last executing test programs: 13m33.489527855s ago: executing program 32 (id=72): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x10c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xe0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffc, 0x6}, {0x7fde, 0x40, 0x51, 0x3fc}, {0x7, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xeb7, 0x1, 0x9, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfefb, 0x6f4, 0x6, 0x8}, 0x6, 0x0, 0xfafd}}]}, @TCA_U32_LINK={0x8, 0x3, 0xd}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 13m20.110374686s ago: executing program 33 (id=43): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) 11m41.980270066s ago: executing program 34 (id=3089): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x3, 0x0, 0x2, "2f43b3862f6a603b384d8b772e2706ae2f8ca86e5bdc1c70025101515f48edd4e40fab0d4dc61955398fae4606e79b17d96c764f37bfe8f5eab27788772a1c", 0x34}, 0x60) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000000c0)={{0x77359400}, {r3, r4+60000000}}, 0x0) readv(r0, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/50, 0x32}], 0x1) 11m39.042085133s ago: executing program 35 (id=2876): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40488e0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 7m34.652556158s ago: executing program 36 (id=7725): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000006800b5"], 0x24}}, 0x800) 6m39.378883201s ago: executing program 37 (id=9558): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0xc}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) tkill(r3, 0x7) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) 4m52.143402212s ago: executing program 38 (id=12352): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000280)={'ip6tnl0\x00', @broadcast}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") set_mempolicy(0x6005, &(0x7f0000000080)=0xf, 0x5) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x113) shutdown(0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 4m35.891662744s ago: executing program 39 (id=12681): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000500)={0x30, 0xd1, 0x7fffffff, 0xff, 0x16, "00a6400d00000000000000d8ffffff00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000900)=0xd) 4m33.848582446s ago: executing program 40 (id=12711): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xff}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2000}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1ff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 4m31.116428798s ago: executing program 41 (id=12759): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x10000000) 4m28.211571362s ago: executing program 42 (id=12826): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x41, 0x4fa, &(0x7f0000000b00)="$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") readlink(0x0, &(0x7f0000000040)=""/225, 0xe1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/snmp6\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}]}, 0x2c}], 0x1}, 0x20000000) unshare(0x22020600) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 4m20.805193335s ago: executing program 43 (id=13105): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x7}, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xf9}, 0x1}, {0xa, 0x4e21, 0xa52, @loopback, 0xcac}, 0xffffffffffffffff, {[0x5, 0x6bfe, 0xffffff2f, 0x4, 0x6, 0x6, 0x7, 0xf4200000]}}, 0x5c) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 4m11.172972645s ago: executing program 1 (id=13421): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10000) 4m11.152521908s ago: executing program 1 (id=13422): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4000000) 4m11.085325376s ago: executing program 1 (id=13424): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xcc}}, 0x0) syz_read_part_table(0x628, &(0x7f0000000000)="$eJzs0z2IXFUbB/D/ufNN3pcJEhsNGtDWNDaxWOKiUYLorp+FjdgIilXAwkJmYLewsrJVEVKIhWnEQhQsdFcQldXCYCESoo2NiijCypU58+FCygRX5fdjuPOcc54557mcZ8K/W/tROzNJKck0yfimt5JunRqlu8jq55tLg2GaJL3lL08kj7750N0P37e53k5Wk8f/l/yRfqmjeW7JqSdq0Dlw7LjZe/2Tu36eTj+95YvdzjwtyXtNcnNyOtlv23a+Sy1rmM4r578tyzyYubC2M95qfkyy9nQ/6fWT3FGmdW3e2KXULhzO81fd2702ndRZblNKLt77wuVb9071kmfqH2V37/flCUdq0vdZVjJKcv0Df5WVZJLBIur1Dkwv9Jc13zkLvnqwlFU6h6j23/a5/gfdejMXXzt2qZSmLjVpMln12+z+98eLQVP75uhhFQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwnXVjbGfcPjG9/6rYzNw6TNCUZLCZHqyidJJ+VxeDl+6/+/NFwvLV9btRksWkvSX/jp1f/f/Lz3V42fmszTI6mLjf1Uw0fq1/9qy6AQzXrv63tXl56fu3XxWUOf1isXff1h5PRIv6lP5wce66Oppm1xNzb7zarrcrpVbhaH1x5YudAfOTavQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8I9x5p6zJzbXm0eSpnSHSZqj53fqyrQ+2za54f3H33j24/UvO0k2Bu8k2c/Zkifb+Raz6WwOajxKMsjxkpPd2bCfyy8uT6pp380eZbZtO/nb35Ur/RkAAP//w2hvfw==") 4m11.001172347s ago: executing program 1 (id=13426): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x7}, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = syz_pidfd_open(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00', @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100"], 0x58}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xf9}, 0x1}, {0xa, 0x4e21, 0xa52, @loopback, 0xcac}, 0xffffffffffffffff, {[0x5, 0x6bfe, 0xffffff2f, 0x4, 0x6, 0x6, 0x7, 0xf4200000]}}, 0x5c) pidfd_getfd(r2, r2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m10.848532896s ago: executing program 1 (id=13435): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f0517, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_config_ext={0x5, 0xffff}, 0xa022, 0x4000004005, 0xb, 0x3, 0xfff, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = syz_open_dev$vcsn(&(0x7f0000000400), 0x1, 0x0) lseek(r0, 0x8000000000000001, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x10, 0x0) syz_emit_ethernet(0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb2aaaaaaaaaaa86dd6002adf7003c3a00fe880000000000000000000000000001ff0200000000000000000000000000010200907800000000600327f60000110000000000000000000000fffffffffffffe8000000000000000000000000000005a74cffa30d41cd96f0319b2"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) faccessat(r0, &(0x7f0000000140)='./file1\x00', 0x0) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000011500)={[&(0x7f0000000200)=' ', &(0x7f0000011540)='\'\x00']}) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000080)='./file0/file0\x00', 0x2001083, &(0x7f0000000000), 0x1, 0x592, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 4m10.611041927s ago: executing program 1 (id=13439): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000e00), 0x140, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89fe, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) 4m10.564928643s ago: executing program 44 (id=13439): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000e00), 0x140, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89fe, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) 3m21.145306453s ago: executing program 0 (id=15049): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001ac0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fbdbdf451a0c0000180001801400020051592c77629dfcfc95f465654f31000036cb183cbd24394e96126b42809d5ec850fec1f29b0e0a2cf860bafdecd3f8ad746b9eaa2c6bbac050"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 3m21.145016093s ago: executing program 0 (id=15050): clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x1ff, 0x7, 0x3, 0x0, 0x6, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x80000000, 0x0, 0x10, 0xa88, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x3, 0x2000000000005}) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000c80)="c5bfd7eb8dd13ad1a6", 0x9}], 0x2, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r5 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRESDEC, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000480)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYRESHEX=r5, @ANYRESHEX], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r8, @ANYRESHEX=r11, @ANYRES8=r9, @ANYRESOCT=r4, @ANYRES64], 0xb4}}, 0x40840) 3m19.787454338s ago: executing program 0 (id=15071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001ac0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf451a0c0000180001801400020051592c77629dfcfc95f465654f31000036cb183cbd24394e96126b42809d5ec850fec1f29b0e0a2cf860bafdecd3f8ad746b9eaa2c6bbac050"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 3m19.766941581s ago: executing program 0 (id=15073): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x7}, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xf9}, 0x1}, {0xa, 0x4e21, 0xa52, @loopback, 0xcac}, 0xffffffffffffffff, {[0x5, 0x6bfe, 0xffffff2f, 0x4, 0x6, 0x6, 0x7, 0xf4200000]}}, 0x5c) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(0x0, 0x2) 3m19.730523386s ago: executing program 0 (id=15074): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 3m19.649370306s ago: executing program 0 (id=15077): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1c9203, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x40000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r3, r2, 0x0, 0x3ffff) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) 3m19.649177696s ago: executing program 45 (id=15077): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1c9203, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x40000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r3, r2, 0x0, 0x3ffff) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) 1m59.308532405s ago: executing program 9 (id=17136): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) readv(r0, &(0x7f0000002a40)=[{&(0x7f0000002800)=""/103, 0x67}, {0x0}], 0x2) unshare(0x600) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000300)={0x100c}) bind(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) lsm_set_self_attr(0x66, 0x0, 0x43, 0x0) unshare(0x14010a00) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x4000008, {{0xa, 0x4e21, 0xa3f, @empty, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x1018658, &(0x7f00000006c0)={[{@noinit_itable}, {@nombcache}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x625, &(0x7f0000001d80)="$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") 1m58.972819178s ago: executing program 9 (id=17144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x240008c4) 1m58.909354917s ago: executing program 9 (id=17147): r0 = socket(0x10, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x34}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x25, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r4], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="fd3d2bbd7000fbdbdf250e000100190005bc1764c218de02"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x6000, 0x0, @loopback={0x3a00000000000000}, 0x28004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x400, @remote, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000540)=""/24, 0x18}], 0x7, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x40010040, 0x0) r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2502, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000680)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xa3, 0x5, 0xf924, 0xffffffff, 0x0, 0x0, "1e6cab8f7baf19f274196f5f345df811db2f9cd4e1bc791f4ca816141401bdb2bbf9bb1473b578e1924b5afe63c82722f192ce1daa92d5d7065dbb125ff6791eaf00e24ef66cf5e2afd1d76f0513e7f2c83353365e4880170fc3101d606ab4fdc2c1f6ec5144743e99a111dc682908884cc6eefc40120345ef1f3840c2e7afb97b8cb76948d852a140a1f03b2143fb9ec006e63db257fb8ad4ce3919e373e8162677ea"}}, 0x1bb) openat2(r8, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2000, 0x1b8, 0x9}, 0x18) 1m58.817878738s ago: executing program 9 (id=17152): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x7}, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000000)={[0x8]}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)}, 0x10) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = syz_pidfd_open(r0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, &(0x7f0000000080)={[{@usrquota_inode_hardlimit}]}) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xf9}, 0x1}, {0xa, 0x4e21, 0xa52, @loopback, 0xcac}, 0xffffffffffffffff, {[0x5, 0x6bfe, 0xffffff2f, 0x4, 0x6, 0x6, 0x7, 0xf4200000]}}, 0x5c) r8 = pidfd_getfd(r6, r6, 0x0) setns(r8, 0x66020000) 1m58.817599988s ago: executing program 9 (id=17153): bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_socket_connect_nvme_tcp() dup(0xffffffffffffffff) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x5, 0x0, 0x8, "edf958e7e942"}}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = creat(&(0x7f00000003c0)='./file1\x00', 0x11) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)={0x50, r6, 0x1, 0x70bd27, 0x25dfdbfc, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 1m58.566413341s ago: executing program 9 (id=17159): unshare(0x20040600) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_clone3(&(0x7f00000004c0)={0x201080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x1}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) lstat(0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce030000040000000200000000000000040000000000000029a200000000000000800000000000000000000000000000000000000000000000000000000000000000000000000100ffffffff00000000480000000000000009000000595ca100000000ff0100000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081e50418793ad69bb4252beee71d5d620e5082a103a341e3b87608ba03ea52f0f29e24e68a6108ef43c95f71284b6b5bb1a1383e641c90e22add58b8b7d497b299593e90b77ba8aad0bd50184e18"]) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700010025bd7000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000005000000000000000000000000000000000100000000000000000a"], 0x128}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1m58.535835665s ago: executing program 46 (id=17159): unshare(0x20040600) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_clone3(&(0x7f00000004c0)={0x201080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x1}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) lstat(0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700010025bd7000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000005000000000000000000000000000000000100000000000000000a"], 0x128}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1m31.313390998s ago: executing program 3 (id=17845): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aa9daaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2640a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRESHEX, @ANYRES32=r2, @ANYRES16=r1, @ANYRESHEX=r2, @ANYRESOCT, @ANYRES64=r0, @ANYRESHEX=r2], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) 1m31.244197627s ago: executing program 3 (id=17848): r0 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r0, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x8}}) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0x4001}}, 0xe4) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r9, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES16=r1, @ANYRESHEX=r5, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async) ioctl$sock_SIOCBRDELBR(r13, 0x89a2, &(0x7f0000000000)='bridge0\x00') r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 1m30.817361482s ago: executing program 3 (id=17853): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x2040, 0x80) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x1}}, 0x10, 0x0}, 0x68040) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x3) open_by_handle_at(r1, &(0x7f00000000c0)=@OVL_FILEID_V1={0x1f, 0xf8, {'\x00', {0x0, 0xfb, 0x1c, 0x2, 0x1f, "5933cb0df790b59a03b509e8a556103b", "445a8fdff48d42"}}}, 0x101) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r3], 0x24}}, 0x4800) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xf085, 0x3, 0x27, 0x1000}, {0x1000, 0x8e, 0x96, 0x7}, {0x3, 0x1, 0x4, 0x6fa1}, {0x1, 0x5, 0xff, 0x3}, {0x8, 0x4, 0xc, 0x54}, {0x1, 0xfa, 0x1, 0x5}, {0x4, 0x5, 0x3, 0x2}]}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x482080, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000340)={0x0, 0x10000, 0x0, [0xdf8, 0x4, 0x9, 0x7, 0x4], [0x3, 0xab8, 0x6, 0xfffffffffffffff9, 