last executing test programs:

2m27.112515229s ago: executing program 2 (id=3):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b11a20000000000851000000200000085000000b200000095003300010000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x34d, &(0x7f0000000100)={0x0, 0xf60c, 0x100, 0x1, 0x38f})
r1 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0x3, 0x0, r0})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
openat(r3, &(0x7f0000000b40)='.\x00', 0x413903, 0x9e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348)
io_uring_enter(r1, 0xffcb, 0x1000002, 0x37, 0x0, 0x0)

2m26.719687968s ago: executing program 2 (id=9):
r0 = syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
r1 = syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_pidfd_open(r1, 0x0) (async)
syz_pidfd_open(r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0xe}}, './file1\x00'})
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x6, 0x0, 0x40, 0x6, 0x0, 0x2, 0x10010, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x11000, 0x100000001, 0xfff, 0x3, 0x4, 0x2974a30, 0xb, 0x0, 0xfffffff9}, r1, 0x4, r2, 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write$P9_RWSTAT(r3, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x10)

2m26.196003305s ago: executing program 2 (id=11):
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
gettimeofday(&(0x7f0000000000), &(0x7f0000000040))
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@allocspi={0x13c, 0x16, 0x800, 0x70bd26, 0x25dfdbff, {{{@in=@local, @in6=@loopback, 0x4e23, 0x0, 0x4e23, 0xc, 0xa, 0x80, 0x20, 0x87}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x100000001, 0x5, 0x817, 0x6, 0xb, 0x6, 0x1000081, 0x2}, {0x4, 0x0, 0x7, 0xfffffffffffffff5}, {0x40, 0xd5, 0x3}, 0x70bd27, 0x3506, 0xa, 0x0, 0x4, 0xc}, 0xff, 0x76b}, [@tfcpad={0x8, 0x16, 0x40}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x3a}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x10}}, @coaddr={0x14, 0xe, @in=@multicast2}]}, 0x13c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x140f, 0x1, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000018}, 0x20040800)
r8 = syz_open_dev$ptys(0xc, 0x3, 0x0)
semtimedop(0xffffffffffffffff, &(0x7f0000000f00)=[{0x1, 0x7, 0xc00}], 0x1, 0x0)
fchmod(r8, 0x82)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', <r10=>0x0, 0xc, 0x4c, 0x80, 0x6, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x80, 0x1, 0x1b8ad910, 0x8}})
sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
unshare(0x20040400)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@minixdf}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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")
r11 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x200005, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6000000000000000, 0x3, 0x0, &(0x7f0000000400)="920955", 0x0, 0x1}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="41000000000000004c0012800b0001006d616373656300003c000280caff0600070000000c0004000900000000000000050008000b00000005000900010000000c0001000400000000000000080005000100000008000500730e19189943b4245c23b1238fcd9605a782c90648b9b441f68269551aa01d26e974bf6f7c704269b938cc801365483feb39ace2ca", @ANYRES32=r10, @ANYBLOB], 0x74}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

2m22.740056419s ago: executing program 2 (id=39):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200021100000000000100000000000200080008000000f100000000000000020001000000000000000500000000a0050006003c0000000a004e210000000700000000000000000000ffffac1414aa000800000000000005000500000000000a004e240000000e00000000000000000000ffffe0000002280b000000000000010014"], 0x88}, 0x1, 0x7}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x118, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async)
io_uring_enter(r4, 0xd44, 0x44c1, 0x7, 0x0, 0x0)

2m22.711842255s ago: executing program 32 (id=39):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200021100000000000100000000000200080008000000f100000000000000020001000000000000000500000000a0050006003c0000000a004e210000000700000000000000000000ffffac1414aa000800000000000005000500000000000a004e240000000e00000000000000000000ffffe0000002280b000000000000010014"], 0x88}, 0x1, 0x7}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x118, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async)
io_uring_enter(r4, 0xd44, 0x44c1, 0x7, 0x0, 0x0)

4.446497993s ago: executing program 0 (id=1466):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000894)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x828, 0x0, 'queue1\x00', 0xd2c})
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) (fail_nth: 3)

4.191534493s ago: executing program 0 (id=1467):
socket(0xa, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b503000000000000850000000c000000b7000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/60, 0x3c)
clock_settime(0xfacf157edf639126, &(0x7f0000003c80)={0x77359400})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x50100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x5004, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000004c0)=""/227, 0xe3, 0x40, &(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x40, 0x3, 0x34a}, 0x0, &(0x7f0000000240))
inotify_init()
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'})
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)

3.211978508s ago: executing program 5 (id=1483):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0xffffffffffffffe2}, 0x1f00)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000007060108000100000000000000000000970500113e63b30000adcb55dcc5f28d53fbd89b3edf5d4b09ba61188c628fcaf4318e97f9cb7210663f097d364feeb48d67eacc93cc0500000025f8a9eb"], 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, 0x0, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)

3.087713698s ago: executing program 5 (id=1485):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r0, &(0x7f0000000280)=""/251, 0xfb)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x729, 0x3010, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000480))
r2 = epoll_create(0xaf2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c093, 0x2, @perf_config_ext={0x6fa, 0x7}, 0x4, 0x0, 0x10000, 0x6, 0x0, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000004c0)={0x0, 0xe60, 0x0, [0x3, 0x64, 0x10000, 0xb, 0x1], [0x7fffffff, 0x1, 0x9, 0xfffffffffffff9ee, 0x6, 0x854c, 0x6, 0xfffffffffffffffd, 0x6, 0x1, 0x5, 0x4, 0x40, 0xffffffff, 0x2, 0x0, 0x7, 0x5f, 0x100000001, 0x100, 0x36e7, 0x6, 0x400, 0x100000001, 0xffffffff, 0x8, 0x40, 0xffffffffffff121c, 0x48af5bb4, 0x3, 0xfff, 0x5, 0x0, 0x1, 0x8, 0x4, 0x8, 0xf, 0xf, 0x2, 0x3, 0x7, 0x8000000000000001, 0x10001, 0x4, 0x3, 0xbfbc, 0x101, 0x6, 0x0, 0x2, 0xfffffffffffffffa, 0x9, 0x5, 0x7, 0x8000000000000001, 0x7, 0x1, 0x80000000, 0xfff, 0x3, 0x7f, 0x7fffffffffffffff, 0x5, 0x0, 0x5, 0x3ff, 0x3, 0xe41, 0x40, 0x3df, 0x2, 0x5, 0x8, 0xb82, 0x4, 0xfffffffffffffffd, 0x80, 0x10000, 0x81, 0x81, 0x3, 0x0, 0x2, 0x4, 0x10001, 0x200, 0xe03, 0x6, 0x4, 0x0, 0xf8d3, 0x10, 0x654, 0x3a, 0x1, 0x7, 0x80, 0x80000001, 0x1, 0x8, 0x6, 0x5, 0xb, 0x0, 0x9, 0x80000000, 0x7, 0x1, 0x7ff, 0x8, 0x7, 0x6, 0x1, 0x6, 0x0, 0xa96, 0xfffffffffffffff8, 0x3, 0x9, 0xfffffffffffffff8]})
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000200f})
ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f00000000c0)={0xffffffffffffff85, 0x8})

2.239003384s ago: executing program 5 (id=1499):
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x10000000, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

1.728290534s ago: executing program 1 (id=1509):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETOWNER(r0, 0x400454cd, 0x0)

1.699237949s ago: executing program 3 (id=1510):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000008140), &(0x7f0000008180)='./file0\x00', 0x0, &(0x7f00000081c0), 0x1, 0x8130, &(0x7f0000008200)="$eJzs3D+LY1UcBuCfbnTjyG6mEEFBPGijzWUzhZVNkFmQDSi7G2FHEO44NxpyTYbcMBARZzoLG7HxO4ilnSB+gWnEj2A3jeUUYmQSnX/EQpS5LPM8TV44eeGc5nLh3HOO3vzqk2G/yvr5NJ5sNqNxEBHHKVI04kaceCIO4vWvv/zlpQePtu51ut3N+ynd7Txsv5FSuv3yj+9/9t0rP02ffe/72z/cjMP1D45+2/j18PnDF47+ePjxoEqDKo3G05Sn7fF4mm+XRdoZVMMspXfLIq+KNBhVxeTCeL8c7+7OUj7aubW2OymqKuWjWRoWszQdp+lklvKP8sEoZVmWbq0F/0Xv27pnAAAAwNU4ns/nEfOFm9FcpLrnBAAAAAAAAAAAAAAAAAAAANeN8/8AAAAAAAAAAAAAAAAAAABQP+f/AQAAAAAAAAAAAAAAAAAAoH7O/wMAAAAAAAAAAAAAAAAAAED9Hjzautfpdjfvp9SMKL/Y6+31lr/L8U4/BlFGEXeiFb//fVPA/PTWgLtvdzfvpIX1+Kbc/6u/v9e7cbHfjlasr+63l/10sf9UrJ3vb0Qrnlvd31jZfzpee/VcP4tW/PxhjKOMnTjpnvU/b6f01jvdS/1nFv8DAAAAAAAAgMdBlk6t3L/Psn8aX/b/xfcBl/bXG/Fio961AwAAwHVRzT4d5mVZTARBEE5D3U8mAADg/3b20l/3TAAAAAAAAAAAAAAAAAAAAOD6uorrxOpeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAACC/K1XGKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKgAA///5cu/6")
inotify_init1(0x800)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, r0, 0x1, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40006)

1.666920844s ago: executing program 4 (id=1512):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x5, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x8100, 0x400dc}, 0x0)

1.629717418s ago: executing program 1 (id=1513):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x48}, 0x28)

1.561767937s ago: executing program 4 (id=1514):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ac0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2115aaaaef6dd8a, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000c40)=[{0x6}, {0x9, 0x10, 0xf9, 0xfcd4}]})
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) (async)
ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async)
sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") (async)
r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r5, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], <r6=>0x0, 0x1b, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000880)='syzkaller\x00', 0xc, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x25, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000880)='syzkaller\x00', 0xc, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x25, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0xa}, 0x4244, 0x0, 0x11000, 0x4, 0x2, 0x88000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x7)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r9, &(0x7f0000000f80)=""/4087, 0xff7) (async)
getdents64(r9, &(0x7f0000000f80)=""/4087, 0xff7)

1.561153277s ago: executing program 1 (id=1515):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0xe, 0x4, 0x4, 0xc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)
r2 = socket(0x1d, 0x2, 0x6)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@abort}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x1}}, 0x18)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}}, 0xfc, 0x0, 0x9, 0x8, 0x40, 0x5, 0x8}, &(0x7f0000000000)=0x9c)
sendto$isdn(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="fe446ff371c92c8974521b148634b339339181e795332f93721e167dcdca132a6a61a3f76f78ba7586e3e35cff2d2e1bfa489857f00646a826d2f5fb68ad808842794c1b36838d9c8d5d67c144b82937a137c193dfcaaf88a17f9e1e28c309d28dcb79fd2ccd3d88bea23a820eb3e777"], 0x8, 0xc040, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004004)

1.560896967s ago: executing program 5 (id=1516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50)
pread64(r0, 0x0, 0x0, 0x4000000002)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, 0x0, 0x0, 0x4}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
fchdir(0xffffffffffffffff)
fchdir(0xffffffffffffffff)
prctl$PR_SET_SECUREBITS(0x1c, 0xb)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
poll(&(0x7f0000000080)=[{r3, 0x1080}, {r3, 0x274}], 0x2, 0x7f)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/65, 0x41}, 0xb}], 0x1, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.467049692s ago: executing program 4 (id=1517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.415871894s ago: executing program 4 (id=1518):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x2c, &(0x7f00000000c0), 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x1b, &(0x7f0000000040), 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r4=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x1)
fchdir(r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r7, 0x10001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', r4, 0x0, 0x80, 0x5, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4}]}}}}})
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregs(0xf, r8, 0xfffffffffffffc00, &(0x7f0000000700)="5052ae5949173deb970000000088286f2132ff206935d789d325cd76251f5cbbae93b857a8e9e3a32e9771443acd194ad6139ea71a31184120be42f1422e96457bb104e5a6d84cba6793ebb48588b6d5b3d68f8e3fbe9ce1e839bada1a076eea30aaa670e18ac503a1f0ff6374337f42ab14578149301c2b24f703bca28a0024452970d0f5fd735a49db031ed0b64236fca97b9f31982aabe2f3557054b3345f6f7a51289760579850a9bd6172919800000000f38e0845cf4f0401b0d520c4e608599e623fcfea375d4b9c6467c08cdaf7e6241335099b2554704e89a75838d912721c763479aa9efd67e7")
ptrace$getregset(0x4205, r8, 0x200, &(0x7f0000000080)={0x0})
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_expedited', 0x101, 0x82)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3, 0x0, 0x1, 0x0, 0x401, 0x80, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3e, 0x4, @perf_config_ext, 0x0, 0x401, 0x10001, 0x4, 0x8000000000000001, 0x2, 0xe, 0x0, 0x7f3997e0, 0x0, 0x6}, r8, 0x8, r9, 0x8)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
ptrace$getregset(0x4204, r8, 0x200, &(0x7f0000000380)={&(0x7f0000000840)=""/4096, 0x1000})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r4, 0x8000, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]})
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d00000063ca080505e5042a000800000000000000000000000400000003000000050000000000"], 0x0, 0x46, 0x0, 0x1, 0x3ff00}, 0x28)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x2, &(0x7f0000000240)=[{0x3d, 0x0, 0x1, 0xfffffffe}, {0x1d, 0x0, 0x0, 0x10000000}]})

1.412280093s ago: executing program 0 (id=1519):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0xc0)
waitid(0x1, 0x0, 0x0, 0x8, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045503, &(0x7f00000000c0))
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$kcm(0x2, 0x3, 0x106)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
unshare(0x400)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8002, &(0x7f0000000140)={[{@quota}, {}, {@nodiscard}, {@delalloc}, {@resgid}, {@jqfmt_vfsv0}, {@init_itable}]}, 0xff, 0x4b4, &(0x7f0000000c80)="$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")
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x3c00, 0x2, 0x10001d4})
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000340), 0x1)

1.236184996s ago: executing program 1 (id=1520):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
pipe2(&(0x7f0000000000)={<r2=>0x0, 0x0}, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000fc0)='hsr0w\xcd\xd81\xa3\xa6\x00T\xe3Xn\xd4\xf1\xce2)\x84\x19\xf6\x8a\x133\xa24\xac\x1d\x81\xf3\xcdc\x9f\x00\x00\x00dKyv\x1a\x96\xec\xb9z.G\xf0\xd0&$j\xb4\x00\x00\x00\x00!I2\x13\b\xf9\xa8\x8c\xa7\x1c\\\xd7\xc0\"\x9b{j\xb2\x7f C\'\x1c&\xf6H\xe1\x92\x01\a\xd8p\x89\xa6G0\x10\xdf-\xdc>\x7f\fG\xa75\xd8aM!\xe6\xe3\xf2\xed.\x90\xae~\x93#*\xcc\xa0ao-\x16\x1fmO\xfe|\x94\x7f\xf5\x8a\xf4\x83\x16\xf2L\x8b\xc7m\xf3m\xaa[\x03\x00\x00\x00R\xcd\xde\xe9F\xc2\xe1b\xfd\xee3j\xf8\x8a\xa2\xbf\f\xe2Rxn\xa7.BW\xb6\x1bC\x91\x1fW\xaa\x03\x00\x00\x00\x8e\xfc\x9c\x1ax\xea\x95x\xda?\xb0|q%\x00\x00\x00\x00_\xb8\xa9\xc1\x19ba\xbb\xf2sLtT\x11\xf2^/\xdb\xd8G\xf0\xeb\bQ@\xcc\x80!\xb5\x82\xab\xd7\x03\xdfk\xcf\x11\xb2\xfcC\x7fFo\xed\xd7t\x03$\xdf:K\x18e\xf4\xc9', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0xb, 0x284}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004)

