last executing test programs:

3m16.918885306s ago: executing program 4 (id=200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, 0x0}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x20})

3m16.857938787s ago: executing program 4 (id=201):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)="ddaa8c", &(0x7f0000000140), 0x1, r1}, 0x38) (fail_nth: 2)

3m16.853616717s ago: executing program 4 (id=202):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0xc04, &(0x7f0000000080)={[{@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x84f1}}]}, 0x1, 0x5e8, &(0x7f0000000400)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0)
r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0})
io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
signalfd4(r0, &(0x7f0000000140), 0x8, 0x0)

3m16.761207169s ago: executing program 4 (id=203):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBCDhaW5AivbGHJEDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnbHXla78lrR/pDn84FZvXkzu+999+lp3uzo7QRQWtPZQxpxOCIuJRFTTdsmo75xurHfw+/uXM6WJGq1/32bRNLIK/Z/1Pi5P3tIIsYj4tOzEb+vbC13/dbtqwvVWt2rEbMbq2uz67duH19ZXbiydGXp2vyJf548Nfev+ZPzuxJnEde58//901uvvfSP5c+qx5M4HRdHX1mMljh2y3RMx6NGiM35IxFxKku0eV/2miKEZMD1YGcqjd/H0Yg4FFNRydfqpmLlzYFWDuipWiWiBpRUov9DSRXjgOLcvhfnwcPswZn6CdDW+Efqn43EeH5utO9h0nRmVD/fPbAL5Wdl/HznyHvZEh0+hxjZhXI62bwbEX9sF3+S1+1A/ilOFn8aadPzsvRcRIw13ot0h+VPt6z3+/fvWeJvbocs3tONn1n+2R2WP+j4ASin+2caB/LNbO3J8S8bGRbjn2gz/plsc+zaiUEf/zqP/4rj/Xj+GXnaMg7LxjwX2r/kaGvGV2+ce6dT+c3jv2zJyi/Ggv3w4G7EkZb4X88Hc8nj9k/atH+2y6Uuy/jP59+c67Rt0PHX7kUcbXv+8+SKVpaa3VhdK/Jark/OLq9Ul+bqj23L+OiTFz/oVP6g48/aPzrEv137Z3lrXZbx4YV7q522TT41/vTrseRinhpr5Ly8sLFxYz5iLDnf2KUp/8T2dSn2KV4ji//YX9v3/23izxt6s8v41/5/9WE9tfUqadftv+WvSu5Rrcs6dJLFv7jD9n+7yzJ+eOHmn1uyJorEdvFPbH2ppNv3HAAAAAAAAMooza/BJunM43SazszU5/D+Ifal1evrG39bvn7z2mLEsfz/IUfT4kr3VH09ydbnG/8PW6yfaFn/e0QcjIh3KxP5+szl69XFQQcPAAAAAAAAAAAAAAAAAAAAQ2J/Y/5/cZ/q7yv1+f9d2TjU49oBPdfLG8wBw03/h/LK+/9O7+AK7GmO/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMBz6eBf7n+ZRMTmvyfyJTPW2DY60JoBvfbsfXy6J/UA+q/S16cBw+TxpX/T/6F0uhr//9j4csDeVwcYgKRdZj44qG3f+e+3fSYAAAAAAAAAAAAA0ANHD5v/D2WVxseDrgIwIL9iIr/vAIA9zlf/Q3k5xweeNot/vNMG8/8BAAAAAAAAAAAAoG8m8yVJZxq3AJ2MNJ2ZifhtRByI0WR5pbo0FxG/i4gvKqO/ydbnB11pAAAAAAAAAAAAAAAAAAAAeM6s37p9daFaXbrRnPhpS87znSjugjos9WlORNL/QiciYhhi701ipCknidjMWn4oKnZjPYaiGmlejQH/YQIAAAAAAAAAAAAAAAAAgBJqmnvc3pH3+1wjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi/J/f/33kiecrrDDpGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBv+iUAAP//q+Q5KA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1840, 0x124, 0x8}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0)

3m16.252516668s ago: executing program 4 (id=207):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)=',\xaa\b\x00\x00:\xe9\x15\xe8\xb3\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
futex(&(0x7f00000193c0), 0x5, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1)
r2 = syz_open_procfs(0x0, 0x0)
pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000019200))
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000019280)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESDEC], 0xfe, 0x677, &(0x7f0000000c00)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)

3m16.027892983s ago: executing program 4 (id=213):
add_key$fscrypt_v1(0x0, &(0x7f0000000500)={'fscrypt:', @desc3}, &(0x7f0000000540)={0x0, "923c1dd6500f9ee6b75b0ce39dc4cc3e405594b69248b4d58856ee193c2da4e4c855bf716fe6693205afa6fa5a95495e14b2595721f07bb2c257be229e33324d", 0x37}, 0x48, 0xfffffffffffffffb)
syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0x7e2, &(0x7f0000001740)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$vga_arbiter(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='target PCI:0:'], 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4ea4, 0x40000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/187, 0xbb, 0x1, &(0x7f0000000680)=""/112, 0x70}, &(0x7f00000003c0)=0x40)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r6)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x98}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

3m15.980088894s ago: executing program 32 (id=213):
add_key$fscrypt_v1(0x0, &(0x7f0000000500)={'fscrypt:', @desc3}, &(0x7f0000000540)={0x0, "923c1dd6500f9ee6b75b0ce39dc4cc3e405594b69248b4d58856ee193c2da4e4c855bf716fe6693205afa6fa5a95495e14b2595721f07bb2c257be229e33324d", 0x37}, 0x48, 0xfffffffffffffffb)
syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0x7e2, &(0x7f0000001740)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$vga_arbiter(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='target PCI:0:'], 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4ea4, 0x40000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/187, 0xbb, 0x1, &(0x7f0000000680)=""/112, 0x70}, &(0x7f00000003c0)=0x40)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r6)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x98}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

2.871065074s ago: executing program 2 (id=3175):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x1, 0x7ffc1ff9}]})
epoll_create(0x0)

2.854230805s ago: executing program 2 (id=3176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10)

2.825870535s ago: executing program 2 (id=3177):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50)

2.806093576s ago: executing program 2 (id=3178):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000040000000000000008000084040000000c00000001000000000000000700000003000000ff0f00000700000002000000050000000700000002000000050000000700000003000000020000000c0000000100"], &(0x7f0000000580)=""/125, 0x88, 0x7d, 0x1, 0x4}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
unshare(0xa000200)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x64, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x4, 0xfffffffffffffff9, 0x800000, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xf)
read(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil)
io_uring_enter(0xffffffffffffffff, 0x7bfe, 0x3ffb, 0x4f, 0x0, 0x0)
unshare(0x20060400)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x801}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10002, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r4 = creat(0x0, 0x1c0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1000, 0x5c8, 0x80000003, 0x6})
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x3)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x10, 0x20, 0x4, 0x7f, {{0x7, 0x4, 0x2, 0x16, 0x1c, 0x64, 0x0, 0xcd, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x7, "952e5d8810"}]}}}}})
bpf$MAP_CREATE(0x0, 0x0, 0x50)

2.643947498s ago: executing program 2 (id=3183):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
unshare(0x2a020400)

2.56924418s ago: executing program 2 (id=3184):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x33c, &(0x7f0000000340)="$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")
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)
epoll_create1(0x80000)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x3, 0x2, 0x0, 0x102, 0x85010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x10ada2, 0x0, 0xffffffeb, 0x1, 0x0, 0x5, 0x3}, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="bb004f0076da74fb9f06c029bfa31429b93c0cb885747c4b25254ed6d084c37ba40d39d59e87bde8b0003adcf358f85ae2190995b8e3d718ee5c2848fbeb3737297af393ae19b3bb7f02e4060bdb92492de1adc8b82063e091be11309ead1b9176de085a00ccc5ec12bdd841ea7364d7d0743258285fdc958375e74af5e4d897f2a3342653e2b830855561e8b90b7eb0d891e5751d7f87a6361fccf5eaec8cdf02abe7a5a60efb6ece7afa8bae45b43b2c48555627c80e3b0f51ed000400a98004000300"], 0x264}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1e00000001000100ffff0000b89e6b1b004000004b0660e5b18472062d724c1aefa19b8ef8dfb06414f2c6703b625f884733928ef4fe7e76781205e33d5270f5b6317da545b4bd756bd33dfa4f6e1dba396f6ae720c98695b5d4625df78c5b654f4faad9aee574e9e41ec3a0bdb2c7f341138f9957fab5a9aa9ace15b8bb55cbea72a278", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES64], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60)
acct(&(0x7f0000000080)='./file1\x00')
setns(r4, 0x24020000)
r6 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x926f, 0x800, 0xfffffffc, 0x87})
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = eventfd2(0xfffffffe, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r8, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000001e80)=""/4110, 0x100e}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
read$eventfd(r8, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001280)=[{0x0, 0xffffffffffffff01}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
umount2(&(0x7f0000000040)='.\x00', 0x2)

2.284073106s ago: executing program 0 (id=3195):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10)

2.229885496s ago: executing program 0 (id=3197):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x4000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
setreuid(r0, r0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)

2.188118087s ago: executing program 0 (id=3198):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={<r2=>0x0, 0x4e00b88f, 0x20}, &(0x7f00000001c0)=0xc)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0x686, 0xc}, 0x90)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
unshare(0x64000600)

1.669979827s ago: executing program 1 (id=3205):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)