0x1, 0xa, 0x7, 0x13f, 0x4, 0x2d8, 0x4, 0x8001, 0x3, 0x47, 0x8000, 0xd9, 0x4, 0x8000, 0x2, 0x0, 0x3, 0x8, 0x5, 0x101, 0xd40, 0x3, 0x7fffffff, 0x3, 0x2000000000000000, 0x4, 0x6, 0x5, 0x200, 0x9, 0xab6, 0x3, 0x8d, 0x6, 0x1000200000000000, 0x9, 0x3, 0x0, 0x9, 0x8, 0x6, 0x67a4, 0x6, 0x100, 0x1, 0x8, 0x3, 0x1, 0xfffffffffffffffb, 0x6, 0xffffffffffff0de7, 0xfffffffffffeffff, 0x4, 0x8001, 0x2, 0xf, 0x8000000000000001, 0xffffffff, 0x6, 0x8001, 0x1, 0x10000, 0x0, 0x6, 0x200, 0x2, 0x3, 0x1, 0x67d, 0xd92, 0x8be, 0x2, 0x8000000000000001, 0x6, 0x7, 0x6, 0x0, 0x1, 0xffb, 0x7, 0x3, 0x0, 0x7fffffffffffffff, 0x9, 0x3, 0xe9, 0x2, 0x8, 0x9, 0x8000000000000000, 0x1000, 0x0, 0x6d5, 0x7c07, 0x4574, 0x8, 0x400, 0xb18c, 0x7, 0x6, 0x4, 0x7, 0x101, 0x0, 0xfffffffffffffffa, 0x401, 0x401, 0xd73, 0x800, 0x1ff, 0x81, 0xffffffffffff0349, 0x1, 0x80000001, 0x9, 0x8, 0x1]}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000780)={r5, "974b41c808a2d44d30507bb901d274e4"}) 1m30.771280638s ago: executing program 3 (id=17855): syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', 0x200002, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c666d61736b3d30303030303030303030303030303030303230303030302c6e6f646f74732c666d61736b3d30303030303030303030303030303030303030303031302c666c7573682c646f733178666c6f7070792c646d61736b3d30303030303030303030303030303030303030303030342c6e6f646f74732c00482825433c3a2104710675dd6df925b3031832805cf0070407e6ce8d140774d42f63ea7c86e996c411010aae371f39611e601cef91c7291e00"/214], 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x48040) sendto$unix(r0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x4e24, @multicast2}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1011085e", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x3f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1dc) syz_clone3(&(0x7f0000000080)={0x941400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file1\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdb}, 0x94) syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', 0x200002, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c666d61736b3d30303030303030303030303030303030303230303030302c6e6f646f74732c666d61736b3d30303030303030303030303030303030303030303031302c666c7573682c646f733178666c6f7070792c646d61736b3d30303030303030303030303030303030303030303030342c6e6f646f74732c00482825433c3a2104710675dd6df925b3031832805cf0070407e6ce8d140774d42f63ea7c86e996c411010aae371f39611e601cef91c7291e00"/214], 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x48040) (async) sendto$unix(r0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x4e24, @multicast2}}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1011085e", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x3f) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1dc) (async) syz_clone3(&(0x7f0000000080)={0x941400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) (async) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file1\x00'}, 0x6e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdb}, 0x94) (async) 1m30.663409601s ago: executing program 3 (id=17859): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aa9daaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2640a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRESHEX, @ANYRES32=r2, @ANYRES16=r1, @ANYRESHEX=r2, @ANYRESOCT, @ANYRES64=r0, @ANYRESHEX=r2], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 1m30.317418476s ago: executing program 3 (id=17870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000200000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00='], 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r1}, 0x20) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x10, 0x0}, 0x0) write$nci(r3, 0x0, 0xfffffeea) 1m30.311164007s ago: executing program 47 (id=17870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000200000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00='], 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r1}, 0x20) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x10, 0x0}, 0x0) write$nci(r3, 0x0, 0xfffffeea) 49.391476713s ago: executing program 6 (id=18647): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x29, &(0x7f0000005f00), &(0x7f0000005f40)=0x30) 49.367070006s ago: executing program 6 (id=18648): prctl$PR_SET_SECUREBITS(0x1c, 0x15) r0 = eventfd(0x80000000) ppoll(&(0x7f0000000240)=[{r0, 0x1410}], 0x1, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ecryptfs\x00', 0x2000000, &(0x7f00000000c0)='.*[+\r@\\{&') getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x29, &(0x7f0000005f00), &(0x7f0000005f40)=0x30) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x29, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = eventfd(0x0) r6 = signalfd(r1, &(0x7f0000000180)={[0x7]}, 0x8) r7 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000380)={[{@norecovery}, {@sysvgroups}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") utime(0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r8, 0x0) fsync(r8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) io_submit(r4, 0x7, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x2, r5, &(0x7f0000000440), 0x0, 0x5, 0x0, 0x2, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xf624, r6, &(0x7f00000001c0)="62c8a3c939471a3979125529f33271708eb76ca502f82054d8b9a2551801b9b1f48b531f794a9c9a06eb8f81d9ec312516e502727127d48a9d27a29bf24000a8a0ae5d5fc45f99697320729c93e7ee2bd31ec4b56ff0dabb4fc6f7ac5313ecc51850bfa32879f0259757571baa4f25069ad44697a3c856f6f00abe6252653f55", 0x80, 0x6, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000300)="32d74dfb09cdea56a92b472900e5b88c97beb7d526e83e4f003de565cd4ae192d6f84436088e0b5ccfee", 0x2a, 0x4, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000000380)="33bdbddb26a9295ae09b5fc42cb955e349e61cbf509a2890240403c297cb2404c1261077c906a422a28aa15b1e9d2d741a169746d9e16fc9a3eec80c035f027daf4c91aca84882fb19438d229f71d199d23049", 0x53, 0x8, 0x0, 0x4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xb, 0x5, r1, &(0x7f0000000440), 0x0, 0x6, 0x0, 0x1, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0xbc1, r7, &(0x7f00000004c0)="a5fbcb2a6e116d369676b53c6ade83e412761b948008936c01106d6c5ca76a911eba9771f0f0af3f25d2c34af523550163364f857549368e6006e53bfc43192e2af36b4c4e6e1172e71ebe331e50e2fead3d20e49e693cd0ea9d82d9cc476dd8c046ed5781fb22a19b2dee27a48eefef7de229dcf2ea99895f333df3fb962ec6a4bbaa42ea1ba603fd5b7a1ac887ad83903b002c21516174d6ce888988bfe3e55073e8884ecf8b10bb9158bea840d2f529551e5758dba4169ecf5195ee16a013850fb86ad61ff09b9d61e939", 0xcc, 0x5df, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x7, r9, &(0x7f0000000100)="1d28246b0eb26271ed18985f115d3c41555a2c505dab621e1032f6c0d76288a30e4c3bff1c97e46a312628e0146ee0a737272694", 0x34, 0x9, 0x0, 0x2}]) 49.148087814s ago: executing program 6 (id=18652): unshare(0x600) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 49.147899634s ago: executing program 6 (id=18653): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000640)={[{@nodiscard}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noblock_validity}, {@noblock_validity}, {@minixdf}, {@nolazytime}, {@nouid32}, {@noauto_da_alloc}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000005000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000d8000000000000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)={[{@noswap}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x4040, 0x147, 0x28}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4014012) 49.038111228s ago: executing program 6 (id=18655): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)=[{0x0, 0xf5}, {&(0x7f0000000680)="5ffc", 0x2}], 0x2, 0x0, 0x0, 0x50}, 0x20048800) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) 48.761404944s ago: executing program 6 (id=18662): socket(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x402c2, 0x21) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x800) 48.761305384s ago: executing program 48 (id=18662): socket(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x402c2, 