1.235402525s ago: executing program 5 (id=1521):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x29, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @initdev}, &(0x7f0000000080)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x4, 0x1, {{0x8, 0x4, 0x2, 0x2b, 0x20, 0x65, 0x0, 0x81, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xf6, 0x3, 0x6, [{@local, 0x4}]}]}}}}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00'})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0x0, 0xfff3}, {0x1, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x10, 0x80, 0x71, 0x1, {{0x18, 0x4, 0x3, 0x10, 0x60, 0x68, 0x0, 0xd, 0x2f, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0xc7, [@loopback, @multicast1, @loopback, @rand_addr=0x64010100, @local]}, @generic={0x0, 0x3, 'g'}, @generic={0x86, 0x4, 'g|'}, @cipso={0x86, 0x12, 0x48b6a4410952a170, [{0x7, 0xc, "081fbbc25ad47eebde4a"}]}, @timestamp_prespec={0x44, 0x14, 0xf0, 0x3, 0x6, [{@local, 0x30}, {@rand_addr=0x64010101, 0x3ff}]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000240)={@dev}, &(0x7f0000000280)=0x14)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010)
getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x4b8, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x4a4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x434, 0x2, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xd3, 0xeaa, 0x64, 0x1, 0xe33, 0x200, 0x7, 0x4, 0x3, 0x0, 0x6, 0xfffffffd, 0xb5f, 0xc8cc, 0x5, 0x80, 0x0, 0x9, 0xffff, 0x1, 0x8, 0x5, 0x1, 0x5, 0x6, 0x2, 0x3, 0x100, 0x1dcfe4ac, 0x4, 0x7, 0xf, 0x6, 0x9, 0xffff8000, 0xfffffff9, 0x7, 0x0, 0x1, 0x2, 0x80, 0x2, 0x80000000, 0x6, 0x5, 0x8, 0x9, 0x4, 0xfff, 0x800, 0x2, 0x5, 0x2, 0xfffffff9, 0x40, 0x1, 0xf, 0x8, 0xfff, 0x3, 0xde7b, 0x400, 0x0, 0x3, 0x4, 0xfffffffe, 0x0, 0x6, 0x200, 0x1, 0x3, 0x1, 0xe01, 0x5, 0x7, 0x2, 0x0, 0x5, 0x80, 0x37eb, 0x9, 0x6, 0xffff0001, 0x4, 0x531, 0x1, 0x0, 0x7, 0x0, 0x1, 0x5, 0x0, 0x1a, 0x3, 0x5, 0x8, 0x80000001, 0x427, 0x2, 0x5, 0x9, 0x24, 0x3, 0x7b48, 0xca, 0x10000, 0xe0f, 0x40, 0x200, 0x0, 0x9, 0x39f47d8b, 0x80000001, 0x8, 0x0, 0x2, 0x80000001, 0x46c4, 0x36f2, 0x7, 0x9, 0x4, 0x101, 0x9, 0x9, 0x4, 0x8, 0x1, 0x8, 0x4, 0xa0, 0x401, 0x0, 0xfd, 0x3, 0x4, 0xb, 0x2, 0x3b, 0x5, 0x8, 0x4736, 0x4, 0x80, 0x10001, 0x9, 0x5, 0x1, 0xffffffff, 0x6, 0x6, 0x7ff, 0x5, 0x8, 0x1, 0x7, 0x3ff, 0x8ec6, 0x8, 0xe, 0x7fff, 0x2, 0x800, 0x8, 0x4, 0x3, 0x5, 0x1, 0x5, 0x7, 0x83, 0x0, 0x4, 0x3, 0x8, 0xfff, 0x3, 0x5, 0x0, 0x2, 0xa7, 0x3, 0x10001, 0xcf0b, 0x0, 0x2, 0xfadf, 0x0, 0x9, 0x3, 0x8, 0x10000, 0x9, 0x12, 0x7, 0xfff, 0x573, 0x85d, 0xe, 0x1014, 0xfffffff7, 0xfffffffe, 0x3, 0x6, 0x1, 0x200, 0x3, 0x4, 0x6, 0xb2f5, 0x3, 0x2, 0x10000, 0x0, 0xfffffff9, 0x40, 0xffff0000, 0x10, 0x5, 0xd83, 0xf, 0x5, 0xffffff7f, 0x9d, 0x7, 0x401, 0x1, 0x0, 0x6, 0x3, 0x3c, 0x810, 0x7, 0x6, 0x800, 0xeee80000, 0xfe000000, 0x9, 0x6, 0x8, 0xfff, 0x7, 0x4, 0x6, 0x8, 0x2, 0x8000, 0xbb01, 0x445, 0x4, 0x1e, 0x7, 0x10, 0x7, 0xfffffff9, 0x7163]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x8010}, 0x44830)
socket(0x2, 0x80805, 0x0)

1.229898175s ago: executing program 4 (id=1522):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket(0x10, 0x2, 0x0)
sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160018000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r1, 0xc1b}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)

1.180550167s ago: executing program 1 (id=1523):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7e275}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6}, 0x48804)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=")
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) (fail_nth: 2)

995.952588ms ago: executing program 1 (id=1524):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd28, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x3, 0xcf, 0x0, 0x0, 0x8, 0x20010}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48800)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x4, 0x5, 0x5}, 0x8d, [0x7, 0x1, 0x800, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x7, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0x11, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0x20ff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0xd, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x4, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x7, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x7, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x40000, 0xfffffff3, 0x4000008, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x1, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84a, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x5, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7ffd, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r8}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38)
readv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}, {0x0, 0x2}], 0x2)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
r9 = socket$caif_seqpacket(0x25, 0x5, 0x4)
connect$caif(r9, &(0x7f0000000000)=@dbg={0x25, 0x7, 0x80}, 0x18)

836.983383ms ago: executing program 3 (id=1525):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x23, "4bda575681278820bc4dc5acc8f7927d504e1893180b1ab641e7c5b37c57fc83e64327"}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="2102000000000000000004000000080002000500000006000b0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
fchown(r2, r3, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e23, 0xc, 0x4e21, 0x3, 0xa, 0x0, 0x0, 0x3c, 0x0, r3}, {0x80, 0xfffffffffffffffa, 0x6, 0x5, 0xfffffffffffffff3, 0x0, 0x3, 0x800}, {0x8, 0x5, 0xfffffffffffffffd, 0x4}, 0xe95e, 0x0, 0x1, 0x1, 0x3, 0x2}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in=@private=0xa0100ff, 0x3505, 0x2, 0x1, 0x0, 0x1, 0x9, 0xfffffff6}}, 0xe8)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4200, 0x40)
openat(r6, &(0x7f00000000c0)='./file0\x00', 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

578.733262ms ago: executing program 3 (id=1526):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28)

400.238924ms ago: executing program 3 (id=1527):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
setresuid(0x0, 0xee00, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xfffffffffffffff9)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000100)=0x8, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x107002, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xfffffffd, 0x20000000}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x90000005})
connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000180))
r6 = io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0x9913, 0x20000, 0x1, 0x3af})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x0)

393.472162ms ago: executing program 3 (id=1528):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100000000030000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r1], 0x70}}, 0x0)

362.955798ms ago: executing program 4 (id=1529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000001300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x92008}, 0xc, &(0x7f00000012c0)={&(0x7f0000004240)=ANY=[@ANYBLOB="84100000", @ANYRES16=r1, @ANYBLOB="b29625bd7000fddbdf254d0000000410a80045b9226562248099c4a12ba6fd6682fea4fa64143d2f0de6c52140cf7305f78eea18c11cd6f91fc38c6027e0ae423f99f3e3764a5c57b0b3806aa55ee0cba91b79df439ad5bc96233c0ce7bd66f827c41e732810e0d8c362125544ec331270c789d13527495370edd390020f335552feaf85334a41cf9dc8ba22a2eaf8038199c507d74c5c25074e441adfbe2ccd220f6e7832d2b423c586874d1564d4d40693be8b59adb756d76375435c7af3cc5407db061e32aeb63d6cb7087ee2ac41c1ee6c6be584730b7b9b1e3e0f3187931acb3bb74d9fd54efe97598eae3de0a787abf05d361c552039bd11103eae0f95b491a4cb875f2fa5f6203dc0d9addc478c64d8db0fc6bcd36534fe1db00fd32cbe4c75a53ec3fc2f709df9736555c052360a92c51636e6298d7f345de848a40272721d689c964cd3ef26c81a5d10324b376676df8ef384b6d9c641a9416a98441e1b7898ef629600b95e2458ddf230fa2ab3365c0c1cbee118eb2e2c9e076ef7268b9812b6a0488bcb3b28862bc9dffcca5db35e395cf1674f95e26e8568897516c8451d22ea80b713e3cbf4f1efd3aa084a8c6d75e8c4679d3aa6fb7ec1558b7306adfd508975998ae6fc8f417e016ed7917915aaecdba0b23e5c9cddeb031520758e1b61ad4eae2bab500c4ef485f331812b0e4a58a1d06c349132f978e52a39fdff087fa89033dcf9c0c5fac8c976b3c65e06fb1efe5888d75d01d362e1069b3d6cf98e1d36a84f0e424f88cbde90b2122a777314bb40366a2f2343ad849edbbc8a5f97794cd5293d0cdec2fd09930631611b50ba5ce1b77e5a417e426c99f79188272ca18c4f27ad6ca2cccd76b6f164d49afe528617997e0050fedb58b2f9cead9a704a4bccc8dd0c6ffc110c6685f3a45a2f8d99674e589b5066d90b1f96be412aa896b4a21bcf0088cd6634329190a788b7f7a616db4ff0b2b158e8fb6f26beb47d56c087caaf90ebe8b1d4c552fdd7e2259adde5875d77ff9f74d3546c8616ac60ecbb78696c61fe86d6ef84aee67d6568bdd255fc70c62fca7bc2a802a0fa5de0ff7c6757f382a697ce4cecbef88858b637ff6796523d1d40ee951d7d8fcc7d38a9d53cc540e0dce480a3a2f408a9517e0228b2436d4d5181105ff85cedc977164962bad78ff9de6024550c4acb19c07ced9a86933a4d4a8cd292be25aafce97b7f605302f43f33ef5a8af8fdd06d97ede974f28326ca1cb29ffa3402670a135dfb82f6b493f165a6bf2e8fbc8c93c4d15773d94bfc3bf57fd8a35b41f07c60898e1772f960992542860c9dd01d2c4d8d685c7942f265ab534e092897ea4ef86075ffa8cea4e25312aea583cbd13c37d973f9dc2ef256a9fa51eb0f8d826d25a820afe4a2c87f719eb220e5500952530b0d4bdbe767104b054df3039f4fe875e539c864b71f9e26caf28f0d7045a56619a1feef0068ec5ac0f26bf6d9e22bd0894d93e17e9b425c6caef7a477691349877b21dcbdc8e795c41783240affccb0545d93799c460704917a87fc14d0b81acfef69c1f357464f8f0a49d499690c207780530048135548468484b0f70879d7e92b5ff61396d06126366ac9fbb42491c301c67553e89030ad472dde7e27193bb861e4b635122a5e094b47eb2a3d1e2c9d1657dafef3c1331ab139beabfb4d5d1808e959f03ccc331cd40e34ca71aa7c743bd5fe4510691c9cb822a327e9716691df754fa7a9fd944ce05c40f3151c0800b77f68d93fffbc2eeef6453e1a1cd57401bcff4b7cd39e075df34a8de7bdf46eda0ed3a94d9c42dc95f57cbb97f6fe5035297a160f079995f0b1448bc6062c30c931e9d7b23cb2adbdca4d1b73c01057e7c49280f26f96c9f3c5a40563258bb2f4dc206394b76c44aa94e98cc8d221adc423c3441708af073175e5dd134d1f72c3710f58c2a3320d8792a28ad16874b7c9bd704036a873c6d55101e9a0ddb69d290b3bda933a73552edfbc48feddd6d5304e18f76448898c9b11a5f4c88ad413475ac2175a6837a8d565086818d7a4bfd764a267d0858059c5ad23392b5ca05f0c481d494bc6c531ec41a521b3e59c009b06f2b1e50b9e1f03c33501226b671a24d1daf566d88d51d87420124b89f554fcf3752179547f94d1493735bb7ba5638c73b660e4a2162514fac368ba344b5dcb5350c60ef8ef91e6be8c670a8f577350ddf71ff86219483b737c15c8fee09f29a65fdc2e5b370498cd58d08999693107cb675aff640e48ead815ae57b73099fed0c48873e0bdba38ae3439753eb75b7529dbe2e33ed2a2963fe52a827967c170b37278451c6425797e6c85b5a2f2c14aaa3b0c82931521be7ac96bfcea6531be06c903c229ff8ad852eabb14af313469aaea5efe68d90414982576ace259c37c084d195da9f741f1a9ff7175384e2413d7adb5bc19cc04dd76a52bb30345ccbe035bb319acecfc9bb63d5a4545a99ec6105adb4115b8e54ce1415c1a5e23c8ffda06ed20c4e2d899c49f5e3077270cabd7f168e3ad6f30ce90f533821893ad4ce664f22d18bfea3348c4341237a98632ca9960302b95a8b389e676d8702036e99f84a11d8daefaa57b679231d1fe981f927f9fdceb8a26fade0c73ec5e0e6aee0717e42e9e6b6b3c3566fc6b4c260ba8d2791124b6bd52afb469cb30738eed84f03feae97cd4c353dacbab31aeaa31f25a8b24b4f8ca21efc699e045c6fada86dd2b2e7c195d09e6637f2c91889d5a0ddf695dbb2f6da91fc1dfb38d365cf6582cef0266ad6f0a79f97538c3cc541c348c6110bd90b67ed49433d0dae9ef17e18318e45e2fe0a156df5f450969a06fd7fadeefee8c021bdb58fe3b381c1adaecde07be23cba254f6f1d60ae7ee726a23c1f16055586cb73ea12cb736d437fe714d3ec2ed630634def2c9208f2377a0f5692fb0b9f249ac2cd96a781aaf37448c257b7e6bce4a986be98a08e1408b4507c495eb7aaadf876fc68db31c2725fa8b94b3f9f35c805b6f3113c7ee91c19adea468fb8744c48066ff9d2131b6a9f15ff899880a1447a3113b1b745a87e7decb7c0f384d03c50f36d0ef93aa114ed4d75237b980ecfc62ee47972279aef801a6ee372b928b6248e2fc11d7e4c1219b2ad267dc3e78e9a55754fa54f14591d21f340fd2403950054a5f24f8b22a8dc5d0a704a72c21b530fc4019e972cdab3ac21d909b7774519f1c1f4a5b306e9a5f76a1fea019ee17da6ec61413ea69518384d73c0527fccfb6ec1c6783ec40b2ef7371da4f094c9a5e613d12a2f085f94ad61e03fbdbba68e3ab831d7d23d5ef36a3511d485da6eee5636934afbdc34dfd55e600bd9424b4967aad46a56705098a1f0eb1b6af5d83784b0e24be2a4333d1d17dfc96a6638c4feb656596df823f0d8043979514472ef8c82b34b058db3ddcbbf859c9b39fbdfa2df7b1f4e57bbed17e501e2dc5fcfd6a8b9e632065a8aa6d6657f214a50a12f741faba83808718e609bdd366c9fdf79e7d49f87d230acdc96ea4e48c92fbcb985ac11f2ac8803316c35f1ef94f14fca3e0150b55a75c5b801f5bcbb9a0f642a4f796205eb06ca73217ed4b0db4d57d38029b4cdbe3cdc8a83edfffbacf8797379c4d7aa1494760a9b074d9a3b3960749af61542b4f405de77bd58198dfc0cb6ef2950eed8ce09ddaceef02622abc5cbec20ac926e7c345c73181400cd55fc1ca3d61a56cccd89d3adc5da523883678aa8850b72d94d9702c4c116f070e1c14c11978c65a926142a51f103feafaac976a41b585f4ba57233477aff351885df35bd132a44f5f901fca013777c597fe3829e3b800933471c0c595143b99d7a5836d3019517f478aa335011a51e6702565822855c1a9144222f78b71b95baa8e7e5e9e1b6a2a34cdfc2cc2072deea1d99edcd4753679b2b05ffe93d3976cfc14243274cfa9b567f53033d356154ba69c5931ec8eb99a0da96e4d214f19dd98161d5f341473309d0569f37aa6bc3d32b92def8b97a26ce7da1a80ddbf471adc039c52a8d35a0655dd052d8e807dadb994f0c8af0b7e80ba371a5ff75e8a7ad67c5b78dd0d66f9958223bb6930225afaed3a2f91517590d61d5b22111962cc2058ec64c7f0d3a46e47c8e49d27607953a87a76ff2c1ab7e08bac19c4220b1ba4629042ee5f33a9c9aa8ec68694f851f7774256c405e26113ad8e75b001f40bea4b95b2d62a5d67993dfcdfd446caebf65b1dce7c54d77cc37b5b74b3fdb1f749fd7551e78eeba12c5350a33a2307cda2d986468ad3cbc30571a9b8241cd0e18e5ed4cbd4856a1bf57081dd4fb1005d68fa7fafd1d7f00f5d1162978bc56aba56b8939a2ba6113a222690780bf4b5e3db8fb49ba82d91963b6acfd7985f334f38fe5187b1aac26aec1af1dddffcb8962ed8a77d67b3290163b05e25885a3a1da4fc39e85ed06a2fed616a314d436c3f5053b45e142ae949c75e2b629b68eaf2e19124d77d0bf3bed736c70b97eabd166327a19cc61b1b23e5cb2e44b91ebf3f391f176d0b0d19a7977d667a08c78536d70020534db7851b6d0f72bf48c6a0cdb0b94280b86a72af3ab0e76ad256247d4162f61d028e57f2400a6948f1434ed8070b1d364642af69de05217a85f2e7aba4e168b6076c82a6f84f88c7532e74902a953457792e222a53253babef9ce268dfc687b883d4199e8cb53616f28a4bd802eb67afc822563899004763b1dcacdbe0bb3bbcefed4f257c451d1be9c44f607159ed53b61357c664389791dec54dd428d7db25fde724741a4c1984b17769b5ab520b1c4c116990f693e4327c9ea6e0b9fd2d2576186a77d95caf8b81672104556db3e872875a874f3052a60957a61dab0e81b06e1f78da99f2b6a5cbde04991a00794a7020227000ebf9bdc536cc79d42ae7c6798a8ed3dfb1dd5ed992415cb23279fe61b3b11b9d90cadbf06a219abbebe9d4d22dfa48cc95d3f884352244d52ec7bd0ed533c53909ee076f52bca18182811c6261f990f58a1ee59d900d8c0d342456153b154c5087160e5c4b7f6b076decf95d5c9035d8e19aecace4a7ccb474785ee2e13bb3db89950a5dbc76413320bae3049f9f19b3f575fa6162d4f5d8550d224adb8e7c79cde8573ef192f13af7a0772681d65d380ef0bcaeafa6dc33fda3afab67031ae59b2a6836b1d5d1af2a02dcf33c20c6a2582a6ff8e758fc994d9858cb87528d9d69d4ba7f364afc940a095c15041e96f21e07ea053ca6df1bfd96335b308964f58ad096a183753372c27de1fd992285215f108217ff5470750d134696e3b97c3449e32aa145d292b067908d284afd787ac8f26544da5d022ce0c266e0c5ecd17f94a16ae3414b866c77ca8ed929f81891684da7262f92f6c198ef8c2a7c08900d5c0426ac23c6e58d2d87710d9b56825bc3475fd5fc1930254aeea563d00bcae6bf4c6c43d161e92fab927bed39d37cbd45d1864eab957e4c50560126b4097d1fd570faed490d78d7400b158fcd8286cb01943b86b381bc876e4f1aa648ac2a8274b9e058901786a2bbb62683c50690cf1bb21cf38189d8bd17dacaff4a74bac7e9bcdc4ca4c238b8d40a88451badcfd2bb85be7fcf97bb56825dbf6f6dca82ce89b0e6b05311cfb6f623931a80a5a4b00e0e810d0b3920867edec9f36629181806918d20bee00e6ea232895e015b93d8e4d46491c24a2700634f031582d24ca8cc6efbbdeaf70811ad90318558a086c436396c49e8db6686e6c13aaffb9af9038a2513def2a86621a85e6816b94fe742eabaddb9ee7f7917062ce925bee2ffa80066697273746e616d650000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000a7630e68058aa71f6db3819230aba9d7066fe0fd2a0149cd09300a71450efa562745f3cea66d6d84ed547269701c353e64433c1b9ae6326518d123b70d5971508553f33c15e81e55b1cbf869751e9263749a3b9b348c0bdc84745152f1d9ec29955b601efc2a2b094e"], 0x1084}, 0x1, 0x0, 0x0, 0x50}, 0x1)
r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x801, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x10, 0xea9afd6bc429cb13}}, 0x20}}, 0x0)
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000680)={0x44000, 0x0, 0x19}, 0x18)
r5 = getpid()
getpriority(0x1, r5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0)
ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000380)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"})
r7 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r7, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000002080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c0000000008000100000000000000000000000000000000ff020000000000000000000000000001ff"], 0x0)
recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x116200, 0x1000, 0x20de, 0x4, 0xa, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@quota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x57d, &(0x7f0000000c80)="$eJzs3c9rFFccAPDvbDYaf7RGEGl7KAEPtVg3JukPCwXtsbRSob3bJRmDZONKdiMmFdRDvfRSpFBKLaV/QO89Sv+B/hVCK0iR0B56SZnNrK5JNr/cdFf384HR92Zm/c6bN+/5nZ1dNoC+NZL9UYh4NSK+SSIOtWwrRr5xZGW/pUfXJ7MlieXlz/5KIsnXNfdP8r8P5JVXIuK3ryJOFNbGrS0szpQrlXQur4/WZ6+M1hYWT16aLU+n0+nl8YmJ0+9MjL//3rsda+ub5//5/tN7H53++tjSd788OHwnibNxMN/W2o5ncLO1MhIj+TkZjLOrdhzrQLBeknT7ANiRgXycD0Y2BxyKgXzUAy++GxGxDPSpxPiHPtXMA5r39h26D35uPPxw5QZobfuLK++NxFDj3mj/UvLUnVF2vzvcgfhZjF//vHsnW2KT9yFudCAeQNPNWxFxqlhcO/8l+fy3c6cabx5vbHWMfvv/B7rpXpb/vLVe/lN4nP/EOvnPgXXG7k5sPv4LDzoQpq0s//tg3fz38dQ1PJDXXmrkfIPJxUuV9FREvBwRx2Nwb1bf6HnO6aX7y+22teZ/2ZLFb+aC+XE8KO59+jVT5Xr5Wdrc6uGtiNee5L9JrJn/hxq57ur+z87H+S3GOJrefb3dts3b36rzGfDyzxFvrNv/T55oJRs/nxxtXA+jzatirb9vH/29Xfzttb/zsv7fv3H7h5PW57W17cf4aejftN22nV7/e5LPG+U9+bpr5Xp9bixiT/LJ2vXjT17brDf3z9p//NjG89961/++iPhii+2/feR22117of+nttX/2y/c//jLH9rF31r/v90oHc/XbGX+2+oBPsu5AwAAAAAAgF5TiIiDkRRKj8uFQqm08vmOI7G/UKnW6icuVucvT0Xju7LDMVhoPuk+1PJ5iLH887DN+viq+kREHI6Ibwf2NeqlyWplqtuNBwAAAAAAAAAAAAAAAAAAgB5xoM33/zN/DHT76IBd5ye/oX9tOv478UtPQE8a6vYBAF0j/4f+ZfxD/zL+oX8Z/9C/jH/oX8Y/9K9s/P/Y7YMAAAAAAAAAAAAAAAAAAAAAAAAAAACAF8f5c+eyZXnp0fXJrD51dWF+pnr15FRamynNzk+WJqtzV0rT1ep0JS1NVmc3+/cq1eqVsfGYvzZaT2v10drC4oXZ6vzl+oVLs+Xp9EI6+L+0CgAAAAAAAAAAAAAAAAAAAJ4vtYXFmXKlks7tXmHf7ofY3cKZaK4p5metRw5si4Vks14+kzdrRyGK3W+gwi4UujgpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAq/wUAAP//LiIwgg==")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0)
ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02fbdbdf2507000000050005000600000005000500090000000800040010000000080003000600000049356da4bda62875955541e5eda03543d31919cc7d820064445989a33726e88b778c9607d2dc3b3627ebeb74bc6de70f0c4f792293731b83fd2037d1684c9971db99db8622e55b632831f5997731ce48400211a0ccee714d764a9f9defaddcd2ff8381299401ae6aa6f3f76ac6bbbb9a0025535a1c7acef4b52e1fc22e37b1734e658f4119be8060b4826b1f156190c92fd3d1b6e74e1c9666c649338009293bfb6c07b36ea51f15dae629dea2cb07cdbb26fdea"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)

