last executing test programs: 53.483176124s ago: executing program 2 (id=937): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x80000) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) (async) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0xfffff001, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x124, r5, 0x0, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad46}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8010}, 0x4) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x38}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x84) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r10, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x13}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000945}, 0x2004c8d1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0x20, &(0x7f0000000f80)={&(0x7f0000000dc0)=""/159, 0x9f, 0x0, &(0x7f0000000e80)=""/195, 0xc3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x20, 0x28, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}, [@generic={0x6, 0x5, 0x0, 0xffff, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000cc0)='GPL\x00', 0x80000000, 0x40, &(0x7f0000000d00)=""/64, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, r4, 0x8, &(0x7f0000000d40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x4, 0x2, 0x4}, 0x10, r12, 0xffffffffffffffff, 0x3, &(0x7f0000001000)=[r4, r4, r4, r4, r4, r4], &(0x7f0000001040)=[{0x4, 0x1, 0x6, 0x2}, {0x3, 0x4, 0xe, 0x6}, {0x1, 0x5, 0xe, 0x8}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x20, 0x1b, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x5, 0x8, 0x8, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001240)='GPL\x00', 0x80, 0x1000, &(0x7f0000001280)=""/4096, 0x82300, 0x20, '\x00', r7, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000002280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000022c0)={0x3, 0xb, 0x3, 0x23}, 0x10, r12, r4, 0x6, &(0x7f0000002300)=[r4, r11, r11, r4, r11, r4], &(0x7f0000002340)=[{0x5, 0x4, 0xe, 0x2}, {0x4, 0x2, 0x9, 0xb}, {0x3, 0x1, 0xd, 0x1}, {0x3, 0x4, 0x2, 0x6}, {0x0, 0x5, 0x2, 0x3}, {0x5, 0x3, 0xe, 0x4}], 0x10, 0xd5d}, 0x94) (async) socket$tipc(0x1e, 0x5, 0x0) (async) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000002480)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000024c0)={0x0, 0xf8, "e02ec05e5bdef073526f337e6e6d15003b1514d192d61c7968f4dc094f95567511de813e3272cfa300122e192792fc254a222069953dacecdecedd449bc9d85552ef44e7433b9ba1b3c64a5341f6301a9a8e39cfb4ecfeffab1c273045922dc73b82b18db7e38792cac844920837e5629d4eb352b9e2d80ba1fbe9bee5d04de2cdbe8436fa868c39f12dd4acfe8f59e85513d798b31372544179b09b1382c1a1995e7005c5b9ba79f00e4b24b6ed05983fab1d5156364eea1b70bb39b34b002ff6fe9ddbc8fc2238b80eda2f8003d6fdbe20d45e0c4fc9e1cd807fd5f84ddfeebd3db10813329320185065bb4ac78086306446fb7caab3c8"}, &(0x7f00000025c0)=0x100) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000002600)={r13, 0x2, 0x7, 0x800, 0x0, 0xf}, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000002640)=0x0) bind$nfc_llcp(r4, &(0x7f0000002680)={0x27, r14, 0xffffffffffffffff, 0x0, 0x8, 0x1, "238cd50ff0de0b6cefeb7c07d0ff472e71953dbb283288e80f9eb5bdf692dd9084d3a339b937ea1be1b5d1a91b25006aac7f1e96311189cc67f854b99d622e", 0xa}, 0x60) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000002700)={0x0, 0x4, 0x1, 0x3}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000002780)={{0x1, 0x1, 0x18}, './file0\x00'}) 51.712535747s ago: executing program 2 (id=941): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d0301000000ffb00f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 51.639334701s ago: executing program 2 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, r6, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x1212, &(0x7f0000001e80)=ANY=[], 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$eJzs3M9OG0ccwPFZMCp1JVQpaiCEw6TpgR7i7C7FyMppux6bSdY7q5l1BKcqKhChQlo1qdRwKhfaSu1D5NqH6BtFfYRWu2un/HcKCU6j70eCGXt/O/ObxZqRF80KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgvLjt+4EnEp321+TZ4rY1vXOOD9v79EhxTr9CeMWPmJ4Wc9Vbc9f+PfxJ1chs9WpWTBfFtNj76PrH967ValUTnjgnoSvx9PneN492dja/l3Uhxp7N1euqVDuje1FXSe2MbDWb/t3VjpMdnSi37nLVk7FVUW6sXIw/l0GrtSRVY9300247StTwzZU7oe835f1GpiLrTHr3fsPFqzpJdNotY4rDRcxK8UF8oHOZq6gn5db2zubSqCSLoOB1gkIpa+f+GUM/DIMgDIPmcmt5xfdrJ97wjxEnIsb/ocV4vdH5G7iMvwfrPwAAAAAAeH955T324vv/VHkf3hMdnSh/3GkBAAAAAIA3qPzP/2xRTBW1OeHx/R8AAAAAgPfNL2ftsZsY7tFz2Qfen38Jqz6sAnej4ne0O1m9nDzeYt6Z92YGjZRFszZ4FasF70YVdGMY/XJQbI3Kw7N2ytvP1j7zLp6A+E3MVzHzG1W5MTxS9VLv6EQ1YpPcC0QUzUzkai3/4cn2j0IUvf+a9mY8sbW9s9n4+tudjTKX/aKV/d3BBooT+yjOyeXZq32Pp494qrwRM+i3XvXrHx7/RHX6xH/o80DcrGJu1quyfnT800WfQeOs0Q+yCC458gOxUMUsLN4uituLp2QRjsoiPJzFha7Fa2SxNCoL76fLZQEA47I1YhXyxIl19wKz3NWs7gfiVhVza76cWGvzp8zo/qgZ3b/k6vbHiWcgnLXGFv3+fmxVfVGc8OLMfl0SesUlnHy2+524/vT53p3t3UePNx9vPgnDpab/he8vh2KqHMagYO0BAJxC2ZdePf/Zs1ZnXwWtVhDlq0paEz+QVre7Suo0VzZejdKukpk1uYlNUlQe6rZy0vWzzNhcdoyVmXF6rXzyixw8+sWpXpTmOnZZoiKnZGzSPIpz2dYulln/y0S7VWXLk12mYt3RcZRrk0pn+jZWDSmdUocCdVulue7ooprKzOpeZNflQ5P0e0q2lYutznJTNTjsS6cdY3tls41xX2wAAN4Rr55g9xYr4x4jAAA4ilUaAAAAAAAAAAAAAAAAAAAAAIB331Xs/6NChcr/rTLumQnA2/ZPAAAA//9yAaF0") bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)="5b1ef2506725a4de41dc8896b47795a984e77b3275f5cf2a3905318f4db87ebc5d00000000000001ffc876e836fcd42a2d9521a69930a18d8b1d11dc3f3cd0dc30cb53c21849be9ebe5cd8c3c2bd8fe07ae94d0f588a99cf4a228f79c813c35ffa1e8af697d68776e2067cad3467c6786638fc7c71d49a262c1a30b723a1f437f49ea3cc857e9001392e7612f3426677601fd1824578034adeb3aadc851135ec77020aa9ced23130c23c3a7fddff6bd739c435874ac4c54ff761fe4ce24c628274b7360c9912c38aa2cfa4a002f80b", 0xcf}], 0x2}, 0x51) recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcec}, 0x10001) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x3, {0x2, 0x1, 0x4}, {0x2, 0xb25f81e830ee96fb, 0x1}, 0x0, 0xfe}, {0x1, 0x1, {0x1, 0xff}, {0x2}, 0x1, 0x1}, {0x0, 0x0, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x3}, 0xff, 0x1}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 51.473218841s ago: executing program 2 (id=950): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sigaltstack(0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x35c, 0x0) pread64(r2, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0", 0x3a}], 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x80000000, &(0x7f0000000000)={0x1e, 0xa, 0x7}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000c80)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000480)="9083f66c662ee3481a263261d3f7796d79be74196ffaaf5dc52878f233b1463a1b96b15bd794f2530d0e03c0deb54a0854109694d7bdaf04023b4b06e72a5cdb4341e7f9d815f45fabeaad4096d7fa89ec50d7e43adf0e62b098f0d4730204826083fb0bdb042a80f8f189bff5963fcc2efb933b27cbc55e8baa", 0x7a, 0x7, 0x0, 0x0, r3}]) 51.216347916s ago: executing program 2 (id=953): r0 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b78608", 0xbf}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 50.944122062s ago: executing program 2 (id=957): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x1852, 0x10000, 0x0, 0x1bf}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) sendto(r0, 0x0, 0x4c, 0x800, &(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e23, 0x2, @local, 0x5}}}, 0x80) 50.943963782s ago: executing program 32 (id=957): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x1852, 0x10000, 0x0, 0x1bf}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) sendto(r0, 0x0, 0x4c, 0x800, &(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e23, 0x2, @local, 0x5}}}, 0x80) 4.426491002s ago: executing program 1 (id=1880): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffb}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000680)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) r0 = socket$pptp(0x18, 0x1, 0x2) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="47ade313", 0x4}], 0x1}}], 0x1, 0x24000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r2, 0x40000000007, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000640)=r3, 0x4) recvmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000440), &(0x7f00000001c0)=0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{r2, 0x2204}, {0xffffffffffffffff, 0x3008}, {r6}, {r1, 0x210}], 0x4, &(0x7f0000000580)={r7, r8+60000000}, &(0x7f00000005c0)={[0x89e3]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x0, 0x2, 0x7e) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r10, r10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r10}}, './file0\x00'}) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 4.108048791s ago: executing program 1 (id=1884): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff66, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a0104f4ffffffffffffff010000000900030073797a31000000000900010073797a310000000028000480080002400c86c30108000140000000051400030070696d7265673100000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4.107490291s ago: executing program 1 (id=1885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=""/72, 0x48}, 0x2}, {{&(0x7f0000001480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/131, 0x83}, {&(0x7f0000002880)=""/104, 0x68}, {&(0x7f0000002640)=""/28, 0x1c}, {&(0x7f0000002680)=""/68, 0x44}, {&(0x7f0000002700)=""/220, 0xdc}], 0x6, &(0x7f0000002980)=""/88, 0x58}, 0x2}], 0x2, 0x4000822b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r3 = socket$inet6(0xa, 0x5, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000800)=0x1e) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000001440)) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000002a00)=0x5, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10012, r5, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32=r1, @ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, &(0x7f0000001400)="59c2d65187", 0x0, 0x1008, 0x0, 0x49, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x12c8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x11f8, 0xffffffff, 0xffffffff, 0x11f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0x0, 0x62, 0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x2c, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x130, 0x1}}}, {{@ipv6={@remote, @remote, [0x0, 0x0, 0xff000000, 0xffffff00], [], 'wg1\x00', 'sit0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0xfffffffe, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x204}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1328) 3.651981537s ago: executing program 4 (id=1892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x3, 0x5b, 0x7}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000800)={0x9, 0x8000000000000001, 0x8, 0x6, 0x2, 0xffffffffffff1f63, 0x8, 0x4, 0x6, 0x2, 0x2, 0x4, 0x7, 0x0, 0xc0000000000, 0x6, 0xd2, 0x2, 0x8001, 0x3, 0xffffffffffffffff, 0xaf2e, 0x8, 0x2, 0x7, 0x7}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_setup(0xaae, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) 3.353694905s ago: executing program 4 (id=1895): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140)={[{@grpquota}, {@inode_readahead_blks}, {@errors_remount}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, 0xffffffffffffffff, 0x4008000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) (fail_nth: 3) 3.207975763s ago: executing program 1 (id=1896): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x30925) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0xa, 0x82, 0x140}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000300), 0x81, 0x4d0, &(0x7f0000000f00)="$eJzs3c9vG1kdAPDvTOImm81usrDil4Aty0JB1dqJuxut9lQuIFRVQlScOLQhcaModhzFTtWEHtL/AYmekODUMwckDkg9cecGN4RUDkgFKlCDxMFoxk6bNnYa0cRTxZ+P9DTz5tn+fl/bmTfzmvgFMLLOR8RuRJyLiBsRMdM7nvRKXO6W7HVPHt9Z2nt8ZymJTufaP5K8PTsWB96TebP3mZMR8cPvRfwkORy3tb2ztliv1zZ79Uq7sVFpbe/8ZbWxuFJbqa1XqwvzC3OfXPq4emJ9fa/x60ffXb3yo9/99isP/7D77Z9maU332g724yR1u156GiczHhFXTiNYAcZ6/TlXdCL8X9KI+ExEvJ+d/52iswEAhqHTmYnOzME6AHDWpfkcWJKWe3MB05Gm5XJ3Du/dmErrzVb74s3m1vpyd65sNkrpzdV6ba43VzgbpSSrz+f7z+rVF+qXIuKdiPjZxBt5vbzUrC8XeeMDACPszRfG/39PdMd/AOCMmyw6AQBg6Iz/ADB6jP8AMHqM/wAweoz/ADB6jjH+3x9GHgDA8Hj+B4CR8oOrV7PS2et9//Xyre2tteatD5drrbVyY2upvNTc3CivNJsr+Xf2NF72efVmc2P+o9i6XWnXWu1Ka3vneqO5td6+nn+v9/VaaSi9AgCO8s57D/6URMTup2/kJQ6s5WCshrMtLToBoDBjRScAFGa86ASAwpQ8AsDI67NE73MG/ojQvYFvMX0Ir7kLXzT/D6PKzT+MLvP/MLrM/8Po6nQSa/4DwIgxxw+cwv//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJk3nZckLffWAp+ONC2XI96KiNkoJTdX67W5iHg7Iv44UZrI6vNFJw0AvKL0b0lv/a8LMx9Mv9h6LvnPRL6NuP+57qH25nx2/J/7x6N979rPby+225vVIwNZahAACrI/TufbAw/yTx7fWdovw8zn0Xe6i4tmcfd6pdsyHuP5djJKvzj8vux+ZewE4u/ejYgv9Ot/ks+NzPZWPp36V9LLpyuL/dZQ46fPxU/ztu42+7P47AnkAqPmQXb9udzv/EvjfL7tf/5P5leoV7d//ds7dP1Ln17/xvrEz87588eN8dHvvz+w7W7El8b7xU+exk8GxP/gmPH//OWvvj+orfPLiAvRP/7BWJV2Y6PS2t75cLWxuFJbqa1XqwvzC3OfXPq4WsnnqCv7M9WH/f3Ti28f1f+pAfEnX9L/bxyr95Pxq//e+PHXjoj/ra/3//t/94j42cP0N48VP2Jx6jcDl+/O4i/37/9kHBE/O3bxmPEf/nVn+ZgvBQCGoLW9s7ZYr9c27QxtJ7t3ew3SsFPYTvYv4CQ+5/OnmGrRVybgtD076YvOBAAAAAAAAAAAAAAAGGQYv/BUdB8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4u/4XAAD//2RS1S4=") r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0xb9, 0x80, 0x8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x11a6c348b0cee5ed, 0x8, 0xc7ea, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r3}, 0x94) r4 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$kcm(0x29, 0x7, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r8, 0x4bfb, &(0x7f0000002f80)=""/61) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000340)=[{0x67, 0x8, 0x4, 0x2}]}, 0x10) unshare(0x2040400) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x14, 0x0, 0xffffffffffffffff, 0x0, r4, 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x4edd) 3.172132995s ago: executing program 4 (id=1897): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x7, r1, 0x2}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$kcm(0x10, 0x400000002, 0x0) unshare(0x6020480) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x14, 0x0, &(0x7f00000001c0)=0x59) close_range(r3, 0xffffffffffffffff, 0x2) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x8, 0xe95d, 0x0, 0xb, 0x0}) 2.792113587s ago: executing program 1 (id=1899): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140)={[{@grpquota}, {@inode_readahead_blks}, {@errors_remount}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, 0xffffffffffffffff, 0x4008000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 2.761300399s ago: executing program 3 (id=1901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000300)=@base={0x10, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r2 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r2, &(0x7f00000007c0)=""/77, 0x4d, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x9732) listen(r1, 0xec) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000002900)={0x6, 0x40000002}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x0, r3, 0x0, 0x80000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000004000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000966d73bfd3f4c4f7b5651dbb106100060a010400000000000000000a0000050004801c0001800b0001006e756d67656e00000c00028008000140000000120900010073797a3100000000140000001100010000000000000000000e0000"], 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.183790683s ago: executing program 4 (id=1907): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/220) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x3c}}, 0x20000084) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[], 0x1c, 0x0) creat(&(0x7f0000000080)='./file1/file0\x00', 0x182) 1.943998367s ago: executing program 0 (id=1909): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.943700787s ago: executing program 4 (id=1910): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.905491609s ago: executing program 1 (id=1911): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001980)=0x0) r3 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0xa, 0x4, 0x0, 0xfc, 0x0, 0x81, 0x44, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0xffffffffffffff54}, 0x1a970, 0x80000, 0xaca6, 0x7, 0x0, 0xfffffff9, 0x9, 0x0, 0x9, 0x0, 0x5}, r2, 0xd, r3, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x1e58, 0x13001, 0x0, 0x2ff}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000040), 0x1) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x6, 0x2, 0x0, 0x1, [@generic="cff8"]}]}, 0x1c}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10200, 0x5, 0x0, 0x4, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.869425351s ago: executing program 3 (id=1912): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f0200ffffc00000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.802498595s ago: executing program 33 (id=1911): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001980)=0x0) r3 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0xa, 0x4, 0x0, 0xfc, 0x0, 0x81, 0x44, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0xffffffffffffff54}, 0x1a970, 0x80000, 0xaca6, 0x7, 0x0, 0xfffffff9, 0x9, 0x0, 0x9, 0x0, 0x5}, r2, 0xd, r3, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x1e58, 0x13001, 0x0, 0x2ff}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000040), 0x1) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x6, 0x2, 0x0, 0x1, [@generic="cff8"]}]}, 0x1c}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10200, 0x5, 0x0, 0x4, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.760109217s ago: executing program 3 (id=1914): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x480, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.7235567s ago: executing program 3 (id=1915): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f00000013c0)={0xffffffffffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = memfd_create(&(0x7f0000000980)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\b\x00\x00\x00\x00\x00\x00\x00\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\xbf\xf8\x87o\xfc(\xc2\xd76T>?q\xc6\xf7\x04\x99-\xe3:\x8d\x81\xefD\xef\xa5F]\xb5x\xe9\xb7\xd3\x92\x1dH\x03\xb2\xbek\x0e_\x10\x17\xa2\xd6-\x90\xd9W\xd2%\x82<\xdc\x19\xf1\xc0\x1b\x87.l\bs\x9f\xa7UUM\xa0\xe7\x9c%\x8f\xd8\x9dQ\xf3\x8fa\xcert\x00\xec\xe7\a{\f\x9fH\xc4\x80\t\xa3\xe1x&U:\xbd\xe0\x1fMC\x13\x18\xe9R?