0x21) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x800) 4.003511464s ago: executing program 7 (id=19384): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) setresuid(0x0, 0xee01, 0xee00) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x1009, 0x8, 0x14, "4cb8b910acda715e64ee57062d59a56f2584c4"}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r7 = socket$inet(0x2, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x2, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x64, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x24004000) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r7, &(0x7f0000000300)="8c24", 0x2, 0x5, &(0x7f0000000100)={0x2, 0x4e02, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000), 0x27) 3.775917903s ago: executing program 7 (id=19386): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r1 = socket$inet6(0xa, 0x2, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) 3.521387296s ago: executing program 7 (id=19390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@remote, @in6=@initdev}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYRESOCT, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2080c10, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040), 0x10) sendmsg(r6, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d5500897cd5556770418b1b34525a7becaa1a13b103508a04d5cd215b761cd584cddde2539d4d465745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566f259c4f224d9098cbd4b94b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f779786606674fa7c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f2f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d011", 0xc6}], 0x3}, 0x24000880) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 3.435153507s ago: executing program 7 (id=19393): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r1) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1801) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) read$hiddev(r2, &(0x7f0000000140)=""/85, 0x55) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_j1939(r3, &(0x7f0000001440)={&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)=""/141, 0xffffffb3}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r6 = socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000001500)=""/97, 0x61}], 0x2, 0x45, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r7, 0x0, 0x39000, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1c, 0x0, &(0x7f0000000600)) execveat$binfmt(r7, r0, 0x0, 0x0, 0x0) 1.593998584s ago: executing program 2 (id=19437): socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) syz_io_uring_setup(0x4c57, &(0x7f0000000200)={0x0, 0xc48c, 0x4, 0x1, 0x27e, 0x0, r0}, &(0x7f0000000040), &(0x7f00000000c0)) 1.55142075s ago: executing program 2 (id=19439): unshare(0x600) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$pagemap(r1, &(0x7f0000000040)) 1.492240537s ago: executing program 2 (id=19440): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x9, 0x7ff7fffd}, 0x40, 0x1, 0xfffffffc, 0x8, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffeff7ffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x16, 0x0, 0x4}]}, 0x10) 1.414099887s ago: executing program 2 (id=19443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$eJzs3E1rE0EYwPGnadOXlDY5iKAgPuhFL0sbP0GQFsSAUhtRD8LUbjRkTUo2RiJie/Pq5ygevQnWL9CLN+/ipQiClx6kK90Xsy3Bvth20+b/g7CTnXl2Zje74dmFnY0H755Xy65VNk1JjaqkRFZkUyS3XQoNhMuUXx6WuBW5Pv7r66V7Dx/dLhSLM3Oqs4X5G3lVnbz86eXr91c+N8fvf5j8OCLruccbP/Pf1s+vX9jYmo+2Xm+q0YV6vWkWHFsXK27VUr3r2Ma1tVJz7caO+rJTX1pqq6ktTmSWGrbrqqm1tWq3tVnXZqOt5qmp1NSyLJ3ISL8ZPHBEaXVuzhSOZTBIwli3lY1GwQx2rSytnsSgAABAb0kq/39WcbXiam2v/D8lR5P/j57I0Txt/Px/q2vSiLMhvX0DUDCZ8PrdifwfAAAAAAAAAAAAAAAAAAAAAIDTYNPzsp7nZaNl9BkJ35mJvic9ThyPQ/z+AwkOF0cs9uLeqIjztlVqlYJlUF8oS0UcsWUqLfLbPx9CQXn2VnFmSn05WXOWw3j/JcGRKD6S6x4/HcRrLH65VUpLJt5/XrJyrnt8fld8WkRapWG5djUWb0lWvjyRujiy6J/Xnfg306o37xR39T/mtwMAAAAA4Cyw9K/czvvfYDZJy9Jo2pBd9cHKzvMBye7xfEBlbVg68UNycSi5/QYAAAAAoJ+47VdV4zh2g8LBCv146KxwFuV/NvY8b3m70f93mhKRhPb0h4j0wAGPFdJHccF+fxFsZD+Nk/pHAgAAAHBcOkl/0iMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB/7XfysKj9YeYei3U3mMxeAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3hTwAAAP//Q1YX+Q==") timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1c}]}]}, 0x60}}, 0x0) 1.339400967s ago: executing program 4 (id=19444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@remote, @in6=@initdev}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYRESOCT, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2080c10, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040), 0x10) sendmsg(r6, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d5500897cd5556770418b1b34525a7becaa1a13b103508a04d5cd215b761cd584cddde2539d4d465745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566f259c4f224d9098cbd4b94b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f779786606674fa7c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f2f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd", 0xd4}], 0x3}, 0x24000880) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.24078759s ago: executing program 4 (id=19449): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@remote, @remote, 0x0, 0xffffff00, 'veth1_to_team\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x84, 0x2, 0x6}, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xe}, 0xffffff00, 0xff000000, 'gre0\x00', 'dummy0\x00', {}, {0xff}, 0x0, 0x4, 0x10}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 964.353315ms ago: executing program 2 (id=19453): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x141082, 0x1b0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xa00000, 0x0) chroot(0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000", 0x3) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x7fff) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x3}, 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semop(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) 938.115659ms ago: executing program 4 (id=19454): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$BLKFRAGET(r0, 0x1265, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000280)={0x18f, @tick=0x8, 0x6, {0x8, 0x80}, 0x44, 0x1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r4], 0x30}}, 0x0) dup(r1) 868.730518ms ago: executing program 4 (id=19455): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 784.525048ms ago: executing program 4 (id=19456): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d5500897cd5556770418b1b34525a7becaa1a13b103508a04d5cd215b761cd584cddde2539d4d465745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566f259c4f224d9098cbd4b94b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f779786606674fa7c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f2f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd", 0xd4}], 0x3}, 0x24000880) 753.026123ms ago: executing program 4 (id=19457): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x8c0, 0x2d, 0x501, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0x1, 0x8}, {0x6, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x6629}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x9, 0x10}}, @filter_kind_options=@f_bpf={{0x8}, {0x864, 0x2, [@TCA_BPF_POLICE={0x860, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xef4, 0x4, 0xf35, 0x3, 0x447, 0x7, 0xa4, 0x1, 0x3, 0x8, 0x1, 0x3, 0x4, 0x8, 0x8, 0xe2, 0x7, 0x9, 0xa5, 0x8, 0x5, 0x400, 0x4, 0x10000, 0x0, 0x3, 0xc, 0x4, 0x4, 0x2, 0x28c, 0x7fffffff, 0x6, 0x5, 0x7fffffff, 0x8, 0x2, 0x1, 0x4, 0x6, 0x0, 0x24dd, 0x9, 0xb, 0x3, 0x9, 0xffffffff, 0x9, 0x2, 0x3, 0x7, 0x4, 0x17, 0x7, 0x7, 0x40, 0x2, 0x9, 0xc, 0x0, 0xf6, 0x7f, 0x800, 0x9, 0x5, 0x0, 0x2, 0x9, 0x7ff, 0x100, 0xfffffeff, 0x0, 0x2, 0x8, 0xd, 0x80000001, 0x0, 0x17c00000, 0x7, 0x80, 0x7fff, 0x4c, 0x2, 0x1, 0x7, 0x4, 0x4, 0x4, 0x9, 0x45a, 0x6, 0x7, 0x4, 0x6, 0x3, 0x9, 0x3, 0x6, 0xffff, 0x7, 0x3, 0x7ff, 0x1, 0x4bc, 0x1, 0x5, 0x548b, 0x5, 0x2, 0x0, 0x2, 0x80, 0x9, 0x1, 0x8, 0x8001, 0x80000000, 0x10001, 0x2, 0x9, 0x20ff, 0x9, 