44.122837ms ago: executing program 0 (id=1530):
close(0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{<r3=>r0, &(0x7f0000000100)='batadv_slave_0\x00', 0x80, &(0x7f0000000140)={@align=0xd, {0xa, 0x4, 0x3, 0x7e8}}, 0xfffffffa, &(0x7f0000000180), &(0x7f0000000200)=0xe}, {[0x5, 0x5, 0x0, 0x2]}, 0x8, 0x1, &(0x7f0000000240)=""/1})
r4 = openat$cgroup(r3, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x1}}}, 0x24}}, 0x4)

43.806497ms ago: executing program 5 (id=1531):
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0)
read$rfkill(r1, &(0x7f0000000080), 0xffffff1c)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

43.685897ms ago: executing program 3 (id=1532):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005, 0x0, 0x4000080}, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000fd0300000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000203c04486277a9246b1f535d"], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004"], 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, 0x0)

27.613435ms ago: executing program 0 (id=1533):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
pipe2(&(0x7f0000000000)={<r2=>0x0, 0x0}, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000fc0)='hsr0w\xcd\xd81\xa3\xa6\x00T\xe3Xn\xd4\xf1\xce2)\x84\x19\xf6\x8a\x133\xa24\xac\x1d\x81\xf3\xcdc\x9f\x00\x00\x00dKyv\x1a\x96\xec\xb9z.G\xf0\xd0&$j\xb4\x00\x00\x00\x00!I2\x13\b\xf9\xa8\x8c\xa7\x1c\\\xd7\xc0\"\x9b{j\xb2\x7f C\'\x1c&\xf6H\xe1\x92\x01\a\xd8p\x89\xa6G0\x10\xdf-\xdc>\x7f\fG\xa75\xd8aM!\xe6\xe3\xf2\xed.\x90\xae~\x93#*\xcc\xa0ao-\x16\x1fmO\xfe|\x94\x7f\xf5\x8a\xf4\x83\x16\xf2L\x8b\xc7m\xf3m\xaa[\x03\x00\x00\x00R\xcd\xde\xe9F\xc2\xe1b\xfd\xee3j\xf8\x8a\xa2\xbf\f\xe2Rxn\xa7.BW\xb6\x1bC\x91\x1fW\xaa\x03\x00\x00\x00\x8e\xfc\x9c\x1ax\xea\x95x\xda?\xb0|q%\x00\x00\x00\x00_\xb8\xa9\xc1\x19ba\xbb\xf2sLtT\x11\xf2^/\xdb\xd8G\xf0\xeb\bQ@\xcc\x80!\xb5\x82\xab\xd7\x03\xdfk\xcf\x11\xb2\xfcC\x7fFo\xed\xd7t\x03$\xdf:K\x18e\xf4\xc9', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0xb, 0x284}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004)

0s ago: executing program 0 (id=1534):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002280)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x9}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x4, 0x0, 0x61d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x3d6451f3, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0xc, 0xd, 0x3, 0xa, 0x3, 0x1, 0xd, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x44, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0xa, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0xa, 0xba, 0x47, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0x80000e01, 0x4, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0xfff, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x4008, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x5750c0, 0xb6}, 0x18)
lseek(r2, 0x80000001, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0)
fsopen(&(0x7f0000000040)='pipefs\x00', 0x1)

kernel console output (not intermixed with test programs):

