last executing test programs: 18.340222096s ago: executing program 0 (id=190): shmat(0x0, &(0x7f0000e0a000/0x2000)=nil, 0x7000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000f00)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@debug}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000240)={0xfffffffffffff001, 0x5, 0x7, 0x1800c}) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000202073260000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)=ANY=[@ANYBLOB="6802000000050104000000000000000007000002540201"], 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) lseek(0xffffffffffffffff, 0x1000000, 0x0) 18.224458723s ago: executing program 0 (id=193): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000080)=0x2a) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r2, &(0x7f0000000a80), 0x0}, 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4020}, 0x40084) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4020}, 0x40084) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x4090) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 18.190153145s ago: executing program 0 (id=194): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socket(0x28, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 18.122671359s ago: executing program 0 (id=196): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@acl}, {@nolazytime}, {@orlov}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000b00)="$eJzs3c+PG1cdAPDvzP5y07SbQA9QAQlQCFUUO+u0UdVLywWEqkqIigPikC67zmqJHYe1t3SXldj+DSCBxAn+BA5IHBA9ceDGEYkDQpQDUoEVKIvEwWjGsxt310tM7LWb9ecjTebHm5nve3Zm3vOzd14AU+tyROxGxHxEvBkRi8X2pJji1e6U7Xd/b2dlf29nJYlO542/J3l6ti16jsk8WZyzFBFf+3LEt5LjcVtb23eW6/XaRrFeaTfuVVpb29fWG8trtbXa3Wr15tLN6y/deLE6srJeavz8/S+tv/b1X/3yk+/9bvf572XZOl+k9ZZjlLpFnzuMk5mNiNdOI9gEzBTz+Qnng0eTRsRHIuIz+fW/GDP5/04A4CzrdBajs9i7DgCcdWneB5ak5YhI06IRUO724T0T59J6s9W+eru5eXe121d2IebS2+v12vWLC3/4Tr7zXJKtL+VpeXq+Xj2yfiMiLkbEDxeeyNfLK8366mSaPAAw9Z7srf8j4l8LaVouD3Ron2/1AIDHRmnSGQAAxk79DwDTR/0PANNngPq/+LJ/99TzAgCMh8//ADB91P8AMH3U/wAwVb76+uvZ1Nkvnn+9+tbW5p3mW9dWa6075cbmSnmluXGvvNZsruXP7Gk87Hz1ZvPe0gux+XalXWu1K62t7VuN5ubd9q38ud63anNjKRUA8L9cvPTu75OI2H35iXyKnrEc1NVwtqUj3At4vMwMc7AGAjzWjPYF02ugKjxvJPz21PMCTEbfh3mX+i5+0I//jyB+ZwQfKlc+Pnj/vzGe4WzRsw/T69H6/18ZeT6A8dP/D9Or00mOjvk/f5gEAJxJQ/yEr/P9UTVCgIl62GDeI/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6Y8xHx7UjScj4WeJr9m5bLEU9FxIWYS26v12vXI+LpuBQRcwvZ+tKkMw0ADCn9a1KM/3Vl8bnzR1Pnk38v5POI+O5P3vjR28vt9sZStv0fh9sXDoYPqz44bohxBQGAwf15kJ3y+rtazHs+yN/f21k5mE4xj8e8/8XDwUdX9vd28qmbMhudTqcTUcrbEuf+mcRscUwpIp6NiJkRxN99JyI+1q/8Sd43cqEY+bQ3fhSxnxpr/PQD8dM8rTvPXr6PjiAvMG3eze4/r/a7/tK4nM/7X/+l/A41vPz+V4o4uPft98SfLSLN9ImfXfOXB43xwm++cmxjZ7Gb9k7Es7P94ieH8ZMT4j83YPw/fuJTP3jlhLTOTyOuRP/4vbEq7ca9Smtr+9p6Y3mttla7W63eXLp5/aUbL1YreR915aCn+ri/vXz16ZPylpX/3AnxS33LP3947OcGLP/P/vPmNz/9YHXhaPwvfLb/+/9M3/hdz0fE5weMv3zuFycO353FXz2h/A97/68OGP+9v2yvDrgrADAGra3tO8v1em1jqIXsU+goznNsIcviYDsfNBeHC/qnyBeOvyxZ22dU5coaY4PsPDd0cdJfj/JdHnxh9rCtONozfyM749hKUbyGIy/FUAv3xxVrQjckYGweXPSTzgkAAAAAAAAAAAAAAHCScfzp0qTLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNn13wAAAP//dn2/bw==") r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/config\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000200000000", @ANYRES32=0x0, @ANYBLOB="038601000000006e140012800c00010f6d616376746170000400021372000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x80, 0x0, 0xfff, 0x202, 0x1, 0x10000001, '\x00', r2, r0, 0x2, 0x4, 0x1, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x4, 0x8}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r4], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x2, 0x47d9, 0x1000000000000c8, 0x3, 0x2000002, 0x8, 0x4, 0xfffffffffffffffc, 0x5166}) 17.661098268s ago: executing program 0 (id=199): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x2, 0x2, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922fb0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x3, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x5, 0xfffffffffffffff7, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "738b276597b6c58b"}, 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty=0x300, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 17.491624049s ago: executing program 0 (id=200): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='auxv\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x28, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x28}}, 0x40000) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000004540)=""/4095, 0xfff}, {0x0}], 0x2, 0xb, 0x5) syz_read_part_table(0x4058, &(0x7f00000030c0)="$eJzszkEuA2EYBuC3HcyPJrWwIw2xl+nOqnGJuYAzOIDoTSznAi5mK6REqwiSsSCeZ/O/me/9Jl/4De6GSepvlh8Gy3h0nHnTbCxi9VG1mWZzpwwzSnK5Nnnaabs+RwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH9OtYq7z8/VlzsXBxknORslpU5yXeV+NhlkP3VOV7WytrSV7cUzTdrux64HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6Xw0+ne6/yzUnms0n1pnH+Esry020yfv+rtutxJQAAAPDIDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsFAAD//7oxDeI=") 17.47516099s ago: executing program 32 (id=200): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='auxv\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x28, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x28}}, 0x40000) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000004540)=""/4095, 0xfff}, {0x0}], 0x2, 0xb, 0x5) syz_read_part_table(0x4058, &(0x7f00000030c0)="$eJzszkEuA2EYBuC3HcyPJrWwIw2xl+nOqnGJuYAzOIDoTSznAi5mK6REqwiSsSCeZ/O/me/9Jl/4De6GSepvlh8Gy3h0nHnTbCxi9VG1mWZzpwwzSnK5Nnnaabs+RwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH9OtYq7z8/VlzsXBxknORslpU5yXeV+NhlkP3VOV7WytrSV7cUzTdrux64HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6Xw0+ne6/yzUnms0n1pnH+Esry020yfv+rtutxJQAAAPDIDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsFAAD//7oxDeI=") 7.466166508s ago: executing program 1 (id=333): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x5c3, 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10120, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r1, &(0x7f0000000340)=""/128, 0x80, 0x40000000, &(0x7f00000003c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'vmac(xeta-generic)\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 6.604245171s ago: executing program 1 (id=339): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000080)=0x1f, 0x4) getsockopt$inet_tcp_int(r3, 0x6, 0x7, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008020007500500400012800b00010062726964676500003000028005001900020000000500170000000000080004008100000005001600010000000a0014000180c2000000000037fba38fa87df6d8a60da6a806858a836d20f0"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) openat(r7, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r9, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r10 = socket$kcm(0x2, 0xa, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 6.192784487s ago: executing program 1 (id=344): r0 = syz_io_uring_setup(0x653b, &(0x7f0000000400)={0x0, 0xb7bf, 0x8000, 0x0, 0x30d}, &(0x7f0000000480)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000037c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1}) (async) io_uring_enter(r0, 0x5535, 0x3acd, 0x22, 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x40000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5b7, &(0x7f0000001380)="$eJzs3U1oHNcdAPD/zGot2ZYrF1poiw+mLbhgvPqw3bo9yddSg8GHQi+tWK2F0UprtKvWEoLKdxPiQ0iCL84tOeSYkEMOIZccc80lH+eAiUUClg/Jhv2SZXnlrGTtbqz9/WC0783M7v//duY9zQwzbAAD63TtTxrx24i4mkSMbVs2FM2FpxvrbW6s5R9vrOWTqFavfZNEEhGPNtbyrfWT5uvxiFiPiN9ExMfZiLPp1kceaRXKK6vzM8ViYalZH68s3Bwvr6yeu7EwM1eYKyye/8tfL166cHFyanJ7uo+r22vZvbX1zhd3X7nz6d/v333n3VPr+ddmkpiO0eay7e04SI3vJBvTO+Zf6EawPkr6nQD7kmn281pX+nWMRabZ69upbh8chnuSHtBF1eGI6pZtRWAAJC/Q6VuDCPAyah0H1M5/W1Mvjz8eXG6cgNTibm6s5f8frfhDjWsTMVI/Nzn2bfLUmUntfPNkLxPlUFq/HRETQ0PP7v9Jc//bv4mDSJCu+uhyY0M9u/3TrfEn2ow/o61rpy+oNf5tNse/zTbxM7uMf1c7jPH9v756c9f4t4fjd23jJ1vxkzbx04j4T4fx7/3zg0u7Lau+FXEm2sdvSZ5/fXj8+o1iYaLxt22MD8+c+tvu7Y84tkv8xjXbkXoi29t/pJlT2mH73//kvd+vPyf+n/7w/O3f7vs/GhGvdhj/l4/e/sduyx7cTh7WjgL2uv2TyMb9DuP/efr0582iq4YAAAAAAAAAAHCA0vq9bEma2yqnaS7XeIb3V3EsLZbKlbPXS8uLs4173k5GNm3daTXWqCe1+mTzftxWfWpH/XymGTBztF7P5UvF2T63HQAAAAAAAAAAAAAAAAAAAH4uju94/v+7TP35/+mIqRP9zg3ogd1/8hs47PR/GFxP9/+kb3kAvef/Pwysqv4Pg0v/h8Gl/8Pg0v9hcLXt/0d7nwfQe8/0/5H+5AH0nuN/AAAAAAAAAAAAAAAAAAAAAAAAAADoiqtXrtSm6uONtXytPju0sjxf+u+52UJ5PrewnM/lS0s3c3Ol0lyxkMuXFn7q85JS6eZELC7fGq8UypXx8srqvxdKy4ut3xQtZLveIgAAAAAAAAAAAAAAAAAAAHj5jNanJM1FZBv1NM3lIk5ExMkkkus3ioWJiPhFRHyWyQ7X6pP9ThoAAAAAAAAAAAAAAAAAAAAOmfLK6vxMsVhY6l5hqBmqs3d9WelqPkN7WTki1g82jdon7vld2eYXWJ8z0vXtdbgLmQ73w4Ev9HFQAgAAAAAAAAAAAAAAAACAAfXkod9O3/FDdxMCAAAAAAAAAAAAAAAAAACAgZR+nUREbToz9sfRnUuPJJuZ+mtE/O/etddvzVQqS5O1+Q+35lfeaM6f6kf+QKda/TSNiFo/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4or6zOzxSLhaV9FoY7WKffbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjx8DAAD//95Mx5c=") (async) gettid() (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r12, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r14) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0x73f, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r15, {}, {0xfff2, 0xffff}, {0xffff, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xf, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702004014000000b703000000000000850000008a000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000084000000b2000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r16, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) 6.125611541s ago: executing program 1 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xffffffffffffffe8, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20008080) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x51d, &(0x7f0000000240)="$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") ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6d05}, 0x94) 5.924681523s ago: executing program 1 (id=351): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x894) 4.576393457s ago: executing program 1 (id=364): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x801000000}], 0x1, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) 4.547392848s ago: executing program 33 (id=364): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x801000000}], 0x1, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) 2.543571863s ago: executing program 2 (id=390): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa400080a) write$selinux_load(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75b870d9e2f492c268c5d27216ed1fd4f5ca83"], 0x2b) rmdir(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x808, 0x10000, 0x0, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') lseek(r5, 0x10001, 0x0) fchown(r4, 0x0, 0xee01) r6 = getpid() r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) fcntl$addseals(r8, 0x409, 0xb) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xbf34}) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 2.09876034s ago: executing program 5 (id=394): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x1b, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0xc, 0x4, 0xd, 0x1, 0x1, 0x81, '\x00', r2, r3, 0x4, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x3, 0x7}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000480)=[{0x6, 0x85, 0xf8, 0x7ffc0001}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x20000510) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 2.003497496s ago: executing program 4 (id=395): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080), 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0x2b, 0xebec93e830f96114}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0), &(0x7f0000000300)) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_setup(0x4934, &(0x7f0000000700)={0x0, 0x7446, 0x4000, 0x3, 0x199}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r7, 0x21, &(0x7f0000001f80)={0x0, 0x6659, 0x1, 0x3, 0x377, 0x0, r8}, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x2, 0x203, 0x4, 0x9, 0x4, 0x8, 0x800, r6}, 0x20) sendmsg$inet_sctp(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="75d3f033cf4c5f10ec28d72ea558b643383b6849da1215191e078189a79461a24e583dda1fdf4f7c17b46df182937961143ba933acf23383e0584ac93e81e4a1e79bc177ab0e4cb90e660aadbda2933b1083cfb838d0f77a1a58b327ffe8eb895c01ae2af3a78ba3ea", 0x69}, {&(0x7f0000000300)="625a18d09ca7da67687423e8f12ace6af045301aeda48182977e6b28af39ab643cc51ce47f5465d98c8ef7b98e14bb11ef77f0e6eaccb670a29d9489c2f4955934d919dcfc666c120d8f9e90e07fa21ff0d794bae3cbabcbf7979ff08b76697fcc01bb1ceff49d555bb322ac67c44af7caa4a406df9b91cb347deeabcc54b2407d", 0x81}, {&(0x7f00000004c0)="dea43f5ec32f77baf1c550de54b7e437ce53bb76aadd14a5c8cadff26b4815d626a791f05cde1dead1c5599ec1936e0228ecca12155c4991019b75476650b00ae6c25222f8c8a62bb531652098e45ca65702848f8f27cd2961d85273618f0e8287b30c936438f44243d19d0c006578dc0d6d0f791edb44529616b5573de7a9b364c30287147808faee1f7459ad471a7a52bdaf50ee4116562bc362086248a566048624e145b8209b9404995f12d91a7aace97994a5eafd8236ef10a87bf904621b73fb3e782f1f55155978aba41d", 0xce}, {&(0x7f00000001c0)}, {&(0x7f00000003c0)="29aa4f0d1cd9862e77a5f3714cdf4a8b08466643bfc4eee021c8098849fd26b305dccd01356b288fa818012f6a3ee53f2a1adc8c83284c5b73cc986315f810b34a5b0b91ddecf4707735e254b421939892f8ef138f03cf45ec5c9680f4adfc3b95b1836069636913702b97395cb752e4b0d1d52a6459a595c68a1e4b4671fc12cd9cbc11a771ba1a595b2812a295270d08", 0x91}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f00000005c0)="38c42365b97cc5e4d76d36f0b8b636878303", 0x12}], 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="2000000000000000850000000a000000108e0e9bef00006c07000000", @ANYRES32=r6], 0x20, 0x20004004}, 0x20008080) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x5) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000000c0)={0xdbc, 0x7e, 0x1, 0x403, 0xd, "0500"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0xd) io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) unshare(0x2c020400) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x2) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x1, &(0x7f0000000080)=""/179, &(0x7f0000000140)=0xb3) shutdown(r4, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 2.002638376s ago: executing program 2 (id=396): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x5c3, 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10120, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r1, &(0x7f0000000340)=""/128, 0x80, 0x40000000, &(0x7f00000003c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'vmac(xeta-generic)\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d0018000000000000002806000028000000020000"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.968638018s ago: executing program 5 (id=398): r0 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bfffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1, 0xd9, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xe985}, 0xffffffffffffffff, 0xfdffffffffffffff, 0xffffffffffffffff, 0x8) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000180)=""/5, 0x5}], 0x5, 0x7, 0x0) 1.880380713s ago: executing program 4 (id=399): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x4b, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x10, 0x7, 0x40000004, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x7ff, 0x0) 1.843620276s ago: executing program 5 (id=400): syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)='<', 0x1, 0x4000800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0, 0x30}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/173, 0xbb}], 0x5}, 0x2}], 0x2, 0x22, 0x0) (async) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0, 0x30}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/173, 0xbb}], 0x5}, 0x2}], 0x2, 0x22, 0x0) sendto(r0, 0x0, 0x0, 0x84891, 0x0, 0xffffffc5) (async) sendto(r0, 0x0, 0x0, 0x84891, 0x0, 0xffffffc5) syz_usbip_server_init(0x1) (async) syz_usbip_server_init(0x1) 1.698840085s ago: executing program 4 (id=401): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0xa, 0x8) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x8f1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mbind(&(0x7f00004c2000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1fc9, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x100000001) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, &(0x7f0000000000)=0xd, 0x8, 0x0) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FICLONE(r3, 