0x1, 0xa0, 0x3ff, 0xb, 0x4, 0x5, 0x4, 0x800, 0x1, 0x7, 0xffff, 0x7, 0x8000, 0x9, 0x7f, 0xd, 0x1, 0x69, 0x81, 0x8, 0x0, 0x2, 0xef56, 0x3, 0x2, 0x2, 0x2, 0xc, 0x9, 0x401, 0x7, 0xc, 0x9, 0x9, 0x9, 0x2, 0x10001, 0xb7, 0x13c, 0x10001, 0x3, 0x8, 0x4, 0x6, 0xa, 0x2, 0xa9c, 0x2, 0x7fff, 0x10001, 0x10000000, 0x3f, 0x33, 0x14, 0x800, 0x7fffffff, 0x2, 0x64f, 0x4, 0x5, 0x1000, 0x401, 0x0, 0xec6, 0x0, 0xffffb446, 0x401, 0x4, 0x3d9c, 0x7fffffff, 0x80000001, 0x616, 0x3ff, 0x2, 0x200, 0x7, 0x5, 0x5, 0x7660a0db, 0x800, 0x8, 0x0, 0x8, 0x2bd7, 0x77, 0x7, 0x2, 0x2, 0x0, 0x4, 0x8000, 0x80000001, 0x2, 0x5, 0x9, 0x43cb80da, 0x6, 0x10001, 0x0, 0x0, 0x5, 0x1, 0x1, 0x7, 0xffffffff, 0x1, 0xb5, 0x9, 0x83, 0x5, 0x10, 0xffffffff, 0x7, 0xa797, 0x2, 0x42, 0x0, 0x9, 0x7, 0x0, 0x5, 0x0, 0xa000, 0xfffffffe, 0x9, 0x9, 0x2, 0x1, 0x3, 0x80000001, 0x5, 0x4, 0x7ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x7, 0x7ff, 0x4, 0x4, {0xa1, 0x2, 0x101, 0x6, 0x9, 0x5}, {0x9, 0x2, 0x7, 0x14, 0x3ff, 0xfffffffd}, 0x3ff, 0x3ff, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6c, 0x2, 0x8, 0x3, 0x4, 0xfffff6ef, 0x1, 0x1, 0x0, 0x7, 0x49, 0xffff, 0x0, 0x400, 0xffff7a60, 0x10000, 0x6, 0x8000, 0xfffffff7, 0x5, 0x1, 0x2, 0x7f, 0x0, 0x6, 0x2a16, 0x35, 0x67e6, 0x4, 0x957, 0xfffffffd, 0x80d0, 0x9, 0xffffffff, 0xf3, 0x69c9, 0xcc2, 0x9, 0x8a, 0xb, 0x7, 0xd, 0x10001, 0x0, 0x4, 0x2, 0x2, 0x7f67, 0x0, 0x0, 0x6, 0x9, 0x7, 0x9, 0x7, 0x5, 0xd10c, 0x8, 0x1000, 0x8, 0xeca, 0xfffff0c3, 0x7fffffff, 0x7fff, 0xea77, 0x6, 0x6, 0x5, 0xb3, 0x2, 0x7, 0xfffffff7, 0x0, 0xfffffffb, 0x5, 0x8, 0x4, 0x7, 0x5, 0x4, 0xfffffffa, 0x3, 0x8f54, 0xa, 0x0, 0x7, 0x1, 0x2, 0xe0, 0x401, 0x2, 0x1, 0x2, 0x3, 0x3, 0xf, 0x2ef, 0x7fffffff, 0x9, 0x8001, 0x80000000, 0xa7, 0x800, 0xed, 0x1, 0x8, 0x0, 0x4, 0x1ff, 0x2, 0x2, 0x9, 0x8001, 0x10, 0x7f, 0x9, 0x100, 0x19e, 0xfffffbff, 0x1, 0x6, 0x7, 0x9794, 0xa, 0x6, 0xff, 0x421, 0xac, 0x3, 0x0, 0x401, 0x7, 0x6, 0x400, 0xfffffff9, 0x9837, 0x79, 0x7, 0xa90, 0x10, 0x8, 0x1, 0x7, 0x13d, 0x2, 0x0, 0x14, 0xd5, 0x5, 0x800, 0xfffffffb, 0x11f15a82, 0x6, 0x7b55, 0xfffffff5, 0x4, 0x9, 0x1, 0x0, 0x88, 0x9, 0x3, 0x6, 0x10000, 0x8000, 0x1, 0x1, 0xff, 0x3, 0x1, 0xa, 0x9, 0xc0, 0x0, 0xffff, 0x7, 0x80000001, 0x1, 0x7b1, 0x10, 0x1, 0x10, 0x2, 0xfffffffa, 0x401, 0x1ff, 0xc2, 0x3, 0xffff0001, 0x401, 0x2, 0xd1e9, 0x6, 0xfffffffc, 0x8, 0x5, 0x7f, 0x8, 0x9, 0x4, 0xff, 0x1, 0x3, 0x2, 0xffff, 0x3, 0x3, 0x72, 0xfa76, 0x2, 0x6ef, 0xb, 0x4, 0x80000001, 0x6, 0xb4, 0x200, 0xa2, 0x7fff8, 0x9, 0x7ff, 0x3, 0x29e, 0x8, 0x4, 0x2000, 0x200, 0x9, 0x65d, 0x1, 0x8, 0x5, 0x0, 0x1ff, 0x9, 0x9, 0x8, 0x1, 0xb0, 0x7, 0x10000, 0x7, 0xfffffffb, 0xe, 0x8, 0x0, 0xff, 0x2, 0xff, 0x4080000, 0x10001, 0x101, 0x6f5, 0x4, 0xffff, 0x6]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0xb1ce}, @TCA_CHAIN={0x8, 0xb, 0x3f2afee7}]}, 0x8c0}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffc}]}}]}, 0x3c}}, 0x800) mq_unlink(&(0x7f0000001240)='u\x82\x1b\xe8\xc0\x12\xc19l\x81\xb0\aG2\xeb\xe8$\xefW\x02\x00=\bj\xb7\t\xa9i\xd2hAFWnmY\xa3\xbfS?(\x0en;/@U>\x02\xd3\xc9\xb1\xe5iD\xfa;\xc5-\xbd4\x17\xb9\xc4\xad\x84\x01\xd5G(=\xf6N\xe0y\xb4\xc5\xfd^\xf7\xfe\xa0B\x04\x8a\xe1\xba\xf93\xa6G\x04\xed[p\xff\xf3\xd6\xd22w\xb4\xdf\xc1f\xc95\xdfCt\\B\x86\xd8w\xb2d\x10\x13\xfc\f\x80\x18\xc1\x8a5\xd3\a?\xb2\x8b\xac\xf0>?\'-\xed\x8f\xeb\x11\xe8:\xea\xefW\x80\xc7\xe8\x86\xa8\x86\x1f\xdfV\x8bZ\xf3S\x00\xd4\xe7)\xee\ai\x7f\xf4\xcc\xa7\xc8\xe9\xa8\x97\xe5\xdc\xc5X\xa8\x1f%\x88Ec$\r\x11\xd8g\xb5\xb5\xdd\xd6\xbf\xcc\xad\xcb\xf6j\x82\xfa\x11\x17\x85\xbbqG\x9e\x17rX\xfb`s\x04j\xa4\xdf\xe8^\xfd\xe7X\xda\xe7(\xab?\xa4\xa5\x83\xac\x05\xdc\x04\xa1\x8d\xee\xea\xe4\xb7R\x17\xbc\x1a\xd2`\xc8$\xa5\xf7\x9d\x8a\xba\x89\xa0\xadl;\xa9\xef\xf3\xe6\xb2G\r}n\xaf\xdc\xa3\xfd\x82\xb5\al\x8ar\xa7J&\xa7p\xdf\xb5K\xc8\xeda\xfby\xe0C\xb2\xe8C\xbe{b\xea\v`\n)o\xf1I\xdb+<\xd9\x15\xaaJ\xad\x8dY\x1e\x16\xf6\xb4l\x16VH\xd4 K3\xdc\xbbh[\xbd\x8e\xe7j\\\x0f\xf6\xf4{\xdax\xf2\x90\x9f\x05\x91\x92\xed*4OT\xc1\xdf\xa7_\x92;\x06\x12\x8d&\xaa\xa1E:\xd4w\x97G\xa9\x96\x92-~|\x9c\x97\xfc{\xa4\xce<-r\xef\xef\x7f\x1a\x10%x\xa5\xf5m\x00OLrr;3\xa2H-\xa0\xbc:\x97f\x8a~\x1c4\xdc\xa73\x90\x80\xe4\xf0\x18N\x19\xb4LB\xc2<\x8a\xf3jy\x0fF|,\x11\xb1U\xa9\xb3*^V\f\x87\xad') r3 = io_uring_setup(0xad5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0x1000}) close(r3) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 752.015753ms ago: executing program 5 (id=19458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0xfff4}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x90}}, 0x0) 688.536891ms ago: executing program 5 (id=19460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x114, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 688.300261ms ago: executing program 5 (id=19461): setuid(0xee01) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 616.79275ms ago: executing program 5 (id=19462): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001f80)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESOCT, @ANYBLOB="494eaff39eb705b9f750d569f83eb59ef6fb60edbb47dc8dd74d85286d8b460d123a1fffc61520a1375ade2a5643ab708bf84e2a41caf51d9258c10ac19078a08505e59311658a1819127e3e4e2ee858f061eb042f6a2f620ffa51f692c9329b0c740d64c4d18696b81caa404a36785ee36d6f543e7e35801653c09b0b89787e83c8552e6eb389729fef160a051c5377093b14ced88c8b0e185d1160953ca53d78a42ca844d1c5caf23b41cbb446ea44e06e8a322ace24db264ab61df4bb3a2e99c6a36f17ada9430c05aa89a4925740cb0b46db1308bf5b7da44163de95f6ff94498e54c58446", @ANYRES16, @ANYRES32], 0x1, 0xa08, &(0x7f0000008280)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 440.555373ms ago: executing program 5 (id=19467): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000200", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000014000480050003000200000005000300060000000800020002000000"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x7f, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x7f, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800850, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x16c, &(0x7f0000001200)="$eJzs27HrEmEYB/Dn0ur3q8U5Gg5amqSaGoswiA6KwqGmAmvREHI5m6S/pLW5vysIJ4fgjTrREi1Kzqv8fBYf+PLq87549/Ie3LPLr4aD8eTl+OE8TrIs2rcij0UWnTgTrajMAgD4nyxSik8ppXR+FqfvIqXUdEcAQN3s/wBwfH65/99sqDEAoDbO/wBwfB4/eXr/dlH0HuX5ScTHWdkv+9Vnld+9V/Su5d901qPmZdlvrfLrVZ7/mJ+NC8v8xtb8XFy9UuVfszsPio38Ygzqnz4AAAAchW6+svV83+3uyqvqu+cDG+f3dlxqH2waAMBvmEzfDJ+PRi9eK/6J4kP8FW38pJgu/1mH+9HPKaU/GP72fdVo4yu2T3G6Y52ziNjvm5u8KwGHsL7om+4EAAAAAAAAAAAAAADYpd73k1pNTw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2+hIAAP//+59KQA==") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000bc0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) sync() inotify_init() setns(r3, 0x24020000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000), 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x5) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @perf_bp={0x0, 0x9}, 0x804, 0x7, 0x8, 0x5, 0x8, 0x20002, 0xa, 0x0, 0x6, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @perf_bp={0x0, 0x9}, 0x804, 0x7, 0x8, 0x5, 0x8, 0x20002, 0xa, 0x0, 0x6, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) (async) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000001140)=ANY=[@ANYBLOB="7379020000005f753a6f626a6563745f723a6574635f72750000698f655f743a7330202f7573722f7362696e2f637570736420303030303030303030303030303030303030303100"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711204000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb58}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0xc0, 0xd0, &(0x7f0000000300)="6934bede5452f54a64dcf874538c3d8beaee446f04638eba501989c422079039e29844c4777ba037c1369b7f8a9f6bc66b0d1a48b4d242d6812e3efe48f72c2a012a70b59093c1617d57bf0845caa062d2cc4b188a6f9bac07709dbec298dfc6b4adf8408950f8c1cac6c4c076f396161e3e38215a28acf78720387b91a71b830e69e30e605452caab1e285ad737c4c01f17239b0d26052c48124f4c81b6ea9c310456547b68e50f76718514669af193718fb9f710f3d93007ea94b72b3f66ba", &(0x7f00000003c0)=""/208, 0x3, 0x0, 0x15, 