.812775][ T6027]  do_syscall_64+0x12c/0x370
[  108.812820][ T6027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.812861][ T6027] RIP: 0033:0x7ff64393c629
[  108.812877][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.812907][ T6027] RSP: 002b:00007ff64238f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.812932][ T6027] RAX: ffffffffffffffda RBX: 00007ff643bb5fa0 RCX: 00007ff64393c629
[  108.812950][ T6027] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  108.812966][ T6027] RBP: 00007ff64238f090 R08: 0000000000000000 R09: 0000000000000000
[  108.812980][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.812992][ T6027] R13: 00007ff643bb6038 R14: 00007ff643bb5fa0 R15: 00007ffe5f3d7a88
[  108.813073][ T6027]  </TASK>
[  109.041186][ T6034] syzkaller1: entered promiscuous mode
[  109.058909][ T6034] syzkaller1: entered allmulticast mode
[  109.066412][ T6034] FAULT_INJECTION: forcing a failure.
[  109.066412][ T6034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.073653][ T6041] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  109.081254][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: syz.1.719 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  109.081394][ T6034] Tainted: [W]=WARN
[  109.081416][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  109.081512][ T6034] Call Trace:
[  109.081535][ T6034]  <TASK>
[  109.081616][ T6034]  __dump_stack+0x1d/0x30
[  109.081703][ T6034]  dump_stack_lvl+0x95/0xd0
[  109.081779][ T6034]  dump_stack+0x15/0x1b
[  109.081853][ T6034]  should_fail_ex+0x263/0x280
[  109.081927][ T6034]  should_fail+0xb/0x20
[  109.082021][ T6034]  should_fail_usercopy+0x1a/0x20
[  109.082103][ T6034]  _copy_from_iter+0xcf/0xea0
[  109.082201][ T6034]  ? should_fail_ex+0xd9/0x280
[  109.082345][ T6034]  ? skb_set_owner_w+0x19b/0x200
[  109.082465][ T6034]  ? sock_alloc_send_pskb+0x469/0x500
[  109.082581][ T6034]  skb_copy_datagram_from_iter+0xb2/0x480
[  109.082727][ T6034]  ? skb_put+0xa9/0xf0
[  109.082823][ T6034]  tun_get_user+0x90b/0x27c0
[  109.082963][ T6034]  ? ref_tracker_alloc+0x1eb/0x2f0
[  109.083117][ T6034]  tun_chr_write_iter+0x15e/0x210
[  109.083188][ T6034]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  109.083292][ T6034]  vfs_write+0x5a6/0x9f0
[  109.083406][ T6034]  ksys_write+0xdc/0x1a0
[  109.083582][ T6034]  __x64_sys_write+0x40/0x50
[  109.083681][ T6034]  x64_sys_call+0x27e1/0x3020
[  109.083791][ T6034]  do_syscall_64+0x12c/0x370
[  109.083935][ T6034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.084032][ T6034] RIP: 0033:0x7ff64393c629
[  109.084083][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.084145][ T6034] RSP: 002b:00007ff64238f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  109.084209][ T6034] RAX: ffffffffffffffda RBX: 00007ff643bb5fa0 RCX: 00007ff64393c629
[  109.084315][ T6034] RDX: 000000000000002e RSI: 0000200000001ec0 RDI: 0000000000000003
[  109.084368][ T6034] RBP: 00007ff64238f090 R08: 0000000000000000 R09: 0000000000000000
[  109.084411][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.084493][ T6034] R13: 00007ff643bb6038 R14: 00007ff643bb5fa0 R15: 00007ffe5f3d7a88
[  109.084662][ T6034]  </TASK>
[  109.339922][ T6047] loop0: detected capacity change from 0 to 164
[  109.347929][ T6047] rock: directory entry would overflow storage
[  109.354216][ T6047] rock: sig=0x5252, size=5, remaining=3
[  109.721538][ T6055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.733323][ T6055] syzkaller0: entered promiscuous mode
[  109.745926][ T6055] syzkaller0: entered allmulticast mode
[  109.775926][ T6055] tipc: Resetting bearer <eth:syzkaller0>
[  109.794833][ T6053] tipc: Resetting bearer <eth:syzkaller0>
[  109.822097][ T6053] tipc: Disabling bearer <eth:syzkaller0>
[  109.999151][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.728'.
[  110.008995][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.727'.
[  110.251663][ T6068] netlink: 'syz.3.730': attribute type 2 has an invalid length.
[  110.398850][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'.
[  110.621850][ T6091] IPv6: NLM_F_CREATE should be specified when creating new route
[  110.704735][ T6099] netlink: 'syz.3.741': attribute type 2 has an invalid length.
[  110.780331][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'.
[  110.856188][ T3424] tipc: Node number set to 4227923968
[  110.947753][ T6116] vcan0: tx drop: invalid da for name 0x0000000000000003
[  111.118729][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'.
[  111.520631][ T6127] loop0: detected capacity change from 0 to 8192
[  111.610776][ T6127]  loop0: p1 p2 p4
[  111.698722][ T6127] loop0: p4 size 262912 extends beyond EOD, truncated
[  111.778942][ T6134] netlink: 'syz.4.753': attribute type 2 has an invalid length.
[  111.898152][ T6140] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  112.346748][ T6151] loop0: detected capacity change from 0 to 1024
[  112.428794][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.760'.
[  112.450278][ T6151] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  112.484814][ T6151] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000]
[  112.507583][ T6151] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #3: comm syz.0.759: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  112.691774][ T6151] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  112.691948][ T6151] EXT4-fs error (device loop0): ext4_quota_enable:7195: comm syz.0.759: Bad quota inode: 3, type: 0
[  112.701284][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  112.701303][    C0] EXT4-fs (loop0): initial error at time 1772081258: ext4_ext_check_inode:521: inode 3
[  112.701347][    C0] EXT4-fs (loop0): last error at time 1772081258: ext4_ext_check_inode:521: inode 3
[  112.808514][ T6151] loop0: lost filesystem error report for type 5 error -117
[  112.808658][ T6151] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  112.847157][ T6151] EXT4-fs (loop0): mount failed
[  112.996311][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'.
[  113.636807][ T6164] loop1: detected capacity change from 0 to 2048
[  113.644958][ T6168] loop0: detected capacity change from 0 to 32768
[  113.671201][ T6164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.812694][ T6164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.877481][ T6180] FAULT_INJECTION: forcing a failure.
[  113.877481][ T6180] name failslab, interval 1, probability 0, space 0, times 0
[  113.900875][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.1.768 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  113.900933][ T6180] Tainted: [W]=WARN
[  113.900940][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  113.900954][ T6180] Call Trace:
[  113.901013][ T6180]  <TASK>
[  113.901022][ T6180]  __dump_stack+0x1d/0x30
[  113.901056][ T6180]  dump_stack_lvl+0x95/0xd0
[  113.901081][ T6180]  dump_stack+0x15/0x1b
[  113.901154][ T6180]  should_fail_ex+0x263/0x280
[  113.901184][ T6180]  should_failslab+0x8c/0xb0
[  113.901211][ T6180]  kmem_cache_alloc_noprof+0x66/0x400
[  113.901240][ T6180]  ? skb_clone+0x151/0x1f0
[  113.901325][ T6180]  skb_clone+0x151/0x1f0
[  113.901389][ T6180]  __netlink_deliver_tap+0x2c9/0x500
[  113.901431][ T6180]  netlink_unicast+0x66b/0x690
[  113.901547][ T6180]  netlink_sendmsg+0x5c8/0x6f0
[  113.901584][ T6180]  ? __pfx_netlink_sendmsg+0x10/0x10
[  113.901694][ T6180]  ____sys_sendmsg+0x5af/0x600
[  113.901735][ T6180]  ___sys_sendmsg+0x195/0x1e0
[  113.901896][ T6180]  __x64_sys_sendmsg+0xd4/0x160
[  113.901928][ T6180]  x64_sys_call+0x194c/0x3020
[  113.901956][ T6180]  do_syscall_64+0x12c/0x370
[  113.902062][ T6180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.902091][ T6180] RIP: 0033:0x7ff64393c629
[  113.902109][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.902128][ T6180] RSP: 002b:00007ff64238f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  113.902268][ T6180] RAX: ffffffffffffffda RBX: 00007ff643bb5fa0 RCX: 00007ff64393c629
[  113.902314][ T6180] RDX: 0000000000008000 RSI: 0000200000001c00 RDI: 0000000000000003
[  113.902387][ T6180] RBP: 00007ff64238f090 R08: 0000000000000000 R09: 0000000000000000
[  113.902408][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.902424][ T6180] R13: 00007ff643bb6038 R14: 00007ff643bb5fa0 R15: 00007ffe5f3d7a88
[  113.902450][ T6180]  </TASK>
[  114.458080][ T6190] loop1: detected capacity change from 0 to 1024
[  114.486637][ T6190] EXT4-fs: inline encryption not supported
[  114.538831][ T6190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.665257][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'.
[  114.679605][ T6193] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.771: Allocating blocks 497-513 which overlap fs metadata
[  114.694983][ T6193] EXT4-fs (loop1): Remounting filesystem read-only
[  114.741134][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.833613][   T28] kauditd_printk_skb: 42 callbacks suppressed
[  114.833629][   T28] audit: type=1400 audit(1772081261.051:3504): avc:  denied  { listen } for  pid=6195 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  114.859476][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  114.918348][   T28] audit: type=1400 audit(1772081261.101:3505): avc:  denied  { accept } for  pid=6195 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  114.971175][   T28] audit: type=1326 audit(1772081261.111:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  115.010792][   T28] audit: type=1326 audit(1772081261.111:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  115.070707][   T28] audit: type=1326 audit(1772081261.111:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  115.121140][   T28] audit: type=1326 audit(1772081261.111:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  115.157032][   T28] audit: type=1326 audit(1772081261.111:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  115.264213][ T6220] syz.0.775 (6220): attempted to duplicate a private mapping with mremap.  This is not supported.
[  115.287039][   T28] audit: type=1326 audit(1772081261.111:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  115.326997][   T28] audit: type=1326 audit(1772081261.111:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  115.363268][ T6220] loop0: detected capacity change from 0 to 1024
[  115.397218][   T28] audit: type=1326 audit(1772081261.111:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  116.014962][ T6249] loop1: detected capacity change from 0 to 128
[  116.043645][ T6249] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  116.079869][ T6249] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  116.218322][ T6240] lo speed is unknown, defaulting to 1000
[  116.224495][ T6240] lo speed is unknown, defaulting to 1000
[  116.339604][ T4452] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  116.371398][ T6255] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  116.385935][ T6255] bond4: (slave lo): Enslaving as an active interface with an up link
[  116.387990][ T6252] loop5: detected capacity change from 0 to 512
[  116.395714][ T6255] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  116.919984][ T6271] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  117.005274][ T6271] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  117.066057][ T6271] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  117.096033][ T6271] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  117.125239][ T6271] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  117.157585][ T6271] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  117.190925][ T6271] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  117.214953][ T6271] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  117.222781][ T6271] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  117.230529][ T6271] netlink: 'syz.1.788': attribute type 3 has an invalid length.
[  117.597894][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'.
[  117.616332][ T6291] loop5: detected capacity change from 0 to 4096
[  117.648701][ T6297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.796'.
[  117.668270][ T6291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.708333][ T6291] EXT4-fs error (device loop5): ext4_readdir:265: inode #12: block 80: comm syz.5.795: path /118/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  117.788343][ T6284] loop1: detected capacity change from 0 to 8192
[  117.818500][ T6284] loop7: detected capacity change from 0 to 4
[  117.951829][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.027168][ T6304] loop0: detected capacity change from 0 to 512
[  118.067341][ T6304] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  118.097247][ T6304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  118.105210][ T6304] System zones: 1-12
[  118.109708][ T6304] EXT4-fs (loop0): orphan cleanup on readonly fs
[  118.116698][ T6304] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.801: bg 0: block 361: padding at end of block bitmap is not set
[  118.132990][ T6304] loop0: lost filesystem error report for type 5 error -117
[  118.133279][ T6304] EXT4-fs (loop0): Remounting filesystem read-only
[  118.140676][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  118.140699][    C0] EXT4-fs (loop0): initial error at time 1772081264: ext4_validate_block_bitmap:441
[  118.140722][    C0] EXT4-fs (loop0): last error at time 1772081264: ext4_validate_block_bitmap:441
[  118.172477][ T6304] EXT4-fs (loop0): 1 truncate cleaned up
[  118.172700][ T6308] loop1: detected capacity change from 0 to 4096
[  118.179046][ T6304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  118.289876][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  119.422881][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'.
[  119.782450][ T6372] loop1: detected capacity change from 0 to 512
[  119.797704][ T6372] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  119.829495][ T6372] EXT4-fs (loop1): 1 truncate cleaned up
[  119.860316][ T6372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.947466][   T28] kauditd_printk_skb: 142 callbacks suppressed
[  119.947485][   T28] audit: type=1400 audit(1772081266.171:3656): avc:  denied  { create } for  pid=6370 comm="syz.1.820" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  119.947753][ T6372] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.820: bg 0: block 4: invalid block bitmap
[  120.027862][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.820'.
[  120.098517][   T28] audit: type=1326 audit(1772081266.321:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  120.144078][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.185402][   T28] audit: type=1326 audit(1772081266.341:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  120.226881][   T28] audit: type=1326 audit(1772081266.341:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  120.238052][ T6385] FAULT_INJECTION: forcing a failure.
[  120.238052][ T6385] name failslab, interval 1, probability 0, space 0, times 0
[  120.283455][   T28] audit: type=1326 audit(1772081266.341:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  120.345715][   T28] audit: type=1326 audit(1772081266.351:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  120.368169][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz.1.823 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  120.368296][ T6385] Tainted: [W]=WARN
[  120.368325][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  120.368386][ T6385] Call Trace:
[  120.368421][ T6385]  <TASK>
[  120.368444][ T6385]  __dump_stack+0x1d/0x30
[  120.368554][ T6385]  dump_stack_lvl+0x95/0xd0
[  120.368690][ T6385]  dump_stack+0x15/0x1b
[  120.368764][ T6385]  should_fail_ex+0x263/0x280
[  120.368879][ T6385]  should_failslab+0x8c/0xb0
[  120.368944][ T6385]  kmem_cache_alloc_noprof+0x66/0x400
[  120.369091][ T6385]  ? audit_log_start+0x34c/0x730
[  120.369136][ T6385]  audit_log_start+0x34c/0x730
[  120.369160][ T6385]  ? kstrtouint_from_user+0xa8/0xf0
[  120.369234][ T6385]  audit_seccomp+0x47/0x100
[  120.369357][ T6385]  ? __seccomp_filter+0x8db/0x1350
[  120.369393][ T6385]  __seccomp_filter+0x8ec/0x1350
[  120.369480][ T6385]  ? __rcu_read_unlock+0x4e/0x70
[  120.369573][ T6385]  ? __fget_files+0x184/0x1c0
[  120.369681][ T6385]  ? mutex_lock+0x57/0x90
[  120.369770][ T6385]  ? mutex_unlock+0x4e/0x90
[  120.369894][ T6385]  __secure_computing+0x81/0x150
[  120.369979][ T6385]  do_syscall_64+0xd3/0x370
[  120.370346][ T6385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.370419][ T6385] RIP: 0033:0x7ff64393c629
[  120.370478][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.370540][ T6385] RSP: 002b:00007ff64238f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000145
[  120.370612][ T6385] RAX: ffffffffffffffda RBX: 00007ff643bb5fa0 RCX: 00007ff64393c629
[  120.370654][ T6385] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000007000
[  120.370770][ T6385] RBP: 00007ff64238f090 R08: 0000000000000000 R09: 0000000000000000
[  120.370807][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.370911][ T6385] R13: 00007ff643bb6038 R14: 00007ff643bb5fa0 R15: 00007ffe5f3d7a88
[  120.370997][ T6385]  </TASK>
[  120.371207][ T6385] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  120.401025][   T28] audit: type=1326 audit(1772081266.351:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  120.467563][ T6385] audit: out of memory in audit_log_start
[  120.471570][   T28] audit: type=1326 audit(1772081266.351:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  120.722516][ T6393] loop1: detected capacity change from 0 to 1024
[  120.749841][ T6393] EXT4-fs: inline encryption not supported
[  120.755989][ T6393] EXT4-fs: Ignoring removed nobh option
[  120.799615][ T6393] journal_path: Lookup failure for './bus'
[  120.815785][ T6393] EXT4-fs: error: could not find journal device path
[  121.038341][ T6403] loop0: detected capacity change from 0 to 2048
[  121.237370][ T6403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.482192][ T6403] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.830: bg 0: block 234: padding at end of block bitmap is not set
[  122.638416][ T6403] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 62 with max blocks 22 with error 28
[  122.663880][ T6403] EXT4-fs (loop0): This should not happen!! Data will be lost
[  122.663880][ T6403] 
[  122.673683][ T6417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.684985][ T6403] EXT4-fs (loop0): Total free blocks count 0
[  122.691526][ T6403] EXT4-fs (loop0): Free/Dirty block details
[  122.718803][ T6403] EXT4-fs (loop0): free_blocks=0
[  122.734294][ T6403] EXT4-fs (loop0): dirty_blocks=400
[  122.758006][ T6403] EXT4-fs (loop0): Block reservation details
[  122.764047][ T6403] EXT4-fs (loop0): i_reserved_data_blocks=25
[  122.847597][ T6435] lo speed is unknown, defaulting to 1000
[  122.882521][ T6435] lo speed is unknown, defaulting to 1000
[  122.887615][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.009040][ T6453] loop0: detected capacity change from 0 to 128
[  123.078550][ T6453] lo speed is unknown, defaulting to 1000
[  123.087873][ T6453] lo speed is unknown, defaulting to 1000
[  123.143420][ T6416] loop5: detected capacity change from 0 to 2048
[  123.212098][ T6416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.301008][ T6464] geneve2: entered promiscuous mode
[  123.326379][ T5932] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  123.347383][ T5932] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  123.382772][ T6416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.395802][ T5932] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  123.415169][ T5932] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  123.476046][ T6471] ALSA: seq fatal error: cannot create timer (-16)
[  123.555669][ T6478] validate_nla: 34 callbacks suppressed
[  123.555688][ T6478] netlink: 'syz.1.853': attribute type 5 has an invalid length.
[  123.625439][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.633841][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.656470][ T6492] loop0: detected capacity change from 0 to 512
[  123.662860][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.668535][ T6492] EXT4-fs: Ignoring removed i_version option
[  123.672137][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.676896][ T6492] EXT4-fs: Ignoring removed bh option
[  123.713034][ T6492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.725986][ T6492] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.828945][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'.
[  123.848630][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'.
[  124.706152][ T6516] loop1: detected capacity change from 0 to 512