\xc5\x16\xc1\xb3\x19\xdbX\xd9I\x8d\x9c\xc2\xd5s9\xdeC\xae\xa7\x05\xadx+&\xf4\xd4\xb7\xb8\xbdar\xa2\xf0F\xaf8\xf8\x8a\x12(![\xb7\xa7\x06\xffq\ag\a(\x03\xaa\xa8\xc2\xff\xdc\xf2\xba0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/timer_list\x00', 0x0, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="cbd70cf9efd4f9a191dd1cbbaccbd294e6ec8d4841b5746c3ea508ea288da017d6d243f49464e5a00b848784cb526d8fb4c1e2c45dc9", 0x36}, {&(0x7f0000000300)="5e2ca3cb7711c877e5029020cf10c22d7092d1fe390dbe16be11c268bfb2527281676aef47aab29a3417dacf1739b21667257e", 0x33}], 0x2) preadv(r1, &(0x7f0000000000), 0x0, 0x50, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvfrom$rxrpc(r2, &(0x7f0000000240)=""/110, 0x6e, 0x2003, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @remote, 0x8}}, 0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x666e, &(0x7f0000000080)={0x0, 0xd6fa, 0x40, 0x3, 0x27f, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_io_uring_setup(0x78dc, &(0x7f00000003c0)={0x0, 0x6231, 0x200, 0x0, 0x3c4, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000440)) io_uring_enter(r5, 0x68c8, 0x7b16, 0x24, &(0x7f0000000480)={[0x7ff]}, 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f00000004c0)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/timer_list\x00', 0x0, 0x0) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="cbd70cf9efd4f9a191dd1cbbaccbd294e6ec8d4841b5746c3ea508ea288da017d6d243f49464e5a00b848784cb526d8fb4c1e2c45dc9", 0x36}, {&(0x7f0000000300)="5e2ca3cb7711c877e5029020cf10c22d7092d1fe390dbe16be11c268bfb2527281676aef47aab29a3417dacf1739b21667257e", 0x33}], 0x2) (async) preadv(r1, &(0x7f0000000000), 0x0, 0x50, 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) recvfrom$rxrpc(r2, &(0x7f0000000240)=""/110, 0x6e, 0x2003, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @remote, 0x8}}, 0x24) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_io_uring_setup(0x666e, &(0x7f0000000080)={0x0, 0xd6fa, 0x40, 0x3, 0x27f, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_io_uring_setup(0x78dc, &(0x7f00000003c0)={0x0, 0x6231, 0x200, 0x0, 0x3c4, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000440)) (async) io_uring_enter(r5, 0x68c8, 0x7b16, 0x24, &(0x7f0000000480)={[0x7ff]}, 0x8) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 1.492078063s ago: executing program 3 (id=1917): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140)={[{@grpquota}, {@inode_readahead_blks}, {@errors_remount}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, 0xffffffffffffffff, 0x4008000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) (fail_nth: 4) 1.293581344s ago: executing program 3 (id=1918): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x7, r1, 0x2}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$kcm(0x10, 0x400000002, 0x0) unshare(0x6020480) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x14, 0x0, &(0x7f00000001c0)=0x59) close_range(r3, 0xffffffffffffffff, 0x2) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x8, 0xe95d, 0x0, 0xb, 0x0}) 1.141182464s ago: executing program 5 (id=1919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x3, 0x5b, 0x7}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000800)={0x9, 0x8000000000000001, 0x8, 0x6, 0x2, 0xffffffffffff1f63, 0x8, 0x4, 0x6, 0x2, 0x2, 0x4, 0x7, 0x0, 0xc0000000000, 0x6, 0xd2, 0x2, 0x8001, 0x3, 0xffffffffffffffff, 0xaf2e, 0x8, 0x2, 0x7, 0x7}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_setup(0xaae, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) 1.101798696s ago: executing program 0 (id=1920): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14c1b2bf", @ANYRES16=0x0, @ANYBLOB="01002cbd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000100)=""/164, 0xa4, 0xaa) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x1, @perf_config_ext={0x8, 0x2}, 0x0, 0x10000, 0x0, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0301"], 0xc8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2509000000050008000300feff0800010001000000050007"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x64000) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") fcntl$lock(r5, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.02514733s ago: executing program 0 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x4000040) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x112c2c6}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x114, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6, 0x3, 'wW'}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa22e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ad1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20004045}, 0x855) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x408, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x8}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x51c1aaa6c6d32bb7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r5, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x4f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "5bb6e4c7b409e6a988ba3739f8dfb5d9"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a5d42ca5782f0ceb022ccfff8be81039"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008091) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4031080}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ff}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x400, 0x3, 0x6, 0x0, {0x10001, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x2, 0x5}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040040}, 0x24000004) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000a00)={0x110c, 0x12, 0x1, 0x70bd26, 0x25dfdbff, {0x11, 0x3, 0xf7, 0xa, {0x4e22, 0x4e20, [0x3, 0x8, 0x0, 0xfffffd27], [0xd51c, 0x0, 0x25, 0xfffffff7], 0x0, [0x4, 0xc06]}, 0x81, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "5cf31209c261c8abae86fafe305ec6801665fa910b321045573a23ea6f711c8ed716119b7f23220037040672bcf0c35fa98fa51e1e5e1c79679ead58fa37ea55e122f30baf28c5e11eb239dc691eae7bd25bed20ee376c061526f43ab409658961b990e9bd88"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "b0c41e109e73a41ad327fa3329b008ec9d4c9d78a536cbf6573c3f5dcef9ecd7dd535a2af3ac60e50544d72436b7f3bae5950ec6d5b5b614684223ffed1cafd1fc27d7b8124b1f37a995"}]}, 0x110c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001bc0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001bc0)) openat$tun(0xffffffffffffff9c, &(0x7f0000001c00), 0x800, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c00), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001c40)={'hsr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001cc0), r3) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001cc0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001d00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r9, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x20008000) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f80), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x68, r11, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040054}, 0x50) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x68, r11, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040054}, 0x50) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000020c0)) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x48f2, 0xcdb4, 0x1, &(0x7f0000002100)={[0xfffffffffffff800]}, 0x8) (async) io_uring_enter(0xffffffffffffffff, 0x48f2, 0xcdb4, 0x1, &(0x7f0000002100)={[0xfffffffffffff800]}, 0x8) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) ioctl$FS_IOC_GETFSUUID(r12, 0x80111500, &(0x7f0000002140)) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x44, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040084) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x44, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040084) 1.021989551s ago: executing program 4 (id=1922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000300)=@base={0x10, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r2 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r2, &(0x7f00000007c0)=""/77, 0x4d, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x9732) listen(r1, 0xec) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000002900)={0x6, 0x40000002}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x0, r3, 0x0, 0x80000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000004000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000966d73bfd3f4c4f7b5651dbb106100060a010400000000000000000a0000050004801c0001800b0001006e756d67656e00000c00028008000140000000120900010073797a3100000000140000001100010000000000000000000e0000"], 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 872.333819ms ago: executing program 0 (id=1923): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140)={[{@grpquota}, {@inode_readahead_blks}, {@errors_remount}, {@oldalloc}]}, 0x0, 0x50d, &(0x7f0000001bc0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, 0xffffffffffffffff, 0x4008000) syz_open_procfs$namespace(0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r2, @ANYBLOB="07020000000000000000010000002c01088044b3078008000600b300000008000500ff00000008000600e10000000800050040ef116808000600cd00000008000600af00000008000500f712f706080006009600000034000780080006003c00004f08000500e2f05c100800050012c61f100800060066000000080005007118862e08000600fd0000001c00078008000500a156eb25080005000b608179080006007f0000003c000780080006009100000008000500a06e96730800060094000000080005004baa1d3f0800050038560852080005009889fe5708000600180000004400078008000600570000000800060059000000080006005a0000000800060097000000080006008300000008000500b252a030080006005000000008000600410000001400078008000500d9a9bc2c0800050075190a492c0004800500030001000000050003000000000005000300010000000500030000000000050003000100000008000100030000000800020001"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="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", 0xff}, {&(0x7f00000002c0)="e99b4f7496c8277f05317ea6c875ebf2aeb36843a919c33251d1f93f4feffc776da34dc7da3bc9157bf4ffbe6ba6afde429d3ca498f19d6ad8367b65d8687dc7ea0c2b1f79ed76d1d0edad2b923b969dcc33cfe41c191730966cc5636a508e238f4918e49fd83af2db50e7d34b3cab62999d8dfe7bbe7eed776ce5a2f7ab29c3eada2f81e2d5603a69444140b5c1e8b72135bc94093f8c8a79465e8231716078cb31", 0xa2}], 0x2, 0x0, 0x0, 0x7400}, 0x8040851) 782.470524ms ago: executing program 0 (id=1924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a0104000000000000c400010000000900030073797a31000000000900010073797a310000000028000480080002400c86c30108000140000000051400030070696d7265673100000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 731.485167ms ago: executing program 5 (id=1925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x79}}, 0x0, 0x0, 0x14, 0x0, "aa1cda12482ce936fe2707b31f549402157745ea281f88ea79321f8931e69fff9996d6cc77adb40b96e90df08b90b2a7f62e807928e17a869290e49ecf42b43e5dfc7650c208e65bbb7e7dd058ed1d57"}, 0xd8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback, 0xffff}, 0x1b) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000080)={[{@discard}, {@nouid32}]}, 0x3, 0x44d, &(0x7f0000000c80)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x79}}, 0x0, 0x0, 0x14, 0x0, "aa1cda12482ce936fe2707b31f549402157745ea281f88ea79321f8931e69fff9996d6cc77adb40b96e90df08b90b2a7f62e807928e17a869290e49ecf42b43e5dfc7650c208e65bbb7e7dd058ed1d57"}, 0xd8) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback, 0xffff}, 0x1b) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000080)={[{@discard}, {@nouid32}]}, 0x3, 0x44d, &(0x7f0000000c80)="$eJzs3MtvG0UYAPBvbSd9E1Px6gMIFETEI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gpXhCpVKJeWnozWXjuOY+ftOODfT9p2Znc2M593x57ZiRNAzxpM/0kiDkbE7xExUM0uLzBY/e/O4vzEP4vzE0mUy2/9nVTK3V6cn6gVrZ13oJYpRuQ+S+JYi3pnr167OF4qTV3J8iNzl94fmb167bnpS+MXpi5MXR47e/b0qdEXzow9vy1xpnHdPvrRzPEjr71z442Jczfe/fnbpBZ/Uxwbkmt7ZHC1054slzdV3W51qCGdFJaSa5xWHuhYi1iPfESkl6uv0v8HIh9LF28gXv20q40DOqp/9cMLZeB/LB3NA72o9kGfzn9r2w4MO3aNWy9VJ0Bp3HeyrXqkUJ/a9zXNb7fTYEScW7j7VbrFVp5DAACs0/fp+OfZVuO/XDzQUO6ebA2lGBH3RsThiDiTPT++P6JS9sGIeKh+xt511d+8SLJy/JO7ueng1iEd/72YrW0tH//VF3aK+Sx3qBJ/X3J+ujR1MntNhqJvT5ofXaWOH1757Yt2xxrHf+mW1l8bC2btuFnYs/ycyfG58a3E3OjWJxFHC63iT+orAUlEHImIo5usY/rpb463O7Z2/J1V/jriqer1X4im+GuShlyL9cmRvVGaOjlSuytW+uXX62+2q78x/kIX4k+v//6W9389/mLSuF47u/E6rv/xeds5zWbv//7k7WX7Phyfm7syGtGfvF5tdOP+saZyY0vl0/iHTrTu/4dj6ZU4FhHpTfxwRDwSEY9mbX8sIh6PiBOrxP/Ty0+8t/n4OyuNfzIi7mbPA9a+/kuJ/mjekyX+zH5Ytid/8cfvllVa3Ej86fU/XUkNZXvW8/7Xsl0tElt9/QAAAOC/IBcRByPJDdfTudzwcPV3+O+L/bnSzOzcM+dnPrg8Wf2OQDH6crUnXQMNz0NHs2l9LT/WlD+VPTf+Mr+vkh+emClNdjt46HEH2vT/1F/5brcO6LhCtxsAdI3+D71L/4fepf9D72rR//d1ox3Azqv0/6Y/1fRxl9oC7Kymz3/LftBDzP+hd+n/0Lv0f+hJs/ti7S/JS0isSERuVzRDokOJbr8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI9/AwAA///EVOdG") (async) 627.314363ms ago: executing program 0 (id=1926): r0 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x7, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 363.248359ms ago: executing program 5 (id=1927): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffb}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000680)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) r0 = socket$pptp(0x18, 0x1, 0x2) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="47ade313", 0x4}], 0x1}}], 0x1, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000004c0)={[{}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r2, 0x40000000007, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r3) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x10, 0x0, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, {[@hopopts={0x3a, 0x1, '\x00', [@ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0xfff7}]}]}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000440), &(0x7f00000001c0)=0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{r2, 0x2204}, {0xffffffffffffffff, 0x3008}, {r4}, {r1, 0x210}], 0x4, &(0x7f0000000580)={r5, r6+60000000}, &(0x7f00000005c0)={[0x89e3]}, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x0, 0x2, 0x7e) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r8, 0x0) 106.017874ms ago: executing program 5 (id=1928): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff66, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040012000000000000010000000900030073797a31000000000900010073797a310000000028000480080002400c86c30108000140000000051400030070696d7265673100000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 0s ago: executing program 5 (id=1929): perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x10000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3ff, 0x1}, 0x10082, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x800000000003}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x38ca8697, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r3, {0x7, 0xffe0}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) mlockall(0x7) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) r4 = syz_io_uring_setup(0x6021, &(0x7f0000000040)={0x0, 0x7344, 0x10000, 0x4, 0x74}, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000380), 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x1e3c3844) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x10000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3ff, 0x1}, 0x10082, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x800000000003}, 0x0, 0x1, 0xffffffffffffffff, 0x9) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x38ca8697, 0x3}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r3, {0x7, 0xffe0}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) (async) mlockall(0x7) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) (async) syz_io_uring_setup(0x6021, &(0x7f0000000040)={0x0, 0x7344, 0x10000, 0x4, 0x74}, &(0x7f0000000000), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000380), 0x0) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) (async) brk(0x1e3c3844) (async) kernel console output (not intermixed with test programs): T4-fs (loop4): 1 orphan inode deleted [ 85.517416][ T6346] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.902: Invalid block bitmap block 0 in block_group 0 [ 85.649210][ T6361] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 85.963077][ T6388] macvlan1: entered promiscuous mode [ 85.978941][ T6388] macvlan1: left promiscuous mode [ 86.113866][ T6396] syzkaller0: entered promiscuous mode [ 86.119601][ T6396] syzkaller0: entered allmulticast mode [ 86.134273][ T6398] netlink: 'syz.1.917': attribute type 10 