1.658581067s ago: executing program 1 (id=3206):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
shutdown(r0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000000a00)={{0x3, 0x100, 0xb9e, 0x0, 0x7fffffff, 0x5}, 0x274, [0x2, 0x2, 0xff, 0x7fff, 0x1, 0x7e, 0x2, 0xf, 0x5, 0x61f3, 0x7, 0x4, 0x1, 0x7ff, 0x9, 0x8, 0x3, 0x80000001, 0x9, 0xfffffff8, 0x3, 0x80000000, 0x0, 0x80, 0xffff, 0x4, 0x40, 0x9, 0x2, 0x3ff, 0x7, 0x3, 0xf, 0x6, 0x8, 0xfffffff3, 0x1, 0xffff, 0x5, 0x4, 0x8b5, 0x1, 0xc8, 0x3, 0x7, 0x8, 0x6, 0x8, 0x6, 0x9f71, 0x9, 0x401, 0x40, 0x7ff, 0xffff, 0x3ff, 0x3, 0x1, 0x10000, 0x4, 0x5, 0x9, 0xd6, 0x200, 0xffffffff, 0xa8, 0x7, 0xffffff48, 0x7, 0x2, 0x4f, 0x7, 0x9, 0x1, 0x520e5f75, 0x3, 0x7, 0x800, 0x1, 0x1000, 0x0, 0x5, 0x7, 0x6, 0xc, 0x1, 0xd, 0x9, 0x80000001, 0xfffffff8, 0x10001, 0xe0000000, 0x2, 0xfffffc00, 0xffffff58, 0x8, 0x1, 0x2, 0x4, 0x6, 0x4800000, 0xc, 0x4, 0x2, 0x0, 0x81, 0x6, 0xff, 0x0, 0x4, 0x6, 0xa47, 0x1, 0x1ff, 0xaf8ab0, 0xfffffffd, 0x2, 0x8, 0x7, 0x1000, 0x2, 0x6, 0x4, 0x4, 0x7f, 0x8, 0x2c, 0x10000, 0x8001, 0x5, 0xd4, 0x8, 0xde4, 0xc2c, 0x10000, 0x4, 0x4, 0x3ff, 0x5, 0x10000, 0x9, 0x5, 0x8, 0xffffff3c, 0x0, 0x5, 0x3, 0x5, 0x5, 0x100, 0x6af9, 0xfff, 0x8, 0x101, 0x4, 0xfffffff7, 0x8, 0x9, 0x2, 0x1, 0x7, 0x7, 0x80000001, 0xc, 0xab84, 0x80000000, 0x101, 0xee, 0x3, 0x4, 0xbb, 0xfffffffd, 0x7, 0x2, 0x6, 0x71f3, 0x7, 0x3, 0x3, 0x8, 0x0, 0x800, 0x3, 0x6, 0xa, 0x8, 0x20fbcb, 0x2, 0x8, 0x7, 0x8, 0x85, 0x3ff, 0x8, 0x6, 0x0, 0xfffff216, 0x9, 0x200, 0xa1, 0x3, 0x401, 0x9, 0x3, 0x6, 0x6, 0x6, 0x71d, 0x3, 0x6, 0x9, 0x0, 0x4, 0x9, 0xeb, 0xfffffffe, 0x400, 0x8, 0x4, 0xc, 0x9, 0x3, 0x8, 0xe404, 0x701c, 0xffffff08, 0xae, 0x0, 0x6, 0x50a, 0x4cd, 0x5, 0x85, 0x7, 0x3, 0x2, 0x6, 0x80, 0x9, 0x6, 0x80000000, 0x7, 0x8, 0x4, 0x8, 0x400, 0x1, 0xb000, 0x10001, 0x5, 0x2, 0x3ff, 0x1c, 0x6, 0xc, 0xdf7, 0x4, 0x9, 0x5, 0x2, 0x1, 0x4, 0x74000000, 0x8, 0x2b91, 0x5, 0x0, 0x8, 0x3800, 0xfb4, 0x3, 0x3, 0x8, 0x3da5b633, 0x0, 0x8, 0xfffffd7a, 0xd2, 0x9, 0x3, 0x9, 0x4, 0xf, 0x0, 0x6, 0x3, 0x5, 0x1, 0x100, 0x7, 0x4000000, 0x48, 0x8a1, 0x4, 0xfffffff9, 0x1, 0x1a, 0x40, 0x5, 0xb1, 0x1, 0xbbf9, 0x101, 0x3, 0x7ebd, 0x6, 0x2, 0x400040, 0xf, 0x80000000, 0x5, 0x9596, 0x8, 0x9, 0xfffffffd, 0x9, 0x17, 0x7, 0xfffffff8, 0x800, 0xdb, 0x5, 0xd, 0x9, 0x0, 0x27, 0x4, 0x0, 0x2, 0x2, 0x1e, 0x6, 0x7, 0x1, 0xe, 0x3, 0xffffffff, 0x8, 0x4, 0xe983, 0xffff, 0x3, 0xf, 0x9, 0xa2, 0x1, 0x80, 0x3, 0x0, 0x2800000, 0x5, 0xb, 0x5, 0x9, 0xdcc, 0x6, 0x20, 0x9, 0x10, 0x6, 0x3, 0x6, 0x5, 0xe00000, 0x3ff, 0x3, 0x7f, 0x8001, 0x3, 0x2, 0x4, 0x1, 0x7, 0xcc, 0x75d, 0x1, 0xa, 0x5d, 0xe58, 0xe, 0x401, 0x0, 0x1, 0x1, 0xe, 0x1, 0x3, 0x7, 0x2, 0x5, 0x9, 0xfffffffc, 0x1ff, 0xfffffff9, 0x5, 0x5, 0x6, 0x401, 0x1, 0x8, 0x3, 0x6, 0x510, 0x4dec, 0x80000001, 0x8, 0x9, 0x7, 0x3, 0x3, 0xffff6fd9, 0xe96f, 0x8001, 0x8, 0x40, 0x6, 0x4, 0x9, 0x7, 0xb, 0x5, 0x3, 0x8, 0xffff, 0xa8e, 0x58, 0x7, 0x1, 0x2, 0x33, 0x8, 0x100, 0xff, 0x0, 0xffd, 0xffff, 0x7ff, 0x13, 0x7, 0x352, 0x6, 0x1, 0x4, 0xffffffff, 0x5, 0x2, 0x0, 0x2, 0x5, 0x6, 0x8, 0x2c9, 0x8, 0x8, 0x7fff, 0x1e9, 0x101, 0xfffffffd, 0x80, 0xfffffffb, 0x26, 0x1000, 0x6, 0xd2b4, 0x7, 0x3, 0x5, 0x6356, 0x80000000, 0x3, 0x80, 0xffffffff, 0x8, 0x10000, 0x80, 0x3, 0x81, 0xffffff3f, 0x6, 0x6, 0x200, 0x7, 0x8a3, 0x1ff, 0x4, 0xff, 0xbb7, 0x5, 0xfffffff0, 0x8, 0xfffffff8, 0x3, 0x4, 0x3, 0x8001, 0x3, 0x19b8, 0x6, 0xfffffffd, 0x2, 0x7, 0x7, 0x2, 0x3d791e3d, 0x0, 0x7fff, 0x2, 0x4, 0x80000000, 0x0, 0x5, 0xffffff7f, 0x9, 0x6, 0x2, 0x4, 0x6, 0x0, 0xa, 0xe25, 0x400, 0x3, 0xe, 0x10, 0x1f7, 0x953e, 0x1, 0x2, 0x3ff, 0x10, 0x9, 0x9, 0x0, 0x6, 0x6, 0x8, 0x0, 0x0, 0x4, 0x10001, 0x10001, 0x9, 0x2, 0x587, 0x8fa, 0x8, 0x6, 0x7f, 0xb, 0x4, 0x100, 0xfffffffd, 0x6, 0x0, 0x1, 0xbb4, 0x800, 0xaaa1, 0x0, 0x7, 0x613, 0x3, 0x80, 0x4, 0x10, 0x9, 0x8001, 0xfffffffc, 0x4, 0x0, 0x2, 0x6, 0xfffff7ed, 0xf, 0x613387b1, 0x4, 0xd31d, 0x1, 0xab, 0xfffffffd, 0x5, 0x7, 0x4, 0x40, 0x2, 0x8000, 0x2a, 0x7, 0x4, 0x4, 0xac6, 0xff, 0xb, 0x7ff, 0xc11, 0x0, 0x0, 0x800, 0xfff, 0x7, 0x4, 0xce, 0xc, 0x282, 0xfffffffc, 0x8001, 0x3, 0x9, 0x4, 0x8, 0x8, 0x9, 0x9, 0x2, 0xcb, 0x7ff, 0x6, 0x3, 0x5471656c, 0xa901, 0x7, 0x0, 0x7c51, 0x1, 0x9, 0xd34c, 0x84b56276, 0x0, 0xfff, 0xfffff931, 0x8, 0x6, 0x9, 0x6, 0x3344, 0x2f7e, 0x1, 0x3, 0x0, 0xb, 0x7, 0x2, 0x4, 0xfffffff8, 0x64, 0x0, 0xd2, 0xfff, 0x2, 0x2, 0x4, 0x1d2, 0xb1, 0x7f, 0x6, 0x100, 0xffffffff, 0x8, 0x1, 0x4, 0x7f, 0x8, 0x1000009, 0xa88e, 0xc, 0x58f, 0xff, 0xe9, 0x8, 0x5, 0x9, 0x8, 0x5, 0xb1, 0x9, 0xfffffffd, 0xd23a, 0xffff44d7, 0x9, 0x401, 0xfff, 0x7, 0x28c0, 0x9, 0xffffffff, 0xfff, 0x6, 0x100, 0x0, 0x43, 0x93, 0x36b4, 0x0, 0x4, 0xffffffff, 0x3f, 0x1d7, 0x2, 0xb1, 0x3, 0x7, 0x0, 0x8, 0x8, 0x3, 0xc, 0x6c, 0x80, 0x6, 0x7, 0xe2e, 0x8, 0x4, 0x1000, 0xf, 0x9, 0x7f2086dc, 0xf, 0x3, 0x1, 0x9, 0x80000000, 0x40, 0x5, 0x2, 0x8, 0xe84c, 0x5, 0x9, 0x4, 0x8, 0x9, 0x8, 0x81, 0x2, 0xb, 0x2243, 0x2, 0x10001, 0x3, 0x6, 0x8, 0x7, 0xc3, 0x36, 0x1, 0x3, 0x3, 0x4, 0xffffffff, 0x8, 0x865, 0x10001, 0x800, 0x0, 0x7, 0x7, 0x6, 0x0, 0x3, 0x4, 0x837a, 0x9, 0xbd, 0x1, 0x0, 0x8, 0x3, 0x6ef, 0x2, 0x52, 0x400, 0xff, 0x7, 0x5, 0xaba, 0x9, 0x5, 0x8, 0x3, 0x0, 0x400, 0x5, 0x200, 0x7fff, 0xfffff0fd, 0x4, 0x4, 0x10000, 0x5, 0xff, 0x6, 0x4, 0x0, 0x7, 0xa, 0x3, 0x6f2503d3, 0x799, 0x40, 0x8, 0x10000, 0x5, 0x68e, 0xfffffe01, 0x4, 0x5, 0x401, 0x2, 0x7, 0x16e, 0x2, 0x1, 0x6, 0x3, 0x6, 0x18b3, 0x9, 0x6b7f, 0x7, 0x1ff, 0x0, 0x6, 0xa25, 0xff, 0x10000, 0xffffffff, 0x9, 0x1c0, 0x5, 0xb74, 0xc, 0x400, 0x8, 0x2, 0x2, 0x7ff, 0x1, 0x1ff, 0xcb1e, 0x1, 0x800, 0x2, 0xd, 0x3, 0xf, 0x7, 0x4e04b1b4, 0x2, 0x100, 0x40, 0xf1, 0x2, 0xe, 0xffff, 0x6, 0x8, 0x0, 0xbf745da, 0xffff, 0x1, 0x7, 0x3, 0xb, 0x8001, 0x3, 0x80000, 0x6, 0x8001, 0x81, 0xa, 0x4, 0x8d, 0x7, 0x4, 0x7ff, 0x5, 0xf97, 0xffffffff, 0x0, 0x401, 0x6, 0x1ff, 0x0, 0x2, 0x7f, 0x7ff, 0x2, 0x4, 0xffffffff, 0x167d, 0x400, 0x2, 0x6, 0x3, 0x5, 0x4ead, 0x2, 0x7f, 0x21fd7d94, 0x0, 0x400, 0xb846, 0x6020184, 0x2f99, 0x0, 0x10, 0x1, 0x7, 0xc, 0x8000, 0x8, 0x0, 0x5, 0x6, 0xa, 0xfffffffe, 0x8729, 0xfb, 0x9, 0x6, 0x6, 0xff, 0x101, 0x40, 0x7, 0x52, 0xc, 0x7, 0xffffffff, 0x3, 0x4, 0x2, 0x1, 0x5, 0x3, 0x1, 0x9, 0x2, 0x2, 0xe5, 0xfffffff8, 0xc731, 0x9, 0x400, 0x401, 0x8, 0x10000, 0x80000001, 0xe, 0x8, 0x4, 0x7, 0x9, 0x6, 0x8, 0x3459, 0x9, 0x400, 0x2, 0x0, 0x7fff, 0x5, 0x400, 0x29ce000, 0x8, 0x1, 0xf, 0x3ff, 0x3, 0xb, 0x1, 0x67e2, 0x7, 0x40, 0xfffffffa, 0x101, 0x2, 0x18000, 0xa, 0xb106, 0x8482, 0xff18, 0x9, 0x100, 0x5558, 0x4, 0x9b, 0x7, 0x5, 0x2, 0x8, 0x7ff, 0x7, 0xf, 0x200, 0xc, 0x100, 0x2, 0x10000, 0xfff, 0x813, 0x5, 0xe47, 0x4, 0x10001, 0xff, 0xefc, 0x1, 0x9, 0x7e, 0x0, 0x7, 0x5, 0x9, 0xfff, 0x4, 0x3, 0x0, 0x1, 0x6, 0x2, 0x1]})
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x5}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000001080)={0xa, 0x4e20, 0x7f, @empty, 0x2}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10100, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setitimer(0x0, 0x0, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
memfd_create(&(0x7f0000000040)='lo\x00a\xa5Hb<\x94\x0e\xb4\x86\xf1\x8f\x03\xa9\xb2\x8fUy\xb9X\xe8#\x1a\xa9\ad\x8e\xd1\x9c@\x9e\xdax\xf2l\xc0\xde%\x97<\xcf\x9a\f\xd8E\x03\x81i\xa8cOR\x8b`\n9\xfa\xb9R\xdb\xd9\xabq\x00\x9f\x0fn\xd8Z\x9a{s\xb7\xe0C\x9d\xab\xa4\xda\xf9R\xf3\x01\xd93\xfc\xfa\x85\xcd\xca\x8eO\xa4\x99\v0\xd0\xee;#\xd4\\7\x87\x10o\xdb\xfb?ed\xa9G\xccP\x99Td\xa4\x1e\x9d\xc6]\xa7j\\\x94\xa8\x11H\'T\x0e\x15|d,\xd0\xfdaT\x02\xf7\xa8E\xbaRb\x9d\xee\xd9\xe2d\xfdW\xde\x1b\x9fy\xab\xdc\f\xf2\xaac\x82XE\xd4', 0x5)
ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000001f00))
sendmmsg(r7, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="f5b3", 0x2}], 0x1}}], 0x1, 0x4009040)

1.538371439s ago: executing program 1 (id=3207):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x2400c080)

1.433540402s ago: executing program 1 (id=3208):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10)

1.356051614s ago: executing program 1 (id=3209):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

1.341728824s ago: executing program 0 (id=3210):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0x0, 0xfff1}, {0x1001d, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xffffffff, 0xff000000]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffff, 0xfffffffe}, 0x37)
r6 = syz_io_uring_setup(0x496, &(0x7f0000000540)={0x0, 0x4660, 0x80, 0x3, 0x285}, &(0x7f00000004c0)=<r7=>0x0, &(0x7f0000000680)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0})
io_uring_enter(r6, 0x3498, 0x969, 0x0, 0x0, 0x0)
dup3(r6, r5, 0x80000)

1.286701144s ago: executing program 1 (id=3211):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x24, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]]}, 0x24}}, 0x4000054)
r8 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0xba87317d461c07c9, 0x70bd2d, 0x4004}, 0x14}}, 0x4009080)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)

1.197845596s ago: executing program 0 (id=3212):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20002}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0xdfb, 0x9, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="8b33000000000000000005"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r8, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

977.762491ms ago: executing program 0 (id=3215):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000040000000000d3f6850bc93a2744000000000000999c0000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000340)=0x4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x807fd, 0xfffffffffffffee1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

680.352536ms ago: executing program 5 (id=3221):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_open_dev$tty20(0xc, 0x4, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x20)
socket$kcm(0x29, 0x2, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00')
openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000100)=0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)

602.756808ms ago: executing program 5 (id=3223):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0x0, 0xfff1}, {0x1001d, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xffffffff, 0xff000000]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffff, 0xfffffffe}, 0x37)
r6 = syz_io_uring_setup(0x496, &(0x7f0000000540)={0x0, 0x4660, 0x80, 0x3, 0x285}, &(0x7f00000004c0)=<r7=>0x0, &(0x7f0000000680)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0})
io_uring_enter(r6, 0x3498, 0x969, 0x0, 0x0, 0x0)
dup3(r6, r5, 0x80000)

460.95882ms ago: executing program 5 (id=3225):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f)

372.352522ms ago: executing program 5 (id=3226):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)}], 0x1}, 0xc0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)

357.800403ms ago: executing program 3 (id=3227):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0)

295.976594ms ago: executing program 3 (id=3228):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50)

253.446204ms ago: executing program 3 (id=3229):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
flock(r1, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
dup3(r2, r1, 0x0)

199.212896ms ago: executing program 5 (id=3230):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="2e00000010008188e6c22aa732c992f81bc37048110000005e140602000000000e000a001000000002900000121f1d969213e34477c5a57c30fe2f440ef2f3d94e6c770d71673d9530aeae66a9e717524b29fe591083a0a3e399abb4ed46d161e7d5059e7812f0b727d8ce13035ea849e831f877daa8fbba4f17830164e80381fc53f13ffd0f75fe132c5eb2cf54a0b713b54706b6168400f773195075e6d6a7be053713558e417cdbc3e711be6a154bf5d11c7a573e7922f557815407b62c3383fe0fd54b4f55b150dc8143277533c03b563ead36c7188b3f72acd2fa7ac42c54b1040bf45629d94d28f76b7844", 0xee}], 0x1}, 0xc0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)

185.466396ms ago: executing program 3 (id=3231):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10)

86.935438ms ago: executing program 5 (id=3232):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000040000000000d3f6850bc93a2744000000000000999c0000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000340)=0x4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x807fd, 0xfffffffffffffee1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

55.654928ms ago: executing program 3 (id=3233):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50)

0s ago: executing program 3 (id=3234):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf21670000000800c400020000000800c3"], 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