[  125.028606][ T6516] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  125.043202][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.054143][ T6516] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.863: bg 0: block 393: padding at end of block bitmap is not set
[  125.068497][ T6516] loop1: lost filesystem error report for type 5 error -117
[  125.068732][ T6516] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  125.084822][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  125.084848][    C0] EXT4-fs (loop1): initial error at time 1772081271: ext4_validate_block_bitmap:441
[  125.084887][    C0] EXT4-fs (loop1): last error at time 1772081271: ext4_validate_block_bitmap:441
[  125.110076][ T6516] loop1: lost filesystem error report for type 5 error -117
[  125.110544][ T6516] EXT4-fs (loop1): 2 truncates cleaned up
[  125.124432][ T6516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.173771][   T28] kauditd_printk_skb: 100 callbacks suppressed
[  125.173789][   T28] audit: type=1400 audit(1772081271.391:3764): avc:  denied  { create } for  pid=6528 comm="syz.3.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  125.237062][   T28] audit: type=1400 audit(1772081271.391:3765): avc:  denied  { read } for  pid=6528 comm="syz.3.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  125.281146][ T6541] loop5: detected capacity change from 0 to 512
[  125.350834][ T6541] FAT-fs (loop5): bogus sectors per cluster 0
[  125.382563][ T6541] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  125.401019][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.412207][ T6541] FAT-fs (loop5): Can't find a valid FAT filesystem
[  125.478841][ T6541] loop5: detected capacity change from 0 to 2048
[  125.531239][ T3628] Alternate GPT is invalid, using primary GPT.
[  125.542582][ T3628]  loop5: p1 p2 p3
[  125.546434][ T3628] loop5: partition table partially beyond EOD, truncated
[  125.564687][ T6541] Alternate GPT is invalid, using primary GPT.
[  125.576276][ T6541]  loop5: p1 p2 p3
[  125.584861][   T28] audit: type=1400 audit(1772081271.801:3766): avc:  denied  { read } for  pid=6545 comm="syz.0.875" path="socket:[14932]" dev="sockfs" ino=14932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  125.586523][ T6541] loop5: partition table partially beyond EOD, truncated
[  125.639913][ T6556] netlink: 'syz.4.878': attribute type 58 has an invalid length.
[  125.655146][ T6556] netlink: 152 bytes leftover after parsing attributes in process `syz.4.878'.
[  126.147669][   T28] audit: type=1400 audit(1772081272.371:3767): avc:  denied  { create } for  pid=6569 comm="syz.3.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  126.259707][ T6578] netlink: 104 bytes leftover after parsing attributes in process `syz.3.886'.
[  126.291588][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'.
[  126.300964][   T28] audit: type=1400 audit(1772081272.511:3768): avc:  denied  { create } for  pid=6579 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  126.356421][ T6581] loop5: detected capacity change from 0 to 512
[  126.417447][ T6581] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  126.469234][ T6581] EXT4-fs (loop5): 1 truncate cleaned up
[  126.485111][ T6581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.801276][ T6593] loop1: detected capacity change from 0 to 512
[  126.819322][ T6593] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  126.833006][ T6593] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.890: bg 0: block 393: padding at end of block bitmap is not set
[  126.847493][ T6593] loop1: lost filesystem error report for type 5 error -117
[  126.848571][ T6593] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  126.864829][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  126.864851][    C1] EXT4-fs (loop1): initial error at time 1772081273: ext4_validate_block_bitmap:441
[  126.864872][    C1] EXT4-fs (loop1): last error at time 1772081273: ext4_validate_block_bitmap:441
[  126.890042][ T6593] loop1: lost filesystem error report for type 5 error -117
[  126.890966][ T6593] EXT4-fs (loop1): 2 truncates cleaned up
[  126.905281][ T6593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.454078][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.709079][   T28] audit: type=1400 audit(1772081273.927:3769): avc:  denied  { connect } for  pid=6609 comm="syz.1.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  128.096174][   T28] audit: type=1400 audit(1772081274.307:3770): avc:  denied  { sys_module } for  pid=6609 comm="syz.1.898" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  128.163026][ T6610] loop1: detected capacity change from 0 to 32768
[  128.278003][ T6584] netlink: 84 bytes leftover after parsing attributes in process `syz.3.888'.
[  128.766289][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.107612][ T6631] loop1: detected capacity change from 0 to 2048
[  129.212857][ T6631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.309109][ T6649] loop5: detected capacity change from 0 to 256
[  129.342836][ T6649] FAT-fs (loop5): Directory bread(block 64) failed
[  129.349872][ T6649] FAT-fs (loop5): Directory bread(block 65) failed
[  129.356550][ T6649] FAT-fs (loop5): Directory bread(block 66) failed
[  129.365619][ T6649] FAT-fs (loop5): Directory bread(block 67) failed
[  129.372617][ T6649] FAT-fs (loop5): Directory bread(block 68) failed
[  129.379323][ T6649] FAT-fs (loop5): Directory bread(block 69) failed
[  129.385927][ T6649] FAT-fs (loop5): Directory bread(block 70) failed
[  129.392514][ T6649] FAT-fs (loop5): Directory bread(block 71) failed
[  129.399186][ T6649] FAT-fs (loop5): Directory bread(block 72) failed
[  129.405876][ T6649] FAT-fs (loop5): Directory bread(block 73) failed
[  129.577100][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  129.710844][ T6631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.668029][ T6660] loop1: detected capacity change from 0 to 4096
[  130.709305][ T6660] EXT4-fs: Ignoring removed nobh option
[  130.787247][ T6660] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  131.241400][ T6664] process '/newroot/202/file0' started with executable stack
[  131.715631][ T6674] loop1: detected capacity change from 0 to 1024
[  131.808616][ T6674] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  131.995852][ T3424] IPVS: starting estimator thread 0...
[  132.048534][ T6674] loop1: detected capacity change from 0 to 8192
[  132.137202][ T6675] IPVS: using max 2208 ests per chain, 110400 per kthread
[  132.145703][ T3628]  loop1: p2 p3 p4[EZD]
[  132.213216][ T3628] loop1: p3 start 331781 is beyond EOD, truncated
[  132.222307][   T28] audit: type=1400 audit(1772081278.417:3771): avc:  denied  { setattr } for  pid=6682 comm="syz.5.920" name="NETLINK" dev="sockfs" ino=15186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  132.249257][ T3628] loop1: p4 size 197376 extends beyond EOD, truncated
[  132.377021][ T6688] loop0: detected capacity change from 0 to 512
[  132.398443][ T6674]  loop1: p2 p3 p4[EZD]
[  132.403681][ T6674] loop1: p3 start 331781 is beyond EOD, truncated
[  132.427200][ T6674] loop1: p4 size 197376 extends beyond EOD, truncated
[  132.754113][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  132.767362][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  132.923173][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  132.948597][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  133.274225][ T6704] FAULT_INJECTION: forcing a failure.
[  133.274225][ T6704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.323897][ T6704] CPU: 0 UID: 0 PID: 6704 Comm: syz.5.927 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  133.323937][ T6704] Tainted: [W]=WARN
[  133.323947][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  133.323979][ T6704] Call Trace:
[  133.323987][ T6704]  <TASK>
[  133.323996][ T6704]  __dump_stack+0x1d/0x30
[  133.324031][ T6704]  dump_stack_lvl+0x95/0xd0
[  133.324061][ T6704]  dump_stack+0x15/0x1b
[  133.324140][ T6704]  should_fail_ex+0x263/0x280
[  133.324167][ T6704]  should_fail+0xb/0x20
[  133.324185][ T6704]  should_fail_usercopy+0x1a/0x20
[  133.324278][ T6704]  _copy_from_iter+0xcf/0xea0
[  133.324313][ T6704]  ? alloc_pages_mpol+0x217/0x260
[  133.324387][ T6704]  copy_page_from_iter+0x178/0x2a0
[  133.324471][ T6704]  tun_get_user+0xbbd/0x27c0
[  133.324506][ T6704]  ? ref_tracker_alloc+0x1eb/0x2f0
[  133.324602][ T6704]  tun_chr_write_iter+0x15e/0x210
[  133.324622][ T6704]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  133.324701][ T6704]  vfs_write+0x5a6/0x9f0
[  133.324740][ T6704]  ksys_write+0xdc/0x1a0
[  133.324784][ T6704]  __x64_sys_write+0x40/0x50
[  133.324834][ T6704]  x64_sys_call+0x27e1/0x3020
[  133.324865][ T6704]  do_syscall_64+0x12c/0x370
[  133.324978][ T6704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.325006][ T6704] RIP: 0033:0x7f63cb0acece
[  133.325026][ T6704] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  133.325051][ T6704] RSP: 002b:00007f63c9b3efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  133.325072][ T6704] RAX: ffffffffffffffda RBX: 00007f63c9b3f6c0 RCX: 00007f63cb0acece
[  133.325142][ T6704] RDX: 00000000000000be RSI: 0000200000000000 RDI: 00000000000000c8
[  133.325159][ T6704] RBP: 00007f63c9b3f090 R08: 0000000000000000 R09: 0000000000000000
[  133.325176][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.325276][ T6704] R13: 00007f63cb366038 R14: 00007f63cb365fa0 R15: 00007fff8b2ae628
[  133.325300][ T6704]  </TASK>
[  133.855149][ T6714] loop5: detected capacity change from 0 to 512
[  134.889027][ T6730] netlink: 44 bytes leftover after parsing attributes in process `syz.3.936'.
[  134.898089][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.905342][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.915680][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'.
[  135.079700][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'.
[  135.143390][   T28] audit: type=1400 audit(1772081281.357:3772): avc:  denied  { mount } for  pid=6747 comm="syz.0.942" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  135.172275][ T6750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6750 comm=syz.3.943
[  135.339699][ T6750] lo speed is unknown, defaulting to 1000
[  135.351458][ T6750] lo speed is unknown, defaulting to 1000
[  135.690678][ T6761] netlink: 44 bytes leftover after parsing attributes in process `syz.3.946'.
[  136.183042][ T6759] loop0: detected capacity change from 0 to 128
[  136.251869][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.951'.
[  136.284940][   T28] audit: type=1326 audit(1772081282.487:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  136.320879][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'.
[  136.387810][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'.
[  136.395357][   T28] audit: type=1326 audit(1772081282.497:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  136.431211][   T28] audit: type=1326 audit(1772081282.497:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  136.455833][   T28] audit: type=1326 audit(1772081282.497:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  136.500718][ T6759] syz.0.942: attempt to access beyond end of device
[  136.500718][ T6759] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[  136.591408][   T28] audit: type=1326 audit(1772081282.497:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  136.631849][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'.
[  136.648009][   T28] audit: type=1326 audit(1772081282.497:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  136.730188][ T6797] loop1: detected capacity change from 0 to 128
[  136.737640][   T28] audit: type=1326 audit(1772081282.497:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  136.766193][   T28] audit: type=1326 audit(1772081282.507:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  136.840614][ T6802] siw: device registration error -23
[  136.889516][ T6797] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  136.920650][ T6797] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  137.231435][   T28] kauditd_printk_skb: 31 callbacks suppressed
[  137.231455][   T28] audit: type=1400 audit(1772081283.447:3812): avc:  denied  { shutdown } for  pid=6807 comm="syz.5.962" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  137.315738][ T6812] netlink: 68 bytes leftover after parsing attributes in process `syz.5.963'.
[  137.334384][   T28] audit: type=1400 audit(1772081283.527:3813): avc:  denied  { setopt } for  pid=6811 comm="syz.5.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  137.580278][ T6822] siw: device registration error -23
[  137.604806][ T6824] tmpfs: Unsupported parameter 'huge'
[  137.614269][   T28] audit: type=1400 audit(1772081283.817:3814): avc:  denied  { mounton } for  pid=6823 comm="syz.0.969" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  137.673043][   T28] audit: type=1326 audit(1772081283.887:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fd8ec629 code=0x7ffc0000
[  137.719513][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'.
[  137.747060][   T28] audit: type=1326 audit(1772081283.887:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fd8ec629 code=0x7ffc0000
[  137.775387][   T28] audit: type=1326 audit(1772081283.917:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36fd8ec629 code=0x7ffc0000
[  137.817787][   T28] audit: type=1326 audit(1772081283.927:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fd8ec629 code=0x7ffc0000
[  137.850376][   T28] audit: type=1326 audit(1772081283.927:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fd8ec629 code=0x7ffc0000
[  137.930660][   T28] audit: type=1326 audit(1772081283.927:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f36fd8ec629 code=0x7ffc0000
[  137.982826][   T28] audit: type=1326 audit(1772081283.927:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fd8ec629 code=0x7ffc0000
[  138.037315][ T6852] siw: device registration error -23
[  139.029447][ T6872] cgroup: Name too long
[  139.103416][ T6797] syz.1.958 (6797) used greatest stack depth: 6648 bytes left
[  139.131820][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.423862][ T6890] FAULT_INJECTION: forcing a failure.
[  139.423862][ T6890] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.455124][ T6890] CPU: 1 UID: 0 PID: 6890 Comm: syz.5.994 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  139.455240][ T6890] Tainted: [W]=WARN
[  139.455247][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  139.455260][ T6890] Call Trace:
[  139.455267][ T6890]  <TASK>
[  139.455275][ T6890]  __dump_stack+0x1d/0x30
[  139.455326][ T6890]  dump_stack_lvl+0x95/0xd0
[  139.455354][ T6890]  dump_stack+0x15/0x1b
[  139.455393][ T6890]  should_fail_ex+0x263/0x280
[  139.455422][ T6890]  should_fail+0xb/0x20
[  139.455503][ T6890]  should_fail_usercopy+0x1a/0x20
[  139.455545][ T6890]  _copy_to_user+0x20/0xa0
[  139.455645][ T6890]  simple_read_from_buffer+0xb5/0x130
[  139.455670][ T6890]  proc_fail_nth_read+0x10e/0x150
[  139.455746][ T6890]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  139.455777][ T6890]  vfs_read+0x1ab/0x7f0
[  139.455816][ T6890]  ? __rcu_read_unlock+0x4e/0x70
[  139.455843][ T6890]  ? __fget_files+0x184/0x1c0
[  139.455936][ T6890]  ? mutex_lock+0x57/0x90
[  139.455964][ T6890]  ksys_read+0xdc/0x1a0
[  139.456031][ T6890]  __x64_sys_read+0x40/0x50
[  139.456062][ T6890]  x64_sys_call+0x2886/0x3020
[  139.456140][ T6890]  do_syscall_64+0x12c/0x370
[  139.456178][ T6890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.456205][ T6890] RIP: 0033:0x7f63cb0acece
[  139.456244][ T6890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  139.456263][ T6890] RSP: 002b:00007f63c9b3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  139.456361][ T6890] RAX: ffffffffffffffda RBX: 00007f63c9b3f6c0 RCX: 00007f63cb0acece
[  139.456438][ T6890] RDX: 000000000000000f RSI: 00007f63c9b3f0a0 RDI: 0000000000000004
[  139.456451][ T6890] RBP: 00007f63c9b3f090 R08: 0000000000000000 R09: 0000000000000000
[  139.456463][ T6890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  139.456533][ T6890] R13: 00007f63cb366038 R14: 00007f63cb365fa0 R15: 00007fff8b2ae628
[  139.456559][ T6890]  </TASK>
[  140.615296][ T6927] __nla_validate_parse: 2 callbacks suppressed
[  140.615313][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1007'.
[  140.714443][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'.
[  140.787892][ T6927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.798405][ T6936] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1013'.
[  140.824903][ T6927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.227095][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.234261][ T6936] bridge0: port 2(bridge_slave_1) entered listening state
[  141.241550][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.248662][ T6936] bridge0: port 1(bridge_slave_0) entered listening state
[  141.299222][ T6936] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1013'.
[  141.330309][ T6930] loop1: detected capacity change from 0 to 1024
[  141.351743][ T6930] EXT4-fs: Ignoring removed bh option
[  141.361950][ T6930] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  141.384699][ T6930] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  141.385792][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1018'.
[  141.408949][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.416163][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.420875][ T6930] EXT4-fs (loop1): orphan cleanup on readonly fs
[  141.444602][ T6930] EXT4-fs error (device loop1): ext4_quota_enable:7192: comm syz.1.1011: inode #2304: comm syz.1.1011: iget: illegal inode #
[  141.517979][ T6930] loop1: lost filesystem error report for type 5 error -117
[  141.518200][ T6930] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.1011: Bad quota inode: 2304, type: 2
[  141.536762][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  141.536781][    C1] EXT4-fs (loop1): initial error at time 1772081287: ext4_quota_enable:7192
[  141.536801][    C1] EXT4-fs (loop1): last error at time 1772081287: ext4_quota_enable:7192
[  141.612665][ T6930] loop1: lost filesystem error report for type 5 error -117
[  141.627313][ T6930] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  141.668658][ T6930] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  141.710111][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1022'.
[  141.727142][ T6930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  141.909759][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.014890][ T6995] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  142.036543][ T6995] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1031'.
[  142.140433][ T6995] loop0: detected capacity change from 0 to 4096
[  142.258824][ T6995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.350121][ T7006] can0: slcan on ttyS3.
[  142.375204][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1034'.
[  142.387622][   T28] kauditd_printk_skb: 49 callbacks suppressed
[  142.387639][   T28] audit: type=1400 audit(1772081288.577:3871): avc:  denied  { write } for  pid=6993 comm="syz.0.1031" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  142.424322][ T6995] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1031: corrupted inode contents
[  142.494596][ T6995] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.1031: mark_inode_dirty error
[  142.555266][   T28] audit: type=1400 audit(1772081288.577:3872): avc:  denied  { open } for  pid=6993 comm="syz.0.1031" path="/187/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  142.594070][ T6995] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1031: corrupted inode contents
[  142.658459][ T6995] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.1031: mark_inode_dirty error
[  142.675264][ T7009] can0 (unregistered): slcan off ttyS3.
[  142.684361][   T28] audit: type=1400 audit(1772081288.797:3873): avc:  denied  { search } for  pid=7005 comm="syz.1.1034" name="/" dev="configfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  142.692240][ T6995] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1031: corrupted inode contents
[  142.765322][   T28] audit: type=1400 audit(1772081288.797:3874): avc:  denied  { read open } for  pid=7005 comm="syz.1.1034" path="/" dev="configfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  142.788929][ T6995] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.1031: mark_inode_dirty error
[  142.861420][ T6995] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1031: corrupted inode contents
[  142.863203][ T7007] lo speed is unknown, defaulting to 1000
[  142.887973][ T6995] EXT4-fs error (device loop0): ext4_truncate:4587: inode #15: comm syz.0.1031: mark_inode_dirty error