0x5d, &(0x7f0000000240)="5ecdc2eb1d30fa674de99854e5eb1b9b6ec39c9f71", &(0x7f00000004c0)="d08447e365c5ab74d35848f4c862316cc3b9096930dd95a949aa564335bdcc27ec1b7a78d0d65ff88a511fdc11ee92273a60a0ce7ad936b4cd2c08e4a60b49ac571eed6cb012431d6cb17222e6cedc5dc7efec52f633c0505b6cda882f", 0x2, 0x0, 0x4}, 0x50) 278.652923ms ago: executing program 5 (id=19470): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3401"], 0x134}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x9, 0x7ff7fffd}, 0x40, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000007c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x3, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa84"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 275.118504ms ago: executing program 8 (id=19471): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xbf34}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r6, 0x540b, 0x1) fsmount(r0, 0x0, 0x8) 209.460902ms ago: executing program 8 (id=19472): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0xc3a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x627}, 0x0, 0x0, 0xffffffffffffffff, 0xa) process_mrelease(0xffffffffffffffff, 0x700000000000000) pidfd_send_signal(0xffffffffffffffff, 0x1c, 0x0, 0x0) (fail_nth: 1) 209.237953ms ago: executing program 8 (id=19473): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x80}]}, &(0x7f0000000240)='GPL\x00', 0x4}, 0x94) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setresuid(0xee01, 0xee01, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) syz_open_dev$hidraw(&(0x7f0000000000), 0x80000000, 0x80000) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 205.502263ms ago: executing program 8 (id=19474): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0xc3a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x627}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x0, 0x36, 0x1000, 0x3a, 0x9, 0xffffffff, 0xd39}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0xdd, 0x0, 0x2, 0x40, @rand_addr=' \x01\x00', @private0, 0x10, 0x80, 0xfffffff3, 0x1}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @multicast}, 0x10) process_mrelease(0xffffffffffffffff, 0x700000000000000) pidfd_send_signal(0xffffffffffffffff, 0x1c, 0x0, 0x0) 187.171465ms ago: executing program 7 (id=19475): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x28}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x57d9, 0x100, 0x2, 0x1cd}, &(0x7f0000000040), &(0x7f00000001c0)) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000000)={0xffff, 0x6}, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = inotify_init1(0x80000) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f{\xaav\xe1\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_w\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r9, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) 172.019897ms ago: executing program 8 (id=19476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa", 0xe9}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000540)="88e584953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a80000000000000000000000004127f8dcd8ec14c97c3f3dc8ca154700bd4f55ea0100fbdec6ed4e9339c33a50984867f7ce0e370b2eb2f3436228e0956ef0c667dc7dd32b0a39583886fb3ec144fa1154d83c2c", 0x75}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {0x0}], 0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000001c0)={0x5, &(0x7f00000007c0)=[{@fixed}, {}, {@fixed}, {@none}, {@none}]}) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 101.490907ms ago: executing program 8 (id=19477): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x54, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xfffffc01, @empty, 0x4}, @in6={0xa, 0x4e20, 0x5, @remote, 0x7}, @in6={0xa, 0x4e21, 0x9, @empty, 0x14}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0xd314}, 0x8) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 94.866347ms ago: executing program 7 (id=19478): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x188f, &(0x7f00000004c0)={0x0, 0x20aedf, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, 0x0, 0x44094) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./bus\x00', 0x2308000, &(0x7f0000000040)=ANY=[], 0x0, 0x2b9, &(0x7f0000000280)="$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") r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x800, 0x0, 0x0, {0xa, 0x10, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x91) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r9, &(0x7f0000000180), 0x4000190, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x801400, 0x0) r11 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r11, 0x29, 0x43, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x212, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000540)={0x0, 0x15, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) 0s ago: executing program 2 (id=19479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x2300, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) kernel console output (not intermixed with test programs): STRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18181,pid=27854,uid=0 [ 812.413539][T29944] Memory cgroup out of memory: Killed process 27854 (syz.2.18181) total-vm:94000kB, anon-rss:1236kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 812.639867][T30269] validate_nla: 2 callbacks suppressed [ 812.639965][T30269] netlink: 'syz.7.18943': attribute type 10 has an invalid length. [ 812.644395][T30269] team0: Failed to send options change via netlink (err -105) [ 812.644419][T30269] team0: Port device dummy0 added [ 812.648747][T30269] netlink: 'syz.7.18943': attribute type 10 has an invalid length. [ 812.649402][T30269] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 812.651738][T30269] team0: Failed to send options change via netlink (err -105) [ 812.651830][T30269] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 812.652173][T30269] team0: Port device dummy0 removed [ 812.655557][T30269] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 812.765087][ T29] audit: type=1326 audit(1041.814:190722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30273 comm="syz.8.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 812.765120][ T29] audit: type=1326 audit(1041.814:190723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30273 comm="syz.8.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 812.771157][ T29] audit: type=1326 audit(1041.823:190724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30273 comm="syz.8.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 812.771358][ T29] audit: type=1326 audit(1041.823:190725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30273 comm="syz.8.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 812.771490][ T29] audit: type=1326 audit(1041.823:190726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30273 comm="syz.8.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 812.775357][T29914] syz.2.18827 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 812.775391][T29914] CPU: 1 UID: 0 PID: 29914 Comm: syz.2.18827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 812.775460][T29914] Tainted: [W]=WARN [ 812.775468][T29914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 812.775481][T29914] Call Trace: [ 812.775488][T29914] [ 812.775495][T29914] __dump_stack+0x1d/0x30 [ 812.775563][T29914] dump_stack_lvl+0x95/0xd0 [ 812.775584][T29914] dump_stack+0x15/0x1b [ 812.775602][T29914] dump_header+0x80/0x240 [ 812.775691][T29914] oom_kill_process+0x295/0x350 [ 812.775713][T29914] out_of_memory+0x97d/0xb80 [ 812.775737][T29914] try_charge_memcg+0x62e/0xa10 [ 812.775862][T29914] charge_memcg+0x51/0xc0 [ 812.775961][T29914] __mem_cgroup_charge+0x28/0xb0 [ 812.776018][T29914] shmem_get_folio_gfp+0x47b/0xd60 [ 812.776049][T29914] shmem_write_begin+0xfc/0x1f0 [ 812.776077][T29914] generic_perform_write+0x183/0x490 [ 812.776123][T29914] shmem_file_write_iter+0xc5/0xf0 [ 812.776218][T29914] __kernel_write_iter+0x319/0x590 [ 812.776237][T29914] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 812.776274][T29914] dump_user_range+0x63e/0x8f0 [ 812.776355][T29914] elf_core_dump+0x21a2/0x2330 [ 812.776387][T29914] ? 