T29] audit: type=1326 audit(1760602215.484:8737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1cd6feec9 code=0x7ffc0000
[  348.166460][T17087] loop0: detected capacity change from 0 to 512
[  348.194335][   T29] audit: type=1326 audit(1760602215.484:8738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1cd6feec9 code=0x7ffc0000
[  348.220323][   T29] audit: type=1326 audit(1760602215.484:8739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1cd6feec9 code=0x7ffc0000
[  348.232579][T17087] EXT4-fs: Ignoring removed oldalloc option
[  348.243926][   T29] audit: type=1326 audit(1760602215.484:8740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1cd6feec9 code=0x7ffc0000
[  348.273499][   T29] audit: type=1326 audit(1760602215.484:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1cd6feec9 code=0x7ffc0000
[  348.297421][   T29] audit: type=1326 audit(1760602215.484:8742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd1cd6feec9 code=0x7ffc0000
[  348.321243][   T29] audit: type=1326 audit(1760602215.484:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1cd6fef03 code=0x7ffc0000
[  348.326663][T17087] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  348.344817][   T29] audit: type=1326 audit(1760602215.484:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd1cd6fd97f code=0x7ffc0000
[  348.378368][   T29] audit: type=1326 audit(1760602215.484:8745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd1cd6fef57 code=0x7ffc0000
[  348.402358][   T29] audit: type=1326 audit(1760602215.484:8746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1cd6fd710 code=0x7ffc0000
[  348.428700][T17092] loop3: detected capacity change from 0 to 128
[  348.443055][T17087] EXT4-fs (loop0): 1 truncate cleaned up
[  348.449612][T17087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.480403][T17094] loop1: detected capacity change from 0 to 512
[  348.506997][T17097] netlink: 'syz.4.2968': attribute type 10 has an invalid length.
[  348.515100][T17097] ipvlan0: entered allmulticast mode
[  348.520670][T17097] veth0_vlan: entered allmulticast mode
[  348.528844][T17094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.529315][T17097] team0: Device ipvlan0 failed to register rx_handler
[  348.543850][T17100] siw: device registration error -23
[  348.555491][T17094] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  348.584756][T17094] lo speed is unknown, defaulting to 1000
[  348.663856][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.746793][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'.
[  348.847988][T17103] siw: device registration error -23
[  348.868715][T17107] bridge0: port 3(gretap0) entered blocking state
[  348.875240][T17107] bridge0: port 3(gretap0) entered disabled state
[  348.882909][T17107] gretap0: entered allmulticast mode
[  348.889301][T17107] gretap0: entered promiscuous mode
[  348.895025][T17107] bridge0: port 3(gretap0) entered blocking state
[  348.901549][T17107] bridge0: port 3(gretap0) entered forwarding state
[  348.922824][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.057735][T17092] bio_check_eod: 5 callbacks suppressed
[  349.057757][T17092] syz.3.2966: attempt to access beyond end of device
[  349.057757][T17092] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[  349.077064][T17092] buffer_io_error: 5 callbacks suppressed
[  349.077079][T17092] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  349.129133][T17110] loop3: detected capacity change from 0 to 512
[  349.144848][T17110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.194802][T16389] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.217233][T17117] xt_ecn: cannot match TCP bits for non-tcp packets
[  349.230937][T17120] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.265998][T17122] loop3: detected capacity change from 0 to 128
[  349.299289][T17120] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.427888][T17120] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.459347][T17118] loop2: detected capacity change from 0 to 32768
[  349.497138][T17118]  loop2: p1 p2 p3 < p5 p6 >
[  349.502740][T17118] loop2: p2 size 16775168 extends beyond EOD, truncated
[  349.513390][T17118] loop2: p5 start 4294970168 is beyond EOD, truncated
[  349.522478][T17120] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.648691][T17126] syz.3.2977: attempt to access beyond end of device
[  349.648691][T17126] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[  349.662284][T17126] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  349.662881][T17122] syz.3.2977: attempt to access beyond end of device
[  349.662881][T17122] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[  349.662911][T17122] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  349.663324][T17122] syz.3.2977: attempt to access beyond end of device
[  349.663324][T17122] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[  349.663354][T17122] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  349.712376][T17134] siw: device registration error -23
[  349.842192][T17144] loop2: detected capacity change from 0 to 128
[  349.940840][T17148] loop3: detected capacity change from 0 to 512
[  349.958659][T17148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.971066][T17129] loop4: detected capacity change from 0 to 32768
[  350.000139][T16389] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.016991][T17129]  loop4: p1 p2 p3 < p5 p6 >
[  350.023303][T17129] loop4: p2 size 16775168 extends beyond EOD, truncated
[  350.032391][T17129] loop4: p5 start 4294970168 is beyond EOD, truncated
[  350.081278][T17158] loop3: detected capacity change from 0 to 128
[  350.167610][T17161] siw: device registration error -23
[  350.192186][T17163] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2992'.