romiscuous mode
[  199.053585][T11691] syzkaller0 (unregistering): left allmulticast mode
[  199.053703][T11691] syzkaller0 (unregistering): left promiscuous mode
[  199.311712][T11723] syzkaller0: entered allmulticast mode
[  199.335693][T11723] syzkaller0: entered promiscuous mode
[  199.342749][T11723] syzkaller0 (unregistering): left allmulticast mode
[  199.342775][T11723] syzkaller0 (unregistering): left promiscuous mode
[  199.586453][T11744] team0: Device gtp0 is of different type
[  199.666036][T11746] lo speed is unknown, defaulting to 1000
[  199.673362][T11746] lo speed is unknown, defaulting to 1000
[  199.736871][T11745] lo speed is unknown, defaulting to 1000
[  199.744096][T11745] lo speed is unknown, defaulting to 1000
[  200.243285][T11776] FAULT_INJECTION: forcing a failure.
[  200.243285][T11776] name failslab, interval 1, probability 0, space 0, times 0
[  200.256014][T11776] CPU: 0 UID: 0 PID: 11776 Comm: syz.1.2402 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  200.256065][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  200.256078][T11776] Call Trace:
[  200.256085][T11776]  <TASK>
[  200.256093][T11776]  __dump_stack+0x1d/0x30
[  200.256142][T11776]  dump_stack_lvl+0xe8/0x140
[  200.256181][T11776]  dump_stack+0x15/0x1b
[  200.256214][T11776]  should_fail_ex+0x265/0x280
[  200.256305][T11776]  should_failslab+0x8c/0xb0
[  200.256362][T11776]  kmem_cache_alloc_noprof+0x50/0x480
[  200.256426][T11776]  ? getname_flags+0x80/0x3b0
[  200.256462][T11776]  getname_flags+0x80/0x3b0
[  200.256494][T11776]  do_sys_openat2+0x60/0x110
[  200.256615][T11776]  __x64_sys_openat+0xf2/0x120
[  200.256650][T11776]  x64_sys_call+0x2eab/0x3000
[  200.256711][T11776]  do_syscall_64+0xd2/0x200
[  200.256737][T11776]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  200.256764][T11776]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  200.256869][T11776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.256896][T11776] RIP: 0033:0x7f5bf9f7eec9
[  200.256961][T11776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.256978][T11776] RSP: 002b:00007f5bf89df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  200.256998][T11776] RAX: ffffffffffffffda RBX: 00007f5bfa1d5fa0 RCX: 00007f5bf9f7eec9
[  200.257013][T11776] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c
[  200.257024][T11776] RBP: 00007f5bf89df090 R08: 0000000000000000 R09: 0000000000000000
[  200.257036][T11776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.257047][T11776] R13: 00007f5bfa1d6038 R14: 00007f5bfa1d5fa0 R15: 00007ffe92fb1a48
[  200.257066][T11776]  </TASK>
[  200.868115][T11810] FAULT_INJECTION: forcing a failure.
[  200.868115][T11810] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.881343][T11810] CPU: 1 UID: 0 PID: 11810 Comm: syz.3.2413 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  200.881378][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  200.881390][T11810] Call Trace:
[  200.881462][T11810]  <TASK>
[  200.881470][T11810]  __dump_stack+0x1d/0x30
[  200.881515][T11810]  dump_stack_lvl+0xe8/0x140
[  200.881557][T11810]  dump_stack+0x15/0x1b
[  200.881594][T11810]  should_fail_ex+0x265/0x280
[  200.881680][T11810]  should_fail+0xb/0x20
[  200.881718][T11810]  should_fail_usercopy+0x1a/0x20
[  200.881742][T11810]  _copy_from_user+0x1c/0xb0
[  200.881845][T11810]  ___sys_sendmsg+0xc1/0x1d0
[  200.881909][T11810]  __x64_sys_sendmsg+0xd4/0x160
[  200.881932][T11810]  x64_sys_call+0x191e/0x3000
[  200.881953][T11810]  do_syscall_64+0xd2/0x200
[  200.881986][T11810]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  200.882090][T11810]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  200.882119][T11810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.882146][T11810] RIP: 0033:0x7fdc3ff0eec9
[  200.882165][T11810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.882182][T11810] RSP: 002b:00007fdc3e94e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.882258][T11810] RAX: ffffffffffffffda RBX: 00007fdc40166090 RCX: 00007fdc3ff0eec9
[  200.882269][T11810] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 000000000000000b
[  200.882281][T11810] RBP: 00007fdc3e94e090 R08: 0000000000000000 R09: 0000000000000000
[  200.882292][T11810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.882303][T11810] R13: 00007fdc40166128 R14: 00007fdc40166090 R15: 00007ffd8ee4d6e8
[  200.882322][T11810]  </TASK>
[  201.074660][T11811] lo speed is unknown, defaulting to 1000
[  201.082295][T11811] lo speed is unknown, defaulting to 1000
[  201.291378][T11808] __nla_validate_parse: 12 callbacks suppressed
[  201.291406][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2417'.
[  201.339552][T11808] team0: Port device vlan0 removed
[  201.633425][   T29] kauditd_printk_skb: 328 callbacks suppressed
[  201.633452][   T29] audit: type=1326 audit(1759634436.738:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11828 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  201.633486][   T29] audit: type=1326 audit(1759634436.738:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11828 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  201.634756][   T29] audit: type=1326 audit(1759634436.738:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11828 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  201.634979][   T29] audit: type=1326 audit(1759634436.738:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11828 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  201.643711][   T29] audit: type=1326 audit(1759634436.748:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11828 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  201.643856][   T29] audit: type=1326 audit(1759634436.748:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11828 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  201.643965][   T29] audit: type=1326 audit(1759634436.748:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11828 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  201.651040][   T29] audit: type=1326 audit(1759634436.759:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11828 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  201.651460][   T29] audit: type=1326 audit(1759634436.759:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11828 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  201.651572][   T29] audit: type=1326 audit(1759634436.759:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11828 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  201.847370][T11841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2429'.
[  202.247889][T11855] lo speed is unknown, defaulting to 1000
[  202.254874][T11855] lo speed is unknown, defaulting to 1000
[  214.390661][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'.
[  214.437112][T11869] netlink: 'syz.0.2441': attribute type 10 has an invalid length.
[  214.573074][T11870] block device autoloading is deprecated and will be removed.
[  214.605136][T11881] lo speed is unknown, defaulting to 1000
[  214.612824][T11881] lo speed is unknown, defaulting to 1000
[  214.718670][T11880] sock: sock_timestamping_bind_phc: sock not bind to device
[  214.822180][   T29] kauditd_printk_skb: 25 callbacks suppressed
[  214.822199][   T29] audit: type=1326 audit(1759634450.612:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf9f7eec9 code=0x7ffc0000
[  214.949588][   T29] audit: type=1326 audit(1759634450.654:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf9f7eec9 code=0x7ffc0000
[  214.973180][   T29] audit: type=1326 audit(1759634450.654:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf9f7eec9 code=0x7ffc0000
[  214.976797][T11879] unsupported nla_type 52263
[  214.996798][   T29] audit: type=1326 audit(1759634450.654:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf9f7eec9 code=0x7ffc0000
[  214.996908][   T29] audit: type=1326 audit(1759634450.654:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f5bf9f7eec9 code=0x7ffc0000
[  214.996945][   T29] audit: type=1326 audit(1759634450.654:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf9f7eec9 code=0x7ffc0000
[  214.996978][   T29] audit: type=1326 audit(1759634450.654:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf9f7eec9 code=0x7ffc0000
[  215.095979][   T29] audit: type=1326 audit(1759634450.654:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5bf9f7eec9 code=0x7ffc0000
[  215.120259][   T29] audit: type=1326 audit(1759634450.654:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5bf9f7ef03 code=0x7ffc0000
[  215.143681][   T29] audit: type=1326 audit(1759634450.654:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5bf9f7ef03 code=0x7ffc0000
[  215.283671][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2452'.
[  215.372580][T11917] lo speed is unknown, defaulting to 1000
[  215.379271][T11917] lo speed is unknown, defaulting to 1000
[  215.421661][T11922] block device autoloading is deprecated and will be removed.
[  215.475225][T11931] netlink: 'syz.0.2460': attribute type 10 has an invalid length.
[  215.503044][T11929] syzkaller0: entered allmulticast mode
[  215.522842][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2462'.
[  215.588359][T11940] sock: sock_timestamping_bind_phc: sock not bind to device
[  215.596548][T11929] syzkaller0: entered promiscuous mode
[  215.605192][T11929] syzkaller0 (unregistering): left allmulticast mode
[  215.612182][T11929] syzkaller0 (unregistering): left promiscuous mode
[  215.830553][T11978] FAULT_INJECTION: forcing a failure.
[  215.830553][T11978] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  215.843970][T11978] CPU: 1 UID: 0 PID: 11978 Comm: syz.3.2472 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  215.844002][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  215.844017][T11978] Call Trace:
[  215.844027][T11978]  <TASK>
[  215.844036][T11978]  __dump_stack+0x1d/0x30
[  215.844078][T11978]  dump_stack_lvl+0xe8/0x140
[  215.844117][T11978]  dump_stack+0x15/0x1b
[  215.844213][T11978]  should_fail_ex+0x265/0x280
[  215.844390][T11978]  should_fail_alloc_page+0xf2/0x100
[  215.844422][T11978]  __alloc_frozen_pages_noprof+0xff/0x360
[  215.844521][T11978]  alloc_pages_mpol+0xb3/0x260
[  215.844562][T11978]  alloc_migration_target_by_mpol+0x11b/0x280
[  215.844594][T11978]  migrate_pages_batch+0x349/0x1b60
[  215.844632][T11978]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  215.844684][T11978]  ? __walk_page_range+0x324/0x340
[  215.844716][T11978]  ? mas_ascend+0x1e9/0x560
[  215.844747][T11978]  ? find_vma+0x6c/0xa0
[  215.844785][T11978]  migrate_pages+0xf55/0x1760
[  215.844935][T11978]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  215.844974][T11978]  __se_sys_mbind+0x975/0xac0
[  215.845022][T11978]  __x64_sys_mbind+0x78/0x90
[  215.845060][T11978]  x64_sys_call+0x2936/0x3000
[  215.845179][T11978]  do_syscall_64+0xd2/0x200
[  215.845214][T11978]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  215.845250][T11978]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  215.845279][T11978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.845387][T11978] RIP: 0033:0x7fdc3ff0eec9
[  215.845406][T11978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.845429][T11978] RSP: 002b:00007fdc3e96f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  215.845453][T11978] RAX: ffffffffffffffda RBX: 00007fdc40165fa0 RCX: 00007fdc3ff0eec9
[  215.845468][T11978] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[  215.845484][T11978] RBP: 00007fdc3e96f090 R08: 0000000000000000 R09: 0000000000000002
[  215.845537][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.845553][T11978] R13: 00007fdc40166038 R14: 00007fdc40165fa0 R15: 00007ffd8ee4d6e8
[  215.845578][T11978]  </TASK>
[  216.112091][T11993] team0: Device gtp0 is of different type
[  216.180707][T12005] syzkaller0: entered allmulticast mode
[  216.200649][T12005] syzkaller0: entered promiscuous mode
[  216.214326][T12005] syzkaller0 (unregistering): left allmulticast mode
[  216.221136][T12005] syzkaller0 (unregistering): left promiscuous mode
[  216.263257][T12013] sock: sock_timestamping_bind_phc: sock not bind to device
[  216.305990][T12016] block device autoloading is deprecated and will be removed.
[  216.352163][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'.
[  216.371557][T12019] sock: sock_timestamping_bind_phc: sock not bind to device
[  216.443956][T12028] lo speed is unknown, defaulting to 1000
[  216.451647][T12028] lo speed is unknown, defaulting to 1000
[  216.625947][T12032] netlink: 'syz.2.2489': attribute type 10 has an invalid length.
[  217.130968][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2498'.
[  217.236731][T12072] sock: sock_timestamping_bind_phc: sock not bind to device
[  217.247182][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2498'.
[  217.397140][T12098] sock: sock_timestamping_bind_phc: sock not bind to device
[  217.432122][T12105] syzkaller0: entered allmulticast mode
[  217.475726][T12105] syzkaller0: entered promiscuous mode
[  217.492163][T12105] syzkaller0 (unregistering): left allmulticast mode
[  217.499215][T12105] syzkaller0 (unregistering): left promiscuous mode
[  217.536520][T12117] siw: device registration error -23
[  217.626642][T12124] team0: Device gtp1 is of different type
[  217.801740][T12150] syzkaller0: entered allmulticast mode
[  217.823924][T12150] syzkaller0: entered promiscuous mode
[  217.831490][T12150] syzkaller0 (unregistering): left allmulticast mode
[  217.838312][T12150] syzkaller0 (unregistering): left promiscuous mode
[  217.982109][T12162] netlink: 'syz.2.2528': attribute type 10 has an invalid length.
[  218.002902][T12162] bond0: (slave dummy0): Releasing backup interface
[  218.030416][T12166] netlink: 'syz.2.2528': attribute type 10 has an invalid length.
[  218.042325][T12162] team0: Port device dummy0 added
[  218.067070][T12166] team0: Port device dummy0 removed
[  218.094874][T12166] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  218.216373][T12182] FAULT_INJECTION: forcing a failure.
[  218.216373][T12182] name failslab, interval 1, probability 0, space 0, times 0
[  218.229107][T12182] CPU: 0 UID: 0 PID: 12182 Comm: syz.2.2534 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  218.229144][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  218.229156][T12182] Call Trace:
[  218.229163][T12182]  <TASK>
[  218.229171][T12182]  __dump_stack+0x1d/0x30
[  218.229278][T12182]  dump_stack_lvl+0xe8/0x140
[  218.229309][T12182]  dump_stack+0x15/0x1b
[  218.229409][T12182]  should_fail_ex+0x265/0x280
[  218.229453][T12182]  should_failslab+0x8c/0xb0
[  218.229504][T12182]  kmem_cache_alloc_noprof+0x50/0x480
[  218.229535][T12182]  ? skb_clone+0x151/0x1f0
[  218.229560][T12182]  skb_clone+0x151/0x1f0
[  218.229583][T12182]  __netlink_deliver_tap+0x2c9/0x500
[  218.229695][T12182]  netlink_unicast+0x66b/0x690
[  218.229735][T12182]  netlink_sendmsg+0x58b/0x6b0
[  218.229759][T12182]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.229777][T12182]  __sock_sendmsg+0x145/0x180
[  218.229838][T12182]  ____sys_sendmsg+0x31e/0x4e0
[  218.229866][T12182]  ___sys_sendmsg+0x17b/0x1d0
[  218.229903][T12182]  __x64_sys_sendmsg+0xd4/0x160
[  218.229941][T12182]  x64_sys_call+0x191e/0x3000
[  218.230041][T12182]  do_syscall_64+0xd2/0x200
[  218.230070][T12182]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  218.230102][T12182]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  218.230153][T12182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.230174][T12182] RIP: 0033:0x7f22a994eec9
[  218.230191][T12182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.230283][T12182] RSP: 002b:00007f22a83b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.230306][T12182] RAX: ffffffffffffffda RBX: 00007f22a9ba5fa0 RCX: 00007f22a994eec9
[  218.230321][T12182] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006
[  218.230336][T12182] RBP: 00007f22a83b7090 R08: 0000000000000000 R09: 0000000000000000
[  218.230350][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.230421][T12182] R13: 00007f22a9ba6038 R14: 00007f22a9ba5fa0 R15: 00007fff67947608
[  218.230443][T12182]  </TASK>
[  218.573137][T12183] Falling back ldisc for ttyS3.
[  218.952156][T12192] sock: sock_timestamping_bind_phc: sock not bind to device
[  219.185647][T12210] block device autoloading is deprecated and will be removed.
[  219.211392][T12216] team0: Device gtp0 is of different type
[  219.326082][T12221] sock: sock_timestamping_bind_phc: sock not bind to device
[  219.355127][T12227] sock: sock_timestamping_bind_phc: sock not bind to device
[  219.392101][T12237] netlink: 'syz.0.2553': attribute type 5 has an invalid length.
[  219.399900][T12237] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2553'.
[  219.467262][T12237] macvtap0: refused to change device tx_queue_len
[  219.489394][T12237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2553'.
[  219.553580][T12250] netlink: 'syz.0.2557': attribute type 10 has an invalid length.
[  219.630210][T12258] lo speed is unknown, defaulting to 1000
[  219.636794][T12258] lo speed is unknown, defaulting to 1000
[  219.882742][T12271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2565'.
[  219.901540][T12266] sock: sock_timestamping_bind_phc: sock not bind to device
[  219.945013][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'.
[  219.975203][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2565'.
[  220.008504][T12282] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2568'.
[  220.317034][T12302] lo speed is unknown, defaulting to 1000
[  220.325687][T12302] lo speed is unknown, defaulting to 1000
[  220.818443][T12307] netlink: 'syz.3.2576': attribute type 10 has an invalid length.
[  220.827698][T12307] bond0: (slave dummy0): Releasing backup interface
[  220.932862][T12307] dummy0: entered promiscuous mode
[  220.938312][T12307] team0: Port device dummy0 added
[  220.955347][T12311] netlink: 'syz.3.2576': attribute type 10 has an invalid length.
[  221.101915][T12314] sock: sock_timestamping_bind_phc: sock not bind to device
[  221.109452][   T29] kauditd_printk_skb: 488 callbacks suppressed
[  221.109468][   T29] audit: type=1326 audit(1759634457.206:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  221.139439][   T29] audit: type=1326 audit(1759634457.206:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  221.162993][   T29] audit: type=1326 audit(1759634457.206:6578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  221.186680][   T29] audit: type=1326 audit(1759634457.206:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  221.218821][T12311] dummy0: left promiscuous mode
[  221.247657][   T29] audit: type=1326 audit(1759634457.248:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  221.267265][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'.