0x40049409, r3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004d9000/0x2000)=nil) mlock2(&(0x7f00008cd000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000}, 0x48000) 1.601438531s ago: executing program 4 (id=403): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) getsockopt(r2, 0xff, 0x24, 0x0, &(0x7f00000002c0)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1.541317014s ago: executing program 3 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30e000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="040082040a00010001"], 0x30}}, 0x80c0) 1.436275231s ago: executing program 4 (id=405): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0xfffffffffffffe55}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendmmsg$sock(r0, &(0x7f0000000280), 0x0, 0x0) sendto$inet_nvme_pdu(r0, &(0x7f0000000040)=@data_c2h={{0x7, 0x1a, 0x18, 0x7, 0x3}, 0xfffd, 0x8001, 0x2, 0x7, "2e9b3748"}, 0x80, 0x0, 0x0, 0x0) 1.428160661s ago: executing program 3 (id=406): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaaffff00000095000000ff00"/24], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r3, @ANYBLOB="170e0000000000000000010000600800090000000000"], 0x1c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x7b}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x48, 0x1}, {0x9, 0x1}, {0x9, 0x1}, {0x18}, {0x60}, {0x12}, {0x1b, 0x1}, {0x49}, {0x18, 0x1}, {0x12}, {0x36}, {0x36}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xb0}, 0x48) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000001480), &(0x7f00000014c0)=0x4) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x38, {0x2, 0xffff, @empty}}) (async, rerun: 64) r11 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffd6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1008006, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2e0503c45c0d28", @ANYRESHEX=r1, @ANYBLOB=',\x00']) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000004c0)={0x0, 0xd2, "4c23d9e0bfd541ff51688536d732535f4d0fb050154dd5ef76476300fbe679d9ac274c5183caa757f593ecb2042183d28a9751813794291fb432263bdc5b0e3849b2db9c5bfe02936c264306f964ecfe7784832efe1c489e67a8bb81b699f61cfc1e498547c7e9d8d0b51ed8bb4d1e752fbdf776dcaf7f39a309b3f64519da5d047ecf77b3cdb3de9b8da544b2de9084649e7a1e8413294b764304098bc994335865ea0f4acc46ccd273726bb6c12b29ac8d6b95d5a70f1d7d83aa502e44ef2cff9e264bbab1ca6b73bd53ab9445fe86a514"}, &(0x7f0000000180)=0xda) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000001500)={r13, 0x1000, "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"}, &(0x7f0000000200)=0x1008) 1.394372513s ago: executing program 5 (id=407): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="588addb0", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (fail_nth: 2) 1.056414624s ago: executing program 2 (id=408): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x1004000, 0x1000, 0x48002, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18c00000ff0b000000000000006847fffffcffffff9500"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.056181814s ago: executing program 6 (id=365): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) mount$cgroup2(0x0, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000280), 0x801, &(0x7f0000000340)={[{@memory_hugetlb_accounting}]}) 988.485848ms ago: executing program 5 (id=409): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = epoll_create1(0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) acct(&(0x7f0000000280)='./file1\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r6 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) getpgid(r6) 987.854398ms ago: executing program 3 (id=410): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x810, r0, 0x6c75b000) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) (async, rerun: 32) setuid(r4) (async, rerun: 32) ioctl$TCSETS(r2, 0x5402, &(0x7f0000002480)={0xfffffffe, 0x4, 0x5, 0x5, 0x4, "0000000000000000000000d787d16700"}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xffffffef, 0x2, 0x9, 0x7ffd, 0x90, "990001000000000000135d7b693400"}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) (async) getsockopt$bt_hci(r1, 0x6, 0x17, &(0x7f0000003580)=""/4117, &(0x7f00000000c0)=0xff8f) 987.712139ms ago: executing program 2 (id=411): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x4000, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 981.355219ms ago: executing program 6 (id=412): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x281, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x4, 0x0, 0x11000, 0x1, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x3, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000900)={[{@nodioread_nolock}, {@noblock_validity}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000063c0)=""/1024, 0x400) ptrace$getsig(0x4202, r2, 0x7fffffff, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000008000900040000000500020005000000400003803c00038038000180080001000001000008000100010000000c000200f44103c6736e91d1"], 0x7c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x5}, 0x8) listen(r6, 0x0) ptrace$peeksig(0x4209, r2, &(0x7f0000000000)={0x0, 0x0, 0x3}, &(0x7f0000000040)=[{}, {}, {}]) 962.09803ms ago: executing program 3 (id=413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x3ea, 0xffffffff, 0x40}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="380100001a00ffff28bd785bf06ddabbb58cc6f87040030000000a01010100000000000000000001012eda8c27624d8b9c58b8a8424e1f000000ff020000000000000000000000000001040000004e240000000020203b00000010129162304a044895808f931a942eeba233a60eb0074dbc8cbce81438789e465f3f9140bd821379fea18e609f2e3d8f202434c78fdac96df615e5cc5279fbb589a18f35c6dd1eb9b6bf6421a9b3d634fd986b2bfedeaeaa43f8425235ac727c4982794bb40a5b9029bc1fa050c3969305c98ea6310468bbaacabdd022dc99d8946a3cbf3eac6e2f4f000013000850", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000018000084d43c000000ff010000000000000000000000000001000000000100000000000000000000000c3d000000000000b1b7c15500000000ff07000000000000fcffffffffffffff03060000000000003e0000000000000001000000000010000000000000000000fcffffffffffffffa3000000000000004b0f0000493d00000040000003000000033500000a000107e000000000000000480003006c7a6a6800fc96096e2a27a69c00000010000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000bbfd3c187d23febf3c06bfe2206e53fbf06512ee324a78762ebd9451879b02579f1b53"], 0x138}, 0x1, 0x0, 0x0, 0x851}, 0x0) 880.900015ms ago: executing program 3 (id=414): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socket(0x28, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 880.671315ms ago: executing program 2 (id=415): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) syz_read_part_table(0x1050, &(0x7f0000001080)="$eJzsz81JQ2EQQNH74vv5QARL0LVNGHtIP9qJKxcWaYRoWghvcc5iGJi7mdiR81bLZfu4zOnn/K+6v1Z39VrbWu9Pz5+n46HGaBrVWr29NFfjmh/Xpsdla+6hWr6mDn+HudP37X8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP35DQAA//8BSA+W") 788.799121ms ago: executing program 3 (id=416): r0 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000f00), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@ifindex, 0xffffffffffffffff, 0x13, 0x6}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 307.338051ms ago: executing program 5 (id=417): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x5c3, 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10120, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r1, &(0x7f0000000340)=""/128, 0x80, 0x40000000, &(0x7f00000003c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'vmac(xeta-generic)\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d0018000000000000002806000028000000020000"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 252.920884ms ago: executing program 4 (id=418): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004001}, 0x4040040) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000012850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x80000000, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400)=r3, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYBLOB="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"/305, @ANYBLOB="2229e4daa91ec6fa6fd7ca657a9d9f0446f4bbdff89e6765851a5d70b519b302033dd5cbb4d27206c473f94fae84697ab284df33b0630899a5df9e5ce7324342fc20de8fb31fb199caf1595de9aa6509e782ac930a0d5c829089bd4da31bc036392c3206cf9cc114d440114fc43209674f8b4364791569a55b9974f251f78edc4a6b911bde5ace78f844e62ce270ec0a8149fae1d7d9485b87d35518691b74d1ca2256b2827dd43da0b0b69c8b3dc3caf243fb571c3a2f82ad6c3a570eb32d8862a3e399", @ANYBLOB="261fb61f7fa8df3110a5f5c53ddf67660b95dbe2472304e2600fa2d6d38759bcd4adaf188f447131ef2ae4263d98018a2c9f2a0836f14ea40e6648d4bce2126080bf4d4c5b45349e571b194c576f0db70d9b3e0425fb17e2c629fe29efbec3f3a7bfeb6d616b59eff7b9ecc54b0bb5d30cb3ac2c057047b150f136cb18768f635a51fe722baf217d296dfe54b41b4f5d025f3f5796e0392cb908c463f461f45e1712c7ea1ac353262114a1283f57a0711bbe4adb71661ab755623d4b93d8f65da63171ff38f1ffd18c149ff0", @ANYRES64, @ANYRES8], 0x4, 0x301, &(0x7f0000000080)="$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") r5 = socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x2) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003a031c7"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x8004) 151.560961ms ago: executing program 2 (id=419): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x7, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x1088b2, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x401) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) fcntl$getown(r3, 0x9) 0s ago: executing program 6 (id=420): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4109, 0x100d}], 0x1, 0x145, 0x80000000) kernel console output (not intermixed with test programs): : denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.008179][ T29] audit: type=1400 audit(1769030949.419:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.028662][ T29] audit: type=1400 audit(1769030949.419:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.049689][ T29] audit: type=1400 audit(1769030949.429:69): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.072494][ T29] audit: type=1400 audit(1769030949.449:70): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.083772][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.100900][ T29] audit: type=1400 audit(1769030949.449:71): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.164624][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.461654][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.473355][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.500132][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.516642][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.588640][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 35.642224][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.649376][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.656762][ T3322] bridge_slave_0: entered allmulticast mode [ 35.663204][ T3322] bridge_slave_0: entered promiscuous mode [ 35.679692][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.686881][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.694108][ T3316] bridge_slave_0: entered allmulticast mode [ 35.700781][ T3316] bridge_slave_0: entered promiscuous mode [ 35.711626][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.718775][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.726188][ T3322] bridge_slave_1: entered allmulticast mode [ 35.732801][ T3322] bridge_slave_1: entered promiscuous mode [ 35.739607][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.746793][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.753966][ T3320] bridge_slave_0: entered allmulticast mode [ 35.760664][ T3320] bridge_slave_0: entered promiscuous mode [ 35.770329][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.777581][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.784999][ T3316] bridge_slave_1: entered allmulticast mode [ 35.791799][ T3316] bridge_slave_1: entered promiscuous mode [ 35.808031][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.815166][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.822481][ T3320] bridge_slave_1: entered allmulticast mode [ 35.829108][ T3320] bridge_slave_1: entered promiscuous mode [ 35.843688][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.851133][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.858512][ T3317] bridge_slave_0: entered allmulticast mode [ 35.865280][ T3317] bridge_slave_0: entered promiscuous mode [ 35.888164][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.895421][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.902777][ T3317] bridge_slave_1: entered allmulticast mode [ 35.909587][ T3317] bridge_slave_1: entered promiscuous mode [ 35.917500][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.937847][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.952946][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.963309][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.978796][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.998836][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.008134][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.015337][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.022719][ T3323] bridge_slave_0: entered allmulticast mode [ 36.029284][ T3323] bridge_slave_0: entered promiscuous mode [ 36.041467][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.060274][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.067460][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.074791][ T3323] bridge_slave_1: entered allmulticast mode [ 36.081565][ T3323] bridge_slave_1: entered promiscuous mode [ 36.095327][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.105333][ T3322] team0: Port device team_slave_0 added [ 36.122307][ T3316] team0: Port device team_slave_0 added [ 36.133087][ T3322] team0: Port device team_slave_1 added [ 36.139707][ T3320] team0: Port device team_slave_0 added [ 36.151061][ T3316] team0: Port device team_slave_1 added [ 36.167359][ T3320] team0: Port device team_slave_1 added [ 36.174556][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.189812][ T3317] team0: Port device team_slave_0 added [ 36.206909][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.222509][ T3317] team0: Port device team_slave_1 added [ 36.228569][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.235581][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.261774][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.282091][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.289463][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.315892][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.332325][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.339510][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.365926][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.377469][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.384819][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.411732][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.428519][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.435771][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.461947][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.482950][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.490629][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.519086][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.531136][ T3323] team0: Port device team_slave_0 added [ 36.546188][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.555477][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.583048][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.596694][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.603965][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.630180][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.648086][ T3323] team0: Port device team_slave_1 added [ 36.698623][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.705823][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.733232][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.751798][ T3322] hsr_slave_0: entered promiscuous mode [ 36.758211][ T3322] hsr_slave_1: entered promiscuous mode [ 36.776003][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.783566][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.809918][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.823556][ T3316] hsr_slave_0: entered promiscuous mode [ 36.829830][ T3316] hsr_slave_1: entered promiscuous mode [ 36.836303][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 36.842404][ T3316] Cannot create hsr debugfs directory [ 36.850414][ T3320] hsr_slave_0: entered promiscuous mode [ 36.856825][ T3320] hsr_slave_1: entered promiscuous mode [ 36.862993][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 36.868859][ T3320] Cannot create hsr debugfs directory [ 36.877604][ T3317] hsr_slave_0: entered promiscuous mode [ 36.883851][ T3317] hsr_slave_1: entered promiscuous mode [ 36.889907][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 36.895835][ T3317] Cannot create hsr debugfs directory [ 36.957630][ T3323] hsr_slave_0: entered promiscuous mode [ 36.963934][ T3323] hsr_slave_1: entered promiscuous mode [ 36.970278][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 36.976164][ T3323] Cannot create hsr debugfs directory [ 37.184994][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.201120][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.210559][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.222593][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.241642][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.253783][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.263704][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.277873][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.316681][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.326811][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.338453][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.348479][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.400188][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.416526][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.427532][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.437917][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.457757][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.492574][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.503176][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.518636][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.529123][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.539404][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.554136][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.565121][ T935] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.572416][ T935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.582463][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.589955][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.627362][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.640479][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.647626][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.670030][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.677270][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.712441][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.728779][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.768943][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.787340][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.808154][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.816024][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.832145][ T1722] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.839766][ T1722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.862269][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.872924][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.897683][ T1722] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.905954][ T1722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.932961][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.940150][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.959845][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.988737][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.999351][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.028851][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.063711][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.088594][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.095852][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.125464][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.132606][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.222569][ T3320] veth0_vlan: entered promiscuous mode [ 38.238294][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.250322][ T3320] veth1_vlan: entered promiscuous mode [ 38.261595][ T3317] veth0_vlan: entered promiscuous mode [ 38.283286][ T3317] veth1_vlan: entered promiscuous mode [ 38.303663][ T3320] veth0_macvtap: entered promiscuous mode [ 38.318162][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.327965][ T3320] veth1_macvtap: entered promiscuous mode [ 38.346655][ T3317] veth0_macvtap: entered promiscuous mode [ 38.359303][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.375199][ T3317] veth1_macvtap: entered promiscuous mode [ 38.408417][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.433444][ T1722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.449963][ T1722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.466612][ T3322] veth0_vlan: entered promiscuous mode [ 38.476358][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.483655][ T1722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.505196][ T3322] veth1_vlan: entered promiscuous mode [ 38.523012][ T1722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.540197][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.575513][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.589500][ T3316] veth0_vlan: entered promiscuous mode [ 38.599449][ T3322] veth0_macvtap: entered promiscuous mode [ 38.606337][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.629527][ T3316] veth1_vlan: entered promiscuous mode [ 38.643014][ T3322] veth1_macvtap: entered promiscuous mode [ 38.655620][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.663984][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.677075][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.705457][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.714881][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 38.714941][ T29] audit: type=1400 audit(1769030954.159:94): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.746372][ T29] audit: type=1400 audit(1769030954.159:95): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.770993][ T29] audit: type=1400 audit(1769030954.159:96): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.800972][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.819103][ T3316] veth0_macvtap: entered promiscuous mode [ 38.825638][ T29] audit: type=1400 audit(1769030954.169:97): avc: denied { open } for pid=3484 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.844683][ T29] audit: type=1400 audit(1769030954.169:98): avc: denied { perfmon } for pid=3484 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.844720][ T3316] veth1_macvtap: entered promiscuous mode [ 38.865627][ T29] audit: type=1400 audit(1769030954.169:99): avc: denied { kernel } for pid=3484 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.876987][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.890225][ T29] audit: type=1400 audit(1769030954.169:100): avc: denied { create } for pid=3484 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.919433][ T29] audit: type=1400 audit(1769030954.169:101): avc: denied { listen } for pid=3484 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.929378][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.939805][ T29] audit: type=1400 audit(1769030954.169:102): avc: denied { accept } for pid=3484 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.954067][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.967205][ T29] audit: type=1400 audit(1769030954.169:103): avc: denied { create } for pid=3484 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.032432][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.049812][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.059752][ T3323] veth0_vlan: entered promiscuous mode [ 39.068084][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.097063][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.123686][ T3323] veth1_vlan: entered promiscuous mode [ 39.131150][ T3500] loop3: detected capacity change from 0 to 128 [ 39.139118][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.158074][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.177037][ T3500] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 39.177070][ T3500] EXT4-fs: failed to create workqueue [ 39.194448][ T3500] EXT4-fs (loop3): mount failed [ 39.199912][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.258094][ T3323] veth0_macvtap: entered promiscuous mode [ 39.276040][ T3323] veth1_macvtap: entered promiscuous mode [ 39.288974][ T3507] ======================================================= [ 39.288974][ T3507] WARNING: The mand mount option has been deprecated and [ 39.288974][ T3507] and is ignored by this kernel. Remove the mand [ 39.288974][ T3507] option from the mount to silence this warning. [ 39.288974][ T3507] ======================================================= [ 39.306659][ T3505] loop0: detected capacity change from 0 to 1024 [ 39.330697][ T3507] tmpfs: Unknown parameter '' [ 39.346513][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.370906][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.375090][ T3505] EXT4-fs: Ignoring removed bh option [ 39.409687][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.421376][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.437100][ T3505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.450168][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.481019][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.517824][ T3505] Zero length message leads to an empty skb [ 39.790001][ T3530] loop3: detected capacity change from 0 to 256 [ 39.825699][ T3525] netlink: 'syz.3.9': attribute type 29 has an invalid length. [ 39.826879][ T3497] Set syz1 is full, maxelem 65536 reached [ 39.833503][ T3525] netlink: 'syz.3.9': attribute type 6 has an invalid length. [ 39.880554][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.942042][ T3535] loop2: detected capacity change from 0 to 256 [ 39.981444][ T3535] FAT-fs (loop2): Directory bread(block 64) failed [ 40.015451][ T3535] FAT-fs (loop2): Directory bread(block 65) failed [ 40.029640][ T3535] FAT-fs (loop2): Directory bread(block 66) failed [ 40.041578][ T3535] FAT-fs (loop2): Directory bread(block 67) failed [ 40.048955][ T3535] FAT-fs (loop2): Directory bread(block 68) failed [ 40.061734][ T3535] FAT-fs (loop2): Directory bread(block 69) failed [ 40.077961][ T3535] FAT-fs (loop2): Directory bread(block 70) failed [ 40.085166][ T3535] FAT-fs (loop2): Directory bread(block 71) failed [ 40.094878][ T3535] FAT-fs (loop2): Directory bread(block 72) failed [ 40.103691][ T3547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3547 comm=syz.3.15 [ 40.121142][ T3535] FAT-fs (loop2): Directory bread(block 73) failed [ 40.132142][ T3547] loop3: detected capacity change from 0 to 512 [ 40.153215][ T3547] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 40.182449][ T3547] EXT4-fs (loop3): mount failed [ 40.225967][ T3535] syz.2.12: attempt to access beyond end of device [ 40.225967][ T3535] loop2: rw=8388608, sector=1816, nr_sectors = 4 limit=256 [ 40.249039][ T3535] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 326) [ 40.257685][ T3535] FAT-fs (loop2): Filesystem has been set read-only [ 40.321323][ T3535] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 326) [ 40.356910][ T3564] Unsupported ieee802154 address type: 0 [ 40.526883][ T3579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 40.592095][ T3582] loop4: detected capacity change from 0 to 256 [ 40.628003][ T3582] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 40.637353][ T3582] FAT-fs (loop4): Filesystem has been set read-only [ 40.666651][ T3586] loop2: detected capacity change from 0 to 1024 [ 40.684745][ T3582] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 40.701207][ T3588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 40.712916][ T3586] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 40.722581][ T3586] System zones: 0-1, 3-36 [ 40.728259][ T3582] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 40.738672][ T3586] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.24: bad orphan inode 134217728 [ 40.755435][ T3582] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 40.775103][ T3586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.790723][ T3588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 40.790787][ T3582] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 40.885112][ T3588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 40.895242][ T3582] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 40.928429][ T3582] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 40.936179][ T3598] 8021q: VLANs not supported on vxcan1 [ 40.954202][ T3582] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 40.965281][ T3598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.972791][ T3582] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 40.973147][ T3598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.989634][ T3582] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.000909][ T3598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.008660][ T3598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.273060][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.558524][ T3614] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.578628][ T3618] Unsupported ieee802154 address type: 0 [ 41.591178][ T3614] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 41.644540][ T3621] loop3: detected capacity change from 0 to 1024 [ 41.651633][ T3621] EXT4-fs: Ignoring removed nobh option [ 41.657658][ T3621] EXT4-fs: Ignoring removed nobh option [ 41.663899][ T3621] EXT4-fs: inline encryption not supported [ 41.716063][ T3621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.757830][ T3627] netlink: 'syz.4.37': attribute type 1 has an invalid length. [ 41.765771][ T3627] netlink: 224 bytes leftover after parsing attributes in process `syz.4.37'. [ 41.799981][ T3621] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 41.828757][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.848591][ T3629] vxcan3: entered promiscuous mode [ 41.854504][ T3629] vxcan3: entered allmulticast mode [ 41.984631][ T3639] process 'syz.1.40' launched './file0' with NULL argv: empty string added [ 42.001860][ C1] hrtimer: interrupt took 28390 ns [ 42.044446][ T3639] Invalid argument reading file caps for ./file0 [ 42.069680][ T3647] capability: warning: `syz.2.43' uses deprecated v2 capabilities in a way that may be insecure [ 42.082083][ T3647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'. [ 42.150926][ T3647] loop2: detected capacity change from 0 to 128 [ 42.158843][ T3647] vfat: Unknown parameter '· T´@ñÄ0‚6"¾Ç\´' [ 42.224771][ T3651] capability: warning: `syz.1.44' uses 32-bit capabilities (legacy support in use) [ 42.260997][ T3653] Unsupported ieee802154 address type: 0 [ 42.542252][ T3636] Set syz1 is full, maxelem 65536 reached [ 42.994594][ T3682] loop3: detected capacity change from 0 to 1024 [ 43.002996][ T3682] EXT4-fs: Ignoring removed bh option [ 43.047468][ T3682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.060635][ T3682] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.160705][ T3688] EXT4-fs: Ignoring removed bh option [ 43.225081][ T3688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.372594][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.639998][ T3696] netlink: 'syz.2.62': attribute type 10 has an invalid length. [ 43.649664][ T3713] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.657413][ T3713] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.684718][ T3305] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 43.690773][ T3305] loop0: p1 start 460800 is beyond EOD, truncated [ 43.698105][ T3305] loop0: p2 size 83886080 extends beyond EOD, truncated [ 43.710122][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.725900][ T3305] loop0: p5 start 460800 is beyond EOD, truncated [ 43.732376][ T3305] loop0: p6 size 83886080 extends beyond EOD, truncated [ 43.771260][ T3691] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 43.785864][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 43.785882][ T29] audit: type=1400 audit(1769030959.239:368): avc: denied { name_connect } for pid=3719 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 43.824523][ T3691] loop0: p1 start 460800 is beyond EOD, truncated [ 43.831062][ T3691] loop0: p2 size 83886080 extends beyond EOD, truncated [ 43.833648][ T3722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=3722 comm=syz.1.70 [ 43.856512][ T3691] loop0: p5 start 460800 is beyond EOD, truncated [ 43.863114][ T3691] loop0: p6 size 83886080 extends beyond EOD, truncated [ 43.926509][ T3717] netlink: 'syz.1.70': attribute type 10 has an invalid length. [ 43.930136][ T3724] syz.3.69: attempt to access beyond end of device [ 43.930136][ T3724] loop3: rw=2049, sector=153, nr_sectors = 424 limit=128 [ 43.950633][ T3724] syz.3.69: attempt to access beyond end of device [ 43.950633][ T3724] loop3: rw=2049, sector=585, nr_sectors = 8 limit=128 [ 43.964607][ T3724] syz.3.69: attempt to access beyond end of device [ 43.964607][ T3724] loop3: rw=2049, sector=601, nr_sectors = 8 limit=128 [ 43.978610][ T3724] syz.3.69: attempt to access beyond end of device [ 43.978610][ T3724] loop3: rw=2049, sector=617, nr_sectors = 8 limit=128 [ 43.997478][ T3729] EXT4-fs: Ignoring removed bh option [ 44.019214][ T3724] syz.3.69: attempt to access beyond end of device [ 44.019214][ T3724] loop3: rw=2049, sector=633, nr_sectors = 8 limit=128 [ 44.032681][ T3724] syz.3.69: attempt to access beyond end of device [ 44.032681][ T3724] loop3: rw=2049, sector=649, nr_sectors = 8 limit=128 [ 44.057894][ T3724] syz.3.69: attempt to access beyond end of device [ 44.057894][ T3724] loop3: rw=2049, sector=665, nr_sectors = 8 limit=128 [ 44.090405][ T3729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.091107][ T3736] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.116120][ T3724] syz.3.69: attempt to access beyond end of device [ 44.116120][ T3724] loop3: rw=2049, sector=681, nr_sectors = 8 limit=128 [ 44.149793][ T29] audit: type=1326 audit(1769030959.599:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b90dacb9 code=0x7ffc0000 [ 44.176041][ T3724] syz.3.69: attempt to access beyond end of device [ 44.176041][ T3724] loop3: rw=2049, sector=697, nr_sectors = 8 limit=128 [ 44.250264][ T29] audit: type=1326 audit(1769030959.599:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b90dacb9 code=0x7ffc0000 [ 44.273560][ T29] audit: type=1326 audit(1769030959.599:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b90dacb9 code=0x7ffc0000 [ 44.297795][ T29] audit: type=1326 audit(1769030959.599:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5b90dacb9 code=0x7ffc0000 [ 44.321366][ T29] audit: type=1326 audit(1769030959.659:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b90dacb9 code=0x7ffc0000 [ 44.345361][ T29] audit: type=1326 audit(1769030959.659:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe5b90daa22 code=0x7ffc0000 [ 44.369474][ T29] audit: type=1326 audit(1769030959.659:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe5b90daab7 code=0x7ffc0000 [ 44.373740][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 44.393823][ T29] audit: type=1326 audit(1769030959.659:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe5b9097a51 code=0x7ffc0000 [ 44.405899][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 44.426185][ T29] audit: type=1326 audit(1769030959.659:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe5b90dbac9 code=0x7ffc0000 [ 44.463234][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.473555][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 44.486376][ T3728] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 44.498605][ T3743] netlink: 'syz.0.77': attribute type 32 has an invalid length. [ 44.506646][ T3743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 44.523191][ T3743] bond1: Setting coupled_control to off (0) [ 44.532392][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.541922][ T3743] set_capacity_and_notify: 4 callbacks suppressed [ 44.541941][ T3743] loop0: detected capacity change from 0 to 1024 [ 44.559163][ T3743] EXT4-fs: Ignoring removed nobh option [ 44.564963][ T3743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.582111][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.608474][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 44.619653][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.657845][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 44.669126][ T3749] loop3: detected capacity change from 0 to 1024 [ 44.683538][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 44.704809][ T3749] EXT4-fs: Ignoring removed nobh option [ 44.714569][ T3749] EXT4-fs: Ignoring removed nobh option [ 44.720555][ T3749] EXT4-fs: inline encryption not supported [ 44.745865][ T3749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.754005][ T3751] loop4: detected capacity change from 0 to 8192 [ 44.806938][ T3749] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 44.828910][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.866001][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.904401][ T3766] loop1: detected capacity change from 0 to 1024 [ 44.952298][ T3766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.976454][ T3776] loop3: detected capacity change from 0 to 1024 [ 44.983331][ T3776] EXT4-fs: Ignoring removed oldalloc option [ 44.989486][ T3776] EXT4-fs: Ignoring removed bh option [ 44.995418][ T3776] EXT4-fs: Mount option(s) incompatible with ext3 [ 45.094360][ T3781] loop4: detected capacity change from 0 to 128 [ 45.196931][ T3789] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.85: inode #1869229157: comm syz.1.85: iget: illegal inode # [ 45.228116][ T3789] EXT4-fs (loop1): Remounting filesystem read-only [ 45.236850][ T3789] EXT4-fs warning (device loop1): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.1.85: cleanup dec ref error -30 [ 45.292216][ T3789] EXT4-fs warning (device loop1): ext4_xattr_block_set:2200: inode #19: comm syz.1.85: dec ref error=-30 [ 45.333211][ T3795] loop0: detected capacity change from 0 to 1024 [ 45.337738][ T3781] bio_check_eod: 93 callbacks suppressed [ 45.337858][ T3781] syz.4.84: attempt to access beyond end of device [ 45.337858][ T3781] loop4: rw=2049, sector=153, nr_sectors = 424 limit=128 [ 45.361560][ T3781] syz.4.84: attempt to access beyond end of device [ 45.361560][ T3781] loop4: rw=2049, sector=585, nr_sectors = 8 limit=128 [ 45.370292][ T3795] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.387555][ T3781] syz.4.84: attempt to access beyond end of device [ 45.387555][ T3781] loop4: rw=2049, sector=601, nr_sectors = 8 limit=128 [ 45.422507][ T3781] syz.4.84: attempt to access beyond end of device [ 45.422507][ T3781] loop4: rw=2049, sector=617, nr_sectors = 8 limit=128 [ 45.436597][ T3781] syz.4.84: attempt to access beyond end of device [ 45.436597][ T3781] loop4: rw=2049, sector=633, nr_sectors = 8 limit=128 [ 45.450645][ T3781] syz.4.84: attempt to access beyond end of device [ 45.450645][ T3781] loop4: rw=2049, sector=649, nr_sectors = 8 limit=128 [ 45.464686][ T3781] syz.4.84: attempt to access beyond end of device [ 45.464686][ T3781] loop4: rw=2049, sector=665, nr_sectors = 8 limit=128 [ 45.481505][ T3781] syz.4.84: attempt to access beyond end of device [ 45.481505][ T3781] loop4: rw=2049, sector=681, nr_sectors = 8 limit=128 [ 45.495672][ T3781] syz.4.84: attempt to access beyond end of device [ 45.495672][ T3781] loop4: rw=2049, sector=697, nr_sectors = 8 limit=128 [ 45.534515][ T3781] syz.4.84: attempt to access beyond end of device [ 45.534515][ T3781] loop4: rw=2049, sector=713, nr_sectors = 8 limit=128 [ 45.550077][ T3795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.568896][ T3795] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.583091][ T3795] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 45.583091][ T3795] program syz.0.91 not setting count and/or reply_len properly [ 45.604342][ T3795] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.91: lblock 3 mapped to illegal pblock 3 (length 3) [ 45.619797][ T3795] EXT4-fs (loop0): Remounting filesystem read-only [ 45.725429][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.760269][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.781234][ T3805] loop2: detected capacity change from 0 to 128 [ 45.876342][ T3805] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.910426][ T3807] 9p: Bad value for 'rfdno' [ 45.925778][ T3805] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.990752][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.013414][ T3818] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 46.020040][ T3818] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 46.027914][ T3818] vhci_hcd vhci_hcd.0: Device attached [ 46.056824][ T3819] vhci_hcd: connection closed [ 46.057044][ T71] vhci_hcd vhci_hcd.1: stop threads [ 46.067078][ T71] vhci_hcd vhci_hcd.1: release socket [ 46.072564][ T71] vhci_hcd vhci_hcd.1: disconnect device [ 46.579171][ T3838] program syz.1.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.928236][ T3857] loop3: detected capacity change from 0 to 1024 [ 46.935307][ T3857] EXT4-fs: Ignoring removed bh option [ 46.954314][ T3857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.972455][ T3862] mmap: syz.4.113 (3862) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.070955][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.117889][ T3869] netlink: 'syz.4.115': attribute type 1 has an invalid length. [ 47.170788][ T3888] loop2: detected capacity change from 0 to 1024 [ 47.188443][ T3888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.202377][ T3868] mmap: syz.4.115 (3868): VmData 16883712 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 47.217332][ T3888] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 47.340006][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.504203][ T3911] FAT-fs (loop1): bogus number of reserved sectors [ 47.510949][ T3911] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 47.520806][ T3911] FAT-fs (loop1): Can't find a valid FAT filesystem [ 47.530187][ T3912] FAT-fs (loop2): bogus number of FAT sectors [ 47.536542][ T3912] FAT-fs (loop2): Can't find a valid FAT filesystem [ 47.563671][ T3912] Invalid ELF header magic: != ELF [ 47.594775][ T3914] EXT4-fs: Ignoring removed bh option [ 47.616842][ T3914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.677296][ T3920] iso9660: Bad value for 'uid' [ 47.682130][ T3920] iso9660: Bad value for 'uid' [ 47.716985][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.739355][ T3923] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.790249][ T3925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 47.810439][ T3925] System zones: 1-12 [ 47.818458][ T3927] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 47.820312][ T3925] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.131: corrupted in-inode xattr: e_value size too large [ 47.826611][ T3927] FAT-fs (loop2): Filesystem has been set read-only [ 47.826711][ T3927] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 47.843135][ T3925] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.131: couldn't read orphan inode 15 (err -117) [ 47.868412][ T3925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.892862][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.974617][ T3922] Process accounting resumed [ 47.979366][ T3922] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 47.987462][ T3922] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 48.072402][ T3939] FAT-fs (loop3): Directory bread(block 32) failed [ 48.079390][ T3939] FAT-fs (loop3): Directory bread(block 33) failed [ 48.086199][ T3939] FAT-fs (loop3): Directory bread(block 34) failed [ 48.093044][ T3939] FAT-fs (loop3): Directory bread(block 35) failed [ 48.100234][ T3939] FAT-fs (loop3): Directory bread(block 36) failed [ 48.107097][ T3939] FAT-fs (loop3): Directory bread(block 37) failed [ 48.113962][ T3939] FAT-fs (loop3): Directory bread(block 38) failed [ 48.114000][ T1040] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 48.121506][ T3939] FAT-fs (loop3): Directory bread(block 39) failed [ 48.135575][ T3939] FAT-fs (loop3): Directory bread(block 40) failed [ 48.142122][ T3939] FAT-fs (loop3): Directory bread(block 41) failed [ 48.164170][ T3939] FAT-fs (loop3): Filesystem has been set read-only [ 48.171147][ T3939] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 48.437112][ T3951] EXT4-fs: Ignoring removed bh option [ 48.485226][ T3951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.562459][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.774475][ T3965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'. [ 48.831178][ T3968] syz.3.145 uses obsolete (PF_INET,SOCK_PACKET) [ 48.840930][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 48.840948][ T29] audit: type=1400 audit(1769030964.289:648): avc: denied { getopt } for pid=3964 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.918147][ T29] audit: type=1400 audit(1769030964.369:649): avc: denied { ioctl } for pid=3964 comm="syz.0.144" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.144555][ T29] audit: type=1400 audit(1769030964.599:650): avc: denied { write } for pid=3975 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.171595][ T3953] syz.2.136 (3953) used greatest stack depth: 9832 bytes left [ 49.195811][ T3945] syz.2.136 (3945) used greatest stack depth: 7384 bytes left [ 49.247718][ T29] audit: type=1400 audit(1769030964.699:651): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.288609][ T29] audit: type=1326 audit(1769030964.739:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4794facb9 code=0x7ffc0000 [ 49.312551][ T29] audit: type=1326 audit(1769030964.739:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4794facb9 code=0x7ffc0000 [ 49.337953][ T29] audit: type=1326 audit(1769030964.779:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe4794facb9 code=0x7ffc0000 [ 49.361156][ T29] audit: type=1326 audit(1769030964.779:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4794facb9 code=0x7ffc0000 [ 49.384624][ T29] audit: type=1326 audit(1769030964.779:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4794facb9 code=0x7ffc0000 [ 49.408858][ T29] audit: type=1326 audit(1769030964.779:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe4794facb9 code=0x7ffc0000 [ 49.503073][ T3988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.558851][ T3988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.579053][ T3991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.154'. [ 49.607264][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 49.619468][ T3988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.637613][ T3992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.653943][ T3992] set_capacity_and_notify: 9 callbacks suppressed [ 49.653961][ T3992] loop2: detected capacity change from 0 to 512 [ 49.677558][ T3988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.764699][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.789561][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.810844][ T4012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 49.838580][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.861609][ T4016] loop1: detected capacity change from 0 to 1024 [ 49.876735][ T4016] EXT4-fs: Ignoring removed bh option [ 49.913083][ T4018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 49.922816][ T4016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.954979][ T4018] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 50.067954][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.156893][ T4036] FAULT_INJECTION: forcing a failure. [ 50.156893][ T4036] name failslab, interval 1, probability 0, space 0, times 1 [ 50.170064][ T4036] CPU: 0 UID: 0 PID: 4036 Comm: syz.3.169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.170100][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.170160][ T4036] Call Trace: [ 50.170173][ T4036] [ 50.170183][ T4036] __dump_stack+0x1d/0x30 [ 50.170218][ T4036] dump_stack_lvl+0x95/0xd0 [ 50.170248][ T4036] dump_stack+0x15/0x1b [ 50.170274][ T4036] should_fail_ex+0x263/0x280 [ 50.170306][ T4036] should_failslab+0x8c/0xb0 [ 50.170334][ T4036] __kmalloc_cache_noprof+0x64/0x4a0 [ 50.170364][ T4036] ? v9fs_init_fs_context+0x34/0x220 [ 50.170387][ T4036] v9fs_init_fs_context+0x34/0x220 [ 50.170465][ T4036] alloc_fs_context+0x4a3/0x590 [ 50.170495][ T4036] fs_context_for_mount+0x22/0x30 [ 50.170520][ T4036] do_new_mount+0xea/0x700 [ 50.170625][ T4036] ? security_capable+0x7b/0x90 [ 50.170678][ T4036] path_mount+0x4c0/0xb90 [ 50.170794][ T4036] ? user_path_at+0xbf/0x130 [ 50.170830][ T4036] __se_sys_mount+0x28c/0x2e0 [ 50.170850][ T4036] ? fput+0x8f/0xc0 [ 50.170884][ T4036] __x64_sys_mount+0x67/0x80 [ 50.170963][ T4036] x64_sys_call+0x2cca/0x3000 [ 50.170989][ T4036] do_syscall_64+0xc0/0x2a0 [ 50.171020][ T4036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.171047][ T4036] RIP: 0033:0x7f7332f1acb9 [ 50.171146][ T4036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.171169][ T4036] RSP: 002b:00007f7331977028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.171267][ T4036] RAX: ffffffffffffffda RBX: 00007f7333195fa0 RCX: 00007f7332f1acb9 [ 50.171286][ T4036] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 50.171303][ T4036] RBP: 00007f7331977090 R08: 0000200000000240 R09: 0000000000000000 [ 50.171320][ T4036] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 50.171357][ T4036] R13: 00007f7333196038 R14: 00007f7333195fa0 R15: 00007ffc9e9dec58 [ 50.171381][ T4036] [ 50.191444][ T4038] loop0: detected capacity change from 0 to 512 [ 50.401804][ T4038] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 50.415195][ T4038] EXT4-fs (loop0): invalid journal inode [ 50.440906][ T4038] EXT4-fs (loop0): can't get journal size [ 50.454188][ T4038] EXT4-fs (loop0): 1 truncate cleaned up [ 50.474175][ T4038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.520931][ T4053] loop3: detected capacity change from 0 to 1024 [ 50.529228][ T4053] EXT4-fs: Ignoring removed bh option [ 50.560317][ T4053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.608134][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.616901][ T4062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.180'. [ 50.626464][ T4062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.180'. [ 50.640615][ T4062] loop4: detected capacity change from 0 to 128 [ 50.682957][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.753398][ T4073] rdma_op ffff88811ad32580 conn xmit_rdma 0000000000000000 [ 50.795175][ T4078] netlink: 148 bytes leftover after parsing attributes in process `syz.3.185'. [ 50.805066][ T4078] netlink: 36 bytes leftover after parsing attributes in process `syz.3.185'. [ 51.447349][ T3989] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.521854][ T3989] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.576793][ T3989] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.598806][ T4093] loop0: detected capacity change from 0 to 512 [ 51.669416][ T4102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 51.684736][ T4100] loop4: detected capacity change from 0 to 1024 [ 51.694067][ T4100] EXT4-fs: Ignoring removed bh option [ 51.741410][ T4100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.773072][ T4110] loop3: detected capacity change from 0 to 1024 [ 51.800911][ T4110] EXT4-fs: Ignoring removed nobh option [ 51.806846][ T4110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.825450][ T4112] loop0: detected capacity change from 0 to 512 [ 51.837335][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.847858][ T4110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.862346][ T4112] EXT4-fs: Ignoring removed orlov option [ 51.868124][ T4112] EXT4-fs: Ignoring removed i_version option [ 51.899522][ T4112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.917710][ T4116] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 51.933839][ T4116] Cannot find add_set index 0 as target [ 51.942139][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.943767][ T4116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.963440][ T4116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.974376][ T4112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.010635][ T4112] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.088747][ T4112] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.196: corrupted inode contents [ 52.106447][ T4122] loop3: detected capacity change from 0 to 2048 [ 52.113753][ T4122] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.135451][ T4112] EXT4-fs (loop0): Remounting filesystem read-only [ 52.147440][ T4122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.180231][ T4122] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.250552][ T4126] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.198: bg 0: block 345: padding at end of block bitmap is not set [ 52.265760][ T4126] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 522 with error 117 [ 52.279978][ T4126] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.279978][ T4126] [ 52.405586][ T4121] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.447788][ T149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.529163][ T149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.609569][ T149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.649315][ T149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.679825][ T4128] chnl_net:caif_netlink_parms(): no params data found [ 52.792586][ T149] bridge_slave_1: left allmulticast mode [ 52.798391][ T149] bridge_slave_1: left promiscuous mode [ 52.804303][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.818437][ T149] bridge_slave_0: left allmulticast mode [ 52.824184][ T149] bridge_slave_0: left promiscuous mode [ 52.830293][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.873015][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 538 with max blocks 1 with error 28 [ 52.885957][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.885957][ T31] [ 52.896078][ T31] EXT4-fs (loop3): Total free blocks count 0 [ 52.902137][ T31] EXT4-fs (loop3): Free/Dirty block details [ 52.908153][ T31] EXT4-fs (loop3): free_blocks=0 [ 52.913371][ T31] EXT4-fs (loop3): dirty_blocks=16 [ 52.920499][ T31] EXT4-fs (loop3): Block reservation details [ 53.027007][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.044659][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.055759][ T149] bond0 (unregistering): Released all slaves [ 53.063899][ T149] bond1 (unregistering): Released all slaves [ 53.072931][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.080413][ T4128] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.088297][ T4128] bridge_slave_0: entered allmulticast mode [ 53.095517][ T4128] bridge_slave_0: entered promiscuous mode [ 53.106128][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.113772][ T4128] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.121571][ T4128] bridge_slave_1: entered allmulticast mode [ 53.128526][ T4128] bridge_slave_1: entered promiscuous mode [ 53.150201][ T4164] tap0: tun_chr_ioctl cmd 1074025675 [ 53.155916][ T4164] tap0: persist disabled [ 53.172783][ T149] hsr_slave_0: left promiscuous mode [ 53.179599][ T149] hsr_slave_1: left promiscuous mode [ 53.185833][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.193345][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.204068][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.211505][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.252771][ T4173] EXT4-fs: Ignoring removed bh option [ 53.262551][ T149] veth1_macvtap: left promiscuous mode [ 53.268698][ T149] veth0_macvtap: left promiscuous mode [ 53.279485][ T149] veth1_vlan: left promiscuous mode [ 53.286095][ T149] veth0_vlan: left promiscuous mode [ 53.286788][ T4173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.314488][ T4175] EXT4-fs: Ignoring removed nobh option [ 53.320508][ T4175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.337739][ T4175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.372696][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.431458][ T149] team0 (unregistering): Port device team_slave_1 removed [ 53.445327][ T149] team0 (unregistering): Port device team_slave_0 removed [ 53.486705][ T4128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.498899][ T4128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.525632][ T4128] team0: Port device team_slave_0 added [ 53.532598][ T4128] team0: Port device team_slave_1 added [ 53.591861][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.608222][ T4184] FAULT_INJECTION: forcing a failure. [ 53.608222][ T4184] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.622148][ T4184] CPU: 1 UID: 0 PID: 4184 Comm: syz.3.210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.622186][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.622253][ T4184] Call Trace: [ 53.622262][ T4184] [ 53.622273][ T4184] __dump_stack+0x1d/0x30 [ 53.622308][ T4184] dump_stack_lvl+0x95/0xd0 [ 53.622336][ T4184] dump_stack+0x15/0x1b [ 53.622380][ T4184] should_fail_ex+0x263/0x280 [ 53.622408][ T4184] should_fail+0xb/0x20 [ 53.622431][ T4184] should_fail_usercopy+0x1a/0x20 [ 53.622569][ T4184] _copy_from_iter+0xcf/0xea0 [ 53.622612][ T4184] ? __alloc_skb+0x397/0x4b0 [ 53.622637][ T4184] ? __alloc_skb+0x219/0x4b0 [ 53.622685][ T4184] netlink_sendmsg+0x4ae/0x6f0 [ 53.622736][ T4184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.622771][ T4184] __sock_sendmsg+0x145/0x170 [ 53.622811][ T4184] ____sys_sendmsg+0x31e/0x4a0 [ 53.622864][ T4184] ___sys_sendmsg+0x195/0x1e0 [ 53.622901][ T4184] __x64_sys_sendmsg+0xd4/0x160 [ 53.622932][ T4184] x64_sys_call+0x17ba/0x3000 [ 53.622986][ T4184] do_syscall_64+0xc0/0x2a0 [ 53.623088][ T4184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.623111][ T4184] RIP: 0033:0x7f7332f1acb9 [ 53.623130][ T4184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.623154][ T4184] RSP: 002b:00007f7331977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.623245][ T4184] RAX: ffffffffffffffda RBX: 00007f7333195fa0 RCX: 00007f7332f1acb9 [ 53.623267][ T4184] RDX: 0000000020004814 RSI: 0000200000000000 RDI: 0000000000000007 [ 53.623281][ T4184] RBP: 00007f7331977090 R08: 0000000000000000 R09: 0000000000000000 [ 53.623375][ T4184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.623391][ T4184] R13: 00007f7333196038 R14: 00007f7333195fa0 R15: 00007ffc9e9dec58 [ 53.623421][ T4184] [ 53.626556][ T4128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.660123][ T4197] 9p: Bad value for 'wfdno' [ 53.661494][ T4128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.856410][ T4128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.927395][ T71] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.935751][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 53.935769][ T29] audit: type=1400 audit(1769031224.375:1030): avc: denied { setopt } for pid=4196 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.940973][ T4128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.969171][ T4128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.995544][ T4128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.030477][ T71] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.084013][ T71] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.092990][ T4219] EXT4-fs: Ignoring removed orlov option [ 54.096154][ T71] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.144693][ T4219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.162612][ T4128] hsr_slave_0: entered promiscuous mode [ 54.169490][ T4128] hsr_slave_1: entered promiscuous mode [ 54.177096][ T4128] debugfs: 'hsr0' already exists in 'hsr' [ 54.183462][ T4128] Cannot create hsr debugfs directory [ 54.219309][ T29] audit: type=1400 audit(1769031224.665:1031): avc: denied { map } for pid=4217 comm="syz.4.216" path="/50/file1/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.289970][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.362840][ T29] audit: type=1326 audit(1769031224.805:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7332f1acb9 code=0x7ffc0000 [ 54.388716][ T4241] EXT4-fs: Ignoring removed nobh option [ 54.394400][ T4241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.409197][ T29] audit: type=1326 audit(1769031224.815:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7332f1acb9 code=0x7ffc0000 [ 54.432767][ T29] audit: type=1326 audit(1769031224.835:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7332f1acb9 code=0x7ffc0000 [ 54.456502][ T29] audit: type=1326 audit(1769031224.835:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7332f1acb9 code=0x7ffc0000 [ 54.479842][ T29] audit: type=1326 audit(1769031224.845:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7332f1acb9 code=0x7ffc0000 [ 54.503364][ T29] audit: type=1326 audit(1769031224.845:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7332f1acb9 code=0x7ffc0000 [ 54.527270][ T29] audit: type=1326 audit(1769031224.845:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7332f1acb9 code=0x7ffc0000 [ 54.551508][ T29] audit: type=1326 audit(1769031224.855:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7332f1acb9 code=0x7ffc0000 [ 54.584662][ T4241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.612026][ T4256] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.634572][ T4252] iso9660: Unknown parameter '' [ 54.658608][ T4256] __nla_validate_parse: 1 callbacks suppressed [ 54.658628][ T4256] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.221'. [ 54.677043][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.679945][ T4128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.700120][ T4128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.743049][ T4128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.760232][ T4260] set_capacity_and_notify: 6 callbacks suppressed [ 54.760253][ T4260] loop4: detected capacity change from 0 to 512 [ 54.786295][ T4260] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.799617][ T4128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.827369][ T4260] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.222: inode #0: comm syz.4.222: iget: illegal inode # [ 54.855748][ T4260] EXT4-fs (loop4): Remounting filesystem read-only [ 54.862396][ T4260] EXT4-fs (loop4): get orphan inode failed [ 54.876531][ T4260] EXT4-fs (loop4): mount failed [ 54.923709][ T4260] netlink: 264 bytes leftover after parsing attributes in process `syz.4.222'. [ 54.971035][ T4287] loop3: detected capacity change from 0 to 512 [ 55.010878][ T4287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.032809][ T4128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.053058][ T4287] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.225: invalid indirect mapped block 4294967295 (level 1) [ 55.067457][ T4128] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.088925][ T4287] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.225: invalid indirect mapped block 4294967295 (level 1) [ 55.093290][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.105727][ T4287] EXT4-fs (loop3): 2 truncates cleaned up [ 55.111734][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.119374][ T4287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.143114][ T4294] ieee802154 phy1 wpan1: encryption failed: -22 [ 55.165827][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.172943][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.202955][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 55.211855][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 55.253365][ T4300] loop1: detected capacity change from 0 to 512 [ 55.263271][ T4300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.272073][ T4300] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.284320][ T4302] FAULT_INJECTION: forcing a failure. [ 55.284320][ T4302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.297949][ T4302] CPU: 1 UID: 0 PID: 4302 Comm: syz.2.229 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.297985][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.298000][ T4302] Call Trace: [ 55.298010][ T4302] [ 55.298019][ T4302] __dump_stack+0x1d/0x30 [ 55.298102][ T4302] dump_stack_lvl+0x95/0xd0 [ 55.298125][ T4302] dump_stack+0x15/0x1b [ 55.298232][ T4302] should_fail_ex+0x263/0x280 [ 55.298262][ T4302] should_fail+0xb/0x20 [ 55.298299][ T4302] should_fail_usercopy+0x1a/0x20 [ 55.298324][ T4302] _copy_from_user+0x1c/0xb0 [ 55.298470][ T4302] ___sys_sendmsg+0xc1/0x1e0 [ 55.298520][ T4302] __x64_sys_sendmsg+0xd4/0x160 [ 55.298556][ T4302] x64_sys_call+0x17ba/0x3000 [ 55.298583][ T4302] do_syscall_64+0xc0/0x2a0 [ 55.298642][ T4302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.298714][ T4302] RIP: 0033:0x7fe4794facb9 [ 55.298735][ T4302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.298758][ T4302] RSP: 002b:00007fe477f57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.298784][ T4302] RAX: ffffffffffffffda RBX: 00007fe479775fa0 RCX: 00007fe4794facb9 [ 55.298802][ T4302] RDX: 000000000000a4ff RSI: 0000200000000200 RDI: 0000000000000004 [ 55.298826][ T4302] RBP: 00007fe477f57090 R08: 0000000000000000 R09: 0000000000000000 [ 55.298842][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.298926][ T4302] R13: 00007fe479776038 R14: 00007fe479775fa0 R15: 00007ffd41b1e548 [ 55.298953][ T4302] [ 55.505142][ T4300] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.228: Allocating blocks 41-42 which overlap fs metadata [ 55.524221][ T4300] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.228: Allocating blocks 41-42 which overlap fs metadata [ 55.548942][ T4310] loop4: detected capacity change from 0 to 1024 [ 55.550953][ T4128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.562978][ T4300] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.228: Failed to acquire dquot type 1 [ 55.574999][ T4310] EXT4-fs: Ignoring removed nobh option [ 55.581278][ T4310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.583480][ T4300] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 55.609064][ T4300] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.228: corrupted inode contents [ 55.623256][ T4300] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.228: mark_inode_dirty error [ 55.638079][ T4300] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.228: corrupted inode contents [ 55.650800][ T4300] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.228: mark_inode_dirty error [ 55.664105][ T4310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.674951][ T4300] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.228: corrupted inode contents [ 55.692876][ T4300] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 55.702425][ T4300] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.228: corrupted inode contents [ 55.715044][ T4300] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.228: mark_inode_dirty error [ 55.729681][ T4300] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 55.739445][ T4300] EXT4-fs (loop1): 1 truncate cleaned up [ 55.749792][ T4300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.770285][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.818024][ T4328] ext4: Unknown parameter '' [ 55.963084][ T4344] loop4: detected capacity change from 0 to 512 [ 55.979759][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.001167][ T4128] veth0_vlan: entered promiscuous mode [ 56.021464][ T4344] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 56.034222][ T4128] veth1_vlan: entered promiscuous mode [ 56.039970][ T4349] loop1: detected capacity change from 0 to 512 [ 56.060077][ T4128] veth0_macvtap: entered promiscuous mode [ 56.072064][ T4344] loop4: detected capacity change from 0 to 764 [ 56.080131][ T4344] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 56.094905][ T4128] veth1_macvtap: entered promiscuous mode [ 56.110792][ T4128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.126401][ T4128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.143294][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.157627][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.172029][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.188127][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.261170][ T4359] loop5: detected capacity change from 0 to 1024 [ 56.268801][ T4359] EXT4-fs: Ignoring removed bh option [ 56.286829][ T4359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.363777][ T4108] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 56.379025][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.477853][ T4365] loop5: detected capacity change from 0 to 512 [ 56.485396][ T4365] EXT4-fs: inline encryption not supported [ 56.497408][ T4365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.547061][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.573226][ T4372] loop5: detected capacity change from 0 to 1024 [ 56.584720][ T4372] EXT4-fs: Ignoring removed nobh option [ 56.590392][ T4372] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.606359][ T4372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.849838][ T4393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.249'. [ 56.920951][ T4399] EXT4-fs: Ignoring removed bh option [ 57.163356][ T4407] EXT4-fs: Ignoring removed orlov option [ 57.169137][ T4407] EXT4-fs: Ignoring removed i_version option [ 57.183679][ T4407] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.207269][ T4407] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.222957][ T4407] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.254: corrupted inode contents [ 57.235693][ T4407] EXT4-fs (loop5): Remounting filesystem read-only [ 57.251456][ T4403] debugfs: Bad value for 'uid' [ 57.256526][ T4403] debugfs: Bad value for 'uid' [ 57.262498][ T4407] xt_connbytes: Forcing CT accounting to be enabled [ 57.269516][ T4407] xt_NFQUEUE: number of total queues is 0 [ 57.281440][ T4403] bond2: down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 57.290903][ T4403] bond2: peer notification delay (3) is not a multiple of miimon (7), value rounded to 0 ms [ 57.302448][ T4403] bond2: entered allmulticast mode [ 57.363511][ T4414] FAULT_INJECTION: forcing a failure. [ 57.363511][ T4414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.376821][ T4414] CPU: 0 UID: 0 PID: 4414 Comm: syz.5.255 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.376851][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.376864][ T4414] Call Trace: [ 57.376872][ T4414] [ 57.376882][ T4414] __dump_stack+0x1d/0x30 [ 57.376932][ T4414] dump_stack_lvl+0x95/0xd0 [ 57.376955][ T4414] dump_stack+0x15/0x1b [ 57.376980][ T4414] should_fail_ex+0x263/0x280 [ 57.377008][ T4414] should_fail+0xb/0x20 [ 57.377085][ T4414] should_fail_usercopy+0x1a/0x20 [ 57.377172][ T4414] _copy_to_user+0x20/0xa0 [ 57.377207][ T4414] copy_siginfo_to_user+0x22/0xb0 [ 57.377307][ T4414] x64_setup_rt_frame+0x2b4/0x4e0 [ 57.377334][ T4414] arch_do_signal_or_restart+0x24b/0x450 [ 57.377387][ T4414] exit_to_user_mode_loop+0x6a/0x6f0 [ 57.377420][ T4414] ? __x64_sys_futex_waitv+0x67/0x80 [ 57.377497][ T4414] do_syscall_64+0x1d3/0x2a0 [ 57.377523][ T4414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.377598][ T4414] RIP: 0033:0x7fa8b9c5acb7 [ 57.377614][ T4414] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 57.377630][ T4414] RSP: 002b:00007fa8b86b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 57.377647][ T4414] RAX: 00000000000001c1 RBX: 00007fa8b9ed5fa0 RCX: 00007fa8b9c5acb9 [ 57.377659][ T4414] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 57.377746][ T4414] RBP: 00007fa8b86b7090 R08: 0000000000000001 R09: 0000000000000000 [ 57.377757][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.377803][ T4414] R13: 00007fa8b9ed6038 R14: 00007fa8b9ed5fa0 R15: 00007ffde0c90c48 [ 57.377827][ T4414] [ 57.578233][ T4416] ieee802154 phy1 wpan1: encryption failed: -22 [ 57.689799][ T4429] team_slave_0: entered promiscuous mode [ 57.695656][ T4429] team_slave_1: entered promiscuous mode [ 57.701940][ T4431] EXT4-fs: Ignoring removed bh option [ 57.732019][ T4429] macvtap1: entered promiscuous mode [ 57.737436][ T4429] team0: entered promiscuous mode [ 57.744921][ T4429] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 57.869277][ T4446] bio_check_eod: 93 callbacks suppressed [ 57.869296][ T4446] syz.5.264: attempt to access beyond end of device [ 57.869296][ T4446] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 57.888817][ T4446] syz.5.264: attempt to access beyond end of device [ 57.888817][ T4446] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 57.902400][ T4446] syz.5.264: attempt to access beyond end of device [ 57.902400][ T4446] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 57.915888][ T4446] syz.5.264: attempt to access beyond end of device [ 57.915888][ T4446] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 57.930705][ T4446] syz.5.264: attempt to access beyond end of device [ 57.930705][ T4446] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 57.954783][ T4446] syz.5.264: attempt to access beyond end of device [ 57.954783][ T4446] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 57.993120][ T4446] syz.5.264: attempt to access beyond end of device [ 57.993120][ T4446] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 58.006882][ T4446] syz.5.264: attempt to access beyond end of device [ 58.006882][ T4446] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 58.022765][ T4446] syz.5.264: attempt to access beyond end of device [ 58.022765][ T4446] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 58.047791][ T4446] syz.5.264: attempt to access beyond end of device [ 58.047791][ T4446] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 58.080525][ T4450] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 58.156183][ T4452] netlink: 32 bytes leftover after parsing attributes in process `syz.5.268'. [ 58.183411][ T4454] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42516 sclass=netlink_tcpdiag_socket pid=4454 comm=syz.3.269 [ 58.235512][ T4456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.242431][ T4456] EXT4-fs: Ignoring removed nobh option [ 58.262630][ T3426] hid-generic 0003:0006:0000.0001: unknown main item tag 0x0 [ 58.270222][ T3426] hid-generic 0003:0006:0000.0001: unknown main item tag 0x0 [ 58.278036][ T3426] hid-generic 0003:0006:0000.0001: unknown main item tag 0x0 [ 58.285949][ T4456] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 58.418914][ T3426] hid-generic 0003:0006:0000.0001: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 58.902068][ T4490] EXT4-fs: Ignoring removed bh option [ 58.951961][ T4488] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.974491][ T4488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.279'. [ 58.988315][ T29] kauditd_printk_skb: 1016 callbacks suppressed [ 58.988333][ T29] audit: type=1326 audit(1769031229.435:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 59.014359][ T4488] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.025173][ T29] audit: type=1326 audit(1769031229.435:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 59.025204][ T4488] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.048733][ T29] audit: type=1326 audit(1769031229.435:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 59.079209][ T29] audit: type=1326 audit(1769031229.435:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 59.113479][ T4108] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 59.131503][ T4488] netlink: 'syz.3.279': attribute type 10 has an invalid length. [ 59.145523][ T4108] EXT4-fs (loop3): Remounting filesystem read-only [ 59.152748][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.159896][ T4488] bridge0: port 2(bridge_slave_1) entered listening state [ 59.167246][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.174471][ T4488] bridge0: port 1(bridge_slave_0) entered listening state [ 59.222286][ T4488] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 59.230542][ T29] audit: type=1326 audit(1769031229.505:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 59.254874][ T29] audit: type=1326 audit(1769031229.505:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa8b9c5aa22 code=0x7ffc0000 [ 59.278383][ T29] audit: type=1326 audit(1769031229.505:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa8b9c5aab7 code=0x7ffc0000 [ 59.302005][ T29] audit: type=1326 audit(1769031229.505:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa8b9c17a51 code=0x7ffc0000 [ 59.326379][ T29] audit: type=1326 audit(1769031229.505:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa8b9c5bac9 code=0x7ffc0000 [ 59.350803][ T29] audit: type=1326 audit(1769031229.505:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.5.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa8b9c17abb code=0x7ffc0000 [ 59.728225][ T4516] random: crng reseeded on system resumption [ 59.845243][ T4521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 59.861183][ T4521] sg_write: process 142 (syz.2.289) changed security contexts after opening file descriptor, this is not allowed. [ 59.881434][ T4521] ucma_write: process 142 (syz.2.289) changed security contexts after opening file descriptor, this is not allowed. [ 60.295360][ T4530] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.358353][ T4530] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.438110][ T4530] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.477505][ T4530] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.559528][ T1006] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.603590][ T1006] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.616050][ T4546] set_capacity_and_notify: 10 callbacks suppressed [ 60.616067][ T4546] loop3: detected capacity change from 0 to 2048 [ 60.618766][ T1006] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.643471][ T4546] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.674686][ T1006] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.689452][ T4546] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.768431][ T4554] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.297: bg 0: block 345: padding at end of block bitmap is not set [ 60.802337][ T4554] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 400 with error 117 [ 60.815255][ T4554] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.815255][ T4554] [ 60.889576][ T4558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.300'. [ 60.945368][ T1006] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 416 with max blocks 2 with error 117 [ 60.958641][ T1006] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.958641][ T1006] [ 61.063245][ T4575] tipc: Started in network mode [ 61.068443][ T4575] tipc: Node identity fee0e68c8f6f, cluster identity 4711 [ 61.075908][ T4575] tipc: Enabled bearer , priority 0 [ 61.085482][ T4576] syzkaller0: entered promiscuous mode [ 61.091102][ T4576] syzkaller0: entered allmulticast mode [ 61.116526][ T4576] tipc: Resetting bearer [ 61.143721][ T4576] tipc: Disabling bearer [ 61.182373][ T4582] loop5: detected capacity change from 0 to 256 [ 61.197287][ T4582] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.265397][ T4587] loop5: detected capacity change from 0 to 512 [ 61.304094][ T4587] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.376299][ T4598] netlink: 48 bytes leftover after parsing attributes in process `syz.3.314'. [ 61.386949][ T4598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 61.420378][ T4599] loop5: detected capacity change from 0 to 8192 [ 62.064262][ T4635] netlink: 108 bytes leftover after parsing attributes in process `syz.5.326'. [ 62.114336][ T4636] loop1: detected capacity change from 0 to 1024 [ 62.135040][ T909] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.147666][ T4636] EXT4-fs (loop1): shut down requested (0) [ 62.165126][ T4635] loop5: detected capacity change from 0 to 8192 [ 62.255133][ T4643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 62.268749][ T4643] loop2: detected capacity change from 0 to 512 [ 62.285672][ T4643] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.305561][ T4643] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.328: Allocating blocks 41-42 which overlap fs metadata [ 62.319653][ T4643] EXT4-fs (loop2): Remounting filesystem read-only [ 62.326662][ T4643] EXT4-fs (loop2): 1 truncate cleaned up [ 62.371223][ T4649] loop3: detected capacity change from 0 to 1024 [ 62.378495][ T4649] EXT4-fs: Ignoring removed bh option [ 62.455102][ T4658] loop2: detected capacity change from 0 to 1024 [ 62.463956][ T4658] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 62.474430][ T4658] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 62.476380][ T4658] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 62.497186][ T4658] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: inode #32: comm syz.2.332: iget: special inode unallocated [ 62.523463][ T4658] EXT4-fs (loop2): no journal found [ 62.529168][ T4658] EXT4-fs (loop2): can't get journal size [ 62.546218][ T4667] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 62.866641][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 62.875661][ T4698] netlink: 'syz.4.337': attribute type 11 has an invalid length. [ 62.883553][ T4698] netlink: 'syz.4.337': attribute type 14 has an invalid length. [ 62.895859][ T4698] vxlan0: entered promiscuous mode [ 62.902562][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.913476][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.922315][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.931577][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.319145][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.327385][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.526262][ T4716] loop2: detected capacity change from 0 to 512 [ 63.555083][ T4716] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.569686][ T4716] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.342: corrupted inode contents [ 63.582187][ T4716] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.342: mark_inode_dirty error [ 63.594196][ T4716] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.342: corrupted inode contents [ 63.607366][ T4716] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.342: mark_inode_dirty error [ 63.700628][ T4723] EXT4-fs: Ignoring removed bh option [ 63.758432][ T4727] ext4 filesystem being mounted at /74/control supports timestamps until 2038-01-19 (0x7fffffff) [ 63.771750][ T4727] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.346: corrupted inode contents [ 63.792068][ T4727] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.346: mark_inode_dirty error [ 63.806844][ T4727] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.346: corrupted inode contents [ 63.819336][ T4727] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.346: mark_inode_dirty error [ 63.843678][ T4737] EXT4-fs: inline encryption not supported [ 63.876959][ T4737] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 63.892290][ T4737] EXT4-fs (loop1): Remounting filesystem read-only [ 63.908750][ T4742] FAULT_INJECTION: forcing a failure. [ 63.908750][ T4742] name failslab, interval 1, probability 0, space 0, times 0 [ 63.921876][ T4742] CPU: 1 UID: 0 PID: 4742 Comm: syz.3.348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.921911][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.921924][ T4742] Call Trace: [ 63.921931][ T4742] [ 63.921939][ T4742] __dump_stack+0x1d/0x30 [ 63.921997][ T4742] dump_stack_lvl+0x95/0xd0 [ 63.922025][ T4742] dump_stack+0x15/0x1b [ 63.922051][ T4742] should_fail_ex+0x263/0x280 [ 63.922078][ T4742] should_failslab+0x8c/0xb0 [ 63.922101][ T4742] __kmalloc_cache_noprof+0x64/0x4a0 [ 63.922172][ T4742] ? rtm_new_nexthop+0x1830/0x4c80 [ 63.922206][ T4742] rtm_new_nexthop+0x1830/0x4c80 [ 63.922257][ T4742] ? selinux_capable+0x31/0x40 [ 63.922357][ T4742] ? security_capable+0x7b/0x90 [ 63.922391][ T4742] ? ns_capable+0x7c/0xb0 [ 63.922428][ T4742] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 63.922460][ T4742] rtnetlink_rcv_msg+0x64b/0x720 [ 63.922522][ T4742] netlink_rcv_skb+0x123/0x220 [ 63.922587][ T4742] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.922638][ T4742] rtnetlink_rcv+0x1c/0x30 [ 63.922664][ T4742] netlink_unicast+0x5c0/0x690 [ 63.922691][ T4742] netlink_sendmsg+0x5c8/0x6f0 [ 63.922731][ T4742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.922773][ T4742] __sock_sendmsg+0x145/0x170 [ 63.922826][ T4742] ____sys_sendmsg+0x31e/0x4a0 [ 63.922860][ T4742] ___sys_sendmsg+0x195/0x1e0 [ 63.922903][ T4742] __x64_sys_sendmsg+0xd4/0x160 [ 63.922931][ T4742] x64_sys_call+0x17ba/0x3000 [ 63.923006][ T4742] do_syscall_64+0xc0/0x2a0 [ 63.923043][ T4742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.923185][ T4742] RIP: 0033:0x7f7332f1acb9 [ 63.923202][ T4742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.923249][ T4742] RSP: 002b:00007f7331977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.923272][ T4742] RAX: ffffffffffffffda RBX: 00007f7333195fa0 RCX: 00007f7332f1acb9 [ 63.923286][ T4742] RDX: 0000000000000090 RSI: 0000200000000100 RDI: 0000000000000003 [ 63.923299][ T4742] RBP: 00007f7331977090 R08: 0000000000000000 R09: 0000000000000000 [ 63.923314][ T4742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.923330][ T4742] R13: 00007f7333196038 R14: 00007f7333195fa0 R15: 00007ffc9e9dec58 [ 63.923375][ T4742] [ 64.173624][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.213738][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 64.213755][ T29] audit: type=1326 audit(1769031234.666:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.5.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 64.258096][ T4751] FAULT_INJECTION: forcing a failure. [ 64.258096][ T4751] name failslab, interval 1, probability 0, space 0, times 0 [ 64.270826][ T4751] CPU: 1 UID: 0 PID: 4751 Comm: syz.3.352 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.270853][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.270866][ T4751] Call Trace: [ 64.270875][ T4751] [ 64.270886][ T4751] __dump_stack+0x1d/0x30 [ 64.270919][ T4751] dump_stack_lvl+0x95/0xd0 [ 64.270941][ T4751] dump_stack+0x15/0x1b [ 64.270963][ T4751] should_fail_ex+0x263/0x280 [ 64.270991][ T4751] should_failslab+0x8c/0xb0 [ 64.271076][ T4751] __kvmalloc_node_noprof+0x148/0x680 [ 64.271109][ T4751] ? nf_hook_entries_grow+0x1cb/0x460 [ 64.271143][ T4751] nf_hook_entries_grow+0x1cb/0x460 [ 64.271181][ T4751] __nf_register_net_hook+0x18e/0x480 [ 64.271261][ T4751] nf_register_net_hook+0x88/0x130 [ 64.271289][ T4751] nf_register_net_hooks+0x44/0x150 [ 64.271321][ T4751] nf_ct_netns_do_get+0x2b1/0x3a0 [ 64.271413][ T4751] nf_ct_netns_get+0x87/0xc0 [ 64.271456][ T4751] synproxy_tg4_check+0xca/0x160 [ 64.271485][ T4751] xt_check_target+0x28d/0x4c0 [ 64.271540][ T4751] ? mutex_unlock+0x4e/0x90 [ 64.271560][ T4751] ? xt_find_target+0x1cd/0x200 [ 64.271652][ T4751] translate_table+0xd1b/0x10d0 [ 64.271722][ T4751] do_ipt_set_ctl+0x6d0/0x8e0 [ 64.271753][ T4751] ? _raw_spin_unlock_bh+0x18/0x20 [ 64.271784][ T4751] ? tcp_release_cb+0xf1/0x370 [ 64.271828][ T4751] nf_setsockopt+0x199/0x1b0 [ 64.271937][ T4751] ip_setsockopt+0x102/0x110 [ 64.271971][ T4751] tcp_setsockopt+0x98/0xb0 [ 64.272069][ T4751] sock_common_setsockopt+0x69/0x80 [ 64.272108][ T4751] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.272174][ T4751] __sys_setsockopt+0x184/0x200 [ 64.272205][ T4751] __x64_sys_setsockopt+0x64/0x80 [ 64.272235][ T4751] x64_sys_call+0x21d5/0x3000 [ 64.272265][ T4751] do_syscall_64+0xc0/0x2a0 [ 64.272373][ T4751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.272397][ T4751] RIP: 0033:0x7f7332f1acb9 [ 64.272413][ T4751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.272464][ T4751] RSP: 002b:00007f7331977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.272484][ T4751] RAX: ffffffffffffffda RBX: 00007f7333195fa0 RCX: 00007f7332f1acb9 [ 64.272503][ T4751] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 64.272519][ T4751] RBP: 00007f7331977090 R08: 0000000000000448 R09: 0000000000000000 [ 64.272532][ T4751] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 64.272586][ T4751] R13: 00007f7333196038 R14: 00007f7333195fa0 R15: 00007ffc9e9dec58 [ 64.272611][ T4751] [ 64.626239][ T29] audit: type=1326 audit(1769031235.076:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.4.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5b90dacb9 code=0x0 [ 64.652259][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 64.704172][ T4761] EXT4-fs: Ignoring removed oldalloc option [ 64.736929][ T4761] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.354: Parent and EA inode have the same ino 15 [ 64.752450][ T4761] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.787396][ T29] audit: type=1400 audit(1769031235.236:2527): avc: denied { create } for pid=4754 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 64.810051][ T4761] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.354: Parent and EA inode have the same ino 15 [ 64.829422][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 64.840000][ T29] audit: type=1400 audit(1769031235.276:2528): avc: denied { read } for pid=4754 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 64.859222][ T29] audit: type=1400 audit(1769031235.276:2529): avc: denied { connect } for pid=4766 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.884597][ T4761] EXT4-fs (loop5): 1 orphan inode deleted [ 64.899201][ T29] audit: type=1400 audit(1769031235.346:2530): avc: denied { setopt } for pid=4758 comm="syz.5.354" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.944220][ T4761] syz_tun: entered allmulticast mode [ 65.174130][ T4777] EXT4-fs: Ignoring removed bh option [ 65.201214][ T29] audit: type=1326 audit(1769031235.646:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4794facb9 code=0x7ffc0000 [ 65.238833][ T29] audit: type=1326 audit(1769031235.646:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4794facb9 code=0x7ffc0000 [ 65.262886][ T29] audit: type=1326 audit(1769031235.646:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4794facb9 code=0x7ffc0000 [ 65.287474][ T29] audit: type=1326 audit(1769031235.646:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4794facb9 code=0x7ffc0000 [ 65.315843][ T1722] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.377689][ T4783] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.394691][ T1722] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.458204][ T1722] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.564390][ T1722] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.740282][ T1722] bridge_slave_1: left allmulticast mode [ 65.746091][ T1722] bridge_slave_1: left promiscuous mode [ 65.751942][ T1722] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.764182][ T1722] bridge_slave_0: left allmulticast mode [ 65.770073][ T1722] bridge_slave_0: left promiscuous mode [ 65.775984][ T1722] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.862633][ T4822] set_capacity_and_notify: 7 callbacks suppressed [ 65.862660][ T4822] loop4: detected capacity change from 0 to 1024 [ 65.876937][ T4822] EXT4-fs: Ignoring removed bh option [ 65.929078][ T1722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.953406][ T1722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.963669][ T1722] bond0 (unregistering): Released all slaves [ 66.010614][ T1722] hsr_slave_0: left promiscuous mode [ 66.017463][ T1722] hsr_slave_1: left promiscuous mode [ 66.033502][ T4836] loop4: detected capacity change from 0 to 512 [ 66.042123][ T1722] veth1_macvtap: left promiscuous mode [ 66.048040][ T1722] veth0_macvtap: left promiscuous mode [ 66.053886][ T1722] veth1_vlan: left promiscuous mode [ 66.059361][ T1722] veth0_vlan: left promiscuous mode [ 66.066835][ T4836] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #11: block 530: comm syz.4.375: lblock 4 mapped to illegal pblock 530 (length 1) [ 66.110575][ T4836] ------------[ cut here ]------------ [ 66.116190][ T4836] EA inode 11 i_nlink=2 [ 66.116228][ T4836] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.375/4836 [ 66.132490][ T4836] Modules linked in: [ 66.136545][ T4836] CPU: 1 UID: 0 PID: 4836 Comm: syz.4.375 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.146449][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.156842][ T4836] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 66.163574][ T4836] Code: f4 cd 9b ff 4c 8d 2d 1d 96 3f 05 49 8d 7e 40 e8 f4 7f b7 ff 49 8b 6e 40 4c 89 e7 e8 28 7b b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 2f 4c c5 03 66 66 66 66 66 66 2e [ 66.183366][ T4836] RSP: 0018:ffffc900012f7778 EFLAGS: 00010246 [ 66.189479][ T4836] RAX: ffff888104469b10 RBX: ffff888119c6a4e8 RCX: ffffffff81bc66d8 [ 66.197605][ T4836] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fbfce0 [ 66.205724][ T4836] RBP: 000000000000000b R08: 0001888119c6a49b R09: 0000000000000000 [ 66.213759][ T4836] R10: ffffc900012f76a8 R11: 0001c900012f76a8 R12: ffff888119c6a498 [ 66.221920][ T4836] R13: ffffffff86fbfce0 R14: ffff888119c6a450 R15: 0000000000000001 [ 66.230146][ T4836] FS: 00007fe5b7b376c0(0000) GS:ffff8882aec7e000(0000) knlGS:0000000000000000 [ 66.239403][ T4836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.246054][ T4836] CR2: 00007fa8b9ed7dac CR3: 000000011ace6000 CR4: 00000000003506f0 [ 66.254267][ T4836] Call Trace: [ 66.257670][ T4836] [ 66.260654][ T4836] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 66.266641][ T4836] ? errseq_check+0x2c/0x50 [ 66.271257][ T4836] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 66.276882][ T4836] ? ext4_truncate+0x92b/0xad0 [ 66.281780][ T4836] ext4_evict_inode+0xa1f/0xd40 [ 66.286891][ T4836] ? __pfx_ext4_evict_inode+0x10/0x10 [ 66.292413][ T4836] evict+0x2af/0x510 [ 66.296515][ T4836] ? __dquot_initialize+0x146/0x7c0 [ 66.301770][ T4836] iput+0x4b9/0x650 [ 66.305661][ T4836] ext4_process_orphan+0x1a9/0x1c0 [ 66.310918][ T4836] ext4_orphan_cleanup+0x6a8/0xa00 [ 66.316145][ T4836] ext4_fill_super+0x3476/0x3800 [ 66.321222][ T4836] ? set_blocksize+0x1a3/0x310 [ 66.326158][ T4836] ? setup_bdev_super+0x30e/0x370 [ 66.331408][ T4836] ? __pfx_ext4_fill_super+0x10/0x10 [ 66.337168][ T4836] get_tree_bdev_flags+0x291/0x300 [ 66.342421][ T4836] ? __pfx_ext4_fill_super+0x10/0x10 [ 66.348181][ T4836] get_tree_bdev+0x1f/0x30 [ 66.353067][ T4836] ext4_get_tree+0x1c/0x30 [ 66.357632][ T4836] vfs_get_tree+0x57/0x1d0 [ 66.362698][ T4836] do_new_mount+0x288/0x700 [ 66.367286][ T4836] path_mount+0x4c0/0xb90 [ 66.371859][ T4836] ? user_path_at+0xbf/0x130 [ 66.376804][ T4836] __se_sys_mount+0x28c/0x2e0 [ 66.381671][ T4836] __x64_sys_mount+0x67/0x80 [ 66.386612][ T4836] x64_sys_call+0x2cca/0x3000 [ 66.391400][ T4836] do_syscall_64+0xc0/0x2a0 [ 66.396081][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.402530][ T4836] RIP: 0033:0x7fe5b90dbf4a [ 66.406999][ T4836] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.427726][ T4836] RSP: 002b:00007fe5b7b36e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.436416][ T4836] RAX: ffffffffffffffda RBX: 00007fe5b7b36ee0 RCX: 00007fe5b90dbf4a [ 66.444461][ T4836] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fe5b7b36ea0 [ 66.452625][ T4836] RBP: 0000200000000180 R08: 00007fe5b7b36ee0 R09: 0000000000800718 [ 66.460643][ T4836] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 66.468788][ T4836] R13: 00007fe5b7b36ea0 R14: 0000000000000482 R15: 0000200000000200 [ 66.477010][ T4836] [ 66.480246][ T4836] ---[ end trace 0000000000000000 ]--- [ 66.487966][ T4836] EXT4-fs (loop4): 1 orphan inode deleted [ 66.532122][ T1722] team0 (unregistering): Port device team_slave_1 removed [ 66.543960][ T1722] team0 (unregistering): Port device team_slave_0 removed [ 66.610326][ T4789] chnl_net:caif_netlink_parms(): no params data found [ 66.651415][ T4860] netlink: 24 bytes leftover after parsing attributes in process `syz.5.382'. [ 66.707951][ T4867] loop4: detected capacity change from 0 to 1024 [ 66.726738][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.734538][ T4789] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.747467][ T4867] EXT4-fs: Ignoring removed bh option [ 66.757745][ T4789] bridge_slave_0: entered allmulticast mode [ 66.764715][ T4789] bridge_slave_0: entered promiscuous mode [ 66.771733][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.779113][ T4789] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.786595][ T4789] bridge_slave_1: entered allmulticast mode [ 66.793440][ T4789] bridge_slave_1: entered promiscuous mode [ 66.824572][ T4789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.836065][ T4789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.889756][ T4789] team0: Port device team_slave_0 added [ 66.914600][ T4789] team0: Port device team_slave_1 added [ 66.953734][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.960914][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.986965][ T4789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.007986][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.015010][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.041116][ T4789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.094570][ T4789] hsr_slave_0: entered promiscuous mode [ 67.100688][ T4789] hsr_slave_1: entered promiscuous mode [ 67.130467][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 67.140961][ T4894] netlink: 104 bytes leftover after parsing attributes in process `syz.3.387'. [ 67.159530][ T4894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.387'. [ 67.289239][ T4789] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 67.317455][ T4789] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 67.333063][ T4905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=567 sclass=netlink_route_socket pid=4905 comm=syz.3.388 [ 67.356926][ T4789] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 67.373126][ T4789] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.384619][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.388'. [ 67.400793][ T4908] loop5: detected capacity change from 0 to 4096 [ 67.454852][ T4908] ext3: Unknown parameter 'func' [ 67.508770][ T4789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.571208][ T4789] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.605163][ T1722] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.612460][ T1722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.653986][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.661417][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.793183][ T4789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.837291][ T4959] loop5: detected capacity change from 0 to 1024 [ 67.846580][ T4959] EXT4-fs: Ignoring removed bh option [ 67.897354][ T4966] loop4: detected capacity change from 0 to 2048 [ 68.019113][ T4976] netlink: 64 bytes leftover after parsing attributes in process `syz.3.397'. [ 68.088001][ T4996] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 68.094700][ T4996] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.102294][ T4996] vhci_hcd vhci_hcd.0: Device attached [ 68.122682][ T4996] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 68.129386][ T4996] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.137007][ T4996] vhci_hcd vhci_hcd.0: Device attached [ 68.158458][ T4996] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 68.165132][ T4996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 68.172836][ T4996] vhci_hcd vhci_hcd.0: Device attached [ 68.189004][ T4996] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9) [ 68.195600][ T4996] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.203268][ T4996] vhci_hcd vhci_hcd.0: Device attached [ 68.209843][ T4789] veth0_vlan: entered promiscuous mode [ 68.235133][ T4789] veth1_vlan: entered promiscuous mode [ 68.275806][ T4789] veth0_macvtap: entered promiscuous mode [ 68.286587][ T5020] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(12) [ 68.293391][ T5020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.301019][ T5020] vhci_hcd vhci_hcd.0: Device attached [ 68.307648][ T3491] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 68.322589][ T4789] veth1_macvtap: entered promiscuous mode [ 68.329039][ T4996] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.369170][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.376962][ T3491] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 68.385107][ T4996] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.385182][ T5020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.406156][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.440296][ T5033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 68.449593][ T5033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 68.461541][ T935] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.470937][ T935] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.499722][ T5021] vhci_hcd: connection closed [ 68.499855][ T1722] vhci_hcd vhci_hcd.5: stop threads [ 68.500998][ T5010] vhci_hcd: connection closed [ 68.504831][ T1722] vhci_hcd vhci_hcd.5: release socket [ 68.518218][ T4998] vhci_hcd: connection reset by peer [ 68.520715][ T1722] vhci_hcd vhci_hcd.5: disconnect device [ 68.531724][ T5004] vhci_hcd: connection closed [ 68.537092][ T5007] vhci_hcd: connection closed [ 68.539912][ T935] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.566794][ T935] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.576308][ T5046] FAULT_INJECTION: forcing a failure. [ 68.576308][ T5046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.586896][ T1722] vhci_hcd vhci_hcd.5: stop threads [ 68.589537][ T5046] CPU: 1 UID: 0 PID: 5046 Comm: syz.5.407 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.589574][ T5046] Tainted: [W]=WARN [ 68.589582][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.589653][ T5046] Call Trace: [ 68.589682][ T5046] [ 68.589712][ T5046] __dump_stack+0x1d/0x30 [ 68.589867][ T5046] dump_stack_lvl+0x95/0xd0 [ 68.589941][ T5046] dump_stack+0x15/0x1b [ 68.590006][ T5046] should_fail_ex+0x263/0x280 [ 68.590115][ T5046] should_fail+0xb/0x20 [ 68.590177][ T5046] should_fail_usercopy+0x1a/0x20 [ 68.590319][ T5046] _copy_from_iter+0xcf/0xea0 [ 68.590387][ T5046] ? __rcu_read_unlock+0x4e/0x70 [ 68.590452][ T5046] ? avc_has_perm_noaudit+0xab/0x130 [ 68.590572][ T5046] memcpy_from_msg+0x3c/0xa0 [ 68.590636][ T5046] isotp_sendmsg+0x50e/0xbf0 [ 68.590825][ T5046] ? __pfx_isotp_sendmsg+0x10/0x10 [ 68.590924][ T5046] __sock_sendmsg+0x145/0x170 [ 68.591023][ T5046] ____sys_sendmsg+0x345/0x4a0 [ 68.591141][ T5046] ___sys_sendmsg+0x195/0x1e0 [ 68.591282][ T5046] __sys_sendmmsg+0x185/0x320 [ 68.591376][ T5046] __x64_sys_sendmmsg+0x57/0x70 [ 68.591461][ T5046] x64_sys_call+0x1e28/0x3000 [ 68.591533][ T5046] do_syscall_64+0xc0/0x2a0 [ 68.591631][ T5046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.591727][ T5046] RIP: 0033:0x7fa8b9c5acb9 [ 68.591780][ T5046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.591845][ T5046] RSP: 002b:00007fa8b86b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 68.591909][ T5046] RAX: ffffffffffffffda RBX: 00007fa8b9ed5fa0 RCX: 00007fa8b9c5acb9 [ 68.591953][ T5046] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 68.591995][ T5046] RBP: 00007fa8b86b7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.592030][ T5046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.592158][ T5046] R13: 00007fa8b9ed6038 R14: 00007fa8b9ed5fa0 R15: 00007ffde0c90c48 [ 68.592222][ T5046] [ 68.804381][ T1722] vhci_hcd vhci_hcd.5: release socket [ 68.809837][ T1722] vhci_hcd vhci_hcd.5: disconnect device [ 68.835690][ T1722] vhci_hcd vhci_hcd.5: stop threads [ 68.841142][ T1722] vhci_hcd vhci_hcd.5: release socket [ 68.846795][ T1722] vhci_hcd vhci_hcd.5: disconnect device [ 68.903035][ T1722] vhci_hcd vhci_hcd.5: stop threads [ 68.908328][ T1722] vhci_hcd vhci_hcd.5: release socket [ 68.914740][ T1722] vhci_hcd vhci_hcd.5: disconnect device [ 68.927963][ T5062] loop5: detected capacity change from 0 to 256 [ 68.971832][ T5062] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.002375][ T1722] vhci_hcd vhci_hcd.5: stop threads [ 69.007655][ T1722] vhci_hcd vhci_hcd.5: release socket [ 69.013224][ T1722] vhci_hcd vhci_hcd.5: disconnect device [ 69.059055][ T5080] loop6: detected capacity change from 0 to 1024 [ 69.104532][ T5062] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 69.112891][ T5062] FAT-fs (loop5): Filesystem has been set read-only [ 69.162408][ T5080] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.164546][ T5062] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 69.196556][ T5082] loop2: detected capacity change from 0 to 8192 [ 69.224577][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 69.224596][ T29] audit: type=1326 audit(1769031239.677:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa8b9c1b58e code=0x7ffc0000 [ 69.257528][ T29] audit: type=1326 audit(1769031239.677:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 69.283720][ T29] audit: type=1326 audit(1769031239.707:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 69.307435][ T29] audit: type=1326 audit(1769031239.707:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 69.331670][ T29] audit: type=1326 audit(1769031239.707:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 69.355412][ T29] audit: type=1326 audit(1769031239.707:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 69.379016][ T29] audit: type=1326 audit(1769031239.707:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 69.402577][ T29] audit: type=1326 audit(1769031239.707:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 69.426012][ T29] audit: type=1326 audit(1769031239.707:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 69.434642][ T3305] loop2: p1[EZD] p2 p3 p4 [ 69.449612][ T29] audit: type=1326 audit(1769031239.707:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.5.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b9c5acb9 code=0x7ffc0000 [ 69.502769][ T5093] Process accounting resumed [ 69.507466][ T5093] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 69.542137][ T5093] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 69.571974][ T5092] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 69.591108][ T4128] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 69.609666][ T4128] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 69.657985][ T3305] loop2: p1 start 526336 is beyond EOD, truncated [ 69.665773][ T3305] loop2: p3 start 117772289 is beyond EOD, truncated [ 69.673238][ T3305] loop2: p4 size 262144 extends beyond EOD, truncated [ 69.682907][ T5082] loop2: p1[EZD] p2 p3 p4 [ 69.687720][ T5082] loop2: p1 start 526336 is beyond EOD, truncated [ 69.697079][ T5082] loop2: p3 start 117772289 is beyond EOD, truncated [ 69.704033][ T5082] loop2: p4 size 262144 extends beyond EOD, truncated [ 69.726892][ T5101] loop4: detected capacity change from 0 to 128 [ 69.738061][ T4128] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 69.771762][ T5101] FAT-fs (loop4): bogus number of reserved sectors [ 69.778584][ T5101] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 69.788226][ T5101] FAT-fs (loop4): Can't find a valid FAT filesystem [ 69.823977][ T4464] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 69.849941][ T5104] netlink: 'syz.2.419': attribute type 13 has an invalid length. [ 69.878556][ T5042] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 69.911648][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 69.911664][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 69.933234][ T4789] EXT4-fs unmount: 51 callbacks suppressed [ 69.933251][ T4789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.950050][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.957432][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.976078][ T3005] ================================================================== [ 69.984308][ T3005] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 69.992685][ T3005] [ 69.995041][ T3005] write to 0xffff88811ad2e6b0 of 8 bytes by task 3307 on cpu 0: [ 70.002707][ T3005] inode_set_ctime_current+0x592/0x810 [ 70.008214][ T3005] simple_unlink+0x2d/0x80 [ 70.012687][ T3005] shmem_unlink+0x12d/0x140 [ 70.017803][ T3005] vfs_unlink+0x28b/0x440 [ 70.022368][ T3005] do_unlinkat+0x1e2/0x4b0 [ 70.026913][ T3005] __x64_sys_unlink+0x2e/0x40 [ 70.031710][ T3005] x64_sys_call+0x2f48/0x3000 [ 70.036434][ T3005] do_syscall_64+0xc0/0x2a0 [ 70.041311][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.047470][ T3005] [ 70.049937][ T3005] read to 0xffff88811ad2e6b0 of 8 bytes by task 3005 on cpu 1: [ 70.057950][ T3005] atime_needs_update+0x2ef/0x3e0 [ 70.063020][ T3005] touch_atime+0x4a/0x340 [ 70.067510][ T3005] do_readlinkat+0x13d/0x340 [ 70.072314][ T3005] __x64_sys_readlink+0x47/0x60 [ 70.077210][ T3005] x64_sys_call+0x2af1/0x3000 [ 70.081926][ T3005] do_syscall_64+0xc0/0x2a0 [ 70.086732][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.092836][ T3005] [ 70.095524][ T3005] value changed: 0x0000000069714647 -> 0x0000000069714648 [ 70.102755][ T3005] [ 70.105091][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 70.111305][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.122361][ T3005] Tainted: [W]=WARN [ 70.126297][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.136372][ T3005] ================================================================== [ 70.153847][ T5113] EXT4-fs: Ignoring removed orlov option [ 70.177419][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 70.200183][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 70.231738][ T5113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.257596][ T5101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.275674][ T5101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.305520][ T5116] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.351766][ T5101] bond2: left allmulticast mode [ 70.357124][ T5101] team0: left promiscuous mode [ 70.362296][ T5101] team_slave_0: left promiscuous mode [ 70.367836][ T5101] team_slave_1: left promiscuous mode [ 70.374948][ T5101] macvtap1: left promiscuous mode [ 70.381343][ T5101] vxlan0: left promiscuous mode [ 70.416523][ T4789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.422587][ T5116] EXT4-fs (loop3): 1 truncate cleaned up [ 70.431613][ T5116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.510655][ T5104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.523963][ T5104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.568834][ T4464] syz_tun (unregistering): left allmulticast mode [ 70.580521][ T1006] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.589657][ T1006] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.596837][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.610098][ T1006] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.619787][ T1006] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.647932][ T1006] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.657302][ T1006] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.667304][ T1006] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.676502][ T1006] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.687719][ T1006] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.697333][ T1006] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.717667][ T1006] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.727474][ T1006] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.746967][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.805570][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.855775][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.925689][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.012784][ T31] bridge_slave_1: left allmulticast mode [ 71.018524][ T31] bridge_slave_1: left promiscuous mode [ 71.025215][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.034302][ T31] bridge_slave_0: left allmulticast mode [ 71.039989][ T31] bridge_slave_0: left promiscuous mode [ 71.045956][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.145192][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.155882][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.166359][ T31] bond0 (unregistering): Released all slaves [ 71.217262][ T31] hsr_slave_0: left promiscuous mode [ 71.232897][ T31] hsr_slave_1: left promiscuous mode [ 71.239038][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.246886][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.272473][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.280278][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.312128][ T31] veth1_macvtap: left promiscuous mode [ 71.317781][ T31] veth0_macvtap: left promiscuous mode [ 71.332034][ T31] veth1_vlan: left promiscuous mode [ 71.337734][ T31] veth0_vlan: left promiscuous mode [ 71.439609][ T31] team0 (unregistering): Port device team_slave_1 removed [ 71.451376][ T31] team0 (unregistering): Port device team_slave_0 removed [ 73.471856][ T3491] usb 11-1: enqueue for inactive port 0 [ 73.477606][ T3491] usb 11-1: enqueue for inactive port 0 [ 73.551945][ T3491] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 74.671395][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 74.678775][ C0] bridge0: port 2(bridge_slave_1) entered learning state