has an invalid length. [ 86.142290][ T6398] team0: entered promiscuous mode [ 86.147518][ T6398] team_slave_0: entered promiscuous mode [ 86.153392][ T6398] team_slave_1: entered promiscuous mode [ 86.159155][ T6398] team0: entered allmulticast mode [ 86.164386][ T6398] team_slave_0: entered allmulticast mode [ 86.170267][ T6398] team_slave_1: entered allmulticast mode [ 86.176703][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.184607][ T6398] bridge0: port 1(team0) entered blocking state [ 86.190979][ T6398] bridge0: port 1(team0) entered disabled state [ 86.233534][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 86.233554][ T29] audit: type=1326 audit(1769921599.460:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 86.263261][ T29] audit: type=1326 audit(1769921599.460:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 86.286655][ T29] audit: type=1326 audit(1769921599.460:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 86.311991][ T29] audit: type=1326 audit(1769921599.460:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 86.335846][ T29] audit: type=1326 audit(1769921599.460:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcc3b9aac22 code=0x7ffc0000 [ 86.348510][ T6405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6405 comm=syz.1.919 [ 86.359136][ T29] audit: type=1326 audit(1769921599.460:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc3b96b78e code=0x7ffc0000 [ 86.395100][ T29] audit: type=1326 audit(1769921599.470:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcc3b9aace7 code=0x7ffc0000 [ 86.418571][ T29] audit: type=1326 audit(1769921599.470:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc3b96b78e code=0x7ffc0000 [ 86.441967][ T29] audit: type=1326 audit(1769921599.470:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc3b9aab4b code=0x7ffc0000 [ 86.465533][ T29] audit: type=1326 audit(1769921599.470:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcc3b96b78e code=0x7ffc0000 [ 86.666529][ T6424] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 87.002246][ T6456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=6456 comm=syz.2.936 [ 88.741251][ T6369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.830049][ T6472] __nla_validate_parse: 10 callbacks suppressed [ 88.830069][ T6472] netlink: 71 bytes leftover after parsing attributes in process `syz.1.939'. [ 88.928793][ T6486] set_capacity_and_notify: 6 callbacks suppressed [ 88.928811][ T6486] loop2: detected capacity change from 0 to 136 [ 88.954528][ T6486] iso9660: Unknown parameter 'vxcan1' [ 88.956274][ T6494] loop3: detected capacity change from 0 to 1024 [ 88.962377][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 88.990346][ T6494] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.011836][ T6499] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.948: lblock 3 mapped to illegal pblock 3 (length 2) [ 89.041756][ T6500] loop0: detected capacity change from 0 to 1024 [ 89.058467][ T6494] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.948: lblock 3 mapped to illegal pblock 3 (length 2) [ 89.066724][ T6500] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 89.082430][ T6502] loop2: detected capacity change from 0 to 256 [ 89.116406][ T6500] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.126930][ T6494] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.948: lblock 0 mapped to illegal pblock 0 (length 1) [ 89.143539][ T6500] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 89.151172][ T6494] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 89.163998][ T6494] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.163998][ T6494] [ 89.195061][ T6500] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 89.195061][ T6500] [ 89.198338][ T6499] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 1: comm syz.3.948: lblock 1 mapped to illegal pblock 1 (length 2) [ 89.205964][ T6500] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 89.229624][ T6499] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 117 [ 89.242008][ T6499] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.242008][ T6499] [ 89.292951][ T3315] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 89.302229][ T3315] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 89.332428][ T6518] netlink: 60 bytes leftover after parsing attributes in process `syz.1.954'. [ 89.370087][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.386040][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.394854][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.419291][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.509727][ T52] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.551933][ T6530] program syz.0.956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.578142][ T52] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.595376][ T1639] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:5: lblock 4 mapped to illegal pblock 4 (length 1) [ 89.613860][ T1639] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 89.626324][ T1639] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.626324][ T1639] [ 89.661222][ T52] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.735117][ T52] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.766323][ T6531] lo speed is unknown, defaulting to 1000 [ 89.860822][ T6545] netlink: 44 bytes leftover after parsing attributes in process `syz.3.961'. [ 89.873630][ T6543] loop4: detected capacity change from 0 to 136 [ 89.902349][ T6543] iso9660: Unknown parameter 'vxcan1' [ 89.912895][ T52] bridge_slave_1: left allmulticast mode [ 89.918816][ T52] bridge_slave_1: left promiscuous mode [ 89.924581][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.976188][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 90.227532][ T52] bond0 (unregistering): left promiscuous mode [ 90.233764][ T52] bond_slave_0: left promiscuous mode [ 90.239323][ T52] bond_slave_1: left promiscuous mode [ 90.250508][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.260865][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.271878][ T52] bond0 (unregistering): Released all slaves [ 90.285164][ T6569] netlink: 80 bytes leftover after parsing attributes in process `syz.3.966'. [ 90.294148][ T6569] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 90.340069][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 90.358275][ T52] team0: left promiscuous mode [ 90.363168][ T52] team_slave_0: left promiscuous mode [ 90.368886][ T52] team_slave_1: left promiscuous mode [ 90.376044][ T52] dummy0: left promiscuous mode [ 90.376886][ T6524] 9pnet_fd: p9_fd_create_tcp (6524): problem connecting socket to 127.0.0.1 [ 90.398657][ T52] hsr_slave_0: left promiscuous mode [ 90.410753][ T52] hsr_slave_1: left promiscuous mode [ 90.428955][ T52] veth1_macvtap: left promiscuous mode [ 90.434572][ T52] veth0_macvtap: left promiscuous mode [ 90.440836][ T52] veth1_vlan: left promiscuous mode [ 90.446435][ T52] veth0_vlan: left promiscuous mode [ 90.481565][ T6592] netlink: 44 bytes leftover after parsing attributes in process `syz.1.971'. [ 90.532590][ T6596] netlink: 'syz.1.972': attribute type 1 has an invalid length. [ 90.592197][ T52] team_slave_1 (unregistering): left allmulticast mode [ 90.600685][ T52] team0 (unregistering): Port device team_slave_1 removed [ 90.611802][ T52] team_slave_0 (unregistering): left allmulticast mode [ 90.619450][ T52] team0 (unregistering): Port device team_slave_0 removed [ 90.631961][ T6607] program syz.3.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.691943][ T6596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.800167][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.807353][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.828679][ T6531] bridge_slave_0: entered allmulticast mode [ 90.837738][ T6531] bridge_slave_0: entered promiscuous mode [ 90.847861][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.854973][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.862302][ T6531] bridge_slave_1: entered allmulticast mode [ 90.869197][ T6531] bridge_slave_1: entered promiscuous mode [ 90.888196][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.907520][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.929307][ T6531] team0: Port device team_slave_0 added [ 90.936284][ T6531] team0: Port device team_slave_1 added [ 90.958688][ T6624] loop4: detected capacity change from 0 to 256 [ 90.983338][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.990356][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.016458][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.042652][ T6624] FAT-fs (loop4): Directory bread(block 64) failed [ 91.082414][ T6624] FAT-fs (loop4): Directory bread(block 65) failed [ 91.095128][ T6632] loop0: detected capacity change from 0 to 512 [ 91.102406][ T6624] FAT-fs (loop4): Directory bread(block 66) failed [ 91.119388][ T6632] EXT4-fs (loop0): 1 truncate cleaned up [ 91.136869][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.143977][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.166093][ T6624] FAT-fs (loop4): Directory bread(block 67) failed [ 91.170317][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.205608][ T6531] hsr_slave_0: entered promiscuous mode [ 91.215298][ T6531] hsr_slave_1: entered promiscuous mode [ 91.217015][ T6624] FAT-fs (loop4): Directory bread(block 68) failed [ 91.245215][ T6624] FAT-fs (loop4): Directory bread(block 69) failed [ 91.262210][ T6624] FAT-fs (loop4): Directory bread(block 70) failed [ 91.279987][ T6624] FAT-fs (loop4): Directory bread(block 71) failed [ 91.295880][ T6624] FAT-fs (loop4): Directory bread(block 72) failed [ 91.327391][ T6624] FAT-fs (loop4): Directory bread(block 73) failed [ 91.396485][ T6531] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.406530][ T6531] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.420167][ T6531] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.431882][ T6531] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.458631][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.465787][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.473108][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.480206][ T6531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.542699][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.557295][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 91.557314][ T29] audit: type=1400 audit(1769921604.790:2617): avc: denied { name_bind } for pid=6657 comm="syz.0.982" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 91.589438][ T6531] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.607025][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.624705][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.649244][ T6669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.983'. [ 91.661186][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.668307][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.697909][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.705152][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.725429][ T6531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.797672][ T3959] IPVS: starting estimator thread 0... [ 91.810999][ T6686] loop0: detected capacity change from 0 to 136 [ 91.826436][ T6686] iso9660: Unknown parameter 'vxcan1' [ 91.865847][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 91.886128][ T6685] IPVS: using max 2208 ests per chain, 110400 per kthread [ 91.941310][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.154608][ T6699] lo speed is unknown, defaulting to 1000 [ 92.295095][ T6729] netlink: 44 bytes leftover after parsing attributes in process `syz.0.993'. [ 92.320475][ T6531] veth0_vlan: entered promiscuous mode [ 92.329772][ T6531] veth1_vlan: entered promiscuous mode [ 92.406865][ T6531] veth0_macvtap: entered promiscuous mode [ 92.426090][ T6531] veth1_macvtap: entered promiscuous mode [ 92.476351][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.487793][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.499591][ T1639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.509144][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.520035][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.537975][ T3449] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.551168][ T29] audit: type=1400 audit(1769921605.780:2618): avc: denied { mounton } for pid=6531 comm="syz-executor" path="/root/syzkaller.stD0sS/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 92.582857][ T29] audit: type=1400 audit(1769921605.780:2619): avc: denied { mount } for pid=6531 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.605077][ T29] audit: type=1400 audit(1769921605.780:2620): avc: denied { mounton } for pid=6531 comm="syz-executor" path="/root/syzkaller.stD0sS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.632154][ T29] audit: type=1400 audit(1769921605.780:2621): avc: denied { mounton } for pid=6531 comm="syz-executor" path="/root/syzkaller.stD0sS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 92.660097][ T29] audit: type=1400 audit(1769921605.810:2622): avc: denied { mounton } for pid=6531 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 92.683139][ T29] audit: type=1400 audit(1769921605.810:2623): avc: denied { mount } for pid=6531 comm="syz-executor" name="/" dev="gadgetfs" ino=3915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 92.770433][ T6751] loop4: detected capacity change from 0 to 512 [ 92.798075][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.808073][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.830393][ T6751] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 92.841963][ T6757] netlink: 'syz.5.1001': attribute type 16 has an invalid length. [ 92.849904][ T6757] netlink: 'syz.5.1001': attribute type 17 has an invalid length. [ 92.861989][ T6751] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.870961][ T6751] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 92.885812][ T6745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.911743][ T6751] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 92.924237][ T6751] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.1000: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 92.968877][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.980327][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.991160][ T6751] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1000: couldn't read orphan inode 13 (err -117) [ 93.060698][ T6751] EXT4-fs error (device loop4): ext4_lookup:1785: comm syz.4.1000: inode #15: comm syz.4.1000: iget: illegal inode # [ 93.100231][ T6776] program syz.0.1006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.130820][ T6778] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 93.137407][ T6778] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 93.145447][ T6778] vhci_hcd vhci_hcd.0: Device attached [ 93.165316][ T6757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.184808][ T6779] vhci_hcd: connection closed [ 93.190588][ T3449] vhci_hcd vhci_hcd.4: stop threads [ 93.200715][ T3449] vhci_hcd vhci_hcd.4: release socket [ 93.206161][ T3449] vhci_hcd vhci_hcd.4: disconnect device [ 93.414725][ T6810] program syz.0.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.432713][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.442436][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.455121][ T6808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.471115][ T3959] lo speed is unknown, defaulting to 1000 [ 93.476963][ T3959] syz2: Port: 1 Link ACTIVE [ 93.492667][ T29] audit: type=1400 audit(1769921606.720:2624): avc: denied { map } for pid=6814 comm="syz.0.1021" path="/dev/net/tun" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 93.567114][ T6822] x_tables: duplicate underflow at hook 3 [ 93.870197][ T29] audit: type=1400 audit(1769921607.100:2625): avc: denied { setattr } for pid=6837 comm="syz.4.1029" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.972610][ T29] audit: type=1400 audit(1769921607.200:2626): avc: denied { create } for pid=6848 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_audit_socket permissive=1 [ 94.046087][ T6851] program syz.0.