[  221.271786][   T29] audit: type=1326 audit(1759634457.248:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  221.305927][   T29] audit: type=1326 audit(1759634457.248:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  221.329478][   T29] audit: type=1326 audit(1759634457.248:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  221.353076][   T29] audit: type=1326 audit(1759634457.258:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  221.376654][   T29] audit: type=1326 audit(1759634457.258:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  221.455220][T12311] team0: Port device dummy0 removed
[  221.462867][T12311] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  221.482919][T12316] lo speed is unknown, defaulting to 1000
[  221.489503][T12316] lo speed is unknown, defaulting to 1000
[  221.576709][T12333] IPv6: Can't replace route, no match found
[  221.590613][T12333] vlan2: entered allmulticast mode
[  221.628333][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'.
[  221.946470][T12346] sock: sock_timestamping_bind_phc: sock not bind to device
[  222.091094][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'.
[  222.370098][T12374] netlink: 'syz.5.2602': attribute type 10 has an invalid length.
[  222.370616][T12374] bond0: (slave dummy0): Releasing backup interface
[  222.372894][T12374] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  222.372951][T12374] team0: Failed to send options change via netlink (err -105)
[  222.372972][T12374] team0: Port device dummy0 added
[  222.381674][T12374] netlink: 'syz.5.2602': attribute type 10 has an invalid length.
[  222.388723][T12377] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2603'.
[  222.420502][T12374] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  222.443846][T12371] sock: sock_timestamping_bind_phc: sock not bind to device
[  222.453845][T12374] team0: Failed to send options change via netlink (err -105)
[  222.467021][T12380] sock: sock_timestamping_bind_phc: sock not bind to device
[  222.493758][T12374] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  222.504793][T12374] team0: Port device dummy0 removed
[  222.512947][T12374] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  222.596247][T12395] block device autoloading is deprecated and will be removed.
[  222.636956][T12404] loop2: detected capacity change from 0 to 164
[  222.737822][T12419] lo speed is unknown, defaulting to 1000
[  222.745864][T12419] lo speed is unknown, defaulting to 1000
[  222.772483][T12420] sock: sock_timestamping_bind_phc: sock not bind to device
[  222.992249][T12446] FAULT_INJECTION: forcing a failure.
[  222.992249][T12446] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  223.005666][T12446] CPU: 0 UID: 0 PID: 12446 Comm: syz.1.2626 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  223.005700][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  223.005716][T12446] Call Trace:
[  223.005724][T12446]  <TASK>
[  223.005733][T12446]  __dump_stack+0x1d/0x30
[  223.005836][T12446]  dump_stack_lvl+0xe8/0x140
[  223.005875][T12446]  dump_stack+0x15/0x1b
[  223.005912][T12446]  should_fail_ex+0x265/0x280
[  223.005950][T12446]  should_fail_alloc_page+0xf2/0x100
[  223.005976][T12446]  __alloc_frozen_pages_noprof+0xff/0x360
[  223.006025][T12446]  alloc_pages_mpol+0xb3/0x260
[  223.006096][T12446]  alloc_migration_target_by_mpol+0x11b/0x280
[  223.006124][T12446]  migrate_pages_batch+0x349/0x1b60
[  223.006153][T12446]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  223.006182][T12446]  ? __walk_page_range+0x324/0x340
[  223.006262][T12446]  ? mas_ascend+0x1e9/0x560
[  223.006289][T12446]  ? find_vma+0x6c/0xa0
[  223.006320][T12446]  migrate_pages+0xf55/0x1760
[  223.006374][T12446]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  223.006417][T12446]  __se_sys_mbind+0x975/0xac0
[  223.006526][T12446]  __x64_sys_mbind+0x78/0x90
[  223.006561][T12446]  x64_sys_call+0x2936/0x3000
[  223.006584][T12446]  do_syscall_64+0xd2/0x200
[  223.006648][T12446]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  223.006680][T12446]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  223.006724][T12446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.006751][T12446] RIP: 0033:0x7f5bf9f7eec9
[  223.006836][T12446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.006932][T12446] RSP: 002b:00007f5bf89df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  223.006952][T12446] RAX: ffffffffffffffda RBX: 00007f5bfa1d5fa0 RCX: 00007f5bf9f7eec9
[  223.006963][T12446] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[  223.006975][T12446] RBP: 00007f5bf89df090 R08: 0000000000000000 R09: 0000000000000002
[  223.007057][T12446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.007072][T12446] R13: 00007f5bfa1d6038 R14: 00007f5bfa1d5fa0 R15: 00007ffe92fb1a48
[  223.007165][T12446]  </TASK>
[  223.343547][T12454] team0: Device gtp0 is of different type
[  223.407884][T12456] sock: sock_timestamping_bind_phc: sock not bind to device
[  223.523667][T12471] syzkaller0: entered allmulticast mode
[  223.572631][T12471] syzkaller0: entered promiscuous mode
[  223.589515][T12471] syzkaller0 (unregistering): left allmulticast mode
[  223.596550][T12471] syzkaller0 (unregistering): left promiscuous mode
[  223.639600][T12480] siw: device registration error -23
[  223.657932][T12478] netlink: 'syz.1.2638': attribute type 10 has an invalid length.
[  223.703819][T12478] bond0: (slave dummy0): Releasing backup interface
[  223.706185][T12483] netlink: 'syz.1.2638': attribute type 10 has an invalid length.
[  223.732432][T12478] team0: Port device dummy0 added
[  223.764664][T12483] team0: Port device dummy0 removed
[  223.778337][T12483] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  223.825591][T12492] loop2: detected capacity change from 0 to 1024
[  223.832814][T12492] EXT4-fs: Ignoring removed bh option
[  223.842908][T12492] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  223.881579][T12492] EXT4-fs mount: 8 callbacks suppressed
[  223.881598][T12492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.888034][T12497] sock: sock_timestamping_bind_phc: sock not bind to device
[  223.966725][T12514] netlink: 'syz.3.2650': attribute type 10 has an invalid length.
[  223.976186][T12515] IPv6: Can't replace route, no match found
[  223.991406][T12514] bond0: (slave dummy0): Releasing backup interface
[  224.000977][T12514] dummy0: entered promiscuous mode
[  224.006765][T12514] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  224.016774][T12518] netlink: 'syz.3.2650': attribute type 10 has an invalid length.
[  224.024843][T12514] team0: Failed to send options change via netlink (err -105)
[  224.032444][T12514] team0: Port device dummy0 added
[  224.041788][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.054455][T12515] vlan0: entered allmulticast mode
[  224.074190][T12518] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  224.100925][T12518] dummy0: left promiscuous mode
[  224.113497][T12518] team0: Failed to send options change via netlink (err -105)
[  224.132038][T12518] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  224.165276][T12518] team0: Port device dummy0 removed
[  224.173152][T12518] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  224.186060][T12530] netlink: 'syz.5.2657': attribute type 10 has an invalid length.
[  224.198871][T12530] bond0: (slave dummy0): Releasing backup interface
[  224.205264][T12532] __nla_validate_parse: 1 callbacks suppressed
[  224.205370][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'.
[  224.223711][T12530] team0: Port device dummy0 added
[  224.239878][T12530] netlink: 'syz.5.2657': attribute type 10 has an invalid length.
[  224.252750][T12530] team0: Port device dummy0 removed
[  224.262709][T12530] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  224.336127][T12545] loop2: detected capacity change from 0 to 1024
[  224.349503][T12545] EXT4-fs: Ignoring removed bh option
[  224.357661][T12545] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  224.376179][T12545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.469048][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.641806][T12561] lo speed is unknown, defaulting to 1000
[  224.648454][T12561] lo speed is unknown, defaulting to 1000
[  224.744910][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'.
[  224.748796][T12570] netlink: 'syz.2.2672': attribute type 10 has an invalid length.
[  224.769042][T12571] netlink: 'syz.0.2671': attribute type 10 has an invalid length.
[  224.789067][T12570] bond0: (slave dummy0): Releasing backup interface
[  224.809727][T12577] netlink: 'syz.2.2672': attribute type 10 has an invalid length.
[  224.819211][T12579] netlink: 'syz.0.2671': attribute type 10 has an invalid length.
[  224.822184][T12570] team0: Port device dummy0 added
[  224.854291][T12571] bond0: (slave dummy0): Releasing backup interface
[  224.869216][T12583] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2677'.
[  224.869424][T12571] team0: Failed to send options change via netlink (err -105)
[  224.885880][T12571] team0: Port device dummy0 added
[  224.915746][T12577] team0: Port device dummy0 removed
[  224.931886][T12577] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  224.962747][T12579] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  224.993500][T12579] team0: Failed to send options change via netlink (err -105)
[  225.001550][T12579] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  225.019140][T12579] team0: Port device dummy0 removed
[  225.036009][T12579] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  225.048003][T12588] raw_sendmsg: syz.5.2676 forgot to set AF_INET. Fix it!
[  225.074092][T12590] sock: sock_timestamping_bind_phc: sock not bind to device
[  225.389121][T12600] lo speed is unknown, defaulting to 1000
[  225.459473][T12600] lo speed is unknown, defaulting to 1000
[  225.474526][T12608] lo speed is unknown, defaulting to 1000
[  225.541191][T12608] lo speed is unknown, defaulting to 1000
[  225.964473][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2684'.
[  226.038968][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2685'.
[  226.048213][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2685'.
[  226.057214][T12620] netlink: 'syz.5.2685': attribute type 4 has an invalid length.
[  226.097733][   T29] kauditd_printk_skb: 508 callbacks suppressed
[  226.097800][   T29] audit: type=1400 audit(1759634462.473:7094): avc:  denied  { map } for  pid=12619 comm="syz.5.2685" path="socket:[32233]" dev="sockfs" ino=32233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  226.128026][   T29] audit: type=1400 audit(1759634462.473:7095): avc:  denied  { read } for  pid=12619 comm="syz.5.2685" path="socket:[32233]" dev="sockfs" ino=32233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  226.212132][T12622] lo speed is unknown, defaulting to 1000
[  226.220822][T12622] lo speed is unknown, defaulting to 1000
[  226.255097][T12620] lo speed is unknown, defaulting to 1000
[  226.280699][T12620] lo speed is unknown, defaulting to 1000
[  226.422635][T12635] syzkaller0: entered allmulticast mode
[  226.497667][T12635] syzkaller0: entered promiscuous mode
[  226.503326][T12637] sock: sock_timestamping_bind_phc: sock not bind to device
[  226.516505][T12635] syzkaller0 (unregistering): left allmulticast mode
[  226.523499][T12635] syzkaller0 (unregistering): left promiscuous mode
[  226.567055][T12642] siw: device registration error -23
[  226.683322][T12620] netlink: 'syz.5.2685': attribute type 13 has an invalid length.
[  226.696278][   T29] audit: type=1326 audit(1759634463.104:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.3.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3ff0eec9 code=0x7ffc0000
[  226.708867][T12620] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  226.721011][   T29] audit: type=1326 audit(1759634463.104:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.3.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3ff0eec9 code=0x7ffc0000
[  226.760586][   T29] audit: type=1326 audit(1759634463.104:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.3.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc3ff0eec9 code=0x7ffc0000
[  226.784175][   T29] audit: type=1326 audit(1759634463.104:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.3.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3ff0eec9 code=0x7ffc0000
[  226.807816][   T29] audit: type=1326 audit(1759634463.104:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.3.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3ff0eec9 code=0x7ffc0000
[  226.831866][T12647] FAULT_INJECTION: forcing a failure.
[  226.831866][T12647] name failslab, interval 1, probability 0, space 0, times 0
[  226.844666][T12647] CPU: 1 UID: 0 PID: 12647 Comm: syz.3.2694 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  226.844755][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  226.844771][T12647] Call Trace:
[  226.844786][T12647]  <TASK>
[  226.844797][T12647]  __dump_stack+0x1d/0x30
[  226.844840][T12647]  dump_stack_lvl+0xe8/0x140
[  226.844877][T12647]  dump_stack+0x15/0x1b
[  226.844952][T12647]  should_fail_ex+0x265/0x280
[  226.845022][T12647]  should_failslab+0x8c/0xb0
[  226.845078][T12647]  kmem_cache_alloc_noprof+0x50/0x480
[  226.845238][T12647]  ? audit_log_start+0x342/0x720
[  226.845272][T12647]  audit_log_start+0x342/0x720
[  226.845312][T12647]  ? kstrtouint+0x76/0xc0
[  226.845354][T12647]  audit_seccomp+0x48/0x100
[  226.845399][T12647]  ? __seccomp_filter+0x82d/0x1250
[  226.845459][T12647]  __seccomp_filter+0x83e/0x1250
[  226.845490][T12647]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  226.845523][T12647]  ? vfs_write+0x7e8/0x960
[  226.845551][T12647]  ? __rcu_read_unlock+0x4f/0x70
[  226.845648][T12647]  ? __fget_files+0x184/0x1c0
[  226.845684][T12647]  __secure_computing+0x82/0x150
[  226.845783][T12647]  syscall_trace_enter+0xcf/0x1e0
[  226.845848][T12647]  do_syscall_64+0xac/0x200
[  226.845881][T12647]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  226.845912][T12647]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  226.846015][T12647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.846042][T12647] RIP: 0033:0x7fdc3ff0eec9
[  226.846056][T12647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.846122][T12647] RSP: 002b:00007fdc3e96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059
[  226.846145][T12647] RAX: ffffffffffffffda RBX: 00007fdc40165fa0 RCX: 00007fdc3ff0eec9
[  226.846160][T12647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  226.846172][T12647] RBP: 00007fdc3e96f090 R08: 0000000000000000 R09: 0000000000000000
[  226.846220][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.846233][T12647] R13: 00007fdc40166038 R14: 00007fdc40165fa0 R15: 00007ffd8ee4d6e8
[  226.846333][T12647]  </TASK>
[  226.846342][T12647] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64
[  227.066983][T12647] audit: out of memory in audit_log_start
[  227.074698][   T29] audit: type=1326 audit(1759634463.241:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.3.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc3ff0d710 code=0x7ffc0000
[  227.139071][T12656] lo speed is unknown, defaulting to 1000
[  227.145926][T12656] lo speed is unknown, defaulting to 1000
[  227.228386][T12663] loop2: detected capacity change from 0 to 512
[  227.287611][T12663] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  227.375832][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2703'.
[  227.499598][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2703'.
[  227.590662][T12689] sock: sock_timestamping_bind_phc: sock not bind to device
[  227.621156][T12695] netlink: 'syz.5.2711': attribute type 10 has an invalid length.
[  227.771151][T12704] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2713'.
[  228.262896][T12719] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.270286][T12719] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.320714][T12719] bridge0: entered allmulticast mode
[  228.326373][T12685] loop2: detected capacity change from 0 to 32768
[  228.395274][T12719] bridge_slave_1: left allmulticast mode
[  228.401025][T12719] bridge_slave_1: left promiscuous mode
[  228.401209][T12719] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.404654][T12685]  loop2: p1 p3 < >
[  228.426899][T12719] bridge_slave_0: left allmulticast mode
[  228.432586][T12719] bridge_slave_0: left promiscuous mode
[  228.438333][T12719] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.102285][T12749] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2730'.
[  229.265910][T12760] syzkaller0: entered allmulticast mode
[  229.321598][T12760] syzkaller0: entered promiscuous mode
[  229.342907][T12760] syzkaller0 (unregistering): left allmulticast mode
[  229.350048][T12760] syzkaller0 (unregistering): left promiscuous mode
[  229.389794][T12763] siw: device registration error -23
[  229.576775][T12779] sock: sock_timestamping_bind_phc: sock not bind to device
[  229.666079][T12784] sock: sock_timestamping_bind_phc: sock not bind to device
[  229.685876][T12758] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2732'.
[  229.720746][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'.
[  229.789626][T12792] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.796912][T12792] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.866589][T12792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.918923][   T37] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.937677][   T37] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.967761][   T37] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.976319][   T37] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.073974][T12803] cgroup: No subsys list or none specified
[  230.100539][T12801] syzkaller0: entered allmulticast mode
[  230.168831][T12801] syzkaller0: entered promiscuous mode
[  230.186972][T12801] syzkaller0 (unregistering): left allmulticast mode
[  230.193760][T12801] syzkaller0 (unregistering): left promiscuous mode
[  230.208041][T12782] loop2: detected capacity change from 0 to 32768
[  230.243647][T12816] siw: device registration error -23
[  230.263722][T12782]  loop2: p1 p3 < >
[  230.271716][T12821] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2755'.
[  230.357854][T12832] netlink: 'syz.5.2760': attribute type 10 has an invalid length.
[  230.377151][T12830] FAULT_INJECTION: forcing a failure.
[  230.377151][T12830] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.390444][T12830] CPU: 0 UID: 0 PID: 12830 Comm: syz.0.2759 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  230.390495][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  230.390556][T12830] Call Trace:
[  230.390561][T12830]  <TASK>
[  230.390569][T12830]  __dump_stack+0x1d/0x30
[  230.390611][T12830]  dump_stack_lvl+0xe8/0x140
[  230.390736][T12830]  dump_stack+0x15/0x1b
[  230.390769][T12830]  should_fail_ex+0x265/0x280
[  230.390804][T12830]  should_fail+0xb/0x20
[  230.390895][T12830]  should_fail_usercopy+0x1a/0x20
[  230.390915][T12830]  _copy_from_iter+0xd2/0xe80
[  230.390939][T12830]  ? __build_skb_around+0x1ab/0x200
[  230.390971][T12830]  ? __alloc_skb+0x223/0x320
[  230.391052][T12830]  netlink_sendmsg+0x471/0x6b0
[  230.391076][T12830]  ? __pfx_netlink_sendmsg+0x10/0x10
[  230.391100][T12830]  __sock_sendmsg+0x145/0x180
[  230.391131][T12830]  ____sys_sendmsg+0x31e/0x4e0
[  230.391155][T12830]  ___sys_sendmsg+0x17b/0x1d0
[  230.391239][T12830]  __x64_sys_sendmsg+0xd4/0x160
[  230.391268][T12830]  x64_sys_call+0x191e/0x3000
[  230.391309][T12830]  do_syscall_64+0xd2/0x200
[  230.391334][T12830]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  230.391361][T12830]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  230.391557][T12830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.391578][T12830] RIP: 0033:0x7f49d49eeec9
[  230.391596][T12830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.391619][T12830] RSP: 002b:00007f49d344f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.391642][T12830] RAX: ffffffffffffffda RBX: 00007f49d4c45fa0 RCX: 00007f49d49eeec9
[  230.391657][T12830] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  230.391672][T12830] RBP: 00007f49d344f090 R08: 0000000000000000 R09: 0000000000000000
[  230.391697][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.391710][T12830] R13: 00007f49d4c46038 R14: 00007f49d4c45fa0 R15: 00007ffe0d0a9de8
[  230.391733][T12830]  </TASK>
[  230.394457][T12832] bond0: (slave dummy0): Releasing backup interface
[  230.614683][T12838] netlink: 'syz.5.2760': attribute type 10 has an invalid length.
[  230.629926][T12832] team0: Port device dummy0 added
[  230.663459][T12838] team0: Port device dummy0 removed
[  230.681880][T12838] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  230.793182][T12863] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2771'.
[  230.865507][T12879] netlink: 'syz.3.2779': attribute type 10 has an invalid length.
[  230.874158][   T29] kauditd_printk_skb: 541 callbacks suppressed
[  230.874173][   T29] audit: type=1326 audit(1759634467.488:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  230.874157][T12879] bond0: (slave dummy0): Releasing backup interface
[  230.880525][   T29] audit: type=1326 audit(1759634467.488:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  230.935496][   T29] audit: type=1326 audit(1759634467.520:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  230.938055][T12882] netlink: 'syz.3.2779': attribute type 10 has an invalid length.
[  230.959259][   T29] audit: type=1326 audit(1759634467.520:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  230.959312][   T29] audit: type=1326 audit(1759634467.520:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  230.959414][   T29] audit: type=1326 audit(1759634467.520:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  231.023760][T12879] dummy0: entered promiscuous mode
[  231.040646][   T29] audit: type=1326 audit(1759634467.520:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  231.047048][T12879] team0: Port device dummy0 added
[  231.069857][   T29] audit: type=1326 audit(1759634467.520:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  231.087544][T12882] dummy0: left promiscuous mode
[  231.098566][   T29] audit: type=1326 audit(1759634467.520:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  231.098604][   T29] audit: type=1326 audit(1759634467.520:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.0.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  231.156345][T12882] team0: Port device dummy0 removed
[  231.163121][T12882] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  231.172138][T12884] netdevsim netdevsim0: Direct firmware load for € failed with error -2
[  231.221997][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'.
[  231.231088][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2784'.
[  231.270686][T12895] wireguard0: entered promiscuous mode
[  231.276256][T12895] wireguard0: entered allmulticast mode
[  231.321396][T12910] netlink: 'syz.5.2791': attribute type 10 has an invalid length.
[  231.333033][T12912] netlink: 'syz.3.2792': attribute type 10 has an invalid length.
[  231.342717][T12910] bond0: (slave dummy0): Releasing backup interface
[  231.350178][T12906] sock: sock_timestamping_bind_phc: sock not bind to device
[  231.361465][T12910] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  231.369669][T12918] netlink: 'syz.5.2791': attribute type 10 has an invalid length.
[  231.384987][T12910] team0: Failed to send options change via netlink (err -105)
[  231.393289][T12910] team0: Port device dummy0 added
[  231.435453][T12918] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  231.458248][T12918] team0: Failed to send options change via netlink (err -105)
[  231.472524][T12933] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  231.477133][T12918] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  231.490892][T12918] team0: Port device dummy0 removed
[  231.498077][T12933] IPv6: NLM_F_CREATE should be specified when creating new route
[  231.499203][T12918] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  231.516019][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2799'.
[  231.573574][T12942] netlink: 'syz.5.2803': attribute type 1 has an invalid length.
[  231.581536][T12942] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.2803'.
[  231.621164][T12951] FAULT_INJECTION: forcing a failure.
[  231.621164][T12951] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  231.634740][T12951] CPU: 1 UID: 0 PID: 12951 Comm: syz.0.2807 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  231.634769][T12951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  231.634828][T12951] Call Trace:
[  231.634833][T12951]  <TASK>
[  231.634841][T12951]  __dump_stack+0x1d/0x30
[  231.634877][T12951]  dump_stack_lvl+0xe8/0x140
[  231.634910][T12951]  dump_stack+0x15/0x1b
[  231.634969][T12951]  should_fail_ex+0x265/0x280
[  231.635002][T12951]  should_fail+0xb/0x20
[  231.635032][T12951]  should_fail_usercopy+0x1a/0x20
[  231.635062][T12951]  _copy_from_iter+0xd2/0xe80
[  231.635084][T12951]  ? __build_skb_around+0x1ab/0x200
[  231.635114][T12951]  ? __alloc_skb+0x223/0x320
[  231.635170][T12951]  netlink_sendmsg+0x471/0x6b0
[  231.635191][T12951]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.635280][T12951]  __sock_sendmsg+0x145/0x180
[  231.635309][T12951]  ____sys_sendmsg+0x31e/0x4e0
[  231.635331][T12951]  ___sys_sendmsg+0x17b/0x1d0
[  231.635363][T12951]  __x64_sys_sendmsg+0xd4/0x160
[  231.635386][T12951]  x64_sys_call+0x191e/0x3000
[  231.635406][T12951]  do_syscall_64+0xd2/0x200
[  231.635484][T12951]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  231.635510][T12951]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  231.635583][T12951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.635604][T12951] RIP: 0033:0x7f49d49eeec9
[  231.635690][T12951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.635708][T12951] RSP: 002b:00007f49d344f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.635728][T12951] RAX: ffffffffffffffda RBX: 00007f49d4c45fa0 RCX: 00007f49d49eeec9
[  231.635740][T12951] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006
[  231.635752][T12951] RBP: 00007f49d344f090 R08: 0000000000000000 R09: 0000000000000000
[  231.635764][T12951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.635776][T12951] R13: 00007f49d4c46038 R14: 00007f49d4c45fa0 R15: 00007ffe0d0a9de8
[  231.635839][T12951]  </TASK>
[  231.875778][T12949] sock: sock_timestamping_bind_phc: sock not bind to device
[  232.034242][T12962] block device autoloading is deprecated and will be removed.
[  232.139623][T12979] lo speed is unknown, defaulting to 1000
[  232.147103][T12979] lo speed is unknown, defaulting to 1000
[  232.404429][T12983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2818'.
[  232.531766][T12987] sock: sock_timestamping_bind_phc: sock not bind to device
[  232.532439][T12994] netlink: 'syz.5.2821': attribute type 4 has an invalid length.
[  232.560477][T12994] netlink: 'syz.5.2821': attribute type 4 has an invalid length.
[  232.785574][T13034] pim6reg: entered allmulticast mode
[  233.032882][T13071] bond0: (slave dummy0): Releasing backup interface
[  233.045220][T13071] team0: Port device dummy0 added
[  233.060801][T13071] team0: Port device dummy0 removed
[  233.076213][T13071] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  233.102003][T13076] netdevsim netdevsim0: Direct firmware load for € failed with error -2
[  233.207872][T13087] sock: sock_timestamping_bind_phc: sock not bind to device
[  233.284096][T13097] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.291445][T13097] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.398209][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.499725][T13097] batman_adv: batadv0: Interface deactivated: gretap1
[  233.516471][ T3358] syz1: Port: 1 Link DOWN
[  233.521093][   T52] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.556159][   T52] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.565918][   T52] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.580331][   T52] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.590710][T13036] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  233.602781][T13129] bond0: (slave dummy0): Releasing backup interface
[  233.611309][T13129] team0: Port device dummy0 added
[  233.640120][T13129] team0: Port device dummy0 removed
[  233.647077][T13129] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  233.713657][T13136] lo speed is unknown, defaulting to 1000
[  233.721331][T13136] lo speed is unknown, defaulting to 1000
[  233.910663][T13142] __nla_validate_parse: 5 callbacks suppressed
[  233.910682][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'.
[  234.058234][T13171] sock: sock_timestamping_bind_phc: sock not bind to device
[  234.167702][T13191] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2878'.
[  234.294330][T13203] syzkaller0: entered allmulticast mode
[  234.317129][T13203] syzkaller0: entered promiscuous mode
[  234.326119][T13203] syzkaller0 (unregistering): left allmulticast mode
[  234.333031][T13203] syzkaller0 (unregistering): left promiscuous mode
[  234.503945][T13217] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.511406][T13217] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.561637][T13217] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.574409][T13217] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.612951][   T36] lo speed is unknown, defaulting to 1000
[  234.616338][T13202] lo speed is unknown, defaulting to 1000
[  234.618798][   T36] syz2: Port: 1 Link DOWN
[  234.634398][ T2596] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.684851][T13232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2889'.
[  234.715292][T13233] lo speed is unknown, defaulting to 1000
[  234.740993][T13234] sock: sock_timestamping_bind_phc: sock not bind to device
[  234.778221][   T52] bridge_slave_1: left allmulticast mode
[  234.784152][   T52] bridge_slave_1: left promiscuous mode
[  234.790054][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.805967][   T52] bridge_slave_0: left allmulticast mode
[  234.811820][   T52] bridge_slave_0: left promiscuous mode
[  234.817580][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.070698][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.098763][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.110947][   T52] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  235.119767][   T52] bond0 (unregistering): Released all slaves
[  235.128962][   T52] bond1 (unregistering): Released all slaves
[  235.137853][   T52] bond2 (unregistering): Released all slaves
[  235.145977][ T2596] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.154899][T13202] lo speed is unknown, defaulting to 1000
[  235.155254][ T2596] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.170014][ T2596] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.191524][T13233] lo speed is unknown, defaulting to 1000
[  235.281729][   T52] hsr_slave_0: left promiscuous mode
[  235.295344][   T52] hsr_slave_1: left promiscuous mode
[  235.301124][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.384575][   T52] team_slave_1 (unregistering): left promiscuous mode
[  235.398696][   T52] team0 (unregistering): Port device team_slave_1 removed
[  235.398745][T13256] validate_nla: 9 callbacks suppressed
[  235.398760][T13256] netlink: 'syz.1.2897': attribute type 13 has an invalid length.
[  235.416496][   T52] team_slave_0 (unregistering): left promiscuous mode
[  235.428151][   T52] team0 (unregistering): Port device team_slave_0 removed
[  235.511625][T13246] syzkaller0: entered promiscuous mode
[  235.519316][T13248] syzkaller0 (unregistering): left promiscuous mode
[  235.670385][T13256] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.677702][T13256] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.764919][T13256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.956906][ T3387] lo speed is unknown, defaulting to 1000
[  235.962730][ T3387] syz0: Port: 1 Link DOWN
[  235.972297][ T2596] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.981314][T13258] lo speed is unknown, defaulting to 1000
[  235.995715][T13267] lo speed is unknown, defaulting to 1000
[  235.997064][T13258] lo speed is unknown, defaulting to 1000
[  236.015484][ T2596] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.037567][ T2596] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.040301][T13271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2900'.
[  236.046644][T13267] lo speed is unknown, defaulting to 1000
[  236.088413][ T2596] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.136539][T13202] chnl_net:caif_netlink_parms(): no params data found
[  236.153261][   T29] kauditd_printk_skb: 578 callbacks suppressed
[  236.153275][   T29] audit: type=1326 audit(1759634473.038:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  236.183226][   T29] audit: type=1326 audit(1759634473.038:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  236.209946][   T29] audit: type=1326 audit(1759634473.038:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  236.233570][   T29] audit: type=1326 audit(1759634473.038:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  236.257231][   T29] audit: type=1326 audit(1759634473.038:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  236.280906][   T29] audit: type=1326 audit(1759634473.038:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  236.305030][   T29] audit: type=1326 audit(1759634473.038:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  236.328638][   T29] audit: type=1326 audit(1759634473.038:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  236.366535][T13275] netdevsim netdevsim0: Direct firmware load for € failed with error -2
[  236.376960][   T29] audit: type=1326 audit(1759634473.154:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  236.400599][   T29] audit: type=1326 audit(1759634473.154:8240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a994eec9 code=0x7ffc0000
[  236.455649][T13202] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.462782][T13202] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.471544][T13290] netlink: 'syz.0.2906': attribute type 10 has an invalid length.
[  236.480270][T13202] bridge_slave_0: entered allmulticast mode
[  236.487273][T13202] bridge_slave_0: entered promiscuous mode
[  236.495004][T13202] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.502245][T13202] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.509777][T13202] bridge_slave_1: entered allmulticast mode
[  236.516872][T13202] bridge_slave_1: entered promiscuous mode
[  236.523406][T13294] netlink: 'syz.0.2906': attribute type 10 has an invalid length.
[  236.533398][T13290] bond0: (slave dummy0): Releasing backup interface
[  236.541914][T13290] team0: Port device dummy0 added
[  236.558309][T13293] syzkaller0: entered allmulticast mode
[  236.581318][T13202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.599761][T13293] syzkaller0: entered promiscuous mode
[  236.607059][T13202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.617872][T13298] netdevsim netdevsim0: Direct firmware load for € failed with error -2
[  236.627259][T13293] syzkaller0 (unregistering): left allmulticast mode
[  236.633975][T13293] syzkaller0 (unregistering): left promiscuous mode
[  236.656594][T13300] netlink: 'syz.0.2910': attribute type 10 has an invalid length.
[  236.665313][T13301] siw: device registration error -23
[  236.686662][T13300] netlink: 'syz.0.2910': attribute type 10 has an invalid length.
[  236.687549][T13202] team0: Port device team_slave_0 added
[  236.700949][T13300] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  236.710165][T13300] team0: Port device dummy0 removed
[  236.716622][T13300] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  236.754681][T13305] netlink: 'syz.0.2911': attribute type 10 has an invalid length.
[  236.765102][T13202] team0: Port device team_slave_1 added
[  236.789046][T13202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.796068][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.822126][T13202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.840821][T13202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.847843][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.873981][T13202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.894678][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2912'.
[  236.948040][T13202] hsr_slave_0: entered promiscuous mode
[  236.969775][T13202] hsr_slave_1: entered promiscuous mode
[  236.975746][T13202] debugfs: 'hsr0' already exists in 'hsr'
[  236.981974][T13202] Cannot create hsr debugfs directory
[  237.081746][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2919'.
[  237.091471][T13327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.177351][T13331] block device autoloading is deprecated and will be removed.
[  237.285318][T13333] syzkaller0: entered allmulticast mode
[  237.300196][T13333] syzkaller0: entered promiscuous mode
[  237.307250][T13333] syzkaller0 (unregistering): left allmulticast mode
[  237.314054][T13333] syzkaller0 (unregistering): left promiscuous mode
[  237.331679][T13335] netlink: 'syz.1.2922': attribute type 10 has an invalid length.