[  142.902023][ T7007] lo speed is unknown, defaulting to 1000
[  142.964762][ T6995] EXT4-fs error (device loop0) in ext4_setattr:5983: Corrupt filesystem
[  143.000892][   T28] audit: type=1400 audit(1772081289.217:3875): avc:  denied  { write } for  pid=7018 comm="syz.3.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  143.046173][   T28] audit: type=1400 audit(1772081289.247:3876): avc:  denied  { mounton } for  pid=7024 comm="syz.1.1037" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  143.084733][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.152892][   T28] audit: type=1400 audit(1772081289.347:3877): avc:  denied  { getopt } for  pid=7024 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  143.395950][ T7030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=7030 comm=syz.1.1037
[  143.422270][ T7055] loop0: detected capacity change from 0 to 4096
[  143.463060][ T7055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.594142][ T7034] lo speed is unknown, defaulting to 1000
[  143.661469][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'.
[  143.715447][ T7082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7082 comm=syz.0.1042
[  143.717574][ T7055] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1042'.
[  143.831589][   T28] audit: type=1400 audit(1772081290.047:3878): avc:  denied  { read } for  pid=7054 comm="syz.0.1042" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  143.897267][ T7082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7082 comm=syz.0.1042
[  143.927677][ T7085] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  143.935368][ T7085] audit: out of memory in audit_log_start
[  143.983449][ T7082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7082 comm=syz.0.1042
[  144.162783][ T7034] lo speed is unknown, defaulting to 1000
[  144.458095][ T7094] lo speed is unknown, defaulting to 1000
[  144.464289][ T7094] lo speed is unknown, defaulting to 1000
[  144.801498][ T7106] lo speed is unknown, defaulting to 1000
[  144.844033][ T7106] lo speed is unknown, defaulting to 1000
[  145.033142][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.168164][ T7115] FAULT_INJECTION: forcing a failure.
[  145.168164][ T7115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.198327][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.1.1055 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  145.198369][ T7115] Tainted: [W]=WARN
[  145.198400][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  145.198414][ T7115] Call Trace:
[  145.198422][ T7115]  <TASK>
[  145.198429][ T7115]  __dump_stack+0x1d/0x30
[  145.198458][ T7115]  dump_stack_lvl+0x95/0xd0
[  145.198490][ T7115]  dump_stack+0x15/0x1b
[  145.198519][ T7115]  should_fail_ex+0x263/0x280
[  145.198573][ T7115]  should_fail+0xb/0x20
[  145.198595][ T7115]  should_fail_usercopy+0x1a/0x20
[  145.198625][ T7115]  _copy_from_user+0x1c/0xb0
[  145.198660][ T7115]  copy_from_sockptr+0x5e/0x90
[  145.198693][ T7115]  packet_setsockopt+0x941/0xfd0
[  145.198717][ T7115]  ? __pfx_packet_setsockopt+0x10/0x10
[  145.198751][ T7115]  __sys_setsockopt+0x184/0x200
[  145.198829][ T7115]  __x64_sys_setsockopt+0x64/0x80
[  145.198865][ T7115]  x64_sys_call+0x2327/0x3020
[  145.198903][ T7115]  do_syscall_64+0x12c/0x370
[  145.198952][ T7115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.199012][ T7115] RIP: 0033:0x7ff64393c629
[  145.199032][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.199055][ T7115] RSP: 002b:00007ff64238f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  145.199087][ T7115] RAX: ffffffffffffffda RBX: 00007ff643bb5fa0 RCX: 00007ff64393c629
[  145.199104][ T7115] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000006
[  145.199187][ T7115] RBP: 00007ff64238f090 R08: 0000000000000008 R09: 0000000000000000
[  145.199220][ T7115] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.199237][ T7115] R13: 00007ff643bb6038 R14: 00007ff643bb5fa0 R15: 00007ffe5f3d7a88
[  145.199278][ T7115]  </TASK>
[  145.452489][ T7125] netlink: 'syz.4.1053': attribute type 3 has an invalid length.
[  145.460994][ T7129] lo speed is unknown, defaulting to 1000
[  145.468645][ T7129] lo speed is unknown, defaulting to 1000
[  145.477146][ T7127] FAULT_INJECTION: forcing a failure.
[  145.477146][ T7127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.490488][ T7131] netlink: 'syz.3.1059': attribute type 10 has an invalid length.
[  145.508584][ T7127] CPU: 0 UID: 0 PID: 7127 Comm: syz.5.1057 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  145.508662][ T7127] Tainted: [W]=WARN
[  145.508671][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  145.508686][ T7127] Call Trace:
[  145.508694][ T7127]  <TASK>
[  145.508704][ T7127]  __dump_stack+0x1d/0x30
[  145.508825][ T7127]  dump_stack_lvl+0x95/0xd0
[  145.508885][ T7127]  dump_stack+0x15/0x1b
[  145.508914][ T7127]  should_fail_ex+0x263/0x280
[  145.508943][ T7127]  should_fail+0xb/0x20
[  145.508966][ T7127]  should_fail_usercopy+0x1a/0x20
[  145.509006][ T7127]  _copy_to_user+0x20/0xa0
[  145.509040][ T7127]  inotify_read+0x27c/0x630
[  145.509131][ T7127]  ? __pfx_woken_wake_function+0x10/0x10
[  145.509160][ T7127]  ? __pfx_inotify_read+0x10/0x10
[  145.509194][ T7127]  vfs_readv+0x432/0x6e0
[  145.509224][ T7127]  ? __pfx_inotify_read+0x10/0x10
[  145.509341][ T7127]  do_readv+0xe9/0x210
[  145.509372][ T7127]  __x64_sys_readv+0x45/0x50
[  145.509432][ T7127]  x64_sys_call+0x27c0/0x3020
[  145.509464][ T7127]  do_syscall_64+0x12c/0x370
[  145.509563][ T7127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.509622][ T7127] RIP: 0033:0x7f63cb0ec629
[  145.509638][ T7127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.509656][ T7127] RSP: 002b:00007f63c9b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  145.509681][ T7127] RAX: ffffffffffffffda RBX: 00007f63cb365fa0 RCX: 00007f63cb0ec629
[  145.509699][ T7127] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  145.509716][ T7127] RBP: 00007f63c9b3f090 R08: 0000000000000000 R09: 0000000000000000
[  145.509818][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.509863][ T7127] R13: 00007f63cb366038 R14: 00007f63cb365fa0 R15: 00007fff8b2ae628
[  145.509883][ T7127]  </TASK>
[  145.779778][ T7136] __nla_validate_parse: 3 callbacks suppressed
[  145.779794][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1060'.
[  145.897701][ T7133] loop1: detected capacity change from 0 to 512
[  145.990580][ T7133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.437689][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.478796][ T7164] loop1: detected capacity change from 0 to 512
[  146.577110][ T7162] lo speed is unknown, defaulting to 1000
[  146.578757][ T7166] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.618402][ T7162] lo speed is unknown, defaulting to 1000
[  146.694513][ T7164] loop1: detected capacity change from 0 to 256
[  146.723197][ T7164] msdos: Unknown parameter '€'
[  146.825513][ T7179] FAULT_INJECTION: forcing a failure.
[  146.825513][ T7179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.897065][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.1.1072 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  146.897106][ T7179] Tainted: [W]=WARN
[  146.897113][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  146.897125][ T7179] Call Trace:
[  146.897133][ T7179]  <TASK>
[  146.897201][ T7179]  __dump_stack+0x1d/0x30
[  146.897231][ T7179]  dump_stack_lvl+0x95/0xd0
[  146.897255][ T7179]  dump_stack+0x15/0x1b
[  146.897284][ T7179]  should_fail_ex+0x263/0x280
[  146.897337][ T7179]  should_fail+0xb/0x20
[  146.897356][ T7179]  should_fail_usercopy+0x1a/0x20
[  146.897382][ T7179]  _copy_to_user+0x20/0xa0
[  146.897409][ T7179]  simple_read_from_buffer+0xb5/0x130
[  146.897436][ T7179]  proc_fail_nth_read+0x10e/0x150
[  146.897538][ T7179]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  146.897572][ T7179]  vfs_read+0x1ab/0x7f0
[  146.897610][ T7179]  ? __rcu_read_unlock+0x4e/0x70
[  146.897643][ T7179]  ? __fget_files+0x184/0x1c0
[  146.897748][ T7179]  ? mutex_lock+0x57/0x90
[  146.897776][ T7179]  ksys_read+0xdc/0x1a0
[  146.897815][ T7179]  __x64_sys_read+0x40/0x50
[  146.897895][ T7179]  x64_sys_call+0x2886/0x3020
[  146.897969][ T7179]  do_syscall_64+0x12c/0x370
[  146.898011][ T7179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.898113][ T7179] RIP: 0033:0x7ff6438fcece
[  146.898134][ T7179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  146.898215][ T7179] RSP: 002b:00007ff64238efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  146.898311][ T7179] RAX: ffffffffffffffda RBX: 00007ff64238f6c0 RCX: 00007ff6438fcece
[  146.898326][ T7179] RDX: 000000000000000f RSI: 00007ff64238f0a0 RDI: 0000000000000004
[  146.898338][ T7179] RBP: 00007ff64238f090 R08: 0000000000000000 R09: 0000000000000000
[  146.898351][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.898370][ T7179] R13: 00007ff643bb6038 R14: 00007ff643bb5fa0 R15: 00007ffe5f3d7a88
[  146.898394][ T7179]  </TASK>
[  147.587945][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1083'.
[  147.884638][ T7213] loop1: detected capacity change from 0 to 256
[  147.918345][ T7213] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  148.026863][ T7215] random: crng reseeded on system resumption
[  148.674829][ T7244] program syz.5.1097 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.888830][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  148.888847][   T28] audit: type=1400 audit(1772081295.107:3884): avc:  denied  { write } for  pid=7259 comm="syz.5.1104" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  148.922861][ T7262] netlink: 488 bytes leftover after parsing attributes in process `syz.3.1105'.
[  149.448320][ T7227] loop1: detected capacity change from 0 to 65536
[  149.458961][ T7276] veth0_macvtap: entered allmulticast mode
[  149.487021][ T7276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7276 comm=syz.5.1108
[  149.654276][   T28] audit: type=1400 audit(1772081295.867:3885): avc:  denied  { accept } for  pid=7280 comm="syz.4.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.693517][ T7284] loop1: detected capacity change from 0 to 128
[  149.702701][ T7281] lo speed is unknown, defaulting to 1000
[  149.719505][ T7281] lo speed is unknown, defaulting to 1000
[  149.987464][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'.
[  150.159958][   T28] audit: type=1400 audit(1772081296.377:3886): avc:  denied  { ioctl } for  pid=7308 comm="syz.4.1121" path="socket:[17743]" dev="sockfs" ino=17743 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  150.237684][ T7312] loop1: detected capacity change from 0 to 512
[  150.637020][ T7312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.670434][ T7315] 0: reclassify loop, rule prio 0, protocol 700
[  150.707090][ T7312] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.721303][   T28] audit: type=1400 audit(1772081296.937:3887): avc:  denied  { setopt } for  pid=7311 comm="syz.1.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  150.811897][ T7325] loop5: detected capacity change from 0 to 164
[  150.818445][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.836696][ T7325] iso9660: Unknown parameter 'Ÿ—ùAÛ^˜œ!ĺ	‡ÕUM½å+öÒ„‰–õúÑ!Ž3òÁæLº­Äî�	&¬ž‰@4Š“ST�'
[  150.934491][   T28] audit: type=1400 audit(1772081297.147:3888): avc:  denied  { ioctl } for  pid=7329 comm="syz.5.1128" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  151.007044][   T28] audit: type=1326 audit(1772081297.147:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  151.068195][   T28] audit: type=1326 audit(1772081297.147:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  151.137008][   T28] audit: type=1326 audit(1772081297.147:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  151.205311][ T7346] loop5: detected capacity change from 0 to 256
[  151.207268][   T28] audit: type=1326 audit(1772081297.147:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  151.235905][ T7346] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.286268][   T28] audit: type=1326 audit(1772081297.147:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9a9106c629 code=0x7ffc0000
[  151.397140][ T7346] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.408398][ T7346] FAULT_INJECTION: forcing a failure.
[  151.408398][ T7346] name failslab, interval 1, probability 0, space 0, times 0
[  151.507287][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.5.1134 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  151.507330][ T7346] Tainted: [W]=WARN
[  151.507403][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  151.507420][ T7346] Call Trace:
[  151.507429][ T7346]  <TASK>
[  151.507438][ T7346]  __dump_stack+0x1d/0x30
[  151.507466][ T7346]  dump_stack_lvl+0x95/0xd0
[  151.507492][ T7346]  dump_stack+0x15/0x1b
[  151.507529][ T7346]  should_fail_ex+0x263/0x280
[  151.507567][ T7346]  ? vfat_add_entry+0x17e/0x2280
[  151.507633][ T7346]  should_failslab+0x8c/0xb0
[  151.507653][ T7346]  __kmalloc_cache_noprof+0x5f/0x410
[  151.507679][ T7346]  vfat_add_entry+0x17e/0x2280
[  151.507746][ T7346]  ? fat_search_long+0x93a/0x9b0
[  151.507784][ T7346]  ? __pfx_vfat_create+0x10/0x10
[  151.507823][ T7346]  vfat_create+0xb2/0x1b0
[  151.507860][ T7346]  ? __pfx_vfat_create+0x10/0x10
[  151.507890][ T7346]  path_openat+0xd75/0x2050
[  151.507944][ T7346]  do_file_open+0x16c/0x290
[  151.507990][ T7346]  do_sys_openat2+0x94/0x130
[  151.508091][ T7346]  __x64_sys_openat+0xf2/0x120
[  151.508171][ T7346]  x64_sys_call+0x1e39/0x3020
[  151.508234][ T7346]  do_syscall_64+0x12c/0x370
[  151.508276][ T7346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.508301][ T7346] RIP: 0033:0x7f63cb0ec629
[  151.508321][ T7346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.508373][ T7346] RSP: 002b:00007f63c9b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  151.508393][ T7346] RAX: ffffffffffffffda RBX: 00007f63cb365fa0 RCX: 00007f63cb0ec629
[  151.508410][ T7346] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  151.508429][ T7346] RBP: 00007f63c9b3f090 R08: 0000000000000000 R09: 0000000000000000
[  151.508446][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.508463][ T7346] R13: 00007f63cb366038 R14: 00007f63cb365fa0 R15: 00007fff8b2ae628
[  151.508518][ T7346]  </TASK>
[  152.388553][ T7357] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1136'.
[  152.447679][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'.
[  154.116788][   T28] kauditd_printk_skb: 41 callbacks suppressed
[  154.116809][   T28] audit: type=1326 audit(1772081300.327:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  154.225603][   T28] audit: type=1326 audit(1772081300.327:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  154.249391][   T28] audit: type=1326 audit(1772081300.327:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  154.306715][ T7394] loop1: detected capacity change from 0 to 512
[  154.327059][   T28] audit: type=1326 audit(1772081300.327:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  154.393349][   T28] audit: type=1326 audit(1772081300.327:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  154.438352][   T28] audit: type=1326 audit(1772081300.327:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  154.478861][ T7394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.535376][   T28] audit: type=1326 audit(1772081300.327:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  154.562250][ T7410] netlink: 'syz.5.1155': attribute type 1 has an invalid length.
[  154.581030][ T7410] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1155'.
[  154.637309][   T28] audit: type=1326 audit(1772081300.327:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  154.667231][ T7394] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.726075][   T28] audit: type=1326 audit(1772081300.337:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  154.772086][   T28] audit: type=1326 audit(1772081300.337:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  154.903590][ T7419] loop5: detected capacity change from 0 to 512
[  154.935611][ T7419] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  154.977792][ T7419] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1159: bg 0: block 393: padding at end of block bitmap is not set
[  154.992254][ T7419] loop5: lost filesystem error report for type 5 error -117
[  154.992501][ T7419] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  155.000016][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  155.000034][    C0] EXT4-fs (loop5): initial error at time 1772081301: ext4_validate_block_bitmap:441
[  155.000055][    C0] EXT4-fs (loop5): last error at time 1772081301: ext4_validate_block_bitmap:441
[  155.033975][ T7419] loop5: lost filesystem error report for type 5 error -117
[  155.039413][ T7419] EXT4-fs (loop5): 2 truncates cleaned up
[  155.053086][ T7419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.179600][ T7421] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  155.572512][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.625555][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.457043][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  157.443426][ T7464] loop5: detected capacity change from 0 to 2048
[  157.699478][ T3628] Alternate GPT is invalid, using primary GPT.
[  157.700820][ T3628]  loop5: p1 p2 p3
[  157.700828][ T3628] loop5: partition table partially beyond EOD, truncated
[  157.970044][ T7464] Alternate GPT is invalid, using primary GPT.
[  157.996452][ T7464]  loop5: p1 p2 p3
[  158.016840][ T7464] loop5: partition table partially beyond EOD, truncated
[  158.295129][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  158.308371][ T3625] udevd[3625]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  158.313361][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  158.340712][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  158.341788][ T3625] udevd[3625]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  158.355678][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  158.558049][ T7493] loop1: detected capacity change from 0 to 512
[  158.567513][ T7493] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  158.787359][ T7486] loop0: detected capacity change from 0 to 512
[  158.796112][ T7493] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1178: bg 0: block 393: padding at end of block bitmap is not set
[  158.810536][ T7493] loop1: lost filesystem error report for type 5 error -117
[  158.811705][ T7493] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  158.819049][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  158.819085][    C1] EXT4-fs (loop1): initial error at time 1772081305: ext4_validate_block_bitmap:441
[  158.819114][    C1] EXT4-fs (loop1): last error at time 1772081305: ext4_validate_block_bitmap:441
[  158.852868][ T7493] loop1: lost filesystem error report for type 5 error -117
[  158.856856][ T7493] EXT4-fs (loop1): 2 truncates cleaned up
[  158.871025][ T7493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.943221][ T7486] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  159.006783][ T7486] System zones: 0-2, 18-18, 34-35
[  159.057539][ T7486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.090665][ T7486] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.107264][ T7486] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1181'.
[  159.179460][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.289527][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.332891][   T28] kauditd_printk_skb: 104 callbacks suppressed
[  159.332956][   T28] audit: type=1400 audit(1772081305.547:4049): avc:  denied  { create } for  pid=7513 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=ieee802154_socket permissive=1
[  159.364598][   T28] audit: type=1400 audit(1772081305.577:4050): avc:  denied  { create } for  pid=7513 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1
[  159.389518][   T28] audit: type=1400 audit(1772081305.577:4051): avc:  denied  { create } for  pid=7513 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  159.446752][   T28] audit: type=1400 audit(1772081305.577:4052): avc:  denied  { read } for  pid=7513 comm="syz.1.1188" path="socket:[18442]" dev="sockfs" ino=18442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  159.489799][   T28] audit: type=1400 audit(1772081305.707:4053): avc:  denied  { write } for  pid=7513 comm="syz.1.1188" path="socket:[18443]" dev="sockfs" ino=18443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  159.526071][   T28] audit: type=1400 audit(1772081305.707:4054): avc:  denied  { getopt } for  pid=7513 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1
[  159.550372][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'.