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.105283][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.124758][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.140532][ T6859] __nla_validate_parse: 5 callbacks suppressed [ 94.140551][ T6859] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1034'. [ 94.171733][ T6853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.186733][ T6863] program syz.0.1043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.414659][ T6879] can0: slcan on ttyS3. [ 94.431603][ T6879] loop3: detected capacity change from 0 to 764 [ 94.511379][ T6887] loop1: detected capacity change from 0 to 512 [ 94.517960][ T6878] can0 (unregistered): slcan off ttyS3. [ 94.555415][ T6887] EXT4-fs (loop1): failed to initialize system zone (-117) [ 94.585119][ T6887] EXT4-fs (loop1): mount failed [ 94.738732][ T6911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1049'. [ 95.059730][ T6943] loop1: detected capacity change from 0 to 136 [ 95.068178][ T6943] iso9660: Unknown parameter 'vxcan1' [ 95.083405][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 95.187564][ T6969] siw: device registration error -23 [ 95.320457][ T6985] program syz.4.1069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.341784][ T6988] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1074'. [ 95.357021][ T6989] macvlan0: entered allmulticast mode [ 95.373813][ T6989] macvlan0 (unregistering): left allmulticast mode [ 95.422312][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 95.493746][ T7003] loop3: detected capacity change from 0 to 512 [ 95.502433][ T7005] siw: device registration error -23 [ 95.548972][ T7003] ext4 filesystem being mounted at /219/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.573888][ T7003] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 95.595038][ T7003] 9pnet_fd: p9_fd_create_unix (7003): problem connecting socket: ./file2: -111 [ 95.669859][ T7019] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1078: Failed to acquire dquot type 0 [ 95.767310][ T7023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1085'. [ 96.112415][ T7032] loop5: detected capacity change from 0 to 512 [ 96.121015][ T7032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 96.138931][ T7032] System zones: 1-12 [ 96.150267][ T7032] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1088: corrupted in-inode xattr: e_value size too large [ 96.156856][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 96.183841][ T7032] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1088: couldn't read orphan inode 15 (err -117) [ 96.474644][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1101'. [ 96.520462][ T7071] program syz.4.1100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.626124][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 96.626142][ T29] audit: type=1326 audit(1769921609.860:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7072 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 96.672871][ T29] audit: type=1326 audit(1769921609.890:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7072 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 96.775391][ T7083] macvlan0: entered allmulticast mode [ 96.780894][ T7083] veth1_vlan: entered allmulticast mode [ 96.793890][ T7083] veth1_vlan: left allmulticast mode [ 96.801583][ T7083] macvlan0 (unregistering): left allmulticast mode [ 97.312544][ T7091] loop0: detected capacity change from 0 to 512 [ 97.320909][ T7091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e018, mo2=0002] [ 97.329167][ T7091] System zones: 1-12 [ 97.340148][ T7091] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.1107: ea_inode file size=0 entry size=6 [ 97.354244][ T7091] EXT4-fs (loop0): 1 orphan inode deleted [ 97.387705][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1108'. [ 97.396963][ T29] audit: type=1400 audit(1769921610.620:2658): avc: denied { ioctl } for pid=7093 comm="syz.4.1108" path="socket:[17479]" dev="sockfs" ino=17479 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.426702][ T7094] gtp0: entered promiscuous mode [ 97.431831][ T7094] gtp0: entered allmulticast mode [ 97.534038][ T29] audit: type=1400 audit(1769921610.760:2659): avc: denied { setopt } for pid=7105 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.586029][ T29] audit: type=1400 audit(1769921610.760:2660): avc: denied { connect } for pid=7105 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.652149][ T7112] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1114'. [ 97.721580][ T7104] loop5: detected capacity change from 0 to 512 [ 97.731458][ T7104] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1110: inode has both inline data and extents flags [ 97.752381][ T7104] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1110: couldn't read orphan inode 15 (err -117) [ 97.867367][ T7128] program syz.1.1118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.313523][ T7135] loop5: detected capacity change from 0 to 1024 [ 98.320505][ T7135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.396118][ T7142] loop5: detected capacity change from 0 to 512 [ 98.407429][ T7142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e018, mo2=0002] [ 98.430243][ T7142] System zones: 1-12 [ 98.437933][ T7142] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.1120: ea_inode file size=0 entry size=6 [ 98.451279][ T7142] EXT4-fs (loop5): 1 orphan inode deleted [ 98.878072][ T7176] loop3: detected capacity change from 0 to 512 [ 98.915437][ T7176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e018, mo2=0002] [ 98.934875][ T7176] System zones: 1-12 [ 98.947882][ T7176] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.1135: ea_inode file size=0 entry size=6 [ 98.976257][ T7176] EXT4-fs (loop3): 1 orphan inode deleted [ 99.029602][ T7193] EXT4-fs: Ignoring removed oldalloc option [ 99.071713][ T7193] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.144190][ T7193] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1142: bg 0: block 217: padding at end of block bitmap is not set [ 99.159656][ T7201] program syz.3.1144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.170040][ T7193] EXT4-fs (loop1): Remounting filesystem read-only [ 99.198469][ T31] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 99.210903][ T31] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 99.244589][ T29] audit: type=1400 audit(1769921612.470:2661): avc: denied { remount } for pid=7204 comm="syz.1.1146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.266125][ T3388] IPVS: starting estimator thread 0... [ 99.426124][ T7206] IPVS: using max 1680 ests per chain, 84000 per kthread [ 99.491735][ T7221] __nla_validate_parse: 2 callbacks suppressed [ 99.491755][ T7221] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1153'. [ 99.596775][ T7227] set_capacity_and_notify: 2 callbacks suppressed [ 99.596790][ T7227] loop1: detected capacity change from 0 to 512 [ 99.636961][ T7227] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.661657][ T7227] EXT4-fs (loop1): 1 truncate cleaned up [ 99.713881][ T29] audit: type=1400 audit(1769921612.940:2662): avc: denied { create } for pid=7236 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 99.774135][ T29] audit: type=1400 audit(1769921612.970:2663): avc: denied { write } for pid=7236 comm="syz.4.1159" path="socket:[18699]" dev="sockfs" ino=18699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 99.885202][ T7261] loop5: detected capacity change from 0 to 512 [ 99.892574][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 99.922278][ T7261] EXT4-fs: Ignoring removed oldalloc option [ 99.959425][ T7261] EXT4-fs mount: 35 callbacks suppressed [ 99.959446][ T7261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.992175][ T7261] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.005406][ T7261] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1167'. [ 100.055575][ T6531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.103248][ T7284] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1173'. [ 100.181054][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 100.194165][ T7288] loop4: detected capacity change from 0 to 1024 [ 100.206274][ T7288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.233512][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 100.256604][ T7288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.266817][ T7303] program syz.5.1179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.319056][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.421038][ T7315] loop4: detected capacity change from 0 to 512 [ 100.430005][ T7315] EXT4-fs: Ignoring removed oldalloc option [ 100.448968][ T7315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.463766][ T7315] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.476541][ T7315] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1185'. [ 100.491861][ T7317] hub 8-0:1.0: USB hub found [ 100.497128][ T7317] hub 8-0:1.0: 8 ports detected [ 100.504715][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.535053][ T7322] loop4: detected capacity change from 0 to 128 [ 100.547674][ T7322] SELinux: Context system_u:object_r:usb_device_t:s0 is not valid (left unmapped). [ 100.655279][ T7333] loop4: detected capacity change from 0 to 512 [ 101.056900][ T7339] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1191'. [ 101.099710][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1192'. [ 101.183797][ T7347] loop5: detected capacity change from 0 to 1024 [ 101.190908][ T7347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.210568][ T7347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.245673][ T6531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.393396][ T7356] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1197'. [ 101.542480][ T7366] program syz.5.1201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.392546][ T7370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7370 comm=syz.5.1202 [ 102.809637][ T7247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.913496][ T7387] loop1: detected capacity change from 0 to 1024 [ 102.940839][ T7387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.973704][ T7387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.087283][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.158431][ T7425] program syz.0.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.219093][ T7432] loop4: detected capacity change from 0 to 512 [ 103.248438][ T7432] EXT4-fs: Ignoring removed nobh option [ 103.279970][ T7432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.302422][ T7432] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.326514][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 103.326534][ T29] audit: type=1326 audit(1769921616.560:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 103.358826][ T29] audit: type=1326 audit(1769921616.590:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 103.382628][ T29] audit: type=1326 audit(1769921616.590:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 103.406287][ T29] audit: type=1326 audit(1769921616.590:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 103.430011][ T29] audit: type=1326 audit(1769921616.590:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 103.453732][ T29] audit: type=1326 audit(1769921616.590:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 103.477186][ T29] audit: type=1326 audit(1769921616.590:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 103.500716][ T29] audit: type=1326 audit(1769921616.590:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 103.524227][ T29] audit: type=1326 audit(1769921616.590:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 103.547755][ T29] audit: type=1326 audit(1769921616.590:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc3b9aaeb9 code=0x7ffc0000 [ 103.691338][ T7480] loop1: detected capacity change from 0 to 256 [ 103.699333][ T7480] FAT-fs (loop1): bogus sectors per cluster 0 [ 103.705451][ T7480] FAT-fs (loop1): Can't find a valid FAT filesystem [ 104.159329][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.188093][ T7545] program syz.4.1240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.231527][ T7548] netlink: 'syz.3.1241': attribute type 7 has an invalid length. [ 104.239498][ T7548] netlink: 'syz.3.1241': attribute type 8 has an invalid length. [ 104.298728][ T7556] EXT4-fs: Ignoring removed oldalloc option [ 104.336885][ T7556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.354236][ T7556] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.427999][ T6531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.542960][ T7575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.577577][ T7575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.634342][ T7584] program syz.5.1252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.697367][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.934819][ T7597] __nla_validate_parse: 9 callbacks suppressed [ 104.934840][ T7597] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1257'. [ 105.073703][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 105.137290][ T7612] program syz.5.1264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.246606][ T7566] xt_TPROXY: Can be used only with -p tcp or -p udp [ 105.674361][ T7649] program syz.5.1275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.823911][ T7657] set_capacity_and_notify: 3 callbacks suppressed [ 105.823943][ T7657] loop3: detected capacity change from 0 to 1024 [ 105.869937][ T7657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.943336][ T7667] loop5: detected capacity change from 0 to 128 [ 106.037084][ T7657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.230144][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.350721][ T7678] loop3: detected capacity change from 0 to 512 [ 106.357557][ T7678] EXT4-fs: Ignoring removed oldalloc option [ 106.397965][ T7678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.416507][ T7678] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.452512][ T7684] program syz.4.1287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.464647][ T7686] loop5: detected capacity change from 0 to 764 [ 106.482151][ T7678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1286'. [ 106.542617][ T7686] ±ÿ: renamed from team_slave_1 (while UP) [ 106.626719][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.688351][ T7705] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1296'. [ 106.820221][ T7708] netlink: 'syz.4.1297': attribute type 2 has an invalid length. [ 106.828346][ T7708] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1297'. [ 107.002059][ T7719] program syz.3.1300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.147813][ T7726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1303'. [ 108.118515][ T7750] program syz.3.1311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.167155][ T7754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1313'. [ 108.453094][ T7764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1317'. [ 108.907512][ T7779] loop4: detected capacity change from 0 to 128 [ 108.933990][ T7779] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.947153][ T7783] program syz.5.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.994993][ T3957] IPVS: starting estimator thread 0... [ 109.082217][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 109.082237][ T29] audit: type=1400 audit(1769921622.310:3049): avc: denied { bind } for pid=7793 comm="syz.5.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.116087][ T7786] IPVS: using max 2208 ests per chain, 110400 per kthread [ 109.150159][ T7796] loop5: detected capacity change from 0 to 2048 [ 109.185978][ T29] audit: type=1326 audit(1769921622.360:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 109.190780][ T7802] SELinux: failed to load policy [ 109.209528][ T29] audit: type=1326 audit(1769921622.360:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 109.209569][ T29] audit: type=1326 audit(1769921622.360:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 109.261437][ T29] audit: type=1326 audit(1769921622.360:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 109.285213][ T29] audit: type=1326 audit(1769921622.360:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 109.308699][ T29] audit: type=1326 audit(1769921622.360:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 109.332253][ T29] audit: type=1326 audit(1769921622.360:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 109.355686][ T29] audit: type=1326 audit(1769921622.360:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 109.379280][ T29] audit: type=1326 audit(1769921622.360:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 109.416811][ T7796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 109.490430][ T6531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 109.525616][ T7814] program syz.3.