[  237.354675][T13336] siw: device registration error -23
[  237.368476][T13338] netlink: 'syz.2.2923': attribute type 10 has an invalid length.
[  237.398917][T13338] bond0: (slave dummy0): Releasing backup interface
[  237.407389][T13338] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  237.416372][T13338] team0: Failed to send options change via netlink (err -105)
[  237.418435][T13339] netlink: 'syz.2.2923': attribute type 10 has an invalid length.
[  237.423919][T13338] team0: Port device dummy0 added
[  237.438429][T13339] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  237.448121][T13339] team0: Failed to send options change via netlink (err -105)
[  237.456163][T13339] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  237.465711][T13339] team0: Port device dummy0 removed
[  237.472355][T13339] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  237.499000][T13202] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  237.509945][T13202] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  237.529099][T13202] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  237.545782][T13202] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  237.559850][T13307] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  237.599894][T13359] netlink: 'syz.2.2929': attribute type 13 has an invalid length.
[  237.610798][T13360] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2930'.
[  237.653277][T13202] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.674812][T13202] 8021q: adding VLAN 0 to HW filter on device team0
[  237.684442][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.691548][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.735131][T13368] bond0: (slave dummy0): Releasing backup interface
[  237.760060][T13368] team0: Failed to send options change via netlink (err -105)
[  237.767628][T13368] team0: Port device dummy0 added
[  237.783565][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.790779][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.825844][T13371] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  237.854628][T13371] team0: Failed to send options change via netlink (err -105)
[  237.862382][T13371] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  237.872075][T13371] team0: Port device dummy0 removed
[  237.879077][T13371] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  237.893601][T13369] lo speed is unknown, defaulting to 1000
[  237.908172][T13369] lo speed is unknown, defaulting to 1000
[  237.991460][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2925'.
[  238.051183][T13202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.067642][T13393] FAULT_INJECTION: forcing a failure.
[  238.067642][T13393] name failslab, interval 1, probability 0, space 0, times 0
[  238.080565][T13393] CPU: 0 UID: 0 PID: 13393 Comm: syz.5.2939 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  238.080597][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  238.080608][T13393] Call Trace:
[  238.080614][T13393]  <TASK>
[  238.080621][T13393]  __dump_stack+0x1d/0x30
[  238.080658][T13393]  dump_stack_lvl+0xe8/0x140
[  238.080698][T13393]  dump_stack+0x15/0x1b
[  238.080793][T13393]  should_fail_ex+0x265/0x280
[  238.080899][T13393]  should_failslab+0x8c/0xb0
[  238.080984][T13393]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  238.081126][T13393]  ? sidtab_sid2str_get+0xa0/0x130
[  238.081165][T13393]  kmemdup_noprof+0x2b/0x70
[  238.081245][T13393]  sidtab_sid2str_get+0xa0/0x130
[  238.081281][T13393]  security_sid_to_context_core+0x1eb/0x2e0
[  238.081316][T13393]  security_sid_to_context+0x27/0x40
[  238.081348][T13393]  selinux_lsmprop_to_secctx+0x67/0xf0
[  238.081412][T13393]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  238.081457][T13393]  audit_log_subj_ctx+0xa4/0x3e0
[  238.081480][T13393]  ? skb_put+0xa9/0xf0
[  238.081569][T13393]  audit_log_task_context+0x48/0x70
[  238.081593][T13393]  audit_log_task+0xf4/0x250
[  238.081686][T13393]  ? kstrtouint+0x76/0xc0
[  238.081719][T13393]  audit_seccomp+0x61/0x100
[  238.081832][T13393]  ? __seccomp_filter+0x82d/0x1250
[  238.081870][T13393]  __seccomp_filter+0x83e/0x1250
[  238.081907][T13393]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  238.082005][T13393]  ? vfs_write+0x7e8/0x960
[  238.082046][T13393]  __secure_computing+0x82/0x150
[  238.082073][T13393]  syscall_trace_enter+0xcf/0x1e0
[  238.082171][T13393]  do_syscall_64+0xac/0x200
[  238.082206][T13393]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  238.082275][T13393]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  238.082387][T13393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.082415][T13393] RIP: 0033:0x7fb66da8eec9
[  238.082435][T13393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.082457][T13393] RSP: 002b:00007fb66c4ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  238.082477][T13393] RAX: ffffffffffffffda RBX: 00007fb66dce5fa0 RCX: 00007fb66da8eec9
[  238.082491][T13393] RDX: 0000200000000300 RSI: 0000200000002a40 RDI: 0000200000002a00
[  238.082503][T13393] RBP: 00007fb66c4ef090 R08: 0000000000000000 R09: 0000000000000000
[  238.082590][T13393] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001
[  238.082605][T13393] R13: 00007fb66dce6038 R14: 00007fb66dce5fa0 R15: 00007ffe33221a48
[  238.082626][T13393]  </TASK>
[  238.342389][T13343] wireguard0: entered promiscuous mode
[  238.347897][T13343] wireguard0: entered allmulticast mode
[  238.471806][T13406] sock: sock_timestamping_bind_phc: sock not bind to device
[  238.518041][T13202] veth0_vlan: entered promiscuous mode
[  238.536034][T13202] veth1_vlan: entered promiscuous mode
[  238.582913][T13202] veth0_macvtap: entered promiscuous mode
[  238.608582][T13202] veth1_macvtap: entered promiscuous mode
[  238.619004][T13423] loop2: detected capacity change from 0 to 512
[  238.633413][T13202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.640261][T13425] sock: sock_timestamping_bind_phc: sock not bind to device
[  238.652127][T13202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.660079][T13423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.671690][ T2596] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.690122][T13423] ext4 filesystem being mounted at /614/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  238.704189][ T2596] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.716918][ T2596] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.727193][ T2596] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.743526][T13423] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  238.888089][T13453] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.895380][T13453] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.992634][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.015449][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.023938][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.071825][T13470] FAULT_INJECTION: forcing a failure.
[  239.071825][T13470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.085088][T13470] CPU: 1 UID: 0 PID: 13470 Comm: syz.2.2956 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  239.085176][T13470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  239.085192][T13470] Call Trace:
[  239.085198][T13470]  <TASK>
[  239.085208][T13470]  __dump_stack+0x1d/0x30
[  239.085283][T13470]  dump_stack_lvl+0xe8/0x140
[  239.085314][T13470]  dump_stack+0x15/0x1b
[  239.085351][T13470]  should_fail_ex+0x265/0x280
[  239.085461][T13470]  should_fail+0xb/0x20
[  239.085496][T13470]  should_fail_usercopy+0x1a/0x20
[  239.085521][T13470]  _copy_from_iter+0xd2/0xe80
[  239.085582][T13470]  ? __build_skb_around+0x1ab/0x200
[  239.085636][T13470]  ? __alloc_skb+0x223/0x320
[  239.085665][T13470]  netlink_sendmsg+0x471/0x6b0
[  239.085692][T13470]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.085724][T13470]  __sock_sendmsg+0x145/0x180
[  239.085785][T13470]  ____sys_sendmsg+0x31e/0x4e0
[  239.085886][T13470]  ___sys_sendmsg+0x17b/0x1d0
[  239.085918][T13470]  __x64_sys_sendmsg+0xd4/0x160
[  239.085945][T13470]  x64_sys_call+0x191e/0x3000
[  239.085970][T13470]  do_syscall_64+0xd2/0x200
[  239.086098][T13470]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  239.086127][T13470]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  239.086157][T13470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.086236][T13470] RIP: 0033:0x7f22a994eec9
[  239.086321][T13470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.086340][T13470] RSP: 002b:00007f22a83b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.086358][T13470] RAX: ffffffffffffffda RBX: 00007f22a9ba5fa0 RCX: 00007f22a994eec9
[  239.086370][T13470] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007
[  239.086383][T13470] RBP: 00007f22a83b7090 R08: 0000000000000000 R09: 0000000000000000
[  239.086401][T13470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.086415][T13470] R13: 00007f22a9ba6038 R14: 00007f22a9ba5fa0 R15: 00007fff67947608
[  239.086440][T13470]  </TASK>
[  239.355367][T13459] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  239.364752][T13459] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  239.382472][   T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.404364][   T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.442585][   T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.452018][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'.
[  239.478401][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.502417][T13497] SELinux: failed to load policy
[  239.519037][T13500] syzkaller0: entered allmulticast mode
[  239.549241][T13504] loop2: detected capacity change from 0 to 512
[  239.576259][T13508] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2966'.
[  239.577928][T13484] lo speed is unknown, defaulting to 1000
[  239.591608][T13500] syzkaller0: entered promiscuous mode
[  239.605010][T13504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.620635][T13500] syzkaller0 (unregistering): left allmulticast mode
[  239.627641][T13500] syzkaller0 (unregistering): left promiscuous mode
[  239.633262][T13504] ext4 filesystem being mounted at /617/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  239.655383][T13504] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  239.712383][T13484] lo speed is unknown, defaulting to 1000
[  239.718496][T13513] siw: device registration error -23
[  239.748593][   T31] bridge_slave_1: left allmulticast mode
[  239.754480][   T31] bridge_slave_1: left promiscuous mode
[  239.760577][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.791431][   T31] bridge_slave_0: left promiscuous mode
[  239.797397][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.876056][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  239.886679][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  239.918884][   T31] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  239.936015][   T31] bond0 (unregistering): Released all slaves
[  239.996170][   T31] tipc: Left network mode
[  240.021084][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.038037][   T31] hsr_slave_0: left promiscuous mode
[  240.051497][   T31] hsr_slave_1: left promiscuous mode
[  240.061381][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.073718][   T31] pim6reg (unregistering): left allmulticast mode
[  240.143949][   T31] team0 (unregistering): Port device team_slave_1 removed
[  240.158981][   T31] team0 (unregistering): Port device team_slave_0 removed
[  240.229264][T13551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2975'.
[  240.342097][T13583] validate_nla: 5 callbacks suppressed
[  240.342113][T13583] netlink: 'syz.2.2983': attribute type 10 has an invalid length.
[  240.378590][T13484] chnl_net:caif_netlink_parms(): no params data found
[  240.394466][T13584] netlink: 'syz.2.2983': attribute type 10 has an invalid length.
[  240.397748][T13559] lo speed is unknown, defaulting to 1000
[  240.414582][T13583] bond0: (slave dummy0): Releasing backup interface
[  240.416111][T13583] team0: Port device dummy0 added
[  240.418078][T13584] team0: Port device dummy0 removed
[  240.420539][T13584] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  240.420666][T13559] lo speed is unknown, defaulting to 1000
[  240.428139][T13559] lo speed is unknown, defaulting to 1000
[  240.505063][T13484] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.505104][T13484] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.505236][T13484] bridge_slave_0: entered allmulticast mode
[  240.505770][T13484] bridge_slave_0: entered promiscuous mode
[  240.506809][T13484] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.506932][T13484] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.507032][T13484] bridge_slave_1: entered allmulticast mode
[  240.517595][T13484] bridge_slave_1: entered promiscuous mode
[  240.537898][T13559] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  240.606445][T13484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.607992][T13484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.673790][T13559] lo speed is unknown, defaulting to 1000
[  240.674091][T13559] lo speed is unknown, defaulting to 1000
[  240.674585][T13559] lo speed is unknown, defaulting to 1000
[  240.696147][T13484] team0: Port device team_slave_0 added
[  240.697303][T13484] team0: Port device team_slave_1 added
[  240.735614][T13559] lo speed is unknown, defaulting to 1000
[  240.760257][T13559] lo speed is unknown, defaulting to 1000
[  240.761119][T13484] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.761134][T13484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  240.761169][T13484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.761827][T13484] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.761842][T13484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  240.761910][T13484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.844536][T13484] hsr_slave_0: entered promiscuous mode
[  240.844896][T13484] hsr_slave_1: entered promiscuous mode
[  240.953795][   T29] kauditd_printk_skb: 279 callbacks suppressed
[  240.953813][   T29] audit: type=1400 audit(1759634478.084:8519): avc:  denied  { nlmsg_write } for  pid=13603 comm="syz.2.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  240.959129][T13608] macvtap1: entered allmulticast mode
[  240.959147][T13608] bridge0: entered allmulticast mode
[  240.959888][T13608] batman_adv: batadv0: Adding interface: macvtap1
[  240.959900][T13608] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  240.959926][T13608] batman_adv: batadv0: Interface activated: macvtap1
[  240.978555][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2992'.
[  240.989985][T13610] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.258929][T13484] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  241.308279][T13484] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  241.351300][T13632] loop0: detected capacity change from 0 to 1024
[  241.370449][T13484] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  241.379003][T13632] EXT4-fs: Ignoring removed bh option
[  241.391968][T13632] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  241.470323][T13632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.488993][   T29] audit: type=1400 audit(1759634478.641:8520): avc:  denied  { write } for  pid=13631 comm="syz.0.3001" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  241.511668][   T29] audit: type=1400 audit(1759634478.641:8521): avc:  denied  { open } for  pid=13631 comm="syz.0.3001" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  241.534017][   T29] audit: type=1326 audit(1759634478.641:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.0.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  241.558061][   T29] audit: type=1326 audit(1759634478.641:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.0.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  241.581549][   T29] audit: type=1326 audit(1759634478.641:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.0.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  241.605183][   T29] audit: type=1326 audit(1759634478.641:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.0.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  241.628690][   T29] audit: type=1400 audit(1759634478.641:8526): avc:  denied  { read } for  pid=13631 comm="syz.0.3001" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  241.651040][   T29] audit: type=1326 audit(1759634478.641:8527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.0.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  241.674591][   T29] audit: type=1326 audit(1759634478.641:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.0.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49d49eeec9 code=0x7ffc0000
[  241.717583][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.769866][T13484] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  241.937007][T13606] Set syz1 is full, maxelem 65536 reached
[  241.947462][T13484] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.997693][T13484] 8021q: adding VLAN 0 to HW filter on device team0
[  242.009263][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.009342][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.013420][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.013457][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.067508][T13484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  242.067531][T13484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.147892][T13665] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  242.147945][T13665] SELinux: failed to load policy
[  242.166592][T13484] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.232353][T13672] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3010'.
[  242.299679][T13484] veth0_vlan: entered promiscuous mode
[  242.302165][T13484] veth1_vlan: entered promiscuous mode
[  242.323764][T13484] veth0_macvtap: entered promiscuous mode
[  242.326536][T13484] veth1_macvtap: entered promiscuous mode
[  242.342512][T13484] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.347876][T13484] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.365789][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.365836][   T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.365879][   T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.365946][   T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.493688][T13692] sock: sock_timestamping_bind_phc: sock not bind to device
[  242.806070][T13726] netlink: 'syz.5.3020': attribute type 10 has an invalid length.
[  242.816068][T13726] bond0: (slave dummy0): Releasing backup interface