[  350.235613][T17164] ==================================================================
[  350.243756][T17164] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty
[  350.251794][T17164] 
[  350.254136][T17164] write to 0xffff888107368728 of 4 bytes by task 17158 on cpu 1:
[  350.262123][T17164]  __mark_inode_dirty+0x248/0x750
[  350.267181][T17164]  fat_update_time+0x1ec/0x200
[  350.271971][T17164]  touch_atime+0x148/0x340
[  350.276508][T17164]  filemap_splice_read+0x6ba/0x740
[  350.281660][T17164]  splice_direct_to_actor+0x26f/0x680
[  350.287043][T17164]  do_splice_direct+0xda/0x150
[  350.291836][T17164]  do_sendfile+0x380/0x650
[  350.296284][T17164]  __x64_sys_sendfile64+0x105/0x150
[  350.301647][T17164]  x64_sys_call+0x2bb4/0x3000
[  350.306413][T17164]  do_syscall_64+0xd2/0x200
[  350.310938][T17164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.316847][T17164] 
[  350.319222][T17164] read to 0xffff888107368728 of 4 bytes by task 17164 on cpu 0:
[  350.326892][T17164]  __mark_inode_dirty+0x55/0x750
[  350.331966][T17164]  fat_update_time+0x1ec/0x200
[  350.336770][T17164]  touch_atime+0x148/0x340
[  350.341227][T17164]  filemap_splice_read+0x6ba/0x740
[  350.346371][T17164]  splice_direct_to_actor+0x26f/0x680
[  350.351759][T17164]  do_splice_direct+0xda/0x150
[  350.356542][T17164]  do_sendfile+0x380/0x650
[  350.360994][T17164]  __x64_sys_sendfile64+0x105/0x150
[  350.366311][T17164]  x64_sys_call+0x2bb4/0x3000
[  350.371005][T17164]  do_syscall_64+0xd2/0x200
[  350.375613][T17164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.381521][T17164] 
[  350.383949][T17164] value changed: 0x00000000 -> 0x00000070
[  350.389687][T17164] 
[  350.392025][T17164] Reported by Kernel Concurrency Sanitizer on:
[  350.398188][T17164] CPU: 0 UID: 0 PID: 17164 Comm: syz.3.2991 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  350.408010][T17164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  350.418193][T17164] ==================================================================
[  350.526796][T17144] syz.2.2985: attempt to access beyond end of device
[  350.526796][T17144] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[  350.540491][T17144] Buffer I/O error on dev loop2, logical block 128, lost async page write
[  350.618126][T17164] syz.3.2991: attempt to access beyond end of device
[  350.618126][T17164] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[  350.631615][T17164] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  350.640664][T17158] syz.3.2991: attempt to access beyond end of device
[  350.640664][T17158] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[  350.654172][T17158] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  350.663200][T17158] syz.3.2991: attempt to access beyond end of device
[  350.663200][T17158] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[  350.676680][T17158] Buffer I/O error on dev loop3, logical block 128, lost async page write
[  351.601826][   T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.613293][   T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.625124][   T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.635695][   T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0