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.589780][ T7816] loop5: detected capacity change from 0 to 1024 [ 109.596744][ T7816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.617912][ T7816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.740502][ T6531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.313575][ T7859] loop4: detected capacity change from 0 to 512 [ 110.334323][ T7859] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 110.427348][ T7866] FAULT_INJECTION: forcing a failure. [ 110.427348][ T7866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.440605][ T7866] CPU: 1 UID: 0 PID: 7866 Comm: syz.4.1357 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.440648][ T7866] Tainted: [W]=WARN [ 110.440657][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.440675][ T7866] Call Trace: [ 110.440685][ T7866] [ 110.440695][ T7866] __dump_stack+0x1d/0x30 [ 110.440736][ T7866] dump_stack_lvl+0x95/0xd0 [ 110.440765][ T7866] dump_stack+0x15/0x1b [ 110.440793][ T7866] should_fail_ex+0x263/0x280 [ 110.440838][ T7866] should_fail+0xb/0x20 [ 110.440908][ T7866] should_fail_usercopy+0x1a/0x20 [ 110.440946][ T7866] _copy_from_user+0x1c/0xb0 [ 110.440969][ T7866] ___sys_sendmsg+0xc1/0x1e0 [ 110.441010][ T7866] __x64_sys_sendmsg+0xd4/0x160 [ 110.441080][ T7866] x64_sys_call+0x17ba/0x3000 [ 110.441116][ T7866] do_syscall_64+0xc0/0x2a0 [ 110.441160][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.441191][ T7866] RIP: 0033:0x7fcc3b9aaeb9 [ 110.441288][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.441315][ T7866] RSP: 002b:00007fcc3a407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.441342][ T7866] RAX: ffffffffffffffda RBX: 00007fcc3bc25fa0 RCX: 00007fcc3b9aaeb9 [ 110.441362][ T7866] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 110.441380][ T7866] RBP: 00007fcc3a407090 R08: 0000000000000000 R09: 0000000000000000 [ 110.441415][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.441430][ T7866] R13: 00007fcc3bc26038 R14: 00007fcc3bc25fa0 R15: 00007ffed6d67518 [ 110.441457][ T7866] [ 110.732062][ T7872] syzkaller0: entered promiscuous mode [ 110.737644][ T7872] syzkaller0: entered allmulticast mode [ 110.803117][ T7886] loop1: detected capacity change from 0 to 512 [ 110.827170][ T7886] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.850813][ T7886] EXT4-fs (loop1): 1 truncate cleaned up [ 110.861059][ T7886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.873437][ T7888] loop4: detected capacity change from 0 to 512 [ 110.881766][ T7888] EXT4-fs: Ignoring removed oldalloc option [ 110.926330][ T7888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.941067][ T7897] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1366'. [ 110.951777][ T7888] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.978411][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.991194][ T7888] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1365'. [ 111.034383][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1369'. [ 111.044416][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.068234][ T7904] loop1: detected capacity change from 0 to 128 [ 111.138411][ T7912] FAULT_INJECTION: forcing a failure. [ 111.138411][ T7912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.142529][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 111.151652][ T7912] CPU: 0 UID: 0 PID: 7912 Comm: syz.4.1371 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.151861][ T7912] Tainted: [W]=WARN [ 111.151883][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.151926][ T7912] Call Trace: [ 111.151947][ T7912] [ 111.151977][ T7912] __dump_stack+0x1d/0x30 [ 111.152022][ T7912] dump_stack_lvl+0x95/0xd0 [ 111.152044][ T7912] dump_stack+0x15/0x1b [ 111.152064][ T7912] should_fail_ex+0x263/0x280 [ 111.152164][ T7912] should_fail+0xb/0x20 [ 111.152257][ T7912] should_fail_usercopy+0x1a/0x20 [ 111.152369][ T7912] _copy_from_user+0x1c/0xb0 [ 111.152483][ T7912] __copy_msghdr+0x244/0x300 [ 111.152549][ T7912] ___sys_sendmsg+0x10c/0x1e0 [ 111.152660][ T7912] __x64_sys_sendmsg+0xd4/0x160 [ 111.152736][ T7912] x64_sys_call+0x17ba/0x3000 [ 111.152861][ T7912] do_syscall_64+0xc0/0x2a0 [ 111.152972][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.153054][ T7912] RIP: 0033:0x7fcc3b9aaeb9 [ 111.153122][ T7912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.153261][ T7912] RSP: 002b:00007fcc3a407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.153324][ T7912] RAX: ffffffffffffffda RBX: 00007fcc3bc25fa0 RCX: 00007fcc3b9aaeb9 [ 111.153368][ T7912] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 111.153410][ T7912] RBP: 00007fcc3a407090 R08: 0000000000000000 R09: 0000000000000000 [ 111.153453][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.153494][ T7912] R13: 00007fcc3bc26038 R14: 00007fcc3bc25fa0 R15: 00007ffed6d67518 [ 111.153565][ T7912] [ 111.369997][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 111.602628][ T52] kworker/u8:3: attempt to access beyond end of device [ 111.602628][ T52] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 111.685459][ T7936] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 111.692192][ T7936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.699946][ T7936] vhci_hcd vhci_hcd.0: Device attached [ 111.731980][ T7949] FAULT_INJECTION: forcing a failure. [ 111.731980][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 111.744714][ T7949] CPU: 1 UID: 0 PID: 7949 Comm: syz.5.1385 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.744829][ T7949] Tainted: [W]=WARN [ 111.744837][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.744854][ T7949] Call Trace: [ 111.744863][ T7949] [ 111.744874][ T7949] __dump_stack+0x1d/0x30 [ 111.744903][ T7949] dump_stack_lvl+0x95/0xd0 [ 111.744997][ T7949] dump_stack+0x15/0x1b [ 111.745059][ T7949] should_fail_ex+0x263/0x280 [ 111.745098][ T7949] should_failslab+0x8c/0xb0 [ 111.745122][ T7949] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 111.745155][ T7949] ? __alloc_skb+0x2f0/0x4b0 [ 111.745269][ T7949] __alloc_skb+0x2f0/0x4b0 [ 111.745295][ T7949] ? __alloc_skb+0x219/0x4b0 [ 111.745357][ T7949] alloc_skb_with_frags+0x7d/0x470 [ 111.745387][ T7949] ? __rcu_read_unlock+0x33/0x70 [ 111.745414][ T7949] ? ip6_pol_route+0xccb/0xea0 [ 111.745460][ T7949] sock_alloc_send_pskb+0x44d/0x500 [ 111.745485][ T7949] __ip6_append_data+0x18b5/0x22e0 [ 111.745598][ T7949] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 111.745622][ T7949] ? __rcu_read_unlock+0x4e/0x70 [ 111.745669][ T7949] ? __pfx_ip6_mtu+0x10/0x10 [ 111.745689][ T7949] ? ip6_mtu+0xf5/0x120 [ 111.745711][ T7949] ip6_make_skb+0x1e3/0x4a0 [ 111.745751][ T7949] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 111.745831][ T7949] udpv6_sendmsg+0x1577/0x17b0 [ 111.745934][ T7949] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 111.746010][ T7949] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 111.746037][ T7949] inet6_sendmsg+0xac/0xd0 [ 111.746066][ T7949] ____sys_sendmsg+0x3c4/0x600 [ 111.746090][ T7949] ___sys_sendmsg+0x195/0x1e0 [ 111.746127][ T7949] __x64_sys_sendmsg+0xd4/0x160 [ 111.746156][ T7949] x64_sys_call+0x17ba/0x3000 [ 111.746188][ T7949] do_syscall_64+0xc0/0x2a0 [ 111.746385][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.746413][ T7949] RIP: 0033:0x7f53d910aeb9 [ 111.746430][ T7949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.746502][ T7949] RSP: 002b:00007f53d7b67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.746530][ T7949] RAX: ffffffffffffffda RBX: 00007f53d9385fa0 RCX: 00007f53d910aeb9 [ 111.746561][ T7949] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 111.746628][ T7949] RBP: 00007f53d7b67090 R08: 0000000000000000 R09: 0000000000000000 [ 111.746645][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.746662][ T7949] R13: 00007f53d9386038 R14: 00007f53d9385fa0 R15: 00007ffcd4eab9a8 [ 111.746689][ T7949] [ 112.010875][ T7950] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(18) [ 112.017825][ T7950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.025478][ T7950] vhci_hcd vhci_hcd.0: Device attached [ 112.034986][ T7936] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 112.041637][ T7936] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.049321][ T7936] vhci_hcd vhci_hcd.0: Device attached [ 112.096905][ T7950] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 112.103700][ T7950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.111300][ T7950] vhci_hcd vhci_hcd.0: Device attached [ 112.123655][ T7936] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(24) [ 112.130306][ T7936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.137917][ T7936] vhci_hcd vhci_hcd.0: Device attached [ 112.156499][ T3960] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 112.166816][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1389'. [ 112.196379][ T7950] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(27) [ 112.203134][ T7950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.210781][ T7950] vhci_hcd vhci_hcd.0: Device attached [ 112.223369][ T7969] netlink: 272 bytes leftover after parsing attributes in process `syz.5.1389'. [ 112.237725][ T7936] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.246596][ T7936] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.272916][ T7936] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.284564][ T7966] vhci_hcd: connection closed [ 112.284768][ T52] vhci_hcd vhci_hcd.1: stop threads [ 112.286052][ T7971] vhci_hcd: connection closed [ 112.289642][ T52] vhci_hcd vhci_hcd.1: release socket [ 112.304840][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 112.305202][ T7975] vhci_hcd: connection closed [ 112.334677][ T7986] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.1395' sets config #4096 [ 112.349462][ T7943] vhci_hcd: connection reset by peer [ 112.354858][ T7958] vhci_hcd: connection closed [ 112.366339][ T7951] vhci_hcd: connection closed [ 112.381867][ T52] vhci_hcd vhci_hcd.1: stop threads [ 112.392096][ T52] vhci_hcd vhci_hcd.1: release socket [ 112.397544][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 112.422483][ T52] vhci_hcd vhci_hcd.1: stop threads [ 112.427999][ T52] vhci_hcd vhci_hcd.1: release socket [ 112.433441][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 112.439825][ T52] vhci_hcd vhci_hcd.1: stop threads [ 112.445070][ T52] vhci_hcd vhci_hcd.1: release socket [ 112.450750][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 112.457082][ T52] vhci_hcd vhci_hcd.1: stop threads [ 112.462311][ T52] vhci_hcd vhci_hcd.1: release socket [ 112.467874][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 112.473784][ T52] vhci_hcd vhci_hcd.1: stop threads [ 112.479123][ T52] vhci_hcd vhci_hcd.1: release socket [ 112.484734][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 112.490164][ T7986] bond3: entered allmulticast mode [ 112.513513][ T7986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.539367][ T8003] loop5: detected capacity change from 0 to 2048 [ 112.589540][ T3303] Alternate GPT is invalid, using primary GPT. [ 112.596074][ T3303] loop5: p2 p3 p7 [ 112.624918][ T8011] loop4: detected capacity change from 0 to 512 [ 112.650323][ T8003] Alternate GPT is invalid, using primary GPT. [ 112.656782][ T8003] loop5: p2 p3 p7 [ 112.693615][ T8011] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1407: inode has both inline data and extents flags [ 112.729141][ T8011] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1407: couldn't read orphan inode 15 (err -117) [ 112.753489][ T8011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.775416][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 112.783605][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 112.805125][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 112.843995][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 112.855220][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 112.858936][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 112.890266][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.980525][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'. [ 113.005133][ T8032] loop3: detected capacity change from 0 to 1024 [ 113.028785][ T8032] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1413: Failed to acquire dquot type 0 [ 113.041645][ T8032] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 113.042971][ T8050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1419'. [ 113.070216][ T8032] EXT4-fs (loop3): 1 truncate cleaned up [ 113.080123][ T8032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.169973][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.352026][ T8072] loop4: detected capacity change from 0 to 1024 [ 113.426731][ T8072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.441664][ T8082] loop1: detected capacity change from 0 to 512 [ 113.587416][ T8082] EXT4-fs: Ignoring removed oldalloc option [ 113.609088][ T8085] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1433'. [ 113.696765][ T8082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.713228][ T8091] 9p: Bad value for 'rfdno' [ 113.726993][ T8082] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.769961][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.904649][ T8105] 9p: Bad value for 'rfdno' [ 114.097583][ T8119] loop5: detected capacity change from 0 to 512 [ 114.104968][ T8119] EXT4-fs: Ignoring removed oldalloc option [ 114.114643][ T8105] loop3: detected capacity change from 0 to 512 [ 114.137163][ T8105] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 114.146299][ T8119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.156372][ T8105] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.165513][ T8105] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.1440: Bad quota inum: 5, type: 1 [ 114.166190][ T8119] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.195014][ T8105] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 114.216168][ T8105] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 114.223542][ T8105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.259641][ T6531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.276495][ T8105] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.339341][ T8105] xt_hashlimit: size too large, truncated to 1048576 [ 114.398286][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.438383][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 114.438402][ T29] audit: type=1400 audit(1769921627.620:3148): avc: denied { append } for pid=8104 comm="syz.3.1440" name="pfkey" dev="proc" ino=4026532920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 114.770851][ T8162] lo speed is unknown, defaulting to 1000 [ 114.910811][ T8180] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 114.910811][ T8180] The task syz.1.1466 (8180) triggered the difference, watch for misbehavior. [ 114.943671][ T29] audit: type=1326 audit(1769921628.170:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.1.1466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fca8a85aeb9 code=0x0 [ 115.143525][ T8196] loop3: detected capacity change from 0 to 512 [ 115.171776][ T8196] EXT4-fs: Ignoring removed oldalloc option [ 115.198089][ T8196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.218307][ T8196] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.249605][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.707611][ T8231] EXT4-fs: Ignoring removed oldalloc option [ 115.780911][ T8231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.806369][ T8231] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.870699][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.176144][ T8263] FAULT_INJECTION: forcing a failure. [ 116.176144][ T8263] name failslab, interval 1, probability 0, space 0, times 0 [ 116.189118][ T8263] CPU: 0 UID: 0 PID: 8263 Comm: syz.0.1496 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.189161][ T8263] Tainted: [W]=WARN [ 116.189171][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.189188][ T8263] Call Trace: [ 116.189196][ T8263] [ 116.189206][ T8263] __dump_stack+0x1d/0x30 [ 116.189235][ T8263] dump_stack_lvl+0x95/0xd0 [ 116.189302][ T8263] dump_stack+0x15/0x1b [ 116.189329][ T8263] should_fail_ex+0x263/0x280 [ 116.189371][ T8263] should_failslab+0x8c/0xb0 [ 116.189438][ T8263] __kmalloc_node_noprof+0xbd/0x590 [ 116.189473][ T8263] ? __vmalloc_node_range_noprof+0x428/0x12b0 [ 116.189515][ T8263] __vmalloc_node_range_noprof+0x428/0x12b0 [ 116.189560][ T8263] ? __rcu_read_unlock+0x4e/0x70 [ 116.189644][ T8263] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 116.189743][ T8263] __vmalloc_noprof+0xa4/0xf0 [ 116.189779][ T8263] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 116.189897][ T8263] bpf_prog_alloc_no_stats+0x47/0x380 [ 116.189932][ T8263] ? bpf_prog_alloc+0x2a/0x150 [ 116.189967][ T8263] bpf_prog_alloc+0x3c/0x150 [ 116.190031][ T8263] bpf_prog_load+0x506/0x1140 [ 116.190078][ T8263] ? security_bpf+0x2b/0x90 [ 116.190152][ T8263] __sys_bpf+0x469/0x7b0 [ 116.190198][ T8263] __x64_sys_bpf+0x41/0x50 [ 116.190240][ T8263] x64_sys_call+0x28e1/0x3000 [ 116.190330][ T8263] do_syscall_64+0xc0/0x2a0 [ 116.190374][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.190485][ T8263] RIP: 0033:0x7fc88d4baeb9 [ 116.190508][ T8263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.190533][ T8263] RSP: 002b:00007fc88bf17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.190560][ T8263] RAX: ffffffffffffffda RBX: 00007fc88d735fa0 RCX: 00007fc88d4baeb9 [ 116.190574][ T8263] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 116.190605][ T8263] RBP: 00007fc88bf17090 R08: 0000000000000000 R09: 0000000000000000 [ 116.190624][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.190641][ T8263] R13: 00007fc88d736038 R14: 00007fc88d735fa0 R15: 00007ffc58292948 [ 116.190666][ T8263] [ 116.190678][ T8263] syz.0.1496: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 116.426143][ T8263] CPU: 0 UID: 0 PID: 8263 Comm: syz.0.1496 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.426186][ T8263] Tainted: [W]=WARN [ 116.426195][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.426232][ T8263] Call Trace: [ 116.426240][ T8263] [ 116.426250][ T8263] __dump_stack+0x1d/0x30 [ 116.426350][ T8263] dump_stack_lvl+0x95/0xd0 [ 116.426378][ T8263] dump_stack+0x15/0x1b [ 116.426405][ T8263] warn_alloc+0x145/0x1c0 [ 116.426448][ T8263] __vmalloc_node_range_noprof+0x7d9/0x12b0 [ 116.426550][ T8263] ? __rcu_read_unlock+0x4e/0x70 [ 116.426612][ T8263] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 116.426648][ T8263] __vmalloc_noprof+0xa4/0xf0 [ 116.426734][ T8263] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 116.426847][ T8263] bpf_prog_alloc_no_stats+0x47/0x380 [ 116.426923][ T8263] ? bpf_prog_alloc+0x2a/0x150 [ 116.426958][ T8263] bpf_prog_alloc+0x3c/0x150 [ 116.426992][ T8263] bpf_prog_load+0x506/0x1140 [ 116.427061][ T8263] ? security_bpf+0x2b/0x90 [ 116.427127][ T8263] __sys_bpf+0x469/0x7b0 [ 116.427169][ T8263] __x64_sys_bpf+0x41/0x50 [ 116.427269][ T8263] x64_sys_call+0x28e1/0x3000 [ 116.427320][ T8263] do_syscall_64+0xc0/0x2a0 [ 116.427406][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.427431][ T8263] RIP: 0033:0x7fc88d4baeb9 [ 116.427448][ T8263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.427474][ T8263] RSP: 002b:00007fc88bf17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.427501][ T8263] RAX: ffffffffffffffda RBX: 00007fc88d735fa0 RCX: 00007fc88d4baeb9 [ 116.427598][ T8263] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 116.427613][ T8263] RBP: 00007fc88bf17090 R08: 0000000000000000 R09: 0000000000000000 [ 116.427631][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.427648][ T8263] R13: 00007fc88d736038 R14: 00007fc88d735fa0 R15: 00007ffc58292948 [ 116.427718][ T8263] [ 116.427728][ T8263] Mem-Info: [ 116.631360][ T8263] active_anon:61699 inactive_anon:1 isolated_anon:0 [ 116.631360][ T8263] active_file:23694 inactive_file:2486 isolated_file:0 [ 116.631360][ T8263] unevictable:0 dirty:32 writeback:0 [ 116.631360][ T8263] slab_reclaimable:3454 slab_unreclaimable:75578 [ 116.631360][ T8263] mapped:39479 shmem:51841 pagetables:1445 [ 116.631360][ T8263] sec_pagetables:0 bounce:0 [ 116.631360][ T8263] kernel_misc_reclaimable:0 [ 116.631360][ T8263] free:1760773 free_pcp:4159 free_cma:0 [ 116.676699][ T8263] Node 0 active_anon:247872kB inactive_anon:4kB active_file:94804kB inactive_file:9952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157960kB dirty:140kB writeback:0kB shmem:208160kB kernel_stack:4064kB pagetables:5848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 116.704211][ T8263] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.734339][ T8263] lowmem_reserve[]: 0 2879 7858 7858 [ 116.739718][ T8263] Node 0 DMA32 free:2944748kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948380kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 116.771123][ T8263] lowmem_reserve[]: 0 0 4978 4978 [ 116.776412][ T8263] Node 0 Normal free:4080204kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:249960kB inactive_anon:4kB active_file:94804kB inactive_file:9952kB unevictable:0kB writepending:136kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:12436kB local_pcp:4428kB free_cma:0kB [ 116.809554][ T8263] lowmem_reserve[]: 0 0 0 0 [ 116.814272][ T8263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.827090][ T8263] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944748kB [ 116.843324][ T8263] Node 0 Normal: 783*4kB (UME) 629*8kB (U) 245*16kB (UE) 290*32kB (UM) 200*64kB (UE) 109*128kB (UME) 68*256kB (UM) 65*512kB (UME) 51*1024kB (UME) 26*2048kB (UM) 946*4096kB (UM) = 4079092kB [ 116.862274][ T8263] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 116.871662][ T8263] 78985 total pagecache pages [ 116.876399][ T8263] 14 pages in swap cache [ 116.880684][ T8263] Free swap = 124472kB [ 116.884943][ T8263] Total swap = 124996kB [ 116.889345][ T8263] 2097051 pages RAM [ 116.893176][ T8263] 0 pages HighMem/MovableOnly [ 116.897952][ T8263] 81556 pages reserved [ 117.016051][ T8271] netlink: 'syz.3.1490': attribute type 10 has an invalid length. [ 117.208686][ T3960] usb 3-1: enqueue for inactive port 0 [ 117.224566][ T3960] usb 3-1: enqueue for inactive port 0 [ 117.306007][ T3960] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 117.401612][ T8313] __nla_validate_parse: 2 callbacks suppressed [ 117.401628][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1516'. [ 117.883334][ T8348] FAULT_INJECTION: forcing a failure. [ 117.883334][ T8348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.897066][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.1.1527 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.897108][ T8348] Tainted: [W]=WARN [ 117.897117][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.897133][ T8348] Call Trace: [ 117.897140][ T8348] [ 117.897150][ T8348] __dump_stack+0x1d/0x30 [ 117.897254][ T8348] dump_stack_lvl+0x95/0xd0 [ 117.897278][ T8348] dump_stack+0x15/0x1b [ 117.897446][ T8348] should_fail_ex+0x263/0x280 [ 117.897484][ T8348] should_fail+0xb/0x20 [ 117.897516][ T8348] should_fail_usercopy+0x1a/0x20 [ 117.897560][ T8348] _copy_to_user+0x20/0xa0 [ 117.897713][ T8348] simple_read_from_buffer+0xb5/0x130 [ 117.897757][ T8348] proc_fail_nth_read+0x10e/0x150 [ 117.897823][ T8348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.897860][ T8348] vfs_read+0x1ab/0x7f0 [ 117.897884][ T8348] ? receiver_wake_function+0x60/0x80 [ 117.897999][ T8348] ? __rcu_read_unlock+0x4e/0x70 [ 117.898079][ T8348] ? __fget_files+0x184/0x1c0 [ 117.898108][ T8348] ? __wake_up+0x88/0xb0 [ 117.898198][ T8348] ? mutex_lock+0x57/0x90 [ 117.898223][ T8348] ksys_read+0xdc/0x1a0 [ 117.898243][ T8348] __x64_sys_read+0x40/0x50 [ 117.898282][ T8348] x64_sys_call+0x2889/0x3000 [ 117.898308][ T8348] do_syscall_64+0xc0/0x2a0 [ 117.898411][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.898449][ T8348] RIP: 0033:0x7fca8a81b78e [ 117.898529][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.898555][ T8348] RSP: 002b:00007fca89295fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.898582][ T8348] RAX: ffffffffffffffda RBX: 00007fca892966c0 RCX: 00007fca8a81b78e [ 117.898601][ T8348] RDX: 000000000000000f RSI: 00007fca892960a0 RDI: 000000000000000a [ 117.898617][ T8348] RBP: 00007fca89296090 R08: 0000000000000000 R09: 0000000000000000 [ 117.898631][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.898643][ T8348] R13: 00007fca8aad6128 R14: 00007fca8aad6090 R15: 00007ffd8478e818 [ 117.898730][ T8348] [ 118.140872][ T8351] netlink: 'syz.0.1517': attribute type 10 has an invalid length. [ 118.215427][ T8351] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 118.255328][ T8364] netlink: 'syz.1.1532': attribute type 1 has an invalid length. [ 118.266125][ T29] audit: type=1400 audit(1769921631.480:3150): avc: denied { append } for pid=8360 comm="syz.1.1532" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.349014][ T29] audit: type=1400 audit(1769921631.540:3151): avc: denied { lock } for pid=8355 comm="syz.3.1528" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.555286][ T8398] set_capacity_and_notify: 1 callbacks suppressed [ 118.555380][ T8398] loop4: detected capacity change from 0 to 512 [ 118.570202][ T8388] lo speed is unknown, defaulting to 1000 [ 118.588215][ T8398] EXT4-fs: Ignoring removed oldalloc option [ 118.613259][ T8398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.667997][ T8398] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.741465][ T29] audit: type=1400 audit(1769921631.970:3152): avc: denied { bind } for pid=8409 comm="syz.5.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.766180][ T8411] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1548'. [ 118.829291][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.914857][ T3479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.923136][ T3479] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.954874][ T29] audit: type=1400 audit(1769921632.180:3153): avc: denied { create } for pid=8422 comm="syz.0.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.974517][ T29] audit: type=1400 audit(1769921632.180:3154): avc: denied { bind } for pid=8422 comm="syz.0.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.077336][ T8434] macvlan0: entered allmulticast mode [ 119.093366][ T8436] program syz.0.1555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.103589][ T8434] macvlan0 (unregistering): left allmulticast mode [ 119.149380][ T8440] loop1: detected capacity change from 0 to 512 [ 119.166690][ T8440] EXT4-fs: Ignoring removed oldalloc option [ 119.208440][ T8440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.245329][ T8440] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.321201][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.385083][ T8445] loop5: detected capacity change from 0 to 256 [ 119.400419][ T8445] msdos: Unknown parameter 'dotòÿÿÿts' [ 119.436532][ T29] audit: type=1326 audit(1769921632.660:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 119.460697][ T29] audit: type=1326 audit(1769921632.660:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 119.484269][ T29] audit: type=1326 audit(1769921632.660:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 119.507990][ T29] audit: type=1326 audit(1769921632.660:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 119.531466][ T29] audit: type=1326 audit(1769921632.660:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 119.555124][ T29] audit: type=1326 audit(1769921632.660:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 119.579201][ T29] audit: type=1326 audit(1769921632.660:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d910aeb9 code=0x7ffc0000 [ 119.602759][ T29] audit: type=1326 audit(1769921632.660:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53d90cb78e code=0x7ffc0000 [ 119.626326][ T29] audit: type=1326 audit(1769921632.660:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53d90cb78e code=0x7ffc0000 [ 119.650038][ T29] audit: type=1326 audit(1769921632.670:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53d90cb78e code=0x7ffc0000 [ 119.673704][ T29] audit: type=1326 audit(1769921632.740:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53d90cb78e code=0x7ffc0000 [ 119.798828][ T8459] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1564'. [ 120.340364][ T8482] lo speed is unknown, defaulting to 1000 [ 120.854609][ T8493] program syz.0.1577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.903786][ T8495] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1579'. [ 121.648530][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 122.718755][ T8594] FAULT_INJECTION: forcing a failure. [ 122.718755][ T8594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.732161][ T8594] CPU: 0 UID: 0 PID: 8594 Comm: syz.5.1611 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.732207][ T8594] Tainted: [W]=WARN [ 122.732216][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.732234][ T8594] Call Trace: [ 122.732243][ T8594] [ 122.732254][ T8594] __dump_stack+0x1d/0x30 [ 122.732359][ T8594] dump_stack_lvl+0x95/0xd0 [ 122.732389][ T8594] dump_stack+0x15/0x1b [ 122.732417][ T8594] should_fail_ex+0x263/0x280 [ 122.732460][ T8594] should_fail+0xb/0x20 [ 122.732554][ T8594] should_fail_usercopy+0x1a/0x20 [ 122.732600][ T8594] _copy_from_user+0x1c/0xb0 [ 122.732630][ T8594] kstrtouint_from_user+0x69/0xf0 [ 122.732752][ T8594] proc_fail_nth_write+0x50/0x160 [ 122.732789][ T8594] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.732878][ T8594] vfs_write+0x269/0x9f0 [ 122.732897][ T8594] ? __rcu_read_unlock+0x4e/0x70 [ 122.732995][ T8594] ? __fget_files+0x184/0x1c0 [ 122.733036][ T8594] ? mutex_lock+0x57/0x90 [ 122.733070][ T8594] ksys_write+0xdc/0x1a0 [ 122.733098][ T8594] __x64_sys_write+0x40/0x50 [ 122.733157][ T8594] x64_sys_call+0x2847/0x3000 [ 122.733230][ T8594] do_syscall_64+0xc0/0x2a0 [ 122.733318][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.733374][ T8594] RIP: 0033:0x7f53d90cb78e [ 122.733406][ T8594] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.733431][ T8594] RSP: 002b:00007f53d7b45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.733463][ T8594] RAX: ffffffffffffffda RBX: 00007f53d7b466c0 RCX: 00007f53d90cb78e [ 122.733483][ T8594] RDX: 0000000000000001 RSI: 00007f53d7b460a0 RDI: 0000000000000004 [ 122.733548][ T8594] RBP: 00007f53d7b46090 R08: 0000000000000000 R09: 0000000000000000 [ 122.733566][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.733583][ T8594] R13: 00007f53d9386128 R14: 00007f53d9386090 R15: 00007ffcd4eab9a8 [ 122.733611][ T8594] [ 123.015544][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 123.033223][ T8615] loop1: detected capacity change from 0 to 512 [ 123.055242][ T8615] EXT4-fs: Ignoring removed oldalloc option [ 123.097016][ T8615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.111251][ T8615] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.131585][ T8625] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 123.187888][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.191995][ T8633] bridge1: entered promiscuous mode [ 123.202270][ T8633] bridge1: entered allmulticast mode [ 123.778246][ T8680] loop4: detected capacity change from 0 to 1024 [ 123.786480][ T8680] ext4: Unknown parameter 'nojournal' [ 124.033316][ T8699] loop3: detected capacity change from 0 to 512 [ 124.066354][ T8699] EXT4-fs: Ignoring removed oldalloc option [ 124.131284][ T8699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.154984][ T8699] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.210664][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.239808][ T8708] FAULT_INJECTION: forcing a failure. [ 124.239808][ T8708] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.253254][ T8708] CPU: 0 UID: 0 PID: 8708 Comm: syz.0.1653 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.253370][ T8708] Tainted: [W]=WARN [ 124.253379][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.253397][ T8708] Call Trace: [ 124.253482][ T8708] [ 124.253496][ T8708] __dump_stack+0x1d/0x30 [ 124.253527][ T8708] dump_stack_lvl+0x95/0xd0 [ 124.253553][ T8708] dump_stack+0x15/0x1b [ 124.253579][ T8708] should_fail_ex+0x263/0x280 [ 124.253629][ T8708] should_fail_alloc_page+0xf2/0x100 [ 124.253662][ T8708] __alloc_frozen_pages_noprof+0x108/0x350 [ 124.253693][ T8708] alloc_pages_mpol+0xb3/0x260 [ 124.253785][ T8708] alloc_pages_noprof+0x8f/0x130 [ 124.253813][ T8708] alloc_skb_with_frags+0x193/0x470 [ 124.253847][ T8708] sock_alloc_send_pskb+0x44d/0x500 [ 124.253871][ T8708] tun_get_user+0x62b/0x27c0 [ 124.253950][ T8708] ? avc_has_perm_noaudit+0xab/0x130 [ 124.253980][ T8708] ? ref_tracker_alloc+0x1f2/0x2f0 [ 124.254013][ T8708] tun_chr_write_iter+0x15e/0x210 [ 124.254092][ T8708] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 124.254111][ T8708] vfs_write+0x5a6/0x9f0 [ 124.254135][ T8708] ksys_write+0xdc/0x1a0 [ 124.254232][ T8708] __x64_sys_write+0x40/0x50 [ 124.254250][ T8708] x64_sys_call+0x2847/0x3000 [ 124.254273][ T8708] do_syscall_64+0xc0/0x2a0 [ 124.254379][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.254435][ T8708] RIP: 0033:0x7fc88d47b78e [ 124.254449][ T8708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.254467][ T8708] RSP: 002b:00007fc88bef5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.254485][ T8708] RAX: ffffffffffffffda RBX: 00007fc88bef66c0 RCX: 00007fc88d47b78e [ 124.254497][ T8708] RDX: 0000000000001212 RSI: 0000200000001e80 RDI: 00000000000000c8 [ 124.254550][ T8708] RBP: 00007fc88bef6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.254562][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.254574][ T8708] R13: 00007fc88d736128 R14: 00007fc88d736090 R15: 00007ffc58292948 [ 124.254593][ T8708] [ 124.546569][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'. [ 124.584239][ T8721] team1: entered promiscuous mode [ 124.589511][ T8721] team1: entered allmulticast mode [ 124.590701][ T8725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1660'. [ 124.595861][ T8721] 8021q: adding VLAN 0 to HW filter on device team1 [ 124.656734][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 124.666685][ T8725] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1660'. [ 124.735540][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 124.905603][ T8739] loop3: detected capacity change from 0 to 512 [ 124.956933][ T8739] EXT4-fs: Ignoring removed oldalloc option [ 125.001561][ T8739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.028352][ T8739] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.054805][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.084166][ T8752] ipt_rpfilter: unknown options [ 125.338394][ T8770] FAULT_INJECTION: forcing a failure. [ 125.338394][ T8770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.351606][ T8770] CPU: 1 UID: 0 PID: 8770 Comm: syz.3.1675 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.351662][ T8770] Tainted: [W]=WARN [ 125.351670][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.351683][ T8770] Call Trace: [ 125.351690][ T8770] [ 125.351698][ T8770] __dump_stack+0x1d/0x30 [ 125.351730][ T8770] dump_stack_lvl+0x95/0xd0 [ 125.351770][ T8770] dump_stack+0x15/0x1b [ 125.351797][ T8770] should_fail_ex+0x263/0x280 [ 125.351838][ T8770] should_fail+0xb/0x20 [ 125.351876][ T8770] should_fail_usercopy+0x1a/0x20 [ 125.351980][ T8770] _copy_from_iter+0xcf/0xea0 [ 125.352067][ T8770] ? skb_set_owner_w+0x19b/0x200 [ 125.352139][ T8770] ? sock_alloc_send_pskb+0x469/0x500 [ 125.352169][ T8770] skb_copy_datagram_from_iter+0xb2/0x480 [ 125.352258][ T8770] ? skb_put+0xa9/0xf0 [ 125.352292][ T8770] tun_get_user+0x90b/0x27c0 [ 125.352325][ T8770] ? avc_has_perm_noaudit+0xab/0x130 [ 125.352516][ T8770] ? ref_tracker_alloc+0x1f2/0x2f0 [ 125.352562][ T8770] tun_chr_write_iter+0x15e/0x210 [ 125.352585][ T8770] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 125.352673][ T8770] vfs_write+0x5a6/0x9f0 [ 125.352698][ T8770] ksys_write+0xdc/0x1a0 [ 125.352718][ T8770] __x64_sys_write+0x40/0x50 [ 125.352744][ T8770] x64_sys_call+0x2847/0x3000 [ 125.352830][ T8770] do_syscall_64+0xc0/0x2a0 [ 125.352861][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.352948][ T8770] RIP: 0033:0x7f2efb2fb78e [ 125.352964][ T8770] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 125.352989][ T8770] RSP: 002b:00007f2ef9d96fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.353016][ T8770] RAX: ffffffffffffffda RBX: 00007f2ef9d976c0 RCX: 00007f2efb2fb78e [ 125.353035][ T8770] RDX: 0000000000001212 RSI: 0000200000001e80 RDI: 00000000000000c8 [ 125.353075][ T8770] RBP: 00007f2ef9d97090 R08: 0000000000000000 R09: 0000000000000000 [ 125.353093][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.353107][ T8770] R13: 00007f2efb5b6038 R14: 00007f2efb5b5fa0 R15: 00007ffd94173aa8 [ 125.353135][ T8770] [ 125.584432][ T8773] macvlan0: entered allmulticast mode [ 125.591334][ T8773] macvlan0 (unregistering): left allmulticast mode [ 125.627693][ T8777] loop3: detected capacity change from 0 to 512 [ 125.655512][ T8777] EXT4-fs: Ignoring removed oldalloc option [ 125.702435][ T8777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.715148][ T8777] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.776613][ T8791] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1682'. [ 125.849490][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.131805][ T8825] program syz.3.1696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.314351][ T8847] loop3: detected capacity change from 0 to 128 [ 126.536473][ T8847] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.872441][ T8860] loop3: detected capacity change from 0 to 512 [ 126.944376][ T8860] EXT4-fs: Ignoring removed oldalloc option [ 127.001960][ T8865] program syz.5.1710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.016379][ T8860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.043778][ T8860] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.136020][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 127.136039][ T29] audit: type=1400 audit(1769921640.350:3261): avc: denied { mount } for pid=8871 comm="syz.4.1712" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 127.164526][ T29] audit: type=1400 audit(1769921640.350:3262): avc: denied { override_creds } for pid=8871 comm="syz.4.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 127.222089][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.243836][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1713'. [ 127.261355][ T8878] hsr_slave_1 (unregistering): left promiscuous mode [ 127.290151][ T29] audit: type=1400 audit(1769921640.520:3263): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 127.316038][ T8880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1715'. [ 127.368703][ T29] audit: type=1400 audit(1769921640.570:3264): avc: denied { mounton } for pid=8879 comm="syz.0.1715" path="/proc/958/cgroup" dev="proc" ino=23464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 127.755569][ T8912] program syz.0.1724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.775873][ T8911] xt_hashlimit: size too large, truncated to 1048576 [ 127.782912][ T8901] loop5: detected capacity change from 0 to 32768 [ 127.890257][ T8901] loop5: p1 p2 p3 < p5 p6 > [ 127.896138][ T8901] loop5: p1 size 242222080 extends beyond EOD, truncated [ 127.904398][ T8901] loop5: p2 start 4294967295 is beyond EOD, truncated [ 128.125913][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 128.333888][ T8944] program syz.5.1736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.383283][ T8950] loop3: detected capacity change from 0 to 512 [ 128.406862][ T8950] EXT4-fs: Ignoring removed oldalloc option [ 128.442864][ T8950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.509311][ T8950] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.625553][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.668899][ T8963] lo speed is unknown, defaulting to 1000 [ 129.014393][ T8989] program syz.1.1750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.099511][ T9000] loop1: detected capacity change from 0 to 512 [ 129.122463][ T9000] EXT4-fs: Ignoring removed oldalloc option [ 129.159697][ T9000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.223896][ T9000] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.248633][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.302036][ T9012] loop1: detected capacity change from 0 to 512 [ 129.313306][ T9012] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1756: invalid indirect mapped block 4294967295 (level 1) [ 129.330027][ T9012] EXT4-fs (loop1): Remounting filesystem read-only [ 129.336932][ T9012] EXT4-fs (loop1): 2 truncates cleaned up [ 129.343382][ T9012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.372240][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.455278][ T9019] sock: sock_timestamping_bind_phc: sock not bind to device [ 129.471062][ T9019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62738 sclass=netlink_route_socket pid=9019 comm=syz.4.1759 [ 129.512964][ T9019] loop4: detected capacity change from 0 to 512 [ 129.537304][ T9019] IPVS: set_ctl: invalid protocol: 43 172.20.20.63:20000 [ 129.624902][ T9026] program syz.4.1762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.792345][ T9035] loop4: detected capacity change from 0 to 512 [ 129.811657][ T9035] EXT4-fs: Ignoring removed oldalloc option [ 129.883903][ T9035] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.945231][ T9047] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1770'. [ 129.958717][ T9047] netlink: zone id is out of range [ 129.963877][ T9047] netlink: zone id is out of range [ 130.050060][ T9047] netlink: set zone limit has 8 unknown bytes [ 130.076265][ T9057] program syz.1.1773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.566243][ T9081] loop4: detected capacity change from 0 to 512 [ 130.573676][ T9081] EXT4-fs: Ignoring removed oldalloc option [ 130.583097][ T9082] sctp: [Deprecated]: syz.1.1781 (pid 9082) Use of int in maxseg socket option. [ 130.583097][ T9082] Use struct sctp_assoc_value instead [ 130.601256][ T9081] EXT4-fs mount: 2 callbacks suppressed [ 130.601277][ T9081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.619690][ T9081] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.655301][ T9087] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1783'. [ 130.665307][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.666940][ T9087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1783'. [ 130.701098][ T9092] program syz.4.1784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.745172][ T29] audit: type=1400 audit(1769921643.970:3265): avc: denied { setattr } for pid=9093 comm="syz.4.1785" path="/dev/snd/seq" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 131.062325][ T9125] program syz.1.1796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.134446][ T9129] loop5: detected capacity change from 0 to 512 [ 131.142612][ T9131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1798'. [ 131.152558][ T9131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1798'. [ 131.155312][ T9129] EXT4-fs: Ignoring removed oldalloc option [ 131.179417][ T29] audit: type=1326 audit(1769921644.400:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9132 comm="syz.1.1799" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca8a85aeb9 code=0x0 [ 131.206865][ T9129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.229728][ T9129] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.298919][ T6531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.507702][ T29] audit: type=1400 audit(1769921644.740:3267): avc: denied { connect } for pid=9151 comm="syz.5.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.586933][ T29] audit: type=1400 audit(1769921644.820:3268): avc: denied { getopt } for pid=9151 comm="syz.5.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.731169][ T29] audit: type=1400 audit(1769921644.960:3269): avc: denied { read write } for pid=9166 comm="syz.3.1810" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.755400][ T29] audit: type=1400 audit(1769921644.960:3270): avc: denied { open } for pid=9166 comm="syz.3.1810" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.030228][ T9175] loop3: detected capacity change from 0 to 128 [ 132.062915][ T9175] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.076416][ T9175] ext4 filesystem being mounted at /371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.122579][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.235553][ T9191] loop1: detected capacity change from 0 to 1024 [ 132.250941][ T9195] program syz.0.1819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.266378][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1817'. [ 132.327696][ T9200] program syz.0.1821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.337086][ T9200] FAULT_INJECTION: forcing a failure. [ 132.337086][ T9200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.350274][ T9200] CPU: 0 UID: 0 PID: 9200 Comm: syz.0.1821 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 132.350319][ T9200] Tainted: [W]=WARN [ 132.350328][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.350345][ T9200] Call Trace: [ 132.350354][ T9200] [ 132.350364][ T9200] __dump_stack+0x1d/0x30 [ 132.350402][ T9200] dump_stack_lvl+0x95/0xd0 [ 132.350432][ T9200] dump_stack+0x15/0x1b [ 132.350458][ T9200] should_fail_ex+0x263/0x280 [ 132.350658][ T9200] should_fail+0xb/0x20 [ 132.350742][ T9200] should_fail_usercopy+0x1a/0x20 [ 132.350787][ T9200] _copy_from_user+0x1c/0xb0 [ 132.350817][ T9200] scsi_ioctl+0x139c/0x1750 [ 132.350905][ T9200] ? __rcu_read_unlock+0x4e/0x70 [ 132.350946][ T9200] ? avc_has_perm_noaudit+0xab/0x130 [ 132.351040][ T9200] ? avc_has_perm+0x101/0x190 [ 132.351114][ T9200] ? do_vfs_ioctl+0x84f/0xe70 [ 132.351186][ T9200] sg_ioctl+0xebf/0x1350 [ 132.351235][ T9200] ? __pfx_sg_ioctl+0x10/0x10 [ 132.351323][ T9200] __se_sys_ioctl+0xce/0x140 [ 132.351367][ T9200] __x64_sys_ioctl+0x43/0x50 [ 132.351410][ T9200] x64_sys_call+0x14b0/0x3000 [ 132.351444][ T9200] do_syscall_64+0xc0/0x2a0 [ 132.351517][ T9200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.351571][ T9200] RIP: 0033:0x7fc88d4baeb9 [ 132.351593][ T9200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.351619][ T9200] RSP: 002b:00007fc88bf17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.351657][ T9200] RAX: ffffffffffffffda RBX: 00007fc88d735fa0 RCX: 00007fc88d4baeb9 [ 132.351676][ T9200] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 132.351742][ T9200] RBP: 00007fc88bf17090 R08: 0000000000000000 R09: 0000000000000000 [ 132.351786][ T9200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.351804][ T9200] R13: 00007fc88d736038 R14: 00007fc88d735fa0 R15: 00007ffc58292948 [ 132.351911][ T9200] [ 132.617071][ T9207] program syz.3.1823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.663644][ T9214] loop3: detected capacity change from 0 to 128 [ 132.723121][ T9222] FAULT_INJECTION: forcing a failure. [ 132.723121][ T9222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.736443][ T9222] CPU: 0 UID: 0 PID: 9222 Comm: syz.3.1829 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 132.736568][ T9222] Tainted: [W]=WARN [ 132.736578][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.736595][ T9222] Call Trace: [ 132.736605][ T9222] [ 132.736615][ T9222] __dump_stack+0x1d/0x30 [ 132.736648][ T9222] dump_stack_lvl+0x95/0xd0 [ 132.736676][ T9222] dump_stack+0x15/0x1b [ 132.736719][ T9222] should_fail_ex+0x263/0x280 [ 132.736751][ T9222] should_fail+0xb/0x20 [ 132.736807][ T9222] should_fail_usercopy+0x1a/0x20 [ 132.736852][ T9222] _copy_from_user+0x1c/0xb0 [ 132.736882][ T9222] ___sys_sendmsg+0xc1/0x1e0 [ 132.736924][ T9222] __x64_sys_sendmsg+0xd4/0x160 [ 132.737067][ T9222] x64_sys_call+0x17ba/0x3000 [ 132.737097][ T9222] do_syscall_64+0xc0/0x2a0 [ 132.737129][ T9222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.737154][ T9222] RIP: 0033:0x7f2efb33aeb9 [ 132.737176][ T9222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.737257][ T9222] RSP: 002b:00007f2ef9d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.737355][ T9222] RAX: ffffffffffffffda RBX: 00007f2efb5b5fa0 RCX: 00007f2efb33aeb9 [ 132.737375][ T9222] RDX: 0000000008000800 RSI: 0000200000000940 RDI: 0000000000000003 [ 132.737393][ T9222] RBP: 00007f2ef9d97090 R08: 0000000000000000 R09: 0000000000000000 [ 132.737418][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.737487][ T9222] R13: 00007f2efb5b6038 R14: 00007f2efb5b5fa0 R15: 00007ffd94173aa8 [ 132.737508][ T9222] [ 132.911098][ T9226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1828'. [ 132.989502][ T9232] loop3: detected capacity change from 0 to 128 [ 133.018368][ T9237] EXT4-fs: Ignoring removed oldalloc option [ 133.033309][ T9237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.046637][ T9237] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.066690][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 133.066708][ T29] audit: type=1400 audit(1769921646.300:3272): avc: denied { mount } for pid=9236 comm="syz.3.1833" name="/" dev="hugetlbfs" ino=24237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 133.093975][ T9237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1833'. [ 133.212758][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.526219][ T9256] netlink: 'syz.1.1838': attribute type 2 has an invalid length. [ 133.570494][ T29] audit: type=1326 audit(1769921646.800:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.4.1839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc3b9aaeb9 code=0x0 [ 133.725551][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1844'. [ 133.936699][ T3303] loop1: p1 p3 < > [ 133.945208][ T9271] loop1: p1 p3 < > [ 133.958985][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1844'. [ 133.986000][ T29] audit: type=1400 audit(1769921647.210:3274): avc: denied { mounton } for pid=9270 comm="syz.1.1844" path="/proc/1027/task" dev="proc" ino=25164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 134.138162][ T9281] batadv_slave_1: entered promiscuous mode [ 134.144475][ T9281] batadv_slave_1: left promiscuous mode [ 134.153647][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 134.160112][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 134.180847][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 134.192261][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 134.277077][ T9284] set_capacity_and_notify: 2 callbacks suppressed [ 134.277098][ T9284] loop5: detected capacity change from 0 to 2048 [ 134.298243][ T9286] netlink: 'syz.0.1850': attribute type 2 has an invalid length. [ 134.337399][ T3303] loop5: p1 < > p4 [ 134.342082][ T3303] loop5: p4 size 722688 extends beyond EOD, truncated [ 134.363571][ T9284] loop5: p1 < > p4 [ 134.368334][ T9284] loop5: p4 size 722688 extends beyond EOD, truncated [ 134.380831][ T9292] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 134.389240][ T9293] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 134.440376][ T9298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9298 comm=syz.1.1852 [ 134.463076][ T9292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.541922][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 134.542053][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 134.567910][ T29] audit: type=1400 audit(1769921647.800:3275): avc: denied { create } for pid=9304 comm="syz.1.