[  242.828345][T13726] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  242.828483][T13726] team0: Failed to send options change via netlink (err -105)
[  242.844680][T13726] team0: Port device dummy0 added
[  242.852780][T13726] netlink: 'syz.5.3020': attribute type 10 has an invalid length.
[  242.853278][T13726] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  242.862157][T13726] team0: Failed to send options change via netlink (err -105)
[  242.862197][T13726] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  242.862426][T13726] team0: Port device dummy0 removed
[  242.864411][T13726] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  242.933625][T13718] lo speed is unknown, defaulting to 1000
[  242.941704][T13718] lo speed is unknown, defaulting to 1000
[  243.056764][T13718] chnl_net:caif_netlink_parms(): no params data found
[  243.123020][T13718] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.130369][T13718] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.131464][T13745] sock: sock_timestamping_bind_phc: sock not bind to device
[  243.153949][T13718] bridge_slave_0: entered allmulticast mode
[  243.160714][T13718] bridge_slave_0: entered promiscuous mode
[  243.169864][T13718] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.177060][T13718] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.184712][T13718] bridge_slave_1: entered allmulticast mode
[  243.193804][T13718] bridge_slave_1: entered promiscuous mode
[  243.211132][T13756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3027'.
[  243.220666][T13756] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3027'.
[  243.247577][T13718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.258165][T13761] netlink: 'syz.2.3028': attribute type 13 has an invalid length.
[  243.267141][T13761] batman_adv: batadv0: Interface deactivated: macvtap1
[  243.274567][T13761] bridge0: left allmulticast mode
[  243.294261][T13718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.330861][T13718] team0: Port device team_slave_0 added
[  243.338841][T13718] team0: Port device team_slave_1 added
[  243.371244][T13718] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.378887][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.405803][T13718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.418267][T13718] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.425283][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.451433][T13718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.554682][T13718] hsr_slave_0: entered promiscuous mode
[  243.561009][T13718] hsr_slave_1: entered promiscuous mode
[  243.587310][T13718] debugfs: 'hsr0' already exists in 'hsr'
[  243.587581][T13790] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3035'.
[  243.593117][T13718] Cannot create hsr debugfs directory
[  243.680245][T13800] netlink: 'syz.5.3038': attribute type 13 has an invalid length.
[  243.698381][T13802] macvtap1: entered allmulticast mode
[  243.703829][T13802] bridge0: entered allmulticast mode
[  243.719326][T13802] batman_adv: batadv0: Adding interface: macvtap1
[  243.725824][T13802] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.751461][T13802] batman_adv: batadv0: Interface activated: macvtap1
[  243.886535][T13812] netlink: 'syz.1.3042': attribute type 10 has an invalid length.
[  243.943353][T13814] netlink: 'syz.1.3042': attribute type 10 has an invalid length.
[  244.267097][T13794] Set syz1 is full, maxelem 65536 reached
[  244.286315][T13800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.333097][T13816] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3044'.
[  244.337397][T13812] team0: Port device dummy0 added
[  244.352608][T13814] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  244.365634][T13814] team0: Failed to send options change via netlink (err -105)
[  244.373865][T13814] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  244.383304][T13814] team0: Port device dummy0 removed
[  244.391388][T13814] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  244.406295][   T52] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.438339][   T52] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.446783][   T52] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.464795][T13822] lo speed is unknown, defaulting to 1000
[  244.485926][T13822] lo speed is unknown, defaulting to 1000
[  244.492279][   T52] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.537588][T13836] FAULT_INJECTION: forcing a failure.
[  244.537588][T13836] name failslab, interval 1, probability 0, space 0, times 0
[  244.550370][T13836] CPU: 0 UID: 0 PID: 13836 Comm: syz.3.3052 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  244.550406][T13836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  244.550424][T13836] Call Trace:
[  244.550432][T13836]  <TASK>
[  244.550453][T13836]  __dump_stack+0x1d/0x30
[  244.550499][T13836]  dump_stack_lvl+0xe8/0x140
[  244.550536][T13836]  dump_stack+0x15/0x1b
[  244.550642][T13836]  should_fail_ex+0x265/0x280
[  244.550685][T13836]  should_failslab+0x8c/0xb0
[  244.550712][T13836]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  244.550738][T13836]  ? perf_event_alloc+0x14c/0x1740
[  244.550826][T13836]  perf_event_alloc+0x14c/0x1740
[  244.550873][T13836]  __se_sys_perf_event_open+0x615/0x11c0
[  244.550962][T13836]  ? __rcu_read_unlock+0x4f/0x70
[  244.550991][T13836]  __x64_sys_perf_event_open+0x67/0x80
[  244.551014][T13836]  x64_sys_call+0x7bd/0x3000
[  244.551098][T13836]  do_syscall_64+0xd2/0x200
[  244.551127][T13836]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  244.551160][T13836]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  244.551236][T13836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.551257][T13836] RIP: 0033:0x7f35becfeec9
[  244.551273][T13836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.551291][T13836] RSP: 002b:00007f35bd767038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  244.551432][T13836] RAX: ffffffffffffffda RBX: 00007f35bef55fa0 RCX: 00007f35becfeec9
[  244.551460][T13836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  244.551477][T13836] RBP: 00007f35bd767090 R08: 0000000000000000 R09: 0000000000000000
[  244.551492][T13836] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  244.551504][T13836] R13: 00007f35bef56038 R14: 00007f35bef55fa0 R15: 00007fffe743ef48
[  244.551545][T13836]  </TASK>
[  244.818805][T13718] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  244.861846][T13843] lo speed is unknown, defaulting to 1000
[  244.868340][T13843] lo speed is unknown, defaulting to 1000
[  244.926440][T13718] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  244.941861][T13718] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  244.967021][T13718] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  245.144142][T13856] netlink: 'syz.2.3057': attribute type 13 has an invalid length.
[  245.209577][T13718] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.270045][T13861] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3059'.
[  245.281035][T13718] 8021q: adding VLAN 0 to HW filter on device team0
[  245.296459][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.303571][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.319999][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.327149][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.353452][T13718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  245.363955][T13718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  245.493124][T13885] bond0: (slave dummy0): Releasing backup interface
[  245.507056][T13885] bond0: (slave bond_slave_0): Releasing backup interface
[  245.517476][T13890] netlink: 'syz.2.3071': attribute type 13 has an invalid length.
[  245.526823][T13885] bond0: (slave bond_slave_1): Releasing backup interface
[  245.542783][T13885] team0: Port device team_slave_0 removed
[  245.552904][T13885] team0: Port device team_slave_1 removed
[  245.559154][T13885] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.567997][T13885] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  245.590105][T13893] netlink: 'syz.3.3072': attribute type 10 has an invalid length.
[  245.599703][T13893] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  245.630016][T13718] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.651744][T13897] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3074'.
[  245.750127][T13718] veth0_vlan: entered promiscuous mode
[  245.761063][T13718] veth1_vlan: entered promiscuous mode
[  245.779641][T13718] veth0_macvtap: entered promiscuous mode
[  245.787701][T13718] veth1_macvtap: entered promiscuous mode
[  245.801549][T13718] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.811201][T13718] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.831918][   T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.844528][T13920] team0: Device gtp0 is of different type
[  245.854622][   T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.867634][   T29] kauditd_printk_skb: 367 callbacks suppressed
[  245.867651][   T29] audit: type=1326 audit(1759634483.244:8896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.5.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66da8eec9 code=0x7ffc0000
[  245.871823][   T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.874222][   T29] audit: type=1326 audit(1759634483.244:8897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.5.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb66da8eec9 code=0x7ffc0000
[  245.930609][   T29] audit: type=1326 audit(1759634483.244:8898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.5.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66da8eec9 code=0x7ffc0000
[  245.954638][   T29] audit: type=1326 audit(1759634483.244:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.5.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb66da8eec9 code=0x7ffc0000
[  245.978376][   T29] audit: type=1326 audit(1759634483.244:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.5.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66da8eec9 code=0x7ffc0000
[  246.003471][   T29] audit: type=1326 audit(1759634483.244:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.5.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb66da8eec9 code=0x7ffc0000
[  246.003499][   T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.038405][   T29] audit: type=1326 audit(1759634483.296:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.5.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66da8eec9 code=0x7ffc0000
[  246.062408][   T29] audit: type=1326 audit(1759634483.296:8903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.5.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66da8eec9 code=0x7ffc0000
[  246.086242][   T29] audit: type=1326 audit(1759634483.296:8904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.5.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb66da8eec9 code=0x7ffc0000
[  246.110264][   T29] audit: type=1326 audit(1759634483.296:8905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.5.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66da8eec9 code=0x7ffc0000
[  246.253791][T13933] netlink: 'syz.1.3085': attribute type 10 has an invalid length.
[  246.334089][T13935] lo speed is unknown, defaulting to 1000
[  246.340412][T13935] lo speed is unknown, defaulting to 1000
[  246.370542][T13948] sock: sock_timestamping_bind_phc: sock not bind to device
[  246.382153][T13930] lo speed is unknown, defaulting to 1000
[  246.388343][T13930] lo speed is unknown, defaulting to 1000
[  246.423575][T13959] netlink: 'syz.1.3089': attribute type 10 has an invalid length.
[  246.491681][T13930] chnl_net:caif_netlink_parms(): no params data found
[  246.501419][T13967] netlink: 'syz.3.3093': attribute type 10 has an invalid length.
[  246.518939][T13967] bond0: (slave dummy0): Releasing backup interface
[  246.547199][T13967] team0: Port device dummy0 added
[  246.552872][T13969] netlink: 'syz.3.3093': attribute type 10 has an invalid length.
[  246.597634][T13969] team0: Port device dummy0 removed
[  246.621189][T13969] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  246.734973][T13930] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.742108][T13930] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.770142][T13930] bridge_slave_0: entered allmulticast mode
[  246.787607][T13930] bridge_slave_0: entered promiscuous mode
[  246.807537][T13930] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.814751][T13930] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.841868][T13930] bridge_slave_1: entered allmulticast mode
[  246.852198][T13930] bridge_slave_1: entered promiscuous mode
[  246.894925][T13930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.905780][T13930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.941340][T13930] team0: Port device team_slave_0 added
[  246.951522][T13930] team0: Port device team_slave_1 added
[  246.985300][T13930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.992581][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.018731][T13930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.030473][T13930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.037858][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.064269][T13930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.113422][T13930] hsr_slave_0: entered promiscuous mode
[  247.119820][T13930] hsr_slave_1: entered promiscuous mode
[  247.126477][T13930] debugfs: 'hsr0' already exists in 'hsr'
[  247.132522][T13930] Cannot create hsr debugfs directory
[  247.285128][T13964] syz.1.3092 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  247.300520][T13964] CPU: 1 UID: 0 PID: 13964 Comm: syz.1.3092 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  247.300548][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  247.300594][T13964] Call Trace:
[  247.300604][T13964]  <TASK>
[  247.300615][T13964]  __dump_stack+0x1d/0x30
[  247.300661][T13964]  dump_stack_lvl+0xe8/0x140
[  247.300715][T13964]  dump_stack+0x15/0x1b
[  247.300751][T13964]  dump_header+0x81/0x220
[  247.300794][T13964]  oom_kill_process+0x342/0x400
[  247.300824][T13964]  out_of_memory+0x979/0xb80
[  247.300918][T13964]  try_charge_memcg+0x5e6/0x9e0
[  247.301012][T13964]  obj_cgroup_charge_pages+0xa6/0x150
[  247.301054][T13964]  __memcg_kmem_charge_page+0x9f/0x170
[  247.301139][T13964]  __alloc_frozen_pages_noprof+0x188/0x360
[  247.301174][T13964]  alloc_pages_mpol+0xb3/0x260
[  247.301273][T13964]  ? alloc_pages_noprof+0xf4/0x130
[  247.301318][T13964]  alloc_pages_noprof+0x90/0x130
[  247.301370][T13964]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  247.301416][T13964]  __kvmalloc_node_noprof+0x483/0x670
[  247.301454][T13964]  ? ip_set_alloc+0x24/0x30
[  247.301493][T13964]  ? ip_set_alloc+0x24/0x30
[  247.301685][T13964]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  247.301727][T13964]  ip_set_alloc+0x24/0x30
[  247.301774][T13964]  hash_netiface_create+0x282/0x740
[  247.301813][T13964]  ? __pfx_hash_netiface_create+0x10/0x10
[  247.301844][T13964]  ip_set_create+0x3c9/0x970
[  247.301923][T13964]  ? __nla_parse+0x40/0x60
[  247.302004][T13964]  nfnetlink_rcv_msg+0x4c3/0x590
[  247.302190][T13964]  netlink_rcv_skb+0x123/0x220
[  247.302222][T13964]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  247.302432][T13964]  nfnetlink_rcv+0x167/0x16c0
[  247.302466][T13964]  ? kmem_cache_free+0xe4/0x3d0
[  247.302501][T13964]  ? __kfree_skb+0x109/0x150
[  247.302580][T13964]  ? nlmon_xmit+0x4f/0x60
[  247.302662][T13964]  ? consume_skb+0x49/0x150
[  247.302775][T13964]  ? nlmon_xmit+0x4f/0x60
[  247.302809][T13964]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  247.302915][T13964]  ? __dev_queue_xmit+0x1200/0x2000
[  247.302999][T13964]  ? __dev_queue_xmit+0x182/0x2000
[  247.303020][T13964]  ? ref_tracker_free+0x37d/0x3e0
[  247.303092][T13964]  ? __netlink_deliver_tap+0x4dc/0x500
[  247.303249][T13964]  netlink_unicast+0x5c0/0x690
[  247.303282][T13964]  netlink_sendmsg+0x58b/0x6b0
[  247.303303][T13964]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.303382][T13964]  __sock_sendmsg+0x145/0x180
[  247.303421][T13964]  ____sys_sendmsg+0x31e/0x4e0
[  247.303537][T13964]  ___sys_sendmsg+0x17b/0x1d0
[  247.303577][T13964]  __x64_sys_sendmsg+0xd4/0x160
[  247.303608][T13964]  x64_sys_call+0x191e/0x3000
[  247.303698][T13964]  do_syscall_64+0xd2/0x200
[  247.303725][T13964]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  247.303771][T13964]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  247.303921][T13964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.303953][T13964] RIP: 0033:0x7f0af368eec9
[  247.303972][T13964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.303996][T13964] RSP: 002b:00007f0af20f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.304017][T13964] RAX: ffffffffffffffda RBX: 00007f0af38e5fa0 RCX: 00007f0af368eec9
[  247.304029][T13964] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009
[  247.304116][T13964] RBP: 00007f0af3711f91 R08: 0000000000000000 R09: 0000000000000000
[  247.304140][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.304156][T13964] R13: 00007f0af38e6038 R14: 00007f0af38e5fa0 R15: 00007ffc7e09ff88
[  247.304182][T13964]  </TASK>
[  247.654652][T13964] memory: usage 307200kB, limit 307200kB, failcnt 1926
[  247.662216][T13964] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0
[  247.670183][T13964] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[  247.677633][T13964] Memory cgroup stats for /syz1:
[  247.693537][T13964] cache 0
[  247.702175][T13964] rss 0
[  247.705065][T13964] shmem 0
[  247.708020][T13964] mapped_file 0
[  247.711714][T13964] dirty 0
[  247.714675][T13964] writeback 0
[  247.718049][T13964] workingset_refault_anon 1848
[  247.721357][T13991] sock: sock_timestamping_bind_phc: sock not bind to device
[  247.722875][T13964] workingset_refault_file 2526
[  247.735046][T13964] swap 229376
[  247.738351][T13964] swapcached 8192
[  247.742029][T13964] pgpgin 238198
[  247.745518][T13964] pgpgout 238188
[  247.749083][T13964] pgfault 289949
[  247.753069][T13964] pgmajfault 357
[  247.756750][T13964] inactive_anon 0
[  247.760430][T13964] active_anon 8192
[  247.764244][T13964] inactive_file 0
[  247.767973][T13964] active_file 32768
[  247.771959][T13964] unevictable 0
[  247.773312][T13988] SELinux: failed to load policy
[  247.775427][T13964] hierarchical_memory_limit 314572800
[  247.786464][T13964] hierarchical_memsw_limit 9223372036854771712
[  247.792868][T13964] total_cache 0
[  247.796373][T13964] total_rss 0
[  247.798483][T13997] netlink: 'syz.3.3102': attribute type 10 has an invalid length.
[  247.799746][T13964] total_shmem 0
[  247.811068][T13964] total_mapped_file 0