[  159.555076][ T7527] xt_hashlimit: size too large, truncated to 1048576
[  159.559830][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1193'.
[  159.575626][   T28] audit: type=1400 audit(1772081305.707:4055): avc:  denied  { write } for  pid=7513 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1
[  159.612448][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'.
[  159.636970][   T28] audit: type=1400 audit(1772081305.707:4056): avc:  denied  { connect } for  pid=7513 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1
[  159.660440][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'.
[  159.690814][ T7535] loop5: detected capacity change from 0 to 1024
[  159.704493][ T7535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  159.712971][ T7535] System zones: 0-1, 3-36
[  159.718414][   T28] audit: type=1400 audit(1772081305.707:4057): avc:  denied  { name_connect } for  pid=7513 comm="syz.1.1188" dest=20003 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  159.748238][ T7537] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1194'.
[  159.758986][ T7535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.776264][   T28] audit: type=1400 audit(1772081305.737:4058): avc:  denied  { setopt } for  pid=7513 comm="syz.1.1188" lport=60142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1
[  159.813654][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.124068][ T7557] loop0: detected capacity change from 0 to 512
[  160.133300][ T7550] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1197'.
[  160.250005][ T7557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.280363][ T7557] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.295871][ T7565] loop1: detected capacity change from 0 to 512
[  160.320624][ T7556] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  160.341239][ T7565] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1201: corrupted in-inode xattr: invalid ea_ino
[  160.358013][ T7557] ext4: Unknown parameter '/dev/net/tun'
[  160.373685][ T7565] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  160.373906][ T7565] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1201: couldn't read orphan inode 15 (err -117)
[  160.383155][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  160.383207][    C1] EXT4-fs (loop1): initial error at time 1772081306: ext4_iget_extra_inode:5025: inode 15
[  160.383233][    C1] EXT4-fs (loop1): last error at time 1772081306: ext4_iget_extra_inode:5025: inode 15
[  160.423659][ T7565] loop1: lost filesystem error report for type 5 error -117
[  160.425287][ T7565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.447255][ T7565] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.1201: deleted inode referenced: 15
[  160.470264][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.562641][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.606682][ T7571] xt_limit: Overflow, try lower: 0/0
[  160.647113][ T7576] loop0: detected capacity change from 0 to 164
[  160.661774][ T7576] ISOFS: unable to read i-node block
[  160.672769][ T7576] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  160.686800][ T7579] loop5: detected capacity change from 0 to 128
[  160.704770][ T7579] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1207'.
[  160.972719][ T4452] kworker/u8:17: attempt to access beyond end of device
[  160.972719][ T4452] loop5: rw=1, sector=145, nr_sectors = 896 limit=128
[  161.015765][ T7597] loop1: detected capacity change from 0 to 256
[  161.061092][ T7590] loop0: detected capacity change from 0 to 128
[  161.230536][ T7606] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1215'.
[  161.279863][ T7608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.559564][ T7630] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  161.626714][ T7631] lo speed is unknown, defaulting to 1000
[  161.683701][ T7631] lo speed is unknown, defaulting to 1000
[  162.461034][ T7650] netlink: 65173 bytes leftover after parsing attributes in process `syz.4.1231'.
[  162.466882][ T7654] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  162.638058][ T7657] loop5: detected capacity change from 0 to 512
[  162.709688][ T7657] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  162.773054][ T7657] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1229: bg 0: block 393: padding at end of block bitmap is not set
[  162.803088][ T7657] loop5: lost filesystem error report for type 5 error -117
[  162.803697][ T7657] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  162.811082][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  162.811103][    C0] EXT4-fs (loop5): initial error at time 1772081309: ext4_validate_block_bitmap:441
[  162.811123][    C0] EXT4-fs (loop5): last error at time 1772081309: ext4_validate_block_bitmap:441
[  162.845074][ T7657] loop5: lost filesystem error report for type 5 error -117
[  162.850187][ T7657] EXT4-fs (loop5): 2 truncates cleaned up
[  162.887676][ T7657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.696540][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.221080][ T7711] loop0: detected capacity change from 0 to 128
[  164.298571][ T7714] loop5: detected capacity change from 0 to 256
[  164.458114][ T7720] FAULT_INJECTION: forcing a failure.
[  164.458114][ T7720] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.480428][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.489358][ T7720] CPU: 0 UID: 0 PID: 7720 Comm: syz.5.1254 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  164.489452][ T7720] Tainted: [W]=WARN
[  164.489461][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  164.489476][ T7720] Call Trace:
[  164.489483][ T7720]  <TASK>
[  164.489491][ T7720]  __dump_stack+0x1d/0x30
[  164.489519][ T7720]  dump_stack_lvl+0x95/0xd0
[  164.489560][ T7720]  dump_stack+0x15/0x1b
[  164.489590][ T7720]  should_fail_ex+0x263/0x280
[  164.489640][ T7720]  should_fail+0xb/0x20
[  164.489660][ T7720]  should_fail_usercopy+0x1a/0x20
[  164.489691][ T7720]  _copy_to_user+0x20/0xa0
[  164.489724][ T7720]  simple_read_from_buffer+0xb5/0x130
[  164.489775][ T7720]  proc_fail_nth_read+0x10e/0x150
[  164.489815][ T7720]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  164.489849][ T7720]  vfs_read+0x1ab/0x7f0
[  164.489879][ T7720]  ? __rcu_read_unlock+0x4e/0x70
[  164.490006][ T7720]  ? __fget_files+0x184/0x1c0
[  164.490035][ T7720]  ? _raw_spin_lock+0x52/0xa0
[  164.490061][ T7720]  ? mutex_lock+0x57/0x90
[  164.490096][ T7720]  ksys_read+0xdc/0x1a0
[  164.490149][ T7720]  __x64_sys_read+0x40/0x50
[  164.490192][ T7720]  x64_sys_call+0x2886/0x3020
[  164.490227][ T7720]  do_syscall_64+0x12c/0x370
[  164.490348][ T7720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.490378][ T7720] RIP: 0033:0x7f63cb0acece
[  164.490423][ T7720] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  164.490443][ T7720] RSP: 002b:00007f63c9b3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  164.490463][ T7720] RAX: ffffffffffffffda RBX: 00007f63c9b3f6c0 RCX: 00007f63cb0acece
[  164.490478][ T7720] RDX: 000000000000000f RSI: 00007f63c9b3f0a0 RDI: 0000000000000003
[  164.490494][ T7720] RBP: 00007f63c9b3f090 R08: 0000000000000000 R09: 0000000000000000
[  164.490583][ T7720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.490599][ T7720] R13: 00007f63cb366038 R14: 00007f63cb365fa0 R15: 00007fff8b2ae628
[  164.490624][ T7720]  </TASK>
[  164.707228][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.743225][   T28] kauditd_printk_skb: 79 callbacks suppressed
[  164.743244][   T28] audit: type=1400 audit(1772081310.957:4138): avc:  denied  { connect } for  pid=7721 comm="syz.0.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  164.747889][ T7725] netlink: 'syz.5.1258': attribute type 2 has an invalid length.
[  164.796949][ T7726] xt_TCPMSS: Only works on TCP SYN packets
[  164.799810][ T7725] netlink: 'syz.5.1258': attribute type 4 has an invalid length.
[  164.811003][ T7725] __nla_validate_parse: 1 callbacks suppressed
[  164.811016][ T7725] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1258'.
[  164.868395][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'.
[  164.877627][ T7735] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1260'.
[  164.948408][ T7743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1261'.
[  164.973553][ T7744] loop5: detected capacity change from 0 to 1024
[  165.015347][ T7744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  165.138706][ T7744] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.149786][   T28] audit: type=1400 audit(1772081311.367:4139): avc:  denied  { setattr } for  pid=7742 comm="syz.5.1265" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  165.172812][ T7744] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1265: bg 0: block 112: padding at end of block bitmap is not set
[  165.187716][ T7744] EXT4-fs (loop5): Remounting filesystem read-only
[  165.195988][   T28] audit: type=1400 audit(1772081311.407:4140): avc:  denied  { mounton } for  pid=7742 comm="syz.5.1265" path="/221/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  165.196031][ T7747] 9p: Bad value for 'rfdno'
[  165.224037][   T28] audit: type=1400 audit(1772081311.437:4141): avc:  denied  { read } for  pid=7742 comm="syz.5.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  165.304514][ T7757] FAULT_INJECTION: forcing a failure.
[  165.304514][ T7757] name failslab, interval 1, probability 0, space 0, times 0
[  165.335913][ T7757] CPU: 1 UID: 0 PID: 7757 Comm: syz.0.1267 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  165.336018][ T7757] Tainted: [W]=WARN
[  165.336026][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  165.336042][ T7757] Call Trace:
[  165.336049][ T7757]  <TASK>
[  165.336058][ T7757]  __dump_stack+0x1d/0x30
[  165.336222][ T7757]  dump_stack_lvl+0x95/0xd0
[  165.336251][ T7757]  dump_stack+0x15/0x1b
[  165.336296][ T7757]  should_fail_ex+0x263/0x280
[  165.336324][ T7757]  should_failslab+0x8c/0xb0
[  165.336349][ T7757]  kmem_cache_alloc_lru_noprof+0x6c/0x410
[  165.336377][ T7757]  ? hugetlbfs_alloc_inode+0xbc/0x100
[  165.336475][ T7757]  hugetlbfs_alloc_inode+0xbc/0x100
[  165.336513][ T7757]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  165.336551][ T7757]  alloc_inode+0x40/0x170
[  165.336577][ T7757]  new_inode+0x1d/0xe0
[  165.336683][ T7757]  hugetlbfs_get_inode+0x7b/0x380
[  165.336735][ T7757]  ? mutex_unlock+0x4e/0x90
[  165.336771][ T7757]  hugetlb_file_setup+0x192/0x3d0
[  165.336805][ T7757]  ksys_mmap_pgoff+0x156/0x310
[  165.336912][ T7757]  x64_sys_call+0x14df/0x3020
[  165.336966][ T7757]  do_syscall_64+0x12c/0x370
[  165.337012][ T7757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.337074][ T7757] RIP: 0033:0x7f573a46c629
[  165.337091][ T7757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.337111][ T7757] RSP: 002b:00007f5738ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  165.337132][ T7757] RAX: ffffffffffffffda RBX: 00007f573a6e5fa0 RCX: 00007f573a46c629
[  165.337157][ T7757] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000
[  165.337182][ T7757] RBP: 00007f5738ebf090 R08: ffffffffffffffff R09: 0000000000000000
[  165.337195][ T7757] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001
[  165.337226][ T7757] R13: 00007f573a6e6038 R14: 00007f573a6e5fa0 R15: 00007ffef16dba98
[  165.337251][ T7757]  </TASK>
[  165.618109][ T7759] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1268'.
[  165.724408][ T7754] loop1: detected capacity change from 0 to 1024
[  165.858540][ T7765] bond5: entered promiscuous mode
[  165.863641][ T7765] bond5: entered allmulticast mode
[  165.873161][ T7754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  165.883917][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  165.888248][ T7765] 8021q: adding VLAN 0 to HW filter on device bond5
[  165.906829][ T7754] System zones: 0-1, 3-36
[  165.975209][ T7754] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1262: bad orphan inode 134217728
[  166.033448][ T7776] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1275'.
[  166.077906][ T7754] loop1: lost filesystem error report for type 5 error -117
[  166.107956][ T7754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.135779][ T7773] netlink: 'syz.0.1273': attribute type 15 has an invalid length.
[  166.209539][ T7779] loop0: detected capacity change from 0 to 256
[  166.229332][ T7779] FAT-fs (loop0): Directory bread(block 64) failed
[  166.235968][ T7779] FAT-fs (loop0): Directory bread(block 65) failed
[  166.268242][ T7779] FAT-fs (loop0): Directory bread(block 66) failed
[  166.285348][ T7778] loop5: detected capacity change from 0 to 2048
[  166.291954][ T7779] FAT-fs (loop0): Directory bread(block 67) failed
[  166.298984][ T7779] FAT-fs (loop0): Directory bread(block 68) failed
[  166.305583][ T7779] FAT-fs (loop0): Directory bread(block 69) failed
[  166.313020][ T7778] EXT4-fs (loop5): Invalid log cluster size: 65285
[  166.327246][ T3628] udevd[3628]: incorrect ext4 checksum on /dev/loop5
[  166.343349][ T3628] udevd[3628]: incorrect ext4 checksum on /dev/loop5
[  166.351708][ T7779] FAT-fs (loop0): Directory bread(block 70) failed
[  166.370370][ T7779] FAT-fs (loop0): Directory bread(block 71) failed
[  166.377426][ T7779] FAT-fs (loop0): Directory bread(block 72) failed
[  166.384110][ T7779] FAT-fs (loop0): Directory bread(block 73) failed
[  166.430315][ T3403] kernel write not supported for file /609/projid_map (pid: 3403 comm: kworker/0:5)
[  166.485182][   T28] audit: type=1326 audit(1772081312.697:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63cb0e6417 code=0x7ffc0000
[  166.538209][ T7787] audit: audit_backlog=65 > audit_backlog_limit=64
[  166.544824][ T7787] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[  166.555257][   T28] audit: type=1326 audit(1772081312.697:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63cb08da19 code=0x7ffc0000
[  166.593369][ T7787] audit: backlog limit exceeded
[  166.836000][ T7779] bridge_slave_0: left allmulticast mode
[  166.842202][ T7779] bridge_slave_0: left promiscuous mode
[  166.852898][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.915493][ T7779] bridge_slave_1: left allmulticast mode
[  166.923023][ T7779] bridge_slave_1: left promiscuous mode
[  166.933439][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.945867][   T28] audit: type=1326 audit(1772081312.697:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63cb0e6417 code=0x7ffc0000
[  167.015457][ T7779] bond0: (slave bond_slave_0): Releasing backup interface
[  167.081071][ T7779] bond0: (slave bond_slave_1): Releasing backup interface
[  167.244106][ T7779] team0: Port device team_slave_0 removed
[  167.359650][ T7779] team0: Port device team_slave_1 removed
[  167.456027][ T7779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  167.473051][ T3403] lo speed is unknown, defaulting to 1000
[  167.484141][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'.
[  167.508798][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'.
[  167.537136][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'.
[  167.558461][ T7789] lo speed is unknown, defaulting to 1000
[  167.559219][ T7789] lo speed is unknown, defaulting to 1000
[  167.645705][ T7800] netlink: 'syz.3.1283': attribute type 27 has an invalid length.
[  168.334650][ T7816] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1286'.
[  168.878464][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.942782][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.207405][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.784808][ T7826] loop1: detected capacity change from 0 to 65536
[  169.847127][ T7803] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.886220][ T7803] 8021q: adding VLAN 0 to HW filter on device team0
[  169.897603][   T28] kauditd_printk_skb: 654 callbacks suppressed
[  169.897622][   T28] audit: type=1400 audit(1772081316.117:4799): avc:  denied  { getopt } for  pid=7832 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  169.937950][ T7803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.967023][   T28] audit: type=1400 audit(1772081316.177:4800): avc:  denied  { connect } for  pid=7830 comm="syz.0.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  170.021778][   T28] audit: type=1400 audit(1772081316.237:4801): avc:  denied  { setattr } for  pid=7834 comm="syz.1.1293" name="LLC" dev="sockfs" ino=18900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  170.053279][ T5936] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.075543][ T5936] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.098928][   T28] audit: type=1400 audit(1772081316.237:4802): avc:  denied  { getopt } for  pid=7834 comm="syz.1.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  170.140953][ T5936] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.172296][ T5936] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.194707][   T28] audit: type=1326 audit(1772081316.407:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.3.1296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a9106c629 code=0x0
[  170.975649][ T7871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1304'.
[  170.997012][   T28] audit: type=1400 audit(1772081317.207:4804): avc:  denied  { remount } for  pid=7867 comm="syz.3.1303" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  171.096202][   T28] audit: type=1326 audit(1772081317.307:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573a46c629 code=0x7ffc0000
[  171.153271][   T28] audit: type=1326 audit(1772081317.347:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f573a46c629 code=0x7ffc0000
[  171.178134][   T28] audit: type=1326 audit(1772081317.347:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573a46c629 code=0x7ffc0000
[  171.206221][   T28] audit: type=1326 audit(1772081317.347:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f573a46c629 code=0x7ffc0000
[  171.246409][ T7882] lo speed is unknown, defaulting to 1000
[  171.252767][ T7882] lo speed is unknown, defaulting to 1000
[  171.700609][ T7866] loop1: detected capacity change from 0 to 65536
[  172.141158][ T7918] loop0: detected capacity change from 0 to 512
[  172.610214][ T7918] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  172.631345][ T7918] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1312: bg 0: block 393: padding at end of block bitmap is not set
[  172.645733][ T7918] loop0: lost filesystem error report for type 5 error -117
[  172.645974][ T7918] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  172.653310][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  172.653337][    C1] EXT4-fs (loop0): initial error at time 1772081318: ext4_validate_block_bitmap:441
[  172.653368][    C1] EXT4-fs (loop0): last error at time 1772081318: ext4_validate_block_bitmap:441
[  172.687128][ T7918] loop0: lost filesystem error report for type 5 error -117
[  172.687600][ T7918] EXT4-fs (loop0): 2 truncates cleaned up
[  172.701193][ T7918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.935256][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'.
[  172.957708][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.962161][ T7944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1323'.
[  172.972076][  T400] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x8f
[  173.032965][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'.
[  173.046893][ T7951] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1330'.
[  173.052147][ T7954] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1332'.
[  173.081269][ T7954] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1332'.
[  173.092672][ T7954] netlink: 'syz.5.1332': attribute type 2 has an invalid length.
[  173.101310][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'.
[  173.103735][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'.
[  173.132595][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'.
[  173.262322][ T7960] lo speed is unknown, defaulting to 1000
[  173.281383][ T7963] lo speed is unknown, defaulting to 1000
[  173.287643][ T7960] lo speed is unknown, defaulting to 1000
[  173.326617][ T7963] lo speed is unknown, defaulting to 1000
[  173.416585][ T7976] netlink: 'syz.5.1342': attribute type 4 has an invalid length.
[  173.444366][ T3403] lo speed is unknown, defaulting to 1000
[  173.459017][ T7976] netlink: 'syz.5.1342': attribute type 4 has an invalid length.
[  173.466838][ T3403] syz2: Port: 1 Link DOWN
[  173.491913][ T3403] lo speed is unknown, defaulting to 1000
[  173.498287][ T3403] syz2: Port: 1 Link ACTIVE
[  173.655729][ T7956] loop0: detected capacity change from 0 to 65536
[  173.834839][ T8010] loop1: detected capacity change from 0 to 512
[  173.880871][ T8010] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  173.894526][ T8016] netlink: 'syz.3.1357': attribute type 2 has an invalid length.