0xffffffffff600000 [ 812.776468][T29914] coredump_write+0xacf/0xdf0 [ 812.776496][T29914] vfs_coredump+0x26bc/0x3120 [ 812.776526][T29914] ? __memcg_slab_free_hook+0xbc/0x230 [ 812.776559][T29914] ? proc_coredump_connector+0x160/0x2b0 [ 812.776613][T29914] ? kmem_cache_free+0xdf/0x380 [ 812.776642][T29914] get_signal+0xd7b/0xf60 [ 812.776680][T29914] arch_do_signal_or_restart+0x96/0x450 [ 812.776712][T29914] irqentry_exit+0xf7/0x510 [ 812.776744][T29914] ? force_sig+0x89/0xb0 [ 812.776844][T29914] exc_general_protection+0x153/0x1e0 [ 812.776875][T29914] asm_exc_general_protection+0x26/0x30 [ 812.776959][T29914] RIP: 0033:0x7f543bf7acc1 [ 812.776974][T29914] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 812.776990][T29914] RSP: 002b:0000200000000380 EFLAGS: 00010217 [ 812.777006][T29914] RAX: 0000000000000000 RBX: 00007f543c1f6090 RCX: 00007f543bf7acb9 [ 812.777090][T29914] RDX: 0000200000000100 RSI: 0000200000000380 RDI: 000000000a000000 [ 812.777133][T29914] RBP: 00007f543bfe8bf7 R08: 00002000000001c0 R09: 00002000000001c0 [ 812.777147][T29914] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 812.777162][T29914] R13: 00007f543c1f6128 R14: 00007f543c1f6090 R15: 00007fffbeffb078 [ 812.777178][T29914] [ 812.777218][T29914] memory: usage 307200kB, limit 307200kB, failcnt 60835 [ 812.777270][T29914] memory+swap: usage 367048kB, limit 9007199254740988kB, failcnt 0 [ 812.777286][T29914] kmem: usage 5716kB, limit 9007199254740988kB, failcnt 0 [ 812.777301][T29914] Memory cgroup stats for /syz2: [ 812.777613][T29914] cache 308633600 [ 812.777622][T29914] rss 86016 [ 812.777628][T29914] shmem 308633600 [ 812.777635][T29914] mapped_file 0 [ 812.777642][T29914] dirty 0 [ 812.777650][T29914] writeback 0 [ 812.777658][T29914] workingset_refault_anon 2966 [ 812.777741][T29914] workingset_refault_file 25038 [ 812.777750][T29914] swap 61284352 [ 812.777759][T29914] swapcached 0 [ 812.777767][T29914] pgpgin 1152917 [ 812.777775][T29914] pgpgout 1077546 [ 812.777784][T29914] pgfault 882319 [ 812.777792][T29914] pgmajfault 589 [ 812.777801][T29914] inactive_anon 61054976 [ 812.777814][T29914] active_anon 247459840 [ 812.777822][T29914] inactive_file 0 [ 812.777875][T29914] active_file 0 [ 812.777882][T29914] unevictable 0 [ 812.777891][T29914] hierarchical_memory_limit 314572800 [ 812.777900][T29914] hierarchical_memsw_limit 9223372036854771712 [ 812.777909][T29914] total_cache 308633600 [ 812.777918][T29914] total_rss 86016 [ 812.777927][T29914] total_shmem 308633600 [ 812.778005][T29914] total_mapped_file 0 [ 812.778014][T29914] total_dirty 0 [ 812.778022][T29914] total_writeback 0 [ 812.778031][T29914] total_workingset_refault_anon 2966 [ 812.778039][T29914] total_workingset_refault_file 25038 [ 812.778047][T29914] total_swap 61284352 [ 812.778054][T29914] total_swapcached 0 [ 812.778088][T29914] total_pgpgin 1152917 [ 812.778095][T29914] total_pgpgout 1077546 [ 812.778103][T29914] total_pgfault 882319 [ 812.778112][T29914] total_pgmajfault 589 [ 812.778121][T29914] total_inactive_anon 61054976 [ 812.778195][T29914] total_active_anon 247459840 [ 812.778205][T29914] total_inactive_file 0 [ 812.778214][T29914] total_active_file 0 [ 812.778223][T29914] total_unevictable 0 [ 812.778232][T29914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29961,uid=0 [ 812.778361][T29914] Memory cgroup out of memory: Killed process 29961 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:55040kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 813.243136][T30309] netlink: 'syz.7.18949': attribute type 1 has an invalid length. [ 813.464303][T30311] macvlan2: entered promiscuous mode [ 814.081448][T30309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.145958][T26464] syz-executor invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 814.156781][T26464] CPU: 1 UID: 0 PID: 26464 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 814.156820][T26464] Tainted: [W]=WARN [ 814.156828][T26464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 814.156841][T26464] Call Trace: [ 814.156848][T26464] [ 814.156856][T26464] __dump_stack+0x1d/0x30 [ 814.156880][T26464] dump_stack_lvl+0x95/0xd0 [ 814.156937][T26464] dump_stack+0x15/0x1b [ 814.156958][T26464] dump_header+0x80/0x240 [ 814.156981][T26464] oom_kill_process+0x295/0x350 [ 814.157049][T26464] out_of_memory+0x97d/0xb80 [ 814.157070][T26464] try_charge_memcg+0x62e/0xa10 [ 814.157105][T26464] obj_cgroup_charge_pages+0xa6/0x150 [ 814.157227][T26464] obj_cgroup_charge_account+0x73/0x1a0 [ 814.157288][T26464] ? __mutex_unlock_slowpath+0x1fb/0x290 [ 814.157321][T26464] obj_cgroup_charge+0xe/0x20 [ 814.157365][T26464] pcpu_alloc_noprof+0x1da/0x1210 [ 814.157516][T26464] ? pcpu_memcg_post_alloc_hook+0xf3/0x170 [ 814.157542][T26464] ? pcpu_alloc_noprof+0xd18/0x1210 [ 814.157569][T26464] ? mm_init+0x4bf/0x640 [ 814.157604][T26464] __percpu_counter_init_many+0x3e/0x310 [ 814.157709][T26464] mm_init+0x505/0x640 [ 814.157807][T26464] copy_mm+0x100/0x370 [ 814.157826][T26464] copy_process+0xcbd/0x1f10 [ 814.157989][T26464] kernel_clone+0x16b/0x5b0 [ 814.158013][T26464] __x64_sys_clone+0x143/0x180 [ 814.158037][T26464] x64_sys_call+0x12d0/0x3000 [ 814.158061][T26464] do_syscall_64+0xc0/0x2a0 [ 814.158159][T26464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.158185][T26464] RIP: 0033:0x7f543bfa3752 [ 814.158202][T26464] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 814.158219][T26464] RSP: 002b:00007fffbeffb290 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 814.158256][T26464] RAX: ffffffffffffffda RBX: 00007fffbeffb290 RCX: 00007f543bfa3752 [ 814.158273][T26464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 814.158286][T26464] RBP: 00007fffbeffb41c R08: 0000000000000000 R09: 0000000000000001 [ 814.158336][T26464] R10: 000055556518d7d0 R11: 0000000000000246 R12: 0000000000000000 [ 814.158375][T26464] R13: 00000000000927c0 R14: 00000000000be26b R15: 00007fffbeffb470 [ 814.158393][T26464] [ 814.158399][T26464] memory: usage 304840kB, limit 307200kB, failcnt 62752 [ 814.389009][T26464] memory+swap: usage 342484kB, limit 9007199254740988kB, failcnt 0 [ 814.396986][T26464] kmem: usage 5660kB, limit 9007199254740988kB, failcnt 0 [ 814.404093][T26464] Memory cgroup stats for /syz2: [ 814.513157][T30335] loop4: detected capacity change from 0 to 512 [ 814.541058][T30330] netlink: 184 bytes leftover after parsing attributes in process `syz.7.18955'. [ 814.562846][T30335] EXT4-fs: Ignoring removed mblk_io_submit option [ 814.587390][T30335] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 814.657311][T30335] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 814.672411][T30353] netlink: 136 bytes leftover after parsing attributes in process `syz.5.18959'. [ 814.681661][T30353] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 814.739667][T30359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18961'. [ 814.757937][T30359] hsr_slave_1 (unregistering): left promiscuous mode [ 814.810161][T30367] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18963'. [ 815.001722][T30392] lo speed is unknown, defaulting to 1000 [ 815.025940][T30392] lo speed is unknown, defaulting to 1000 [ 815.079732][T26464] cache 308826112 [ 815.083474][T26464] rss 86016 [ 815.086674][T26464] shmem 308826112 [ 815.090414][T26464] mapped_file 0 [ 815.094210][T26464] dirty 0 [ 815.097135][T26464] writeback 0 [ 815.100421][T26464] workingset_refault_anon 2966 [ 815.105198][T26464] workingset_refault_file 25038 [ 815.110041][T26464] swap 61280256 [ 815.113511][T26464] swapcached 4096 [ 815.117137][T26464] pgpgin 1161602 [ 815.120676][T26464] pgpgout 1086183 [ 815.124413][T26464] pgfault 882865 [ 815.127949][T26464] pgmajfault 589 [ 815.131496][T26464] inactive_anon 98213888 [ 815.135862][T26464] active_anon 210702336 [ 815.140014][T26464] inactive_file 0 [ 815.143735][T26464] active_file 0 [ 815.147184][T26464] unevictable 0 [ 815.150636][T26464] hierarchical_memory_limit 314572800 [ 815.156039][T26464] hierarchical_memsw_limit 