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 134.611515][ T9322] program syz.5.1861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.640689][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 134.650994][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 134.702546][ T9325] program syz.5.1862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.713437][ T9325] FAULT_INJECTION: forcing a failure. [ 134.713437][ T9325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.726907][ T9325] CPU: 0 UID: 0 PID: 9325 Comm: syz.5.1862 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.726951][ T9325] Tainted: [W]=WARN [ 134.726961][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.726978][ T9325] Call Trace: [ 134.726987][ T9325] [ 134.727003][ T9325] __dump_stack+0x1d/0x30 [ 134.727078][ T9325] dump_stack_lvl+0x95/0xd0 [ 134.727186][ T9325] dump_stack+0x15/0x1b [ 134.727212][ T9325] should_fail_ex+0x263/0x280 [ 134.727283][ T9325] should_fail+0xb/0x20 [ 134.727320][ T9325] should_fail_usercopy+0x1a/0x20 [ 134.727364][ T9325] _copy_to_user+0x20/0xa0 [ 134.727391][ T9325] scsi_ioctl+0x161d/0x1750 [ 134.727487][ T9325] ? __rcu_read_unlock+0x4e/0x70 [ 134.727551][ T9325] ? avc_has_perm_noaudit+0xab/0x130 [ 134.727596][ T9325] ? avc_has_perm+0x101/0x190 [ 134.727644][ T9325] ? do_vfs_ioctl+0x84f/0xe70 [ 134.727687][ T9325] sg_ioctl+0xebf/0x1350 [ 134.727734][ T9325] ? __pfx_sg_ioctl+0x10/0x10 [ 134.727846][ T9325] __se_sys_ioctl+0xce/0x140 [ 134.727889][ T9325] __x64_sys_ioctl+0x43/0x50 [ 134.727928][ T9325] x64_sys_call+0x14b0/0x3000 [ 134.727958][ T9325] do_syscall_64+0xc0/0x2a0 [ 134.727992][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.728069][ T9325] RIP: 0033:0x7f53d910aeb9 [ 134.728087][ T9325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.728138][ T9325] RSP: 002b:00007f53d7b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.728187][ T9325] RAX: ffffffffffffffda RBX: 00007f53d9385fa0 RCX: 00007f53d910aeb9 [ 134.728203][ T9325] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 134.728216][ T9325] RBP: 00007f53d7b67090 R08: 0000000000000000 R09: 0000000000000000 [ 134.728230][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.728244][ T9325] R13: 00007f53d9386038 R14: 00007f53d9385fa0 R15: 00007ffcd4eab9a8 [ 134.728340][ T9325] [ 134.935738][ T9330] netlink: 'syz.1.1863': attribute type 2 has an invalid length. [ 134.959649][ T9333] netlink: 'syz.5.1864': attribute type 1 has an invalid length. [ 134.967678][ T9333] netlink: 'syz.5.1864': attribute type 2 has an invalid length. [ 135.398324][ T9347] program syz.0.1869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.527574][ T9360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1873'. [ 135.541588][ T9362] loop3: detected capacity change from 0 to 512 [ 135.558920][ T9362] EXT4-fs: Ignoring removed oldalloc option [ 135.591896][ T9362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.604687][ T9362] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.617955][ T9362] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1874'. [ 135.636514][ T9365] netlink: 'syz.0.1875': attribute type 2 has an invalid length. [ 135.661246][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.677339][ T9344] loop1: detected capacity change from 0 to 32768 [ 135.691362][ T9368] xt_hashlimit: size too large, truncated to 1048576 [ 135.806620][ T29] audit: type=1400 audit(1769921649.030:3276): avc: denied { bind } for pid=9372 comm="syz.3.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.826197][ T29] audit: type=1400 audit(1769921649.030:3277): avc: denied { listen } for pid=9372 comm="syz.3.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.846771][ T29] audit: type=1400 audit(1769921649.040:3278): avc: denied { listen } for pid=9372 comm="syz.3.1876" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.906496][ T9344] loop1: p1 p2 p3 < p5 p6 > [ 135.911492][ T9344] loop1: p1 size 242222080 extends beyond EOD, truncated [ 135.969753][ T9344] loop1: p2 start 4294967295 is beyond EOD, truncated [ 136.704135][ T9408] netlink: 'syz.4.1887': attribute type 2 has an invalid length. [ 136.990615][ T9420] loop3: detected capacity change from 0 to 32768 [ 137.037311][ T3303] loop3: p1 p2 p3 < p5 p6 > [ 137.042365][ T3303] loop3: p1 size 242222080 extends beyond EOD, truncated [ 137.050884][ T3303] loop3: p2 start 4294967295 is beyond EOD, truncated [ 137.064516][ T9420] loop3: p1 p2 p3 < p5 p6 > [ 137.069851][ T9420] loop3: p1 size 242222080 extends beyond EOD, truncated [ 137.077691][ T9420] loop3: p2 start 4294967295 is beyond EOD, truncated [ 137.112964][ T9420] xt_hashlimit: size too large, truncated to 1048576 [ 137.174398][ T9432] loop4: detected capacity change from 0 to 512 [ 137.189749][ T9432] EXT4-fs: Ignoring removed oldalloc option [ 137.270296][ T9432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.307159][ T9432] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.333956][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.358156][ T9440] loop1: detected capacity change from 0 to 256 [ 137.626821][ T9450] netlink: 'syz.3.1898': attribute type 2 has an invalid length. [ 137.638417][ T3311] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 137.646217][ T3311] FAT-fs (loop1): Filesystem has been set read-only [ 137.667695][ T3311] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 137.724530][ T9455] loop5: detected capacity change from 0 to 512 [ 137.732685][ T9455] EXT4-fs: Ignoring removed oldalloc option [ 137.779643][ T9455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.792492][ T9455] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.820076][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.857689][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.881389][ T9462] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1900'. [ 137.911421][ T6531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.938215][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.981447][ T29] audit: type=1400 audit(1769921651.210:3279): avc: denied { create } for pid=9465 comm="syz.5.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.022470][ T29] audit: type=1400 audit(1769921651.210:3280): avc: denied { ioctl } for pid=9465 comm="syz.5.1902" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=25477 ioctlcmd=0x550d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.049984][ T29] audit: type=1400 audit(1769921651.240:3281): avc: denied { getopt } for pid=9465 comm="syz.5.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.097755][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.203629][ T31] bridge0: port 1(team0) entered disabled state [ 138.335602][ T9491] loop4: detected capacity change from 0 to 1024 [ 138.380706][ T9491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.408742][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.421504][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.462686][ T31] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 138.473156][ T31] bond0 (unregistering): Released all slaves [ 138.489763][ T31] bond1 (unregistering): Released all slaves [ 138.498689][ T31] bond2 (unregistering): Released all slaves [ 138.507861][ T31] bond3 (unregistering): Released all slaves [ 138.531638][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.580166][ T31] hsr_slave_0: left promiscuous mode [ 138.609874][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.657789][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.814357][ T29] audit: type=1400 audit(1769921652.020:3282): avc: denied { setopt } for pid=9530 comm="syz.3.1915" lport=44140 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 138.838244][ T29] audit: type=1400 audit(1769921652.020:3283): avc: denied { getopt } for pid=9530 comm="syz.3.1915" lport=44140 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 138.877083][ T31] team_slave_1 (unregistering): left promiscuous mode [ 138.884093][ T31] team_slave_1 (unregistering): left allmulticast mode [ 139.012343][ T31] team0 (unregistering): Port device team_slave_1 removed [ 139.020484][ T9507] loop4: detected capacity change from 0 to 32768 [ 139.024954][ T31] team_slave_0 (unregistering): left promiscuous mode [ 139.029596][ T9538] loop3: detected capacity change from 0 to 512 [ 139.033818][ T31] team_slave_0 (unregistering): left allmulticast mode [ 139.047380][ T31] team0 (unregistering): Port device team_slave_0 removed [ 139.048605][ T9538] EXT4-fs: Ignoring removed oldalloc option [ 139.070535][ T9538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.083883][ T3303] loop4: p1 p2 p3 < p5 p6 > [ 139.089303][ T3303] loop4: p1 size 242222080 extends beyond EOD, truncated [ 139.093872][ T9538] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.100734][ T3303] loop4: p2 start 4294967295 is beyond EOD, truncated [ 139.109818][ T9538] FAULT_INJECTION: forcing a failure. [ 139.109818][ T9538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.126965][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.3.1917 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 139.127000][ T9538] Tainted: [W]=WARN [ 139.127007][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.127064][ T9538] Call Trace: [ 139.127105][ T9538] [ 139.127115][ T9538] __dump_stack+0x1d/0x30 [ 139.127147][ T9538] dump_stack_lvl+0x95/0xd0 [ 139.127171][ T9538] dump_stack+0x15/0x1b [ 139.127235][ T9538] should_fail_ex+0x263/0x280 [ 139.127276][ T9538] should_fail+0xb/0x20 [ 139.127355][ T9538] should_fail_usercopy+0x1a/0x20 [ 139.127389][ T9538] _copy_from_iter+0xcf/0xea0 [ 139.127408][ T9538] ? __alloc_skb+0x397/0x4b0 [ 139.127465][ T9538] ? __alloc_skb+0x219/0x4b0 [ 139.127505][ T9538] netlink_sendmsg+0x4ae/0x6f0 [ 139.127533][ T9538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.127577][ T9538] ____sys_sendmsg+0x5af/0x600 [ 139.127607][ T9538] ___sys_sendmsg+0x195/0x1e0 [ 139.127658][ T9538] __x64_sys_sendmsg+0xd4/0x160 [ 139.127770][ T9538] x64_sys_call+0x17ba/0x3000 [ 139.127799][ T9538] do_syscall_64+0xc0/0x2a0 [ 139.127832][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.127858][ T9538] RIP: 0033:0x7f2efb33aeb9 [ 139.127898][ T9538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.127917][ T9538] RSP: 002b:00007f2ef9d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.127937][ T9538] RAX: ffffffffffffffda RBX: 00007f2efb5b5fa0 RCX: 00007f2efb33aeb9 [ 139.127955][ T9538] RDX: 0000000008000800 RSI: 0000200000000940 RDI: 0000000000000004 [ 139.127972][ T9538] RBP: 00007f2ef9d97090 R08: 0000000000000000 R09: 0000000000000000 [ 139.127988][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.128046][ T9538] R13: 00007f2efb5b6038 R14: 00007f2efb5b5fa0 R15: 00007ffd94173aa8 [ 139.128069][ T9538] [ 139.128203][ T3388] page_pool_release_retry() stalled pool shutdown: id 104, 48 inflight 60 sec [ 139.327712][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.363209][ T9507] loop4: p1 p2 p3 < p5 p6 > [ 139.368023][ T9507] loop4: p1 size 242222080 extends beyond EOD, truncated [ 139.387698][ T9507] loop4: p2 start 4294967295 is beyond EOD, truncated [ 139.412853][ T9556] macvlan0: entered allmulticast mode [ 139.430011][ T9554] program syz.0.1920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.466445][ T9556] macvlan0 (unregistering): left allmulticast mode [ 139.509575][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 139.522222][ T9436] udevd[9436]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 139.529267][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 139.535741][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 139.611502][ T9527] lo speed is unknown, defaulting to 1000 [ 139.621021][ T31] IPVS: stop unused estimator thread 0... [ 139.640627][ T9574] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1923'. [ 139.660671][ T9436] udevd[9436]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 139.660716][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 139.681969][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 139.692598][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 139.732772][ T29] audit: type=1400 audit(1769921652.950:3284): avc: denied { recv } for pid=3313 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.94 dest=46404 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 139.778055][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 139.779074][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 139.840109][ T9586] loop5: detected capacity change from 0 to 512 [ 139.869337][ T9527] chnl_net:caif_netlink_parms(): no params data found [ 139.877689][ T9586] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 139.925569][ T9586] EXT4-fs (loop5): orphan cleanup on readonly fs [ 139.963891][ T9586] EXT4-fs error (device loop5): ext4_orphan_get:1391: comm syz.5.1925: inode #15: comm syz.5.1925: iget: illegal inode # [ 140.019926][ T9586] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1925: couldn't read orphan inode 15 (err -117) [ 140.037986][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.045151][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.063878][ T9527] bridge_slave_0: entered allmulticast mode [ 140.081635][ T9527] bridge_slave_0: entered promiscuous mode [ 140.089265][ T9586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 140.103470][ T9527] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.110625][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.117942][ T9527] bridge_slave_1: entered allmulticast mode [ 140.124813][ T9527] bridge_slave_1: entered promiscuous mode [ 140.140855][ T6531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.156330][ T9527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.167565][ T9527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.196122][ T29] audit: type=1400 audit(1769921653.430:3285): avc: denied { mount } for pid=9608 comm="syz.5.1927" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 140.220358][ T9527] team0: Port device team_slave_0 added [ 140.230536][ T9527] team0: Port device team_slave_1 added [ 140.237759][ T29] audit: type=1400 audit(1769921653.460:3286): avc: denied { remount } for pid=9608 comm="syz.5.1927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 140.268325][ T9527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.275337][ T9527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.301436][ T9527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.313476][ T9527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.320531][ T9527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.346562][ T9527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.397253][ T29] audit: type=1400 audit(1769921653.630:3287): avc: denied { unmount } for pid=6531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 140.446706][ T9527] hsr_slave_0: entered promiscuous mode [ 140.452970][ T9527] hsr_slave_1: entered promiscuous mode [ 140.482335][ T9527] debugfs: 'hsr0' already exists in 'hsr' [ 140.488265][ T9527] Cannot create hsr debugfs directory [ 140.518170][ T9622] ================================================================== [ 140.526332][ T9622] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 140.533684][ T9622] [ 140.536040][ T9622] write to 0xffff88810501f700 of 8 bytes by task 9615 on cpu 1: [ 140.543694][ T9622] mas_wmb_replace+0x20d/0x1610 [ 140.548597][ T9622] mas_wr_store_entry+0x16b6/0x2e70 [ 140.553831][ T9622] mas_store_prealloc+0x72e/0xa60 [ 140.558887][ T9622] vma_complete+0x3f7/0x820 [ 140.563468][ T9622] __split_vma+0x59b/0x660 [ 140.567902][ T9622] vma_modify+0xb30/0xd30 [ 140.572258][ T9622] vma_modify_flags+0x182/0x210 [ 140.577135][ T9622] mprotect_fixup+0x30e/0x5e0 [ 140.581836][ T9622] do_mprotect_pkey+0x67b/0x920 [ 140.586712][ T9622] __x64_sys_mprotect+0x48/0x60 [ 140.591592][ T9622] x64_sys_call+0x2c3b/0x3000 [ 140.596301][ T9622] do_syscall_64+0xc0/0x2a0 [ 140.600842][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.606763][ T9622] [ 140.609116][ T9622] read to 0xffff88810501f700 of 8 bytes by task 9622 on cpu 0: [ 140.616692][ T9622] mas_state_walk+0x485/0x650 [ 140.621494][ T9622] mas_walk+0x60/0x150 [ 140.625597][ T9622] lock_vma_under_rcu+0xc9/0x210 [ 140.630575][ T9622] do_user_addr_fault+0x232/0x1050 [ 140.635730][ T9622] exc_page_fault+0x62/0xa0 [ 140.640363][ T9622] asm_exc_page_fault+0x26/0x30 [ 140.645237][ T9622] [ 140.647608][ T9622] value changed: 0xffff88811bd9ec41 -> 0xffff88810501f700 [ 140.654725][ T9622] [ 140.657060][ T9622] Reported by Kernel Concurrency Sanitizer on: [ 140.663230][ T9622] CPU: 0 UID: 0 PID: 9622 Comm: syz.5.1929 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 140.674535][ T9622] Tainted: [W]=WARN [ 140.678446][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.688527][ T9622] ================================================================== [ 140.835109][ T9527] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 140.847962][ T9527] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 140.868097][ T9527] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 140.886705][ T9527] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 140.944598][ T9527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.960856][ T9527] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.983218][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.990429][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.016217][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.023340][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.037103][ T29] audit: type=1400 audit(1769921654.270:3288): avc: denied { egress } for pid=9 comm="kworker/0:0" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 141.055076][ T9527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.059597][ T29] audit: type=1400 audit(1769921654.270:3289): avc: denied { sendto } for pid=9 comm="kworker/0:0" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 141.159130][ T9527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.321927][ T9527] veth0_vlan: entered promiscuous mode [ 141.330603][ T9527] veth1_vlan: entered promiscuous mode [ 141.349375][ T9527] veth0_macvtap: entered promiscuous mode [ 141.358874][ T9527] veth1_macvtap: entered promiscuous mode [ 141.372642][ T9527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.385895][ T9527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.398981][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.417341][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.431984][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.453298][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0