[  173.909651][ T8015] IPv6: Can't replace route, no match found
[  173.925285][ T8010] EXT4-fs (loop1): 1 truncate cleaned up
[  173.940609][ T8010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.006196][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.133394][ T4436] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.148899][ T4436] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.165426][ T4436] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.182425][ T4436] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.358236][ T8042] IPv6: Can't replace route, no match found
[  175.502549][ T8056] loop1: detected capacity change from 0 to 2048
[  175.607087][ T8056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.627115][ T8064] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8064 comm=syz.4.1373
[  175.657705][ T8056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.691356][ T8069] FAULT_INJECTION: forcing a failure.
[  175.691356][ T8069] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  175.728624][ T8069] CPU: 0 UID: 0 PID: 8069 Comm: syz.5.1376 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  175.728663][ T8069] Tainted: [W]=WARN
[  175.728729][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  175.728745][ T8069] Call Trace:
[  175.728754][ T8069]  <TASK>
[  175.728763][ T8069]  __dump_stack+0x1d/0x30
[  175.728796][ T8069]  dump_stack_lvl+0x95/0xd0
[  175.728825][ T8069]  dump_stack+0x15/0x1b
[  175.728871][ T8069]  should_fail_ex+0x263/0x280
[  175.728902][ T8069]  should_fail+0xb/0x20
[  175.728945][ T8069]  should_fail_usercopy+0x1a/0x20
[  175.729003][ T8069]  _copy_from_user+0x1c/0xb0
[  175.729033][ T8069]  memdup_user+0x5e/0xd0
[  175.729067][ T8069]  strndup_user+0x68/0xb0
[  175.729125][ T8069]  __se_sys_mount+0x4d/0x2e0
[  175.729224][ T8069]  ? fput+0x8f/0xc0
[  175.729257][ T8069]  ? ksys_write+0x194/0x1a0
[  175.729300][ T8069]  __x64_sys_mount+0x67/0x80
[  175.729328][ T8069]  x64_sys_call+0x2d61/0x3020
[  175.729392][ T8069]  do_syscall_64+0x12c/0x370
[  175.729479][ T8069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.729504][ T8069] RIP: 0033:0x7f63cb0ec629
[  175.729519][ T8069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.729622][ T8069] RSP: 002b:00007f63c9b3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  175.729647][ T8069] RAX: ffffffffffffffda RBX: 00007f63cb365fa0 RCX: 00007f63cb0ec629
[  175.729735][ T8069] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000
[  175.729749][ T8069] RBP: 00007f63c9b3f090 R08: 0000200000000140 R09: 0000000000000000
[  175.729762][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.729775][ T8069] R13: 00007f63cb366038 R14: 00007f63cb365fa0 R15: 00007fff8b2ae628
[  175.729794][ T8069]  </TASK>
[  176.024695][   T28] kauditd_printk_skb: 128 callbacks suppressed
[  176.024713][   T28] audit: type=1326 audit(1772081322.227:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cb0ec629 code=0x7ffc0000
[  176.092609][ T8054] loop0: detected capacity change from 0 to 2048
[  176.111201][   T28] audit: type=1326 audit(1772081322.227:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cb0ec629 code=0x7ffc0000
[  176.175304][ T8089] __nla_validate_parse: 14 callbacks suppressed
[  176.175323][ T8089] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1384'.
[  176.205259][   T28] audit: type=1326 audit(1772081322.227:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f63cb0ec629 code=0x7ffc0000
[  176.270804][ T8087] bond6: option all_slaves_active: invalid value (5)
[  176.278429][ T8054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.286299][   T28] audit: type=1326 audit(1772081322.227:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cb0ec629 code=0x7ffc0000
[  176.315402][ T8087] bond6 (unregistering): Released all slaves
[  176.324915][   T28] audit: type=1326 audit(1772081322.237:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cb0ec629 code=0x7ffc0000
[  176.348561][   T28] audit: type=1326 audit(1772081322.237:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f63cb0ec629 code=0x7ffc0000
[  176.414329][ T8100] lo speed is unknown, defaulting to 1000
[  176.417648][   T28] audit: type=1326 audit(1772081322.237:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cb0ec629 code=0x7ffc0000
[  176.422272][ T8100] lo speed is unknown, defaulting to 1000
[  176.462892][   T28] audit: type=1326 audit(1772081322.237:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cb0ec629 code=0x7ffc0000
[  176.489369][ T8054] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.498575][   T28] audit: type=1326 audit(1772081322.237:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63cb0ec629 code=0x7ffc0000
[  176.525310][   T28] audit: type=1326 audit(1772081322.237:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.5.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cb0ec629 code=0x7ffc0000
[  176.571225][ T8106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1388'.
[  176.794301][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'.
[  176.838130][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'.
[  176.996421][ T8131] loop0: detected capacity change from 0 to 512
[  177.019137][ T8131] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  177.135173][ T8139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1399'.
[  177.326695][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'.
[  177.522634][ T8156] netlink: 'syz.3.1406': attribute type 1 has an invalid length.
[  177.581107][ T8156] 8021q: adding VLAN 0 to HW filter on device bond1
[  177.601957][ T8159] vlan2: entered promiscuous mode
[  177.617024][ T8159] bond1: entered promiscuous mode
[  177.627513][ T8159] vlan2: entered allmulticast mode
[  177.654529][ T8159] bond1: entered allmulticast mode
[  177.714771][ T8163] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1408'.
[  177.776674][ T8159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=8159 comm=syz.3.1406
[  177.800929][ T8156] bond1: (slave bridge2): making interface the new active one
[  177.853756][ T8156] bridge2: entered promiscuous mode
[  177.867458][ T8156] bridge2: entered allmulticast mode
[  177.888398][ T8156] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  178.304740][ T8143] loop0: detected capacity change from 0 to 2048
[  178.377614][ T8143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.468420][ T8143] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.895553][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1420'.
[  178.960061][ T8195] loop1: detected capacity change from 0 to 512
[  178.967204][ T8195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  178.987666][ T8195] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1418: bg 0: block 393: padding at end of block bitmap is not set
[  179.002140][ T8195] loop1: lost filesystem error report for type 5 error -117
[  179.002365][ T8195] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  179.009734][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  179.009761][    C1] EXT4-fs (loop1): initial error at time 1772081325: ext4_validate_block_bitmap:441
[  179.009790][    C1] EXT4-fs (loop1): last error at time 1772081325: ext4_validate_block_bitmap:441
[  179.043562][ T8195] loop1: lost filesystem error report for type 5 error -117
[  179.044323][ T8195] EXT4-fs (loop1): 2 truncates cleaned up
[  179.058042][ T8195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.199326][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'.
[  179.319938][ T8213] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1425'.
[  179.497179][ T8182] lo speed is unknown, defaulting to 1000
[  179.509675][ T8182] lo speed is unknown, defaulting to 1000
[  179.615884][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.651531][ T8224] syz.5.1429 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  179.706300][ T8224] bond0: (slave team0): Releasing backup interface
[  179.722686][ T8224] bridge_slave_0: left allmulticast mode
[  179.729139][ T8224] bridge_slave_0: left promiscuous mode
[  179.736015][ T8231] 9pnet_fd: p9_fd_create_unix (8231): problem connecting socket: ./file0: -2
[  179.745216][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.789208][ T8224] bridge_slave_1: left allmulticast mode
[  179.795138][ T8224] bridge_slave_1: left promiscuous mode
[  179.801502][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.815852][ T8224] bond0: (slave bond_slave_0): Releasing backup interface
[  179.836472][ T8224] bond0: (slave bond_slave_1): Releasing backup interface
[  179.867430][ T8224] team0: Port device team_slave_0 removed
[  179.894551][ T8224] team0: Port device team_slave_1 removed
[  179.908758][ T8224] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  180.184591][ T8241] SELinux:  Context : is not valid (left unmapped).
[  180.561247][ T8239] loop5: detected capacity change from 0 to 2048
[  180.602077][ T8239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.711486][ T8239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.198070][   T28] kauditd_printk_skb: 85 callbacks suppressed
[  181.198086][   T28] audit: type=1326 audit(1772081327.417:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  181.328293][   T28] audit: type=1326 audit(1772081327.447:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  181.446461][   T28] audit: type=1326 audit(1772081327.457:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6438fcece code=0x7ffc0000
[  181.524040][ T8295] __nla_validate_parse: 5 callbacks suppressed
[  181.524059][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'.
[  181.570965][   T28] audit: type=1326 audit(1772081327.457:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  181.693715][   T28] audit: type=1326 audit(1772081327.457:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  181.788621][   T28] audit: type=1326 audit(1772081327.467:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  181.887019][   T28] audit: type=1326 audit(1772081327.467:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  182.015023][   T28] audit: type=1326 audit(1772081327.467:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  182.165850][   T28] audit: type=1326 audit(1772081327.467:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  182.218821][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1457'.
[  182.251154][ T8316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8316 comm=syz.4.1457
[  182.273029][ T8317] FAULT_INJECTION: forcing a failure.
[  182.273029][ T8317] name failslab, interval 1, probability 0, space 0, times 0
[  182.285806][ T8317] CPU: 0 UID: 0 PID: 8317 Comm: syz.0.1456 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  182.285874][ T8317] Tainted: [W]=WARN
[  182.285906][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  182.285976][ T8317] Call Trace:
[  182.285985][ T8317]  <TASK>
[  182.285995][ T8317]  __dump_stack+0x1d/0x30
[  182.286031][ T8317]  dump_stack_lvl+0x95/0xd0
[  182.286061][ T8317]  dump_stack+0x15/0x1b
[  182.286089][ T8317]  should_fail_ex+0x263/0x280
[  182.286118][ T8317]  should_failslab+0x8c/0xb0
[  182.286145][ T8317]  kmem_cache_alloc_noprof+0x66/0x400
[  182.286173][ T8317]  ? security_file_alloc+0x32/0xf0
[  182.286256][ T8317]  security_file_alloc+0x32/0xf0
[  182.286372][ T8317]  init_file+0x5b/0x1b0
[  182.286404][ T8317]  alloc_empty_file+0x8b/0x200
[  182.286435][ T8317]  alloc_file_pseudo+0xf6/0x190
[  182.286518][ T8317]  hugetlb_file_setup+0x2a6/0x3d0
[  182.286555][ T8317]  ksys_mmap_pgoff+0x156/0x310
[  182.286666][ T8317]  x64_sys_call+0x14df/0x3020
[  182.286704][ T8317]  do_syscall_64+0x12c/0x370
[  182.286793][ T8317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.286822][ T8317] RIP: 0033:0x7f573a46c629
[  182.286842][ T8317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.286889][ T8317] RSP: 002b:00007f5738e5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  182.286922][ T8317] RAX: ffffffffffffffda RBX: 00007f573a6e6090 RCX: 00007f573a46c629
[  182.286941][ T8317] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000
[  182.286956][ T8317] RBP: 00007f5738e5e090 R08: ffffffffffffffff R09: 0000000000000000
[  182.286971][ T8317] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001
[  182.287025][ T8317] R13: 00007f573a6e6128 R14: 00007f573a6e6090 R15: 00007ffef16dba98
[  182.287050][ T8317]  </TASK>
[  182.301588][   T28] audit: type=1326 audit(1772081327.467:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64393c629 code=0x7ffc0000
[  182.408832][ T8295] loop1: detected capacity change from 0 to 2048
[  182.558049][ T8295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.693045][ T8295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.730200][ T8326] loop0: detected capacity change from 0 to 128
[  182.844148][ T8335] loop0: detected capacity change from 0 to 128
[  182.853457][ T8335] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  182.869182][ T8335] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  182.879960][ T8335] FAULT_INJECTION: forcing a failure.
[  182.879960][ T8335] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  182.893408][ T8335] CPU: 0 UID: 0 PID: 8335 Comm: syz.0.1466 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  182.893444][ T8335] Tainted: [W]=WARN
[  182.893451][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  182.893464][ T8335] Call Trace:
[  182.893471][ T8335]  <TASK>
[  182.893479][ T8335]  __dump_stack+0x1d/0x30
[  182.893576][ T8335]  dump_stack_lvl+0x95/0xd0
[  182.893618][ T8335]  dump_stack+0x15/0x1b
[  182.893648][ T8335]  should_fail_ex+0x263/0x280
[  182.893679][ T8335]  should_fail+0xb/0x20
[  182.893702][ T8335]  should_fail_usercopy+0x1a/0x20
[  182.893747][ T8335]  _copy_from_user+0x1c/0xb0
[  182.893777][ T8335]  snd_seq_write+0x1d5/0x560
[  182.893815][ T8335]  vfs_writev+0x42b/0x900
[  182.893840][ T8335]  ? __pfx_snd_seq_write+0x10/0x10
[  182.893971][ T8335]  do_writev+0xe9/0x210
[  182.894028][ T8335]  __x64_sys_writev+0x45/0x50
[  182.894079][ T8335]  x64_sys_call+0x1c0c/0x3020
[  182.894138][ T8335]  do_syscall_64+0x12c/0x370
[  182.894192][ T8335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.894289][ T8335] RIP: 0033:0x7f573a46c629
[  182.894310][ T8335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.894331][ T8335] RSP: 002b:00007f5738ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  182.894352][ T8335] RAX: ffffffffffffffda RBX: 00007f573a6e5fa0 RCX: 00007f573a46c629
[  182.894423][ T8335] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000004
[  182.894442][ T8335] RBP: 00007f5738ebf090 R08: 0000000000000000 R09: 0000000000000000
[  182.894457][ T8335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.894471][ T8335] R13: 00007f573a6e6038 R14: 00007f573a6e5fa0 R15: 00007ffef16dba98
[  182.894491][ T8335]  </TASK>
[  183.492604][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'.
[  183.671188][ T8362] loop5: detected capacity change from 0 to 512
[  183.678367][ T8362] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  183.694606][ T3628] udevd[3628]: incorrect ext4 checksum on /dev/loop5
[  183.748744][  T400] Bluetooth: hci0: Frame reassembly failed (-84)
[  183.954019][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'.
[  184.004824][ T8350] loop1: detected capacity change from 0 to 2048
[  184.025723][ T8350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.087621][ T8350] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.108079][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'.
[  184.244532][ T8399] SET target dimension over the limit!
[  184.268185][ T8399] loop1: detected capacity change from 0 to 4096
[  184.278564][ T8399] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  184.548938][ T8411] sch_tbf: peakrate 4294959103 is lower than or equals to rate 16517373851444205497 !
[  184.783733][ T8427] loop1: detected capacity change from 0 to 512
[  184.794870][ T8427] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  184.837874][ T8427] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1495: bg 0: block 393: padding at end of block bitmap is not set
[  184.852573][ T8427] loop1: lost filesystem error report for type 5 error -117
[  184.853028][ T8427] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  184.860374][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  184.860399][    C0] EXT4-fs (loop1): initial error at time 1772081331: ext4_validate_block_bitmap:441
[  184.860444][    C0] EXT4-fs (loop1): last error at time 1772081331: ext4_validate_block_bitmap:441
[  184.894262][ T8427] loop1: lost filesystem error report for type 5 error -117
[  184.896191][ T8427] EXT4-fs (loop1): 2 truncates cleaned up
[  184.909808][ T8427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.221529][ T8436] futex_wake_op: syz.4.1500 tries to shift op by -65; fix this program
[  185.269719][ T8438] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  185.431132][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'.
[  185.508968][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.716408][ T8472] loop1: detected capacity change from 0 to 512
[  185.727825][ T8472] EXT4-fs: Ignoring removed oldalloc option
[  185.737380][ T8366] Bluetooth: hci0: command 0x1003 tx timeout
[  185.743449][ T3635] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  185.764969][ T8472] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1515: Parent and EA inode have the same ino 15
[  185.780168][ T8472] loop1: lost filesystem error report for type 5 error -117
[  185.780413][ T8472] EXT4-fs (loop1): 1 orphan inode deleted
[  185.787781][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  185.787803][    C1] EXT4-fs (loop1): initial error at time 1772081331: ext4_xattr_inode_iget:437
[  185.787832][    C1] EXT4-fs (loop1): last error at time 1772081331: ext4_xattr_inode_iget:437
[  185.794046][ T8480] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  185.804496][ T8472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.842818][ T8472] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1515: invalid indirect mapped block 234881024 (level 0)
[  185.856790][ T8472] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  186.008050][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.072205][ T8499] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1520'.
[  186.111974][ T8503] loop1: detected capacity change from 0 to 256
[  186.782112][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  186.782128][   T28] audit: type=1400 audit(2000000000.830:5059): avc:  denied  { connect } for  pid=8509 comm="syz.1.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  186.980591][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'.
[  187.057175][   T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  187.226510][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'.
[  187.256267][ T8541] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1533'.
[  187.318975][ T8543] ==================================================================
[  187.327142][ T8543] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run
[  187.335118][ T8543] 
[  187.337481][ T8543] write to 0xffff8881400f42b0 of 8 bytes by task 8545 on cpu 0:
[  187.345148][ T8543]  cpu_map_kthread_run+0x4fe/0x1680
[  187.350396][ T8543]  kthread+0x22a/0x280
[  187.354496][ T8543]  ret_from_fork+0x150/0x360
[  187.359232][ T8543]  ret_from_fork_asm+0x1a/0x30
[  187.364042][ T8543] 
[  187.366393][ T8543] read to 0xffff8881400f42b0 of 8 bytes by task 8543 on cpu 1:
[  187.373973][ T8543]  bq_flush_to_queue+0x124/0x360
[  187.378965][ T8543]  cpu_map_enqueue+0x1a5/0x1c0
[  187.383778][ T8543]  xdp_do_redirect_frame+0x27b/0x580
[  187.389125][ T8543]  bpf_test_run_xdp_live+0xac3/0x1360
[  187.394542][ T8543]  bpf_prog_test_run_xdp+0x57b/0xa10
[  187.399879][ T8543]  bpf_prog_test_run+0x204/0x340
[  187.404857][ T8543]  __sys_bpf+0x52e/0x7e0
[  187.409127][ T8543]  __x64_sys_bpf+0x41/0x50
[  187.413597][ T8543]  x64_sys_call+0x10cb/0x3020
[  187.418319][ T8543]  do_syscall_64+0x12c/0x370
[  187.422959][ T8543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.428893][ T8543] 
[  187.431239][ T8543] value changed: 0xffff88815b614070 -> 0x0000000000000000
[  187.438367][ T8543] 
[  187.440711][ T8543] Reported by Kernel Concurrency Sanitizer on:
[  187.446883][ T8543] CPU: 1 UID: 0 PID: 8543 Comm: syz.0.1534 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  187.457813][ T8543] Tainted: [W]=WARN
[  187.461640][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  187.471727][ T8543] ==================================================================
[  187.480064][   T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  189.244276][ T8519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512