[  247.815066][T13964] total_dirty 0
[  247.818698][T13964] total_writeback 0
[  247.822708][T13964] total_workingset_refault_anon 1848
[  247.826058][T14000] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3103'.
[  247.828176][T13964] total_workingset_refault_file 2526
[  247.842604][T13964] total_swap 229376
[  247.846517][T13964] total_swapcached 8192
[  247.850690][T13964] total_pgpgin 238198
[  247.854715][T13964] total_pgpgout 238188
[  247.857296][T14004] FAULT_INJECTION: forcing a failure.
[  247.857296][T14004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  247.858801][T13964] total_pgfault 289949
[  247.858814][T13964] total_pgmajfault 357
[  247.858843][T13964] total_inactive_anon 0
[  247.871941][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.5.3104 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  247.872017][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  247.872035][T14004] Call Trace:
[  247.872046][T14004]  <TASK>
[  247.872058][T14004]  __dump_stack+0x1d/0x30
[  247.872108][T14004]  dump_stack_lvl+0xe8/0x140
[  247.872152][T14004]  dump_stack+0x15/0x1b
[  247.872241][T14004]  should_fail_ex+0x265/0x280
[  247.872357][T14004]  should_fail+0xb/0x20
[  247.872398][T14004]  should_fail_usercopy+0x1a/0x20
[  247.872426][T14004]  _copy_from_user+0x1c/0xb0
[  247.872460][T14004]  memdup_user+0x5e/0xd0
[  247.872566][T14004]  strndup_user+0x68/0xb0
[  247.872652][T14004]  __se_sys_mount+0x4d/0x2e0
[  247.872683][T14004]  ? fput+0x8f/0xc0
[  247.872723][T14004]  ? ksys_write+0x192/0x1a0
[  247.872795][T14004]  __x64_sys_mount+0x67/0x80
[  247.872827][T14004]  x64_sys_call+0x2b51/0x3000
[  247.872883][T14004]  do_syscall_64+0xd2/0x200
[  247.872919][T14004]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  247.872955][T14004]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  247.872991][T14004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.873022][T14004] RIP: 0033:0x7fb66da8eec9
[  247.873041][T14004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.873067][T14004] RSP: 002b:00007fb66c4ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  247.873093][T14004] RAX: ffffffffffffffda RBX: 00007fb66dce5fa0 RCX: 00007fb66da8eec9
[  247.873119][T14004] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000
[  247.873136][T14004] RBP: 00007fb66c4ef090 R08: 0000200000000080 R09: 0000000000000000
[  247.873153][T14004] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001
[  247.873168][T14004] R13: 00007fb66dce6038 R14: 00007fb66dce5fa0 R15: 00007ffe33221a48
[  247.873210][T14004]  </TASK>
[  248.073550][T13964] total_active_anon 8192
[  248.077981][T13964] total_inactive_file 0
[  248.082194][T13964] total_active_file 32768
[  248.086559][T13964] total_unevictable 0
[  248.090596][T13964] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3092,pid=13963,uid=0
[  248.105510][T13964] Memory cgroup out of memory: Killed process 13963 (syz.1.3092) total-vm:94088kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  248.225946][T14013] syzkaller0: entered allmulticast mode
[  248.256162][T14013] syzkaller0: entered promiscuous mode
[  248.274714][T14013] syzkaller0 (unregistering): left allmulticast mode
[  248.281454][T14013] syzkaller0 (unregistering): left promiscuous mode
[  248.322651][T14018] siw: device registration error -23
[  248.403081][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'.
[  248.417990][T13930] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  248.439689][T13930] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  248.472404][T13930] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  248.502445][T13930] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  248.527138][T14028] sock: sock_timestamping_bind_phc: sock not bind to device
[  248.622383][T14044] sock: sock_timestamping_bind_phc: sock not bind to device
[  248.662102][T13930] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.708315][T13930] 8021q: adding VLAN 0 to HW filter on device team0
[  248.746191][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.753391][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.797185][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.804298][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.012351][T13930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.016274][T14084] netlink: 'syz.0.3121': attribute type 10 has an invalid length.
[  249.053027][T14084] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  249.276250][T14102] lo speed is unknown, defaulting to 1000
[  249.303535][T14102] lo speed is unknown, defaulting to 1000
[  249.310629][T13930] veth0_vlan: entered promiscuous mode
[  249.324808][T14106] sock: sock_timestamping_bind_phc: sock not bind to device
[  249.332274][T13930] veth1_vlan: entered promiscuous mode
[  249.403277][T13930] veth0_macvtap: entered promiscuous mode
[  249.427647][T13930] veth1_macvtap: entered promiscuous mode
[  249.467949][T13930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.489844][T13930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.510786][ T1452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.524873][ T1452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.572882][ T1452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.610345][ T1452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.627721][T14120] netlink: 'syz.2.3083': attribute type 10 has an invalid length.
[  249.654047][T14120] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  249.809216][T14125] lo speed is unknown, defaulting to 1000
[  249.824358][T14125] lo speed is unknown, defaulting to 1000
[  249.856063][T14133] SELinux: failed to load policy
[  249.905194][T14138] syzkaller0: entered allmulticast mode
[  249.936714][T14140] block device autoloading is deprecated and will be removed.
[  249.952360][T14140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=14140 comm=syz.2.3135
[  249.957603][T14138] syzkaller0: entered promiscuous mode
[  249.980109][T14142] SELinux: failed to load policy
[  249.987460][T14138] syzkaller0 (unregistering): left allmulticast mode
[  249.994275][T14138] syzkaller0 (unregistering): left promiscuous mode
[  250.115658][T14155] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3140'.
[  250.160211][T14150] lo speed is unknown, defaulting to 1000
[  250.180754][T14150] lo speed is unknown, defaulting to 1000
[  250.281215][T14173] netlink: 'syz.1.3145': attribute type 10 has an invalid length.
[  250.300109][T14173] bond0: (slave dummy0): Releasing backup interface
[  250.311771][T14173] team0: Port device dummy0 added
[  250.320154][T14173] netlink: 'syz.1.3145': attribute type 10 has an invalid length.
[  250.328079][T14175] sock: sock_timestamping_bind_phc: sock not bind to device
[  250.340393][T14173] team0: Port device dummy0 removed
[  250.348567][T14173] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  250.498866][T14204] syzkaller0: entered allmulticast mode
[  250.526697][T14204] syzkaller0: entered promiscuous mode
[  250.547715][T14204] syzkaller0 (unregistering): left allmulticast mode
[  250.554480][T14204] syzkaller0 (unregistering): left promiscuous mode
[  250.587218][T14214] siw: device registration error -23
[  250.637870][   T29] kauditd_printk_skb: 224 callbacks suppressed
[  250.637888][   T29] audit: type=1326 audit(1759634488.257:9130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe514eec9 code=0x7ffc0000
[  250.668633][   T29] audit: type=1326 audit(1759634488.288:9131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe514eec9 code=0x7ffc0000
[  250.693473][   T29] audit: type=1326 audit(1759634488.288:9132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f7fe514eec9 code=0x7ffc0000
[  250.717704][   T29] audit: type=1326 audit(1759634488.288:9133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe514eec9 code=0x7ffc0000
[  250.741355][   T29] audit: type=1326 audit(1759634488.288:9134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe514eec9 code=0x7ffc0000
[  250.826404][   T29] audit: type=1326 audit(1759634488.446:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14222 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af368eec9 code=0x7ffc0000
[  250.850291][   T29] audit: type=1326 audit(1759634488.446:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14222 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af368eec9 code=0x7ffc0000
[  250.874386][   T29] audit: type=1326 audit(1759634488.446:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14222 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0af368eec9 code=0x7ffc0000
[  250.897882][   T29] audit: type=1326 audit(1759634488.446:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14222 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af368eec9 code=0x7ffc0000
[  250.921693][   T29] audit: type=1326 audit(1759634488.446:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14222 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af368eec9 code=0x7ffc0000
[  250.975630][T14225] FAULT_INJECTION: forcing a failure.
[  250.975630][T14225] name failslab, interval 1, probability 0, space 0, times 0
[  250.988330][T14225] CPU: 0 UID: 0 PID: 14225 Comm: syz.0.3160 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  250.988357][T14225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  250.988369][T14225] Call Trace:
[  250.988376][T14225]  <TASK>
[  250.988442][T14225]  __dump_stack+0x1d/0x30
[  250.988566][T14225]  dump_stack_lvl+0xe8/0x140
[  250.988747][T14225]  dump_stack+0x15/0x1b
[  250.988786][T14225]  should_fail_ex+0x265/0x280
[  250.988850][T14225]  should_failslab+0x8c/0xb0
[  250.988886][T14225]  kmem_cache_alloc_noprof+0x50/0x480
[  250.988923][T14225]  ? security_inode_alloc+0x37/0x100
[  250.988950][T14225]  security_inode_alloc+0x37/0x100
[  250.989034][T14225]  inode_init_always_gfp+0x4b7/0x500
[  250.989067][T14225]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  250.989111][T14225]  alloc_inode+0x58/0x170
[  250.989139][T14225]  new_inode+0x1d/0xe0
[  250.989212][T14225]  shmem_get_inode+0x244/0x750
[  250.989353][T14225]  __shmem_file_setup+0x113/0x210
[  250.989396][T14225]  shmem_file_setup+0x3b/0x50
[  250.989487][T14225]  __se_sys_memfd_create+0x2c3/0x590
[  250.989518][T14225]  __x64_sys_memfd_create+0x31/0x40
[  250.989621][T14225]  x64_sys_call+0x2ac2/0x3000
[  250.989727][T14225]  do_syscall_64+0xd2/0x200
[  250.989761][T14225]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  250.989794][T14225]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  250.989838][T14225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.989921][T14225] RIP: 0033:0x7f7fe514eec9
[  250.989941][T14225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.989965][T14225] RSP: 002b:00007f7fe3baee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  250.989989][T14225] RAX: ffffffffffffffda RBX: 0000000000000460 RCX: 00007f7fe514eec9
[  250.990005][T14225] RDX: 00007f7fe3baeef0 RSI: 0000000000000000 RDI: 00007f7fe51d2960
[  250.990021][T14225] RBP: 0000200000001200 R08: 00007f7fe3baebb7 R09: 00007f7fe3baee40
[  250.990049][T14225] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480
[  250.990065][T14225] R13: 00007f7fe3baeef0 R14: 00007f7fe3baeeb0 R15: 0000200000000000
[  250.990089][T14225]  </TASK>
[  251.229498][T14231] netlink: 'syz.5.3161': attribute type 10 has an invalid length.
[  251.232826][T14236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3163'.
[  251.256504][T14231] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  251.341903][T14250] syzkaller0: entered allmulticast mode
[  251.376085][T14257] netlink: 'syz.5.3171': attribute type 13 has an invalid length.
[  251.396596][T14250] syzkaller0: entered promiscuous mode
[  251.413069][T14250] syzkaller0 (unregistering): left allmulticast mode
[  251.420654][T14250] syzkaller0 (unregistering): left promiscuous mode
[  251.460597][T14266] siw: device registration error -23
[  251.522274][T14273] netlink: 'syz.0.3179': attribute type 10 has an invalid length.
[  251.642065][T14276] $Hÿ: renamed from bond0 (while UP)
[  251.671067][T14276] $Hÿ: entered promiscuous mode
[  251.676178][T14276] bond_slave_0: entered promiscuous mode
[  251.682047][T14276] bond_slave_1: entered promiscuous mode
[  251.692188][T14276] dummy0: entered promiscuous mode
[  251.739705][T14293] loop2: detected capacity change from 0 to 128
[  251.942930][T14307] team0: Device gtp0 is of different type
[  251.956284][T14303] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  251.985173][T14303] SELinux: failed to load policy
[  252.080381][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3196'.
[  252.097932][T14319] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.218565][T14319] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.279084][T14329] netlink: 'syz.3.3200': attribute type 10 has an invalid length.
[  252.286544][T14325] lo speed is unknown, defaulting to 1000
[  252.293497][T14325] lo speed is unknown, defaulting to 1000
[  252.325977][T14331] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  252.352910][T14331] SELinux: failed to load policy
[  252.537801][T14336] lo speed is unknown, defaulting to 1000
[  252.543999][T14336] lo speed is unknown, defaulting to 1000
[  252.782830][T14348] team0: Device gtp0 is of different type
[  252.961100][T14339] loop5: detected capacity change from 0 to 32768
[  252.968740][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3209'.
[  253.032120][T14339]  loop5: p1 p3 < >
[  253.116959][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'.
[  253.219456][T14360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.245536][T14360] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.290789][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3214'.
[  253.492375][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3218'.
[  253.645437][T14385] netlink: 'syz.5.3221': attribute type 10 has an invalid length.
[  253.857496][T14395] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  253.884644][T14395] SELinux: failed to load policy
[  253.955922][T14399] netlink: 'syz.5.3226': attribute type 10 has an invalid length.
[  254.064952][T14405] netlink: 'syz.5.3230': attribute type 10 has an invalid length.
[  254.080997][T14370] loop0: detected capacity change from 0 to 32768
[  254.093052][T14405] bond0: (slave dummy0): Releasing backup interface
[  254.117452][T14409] netlink: 'syz.5.3230': attribute type 10 has an invalid length.
[  254.133334][T14405] team0: Port device dummy0 added
[  254.144899][T14370]  loop0: p1 p3 < >
[  254.151818][T14409] team0: Port device dummy0 removed
[  254.166792][T14409] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  254.334484][T14367] ==================================================================
[  254.342629][T14367] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[  254.352474][T14367] 
[  254.354815][T14367] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0:
[  254.362908][T14367]  tick_do_update_jiffies64+0x113/0x1c0
[  254.368481][T14367]  tick_nohz_handler+0x7f/0x2d0
[  254.373355][T14367]  __hrtimer_run_queues+0x20f/0x5a0
[  254.378593][T14367]  hrtimer_interrupt+0x21a/0x460
[  254.383544][T14367]  __sysvec_apic_timer_interrupt+0x5c/0x1d0
[  254.389456][T14367]  sysvec_apic_timer_interrupt+0x6f/0x80
[  254.395128][T14367]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  254.401130][T14367]  __sanitizer_cov_trace_const_cmp8+0x0/0x90
[  254.407144][T14367]  unmap_page_range+0xe82/0x25c0
[  254.412139][T14367]  unmap_vmas+0x23d/0x3a0
[  254.416486][T14367]  exit_mmap+0x1b0/0x6c0
[  254.420753][T14367]  __mmput+0x28/0x1c0
[  254.424750][T14367]  mmput+0x40/0x50
[  254.428501][T14367]  exit_mm+0xe4/0x180
[  254.432500][T14367]  do_exit+0x417/0x15c0
[  254.436677][T14367]  do_group_exit+0xff/0x140
[  254.441214][T14367]  get_signal+0xe58/0xf70
[  254.445552][T14367]  arch_do_signal_or_restart+0x96/0x440
[  254.451119][T14367]  exit_to_user_mode_loop+0x77/0x110
[  254.456418][T14367]  do_syscall_64+0x1d6/0x200
[  254.461024][T14367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.466925][T14367] 
[  254.469256][T14367] read to 0xffffffff868099c0 of 8 bytes by task 14367 on cpu 1:
[  254.476889][T14367]  mem_cgroup_flush_stats_ratelimited+0x29/0x70
[  254.483147][T14367]  count_shadow_nodes+0x6a/0x230
[  254.488107][T14367]  do_shrink_slab+0x63/0x680
[  254.492727][T14367]  shrink_slab+0x448/0x760
[  254.497157][T14367]  shrink_node+0x6c3/0x2120
[  254.501668][T14367]  do_try_to_free_pages+0x3f6/0xcd0
[  254.506870][T14367]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[  254.512776][T14367]  try_charge_memcg+0x358/0x9e0
[  254.517633][T14367]  obj_cgroup_charge_pages+0xa6/0x150
[  254.523025][T14367]  __memcg_kmem_charge_page+0x9f/0x170
[  254.528503][T14367]  __alloc_frozen_pages_noprof+0x188/0x360
[  254.534330][T14367]  alloc_pages_mpol+0xb3/0x260
[  254.539111][T14367]  alloc_pages_noprof+0x90/0x130
[  254.544086][T14367]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  254.550011][T14367]  __kvmalloc_node_noprof+0x483/0x670
[  254.555415][T14367]  ip_set_alloc+0x24/0x30
[  254.559765][T14367]  hash_netiface_create+0x282/0x740
[  254.564984][T14367]  ip_set_create+0x3c9/0x970
[  254.569769][T14367]  nfnetlink_rcv_msg+0x4c3/0x590
[  254.574720][T14367]  netlink_rcv_skb+0x123/0x220
[  254.579509][T14367]  nfnetlink_rcv+0x167/0x16c0
[  254.584202][T14367]  netlink_unicast+0x5c0/0x690
[  254.589009][T14367]  netlink_sendmsg+0x58b/0x6b0
[  254.593775][T14367]  __sock_sendmsg+0x145/0x180
[  254.598466][T14367]  ____sys_sendmsg+0x31e/0x4e0
[  254.603239][T14367]  ___sys_sendmsg+0x17b/0x1d0
[  254.607939][T14367]  __x64_sys_sendmsg+0xd4/0x160
[  254.612886][T14367]  x64_sys_call+0x191e/0x3000
[  254.617683][T14367]  do_syscall_64+0xd2/0x200
[  254.622229][T14367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.628172][T14367] 
[  254.630507][T14367] value changed: 0x00000000fffff08f -> 0x00000000fffff090
[  254.637622][T14367] 
[  254.639951][T14367] Reported by Kernel Concurrency Sanitizer on:
[  254.646105][T14367] CPU: 1 UID: 0 PID: 14367 Comm: syz.0.3215 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  254.655937][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  254.666007][T14367] ==================================================================
[  254.729625][T14293] Process accounting resumed
[  254.751626][T14293] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512)
[  254.759207][T14293] FAT-fs (loop2): Filesystem has been set read-only
[  254.780887][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3235'.
[  254.790025][ T3358] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512)
[  254.939395][T14424] loop5: detected capacity change from 0 to 32768
[  255.002108][T14424]  loop5: p1 p3 < >