9223372036854771712 [ 815.162211][T26464] total_cache 308826112 [ 815.166381][T26464] total_rss 86016 [ 815.170003][T26464] total_shmem 308826112 [ 815.174218][T26464] total_mapped_file 0 [ 815.178249][T26464] total_dirty 0 [ 815.180529][T30406] syzkaller0: entered promiscuous mode [ 815.181698][T26464] total_writeback 0 [ 815.181708][T26464] total_workingset_refault_anon 2966 [ 815.181764][T26464] total_workingset_refault_file 25038 [ 815.187202][T30406] syzkaller0: entered allmulticast mode [ 815.207173][T26464] total_swap 61280256 [ 815.211218][T26464] total_swapcached 4096 [ 815.215368][T26464] total_pgpgin 1161602 [ 815.219475][T26464] total_pgpgout 1086183 [ 815.223626][T26464] total_pgfault 882865 [ 815.227695][T26464] total_pgmajfault 589 [ 815.231820][T26464] total_inactive_anon 98213888 [ 815.236707][T26464] total_active_anon 210702336 [ 815.241414][T26464] total_inactive_file 0 [ 815.245600][T26464] total_active_file 0 [ 815.249577][T26464] total_unevictable 0 [ 815.253592][T26464] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29968,uid=0 [ 815.268504][T26464] Memory cgroup out of memory: Killed process 29968 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 815.348859][T30414] loop7: detected capacity change from 0 to 128 [ 815.372121][T30414] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 815.444281][T29205] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 815.843493][T30446] loop5: detected capacity change from 0 to 512 [ 815.853212][T30446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 815.879121][T30448] loop4: detected capacity change from 0 to 512 [ 815.896820][T30446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.937100][T30448] EXT4-fs: Ignoring removed mblk_io_submit option [ 816.008397][T30448] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 816.087003][T30448] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 816.120166][T21913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.356366][T30461] netlink: 888 bytes leftover after parsing attributes in process `syz.8.18985'. [ 816.379516][T30461] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18985'. [ 816.389161][T30461] netlink: 'syz.8.18985': attribute type 29 has an invalid length. [ 816.763574][T30480] netlink: 'syz.8.18992': attribute type 6 has an invalid length. [ 816.771956][T30480] netlink: 'syz.8.18992': attribute type 6 has an invalid length. [ 816.810504][T30480] infiniband : set down [ 816.814810][T30480] infiniband : added ipvlan0 [ 816.825883][T30480] RDS/IB: : added [ 816.829645][T30480] smc: adding ib device  with port count 1 [ 816.835732][T30480] smc: ib device  port 1 has no pnetid [ 816.835749][T30482] netlink: 140 bytes leftover after parsing attributes in process `syz.8.18992'. [ 816.866766][T30485] loop5: detected capacity change from 0 to 512 [ 816.891477][T30485] EXT4-fs: Ignoring removed mblk_io_submit option [ 816.917017][T30485] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 816.989455][T30485] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 817.023214][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 817.023229][ T29] audit: type=1326 audit(1045.798:190875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.5.18993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 817.134058][ T29] audit: type=1326 audit(1045.826:190876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.5.18993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 817.157329][ T29] audit: type=1326 audit(1045.826:190877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.5.18993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 817.180635][ T29] audit: type=1326 audit(1045.826:190878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30484 comm="syz.5.18993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 817.224547][T30490] netlink: 'syz.5.18994': attribute type 1 has an invalid length. [ 817.269352][T30490] 8021q: adding VLAN 0 to HW filter on device bond8 [ 817.348218][ T29] audit: type=1326 audit(1046.098:190879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30496 comm="syz.5.18997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x0 [ 817.377628][T30494] netlink: 'syz.4.18996': attribute type 1 has an invalid length. [ 817.458134][ T30] oom_reaper: reaped process 29968 (syz.2.18827), now anon-rss:64kB, file-rss:48984kB, shmem-rss:0kB [ 817.475368][T29913] syz.2.18827 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 817.485078][T29913] CPU: 1 UID: 0 PID: 29913 Comm: syz.2.18827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 817.485166][T29913] Tainted: [W]=WARN [ 817.485173][T29913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 817.485185][T29913] Call Trace: [ 817.485194][T29913] [ 817.485211][T29913] __dump_stack+0x1d/0x30 [ 817.485236][T29913] dump_stack_lvl+0x95/0xd0 [ 817.485266][T29913] dump_stack+0x15/0x1b [ 817.485287][T29913] dump_header+0x80/0x240 [ 817.485306][T29913] oom_kill_process+0x295/0x350 [ 817.485383][T29913] out_of_memory+0x97d/0xb80 [ 817.485404][T29913] try_charge_memcg+0x62e/0xa10 [ 817.485513][T29913] charge_memcg+0x51/0xc0 [ 817.485541][T29913] __mem_cgroup_charge+0x28/0xb0 [ 817.485639][T29913] shmem_get_folio_gfp+0x47b/0xd60 [ 817.485671][T29913] shmem_write_begin+0xfc/0x1f0 [ 817.485715][T29913] generic_perform_write+0x183/0x490 [ 817.485745][T29913] ? __mark_inode_dirty+0x1af/0x740 [ 817.485780][T29913] shmem_file_write_iter+0xc5/0xf0 [ 817.485835][T29913] __kernel_write_iter+0x319/0x590 [ 817.485853][T29913] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 817.485929][T29913] dump_user_range+0x63e/0x8f0 [ 817.485956][T29913] elf_core_dump+0x21a2/0x2330 [ 817.485985][T29913] ? 0xffffffffff600000 [ 817.486008][T29913] coredump_write+0xacf/0xdf0 [ 817.486107][T29913] vfs_coredump+0x26bc/0x3120 [ 817.486142][T29913] ? __memcg_slab_free_hook+0xbc/0x230 [ 817.486177][T29913] ? proc_coredump_connector+0x160/0x2b0 [ 817.486204][T29913] ? kmem_cache_free+0xdf/0x380 [ 817.486303][T29913] get_signal+0xd7b/0xf60 [ 817.486339][T29913] arch_do_signal_or_restart+0x96/0x450 [ 817.486424][T29913] irqentry_exit+0xf7/0x510 [ 817.486503][T29913] ? force_sig+0x89/0xb0 [ 817.486525][T29913] exc_general_protection+0x153/0x1e0 [ 817.486603][T29913] asm_exc_general_protection+0x26/0x30 [ 817.486624][T29913] RIP: 0033:0x7f543bf7acc1 [ 817.486638][T29913] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 817.486719][T29913] RSP: 002b:0000200000000380 EFLAGS: 00010217 [ 817.486735][T29913] RAX: 0000000000000000 RBX: 00007f543c1f6090 RCX: 00007f543bf7acb9 [ 817.486748][T29913] RDX: 0000200000000100 RSI: 0000200000000380 RDI: 000000000a000000 [ 817.486761][T29913] RBP: 00007f543bfe8bf7 R08: 00002000000001c0 R09: 00002000000001c0 [ 817.486774][T29913] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 817.486814][T29913] R13: 00007f543c1f6128 R14: 00007f543c1f6090 R15: 00007fffbeffb078 [ 817.486836][T29913] [ 817.617500][T30494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 817.618324][T29913] memory: usage 307200kB, limit 307200kB, failcnt 66451 [ 817.750300][T29913] memory+swap: usage 338636kB, limit 9007199254740988kB, failcnt 0 [ 817.758224][T29913] kmem: usage 5512kB, limit 9007199254740988kB, failcnt 0 [ 817.765347][T29913] Memory cgroup stats for /syz2: [ 817.766836][T29913] cache 280576000 [ 817.775584][T29913] rss 81920 [ 817.778686][T29913] shmem 280576000 [ 817.782305][T29913] mapped_file 0 [ 817.785805][T29913] dirty 0 [ 817.788729][T29913] writeback 0 [ 817.792008][T29913] workingset_refault_anon 2966 [ 817.797125][T29913] workingset_refault_file 25038 [ 817.801976][T29913] swap 61071360 [ 817.805436][T29913] swapcached 4096 [ 817.809107][T29913] pgpgin 1161756 [ 817.812641][T29913] pgpgout 1093235 [ 817.816332][T29913] pgfault 882875 [ 817.819951][T29913] pgmajfault 589 [ 817.823628][T29913] inactive_anon 95309824 [ 817.828011][T29913] active_anon 185294848 [ 817.832209][T29913] inactive_file 0 [ 817.835832][T29913] active_file 0 [ 817.839566][T29913] unevictable 0 [ 817.843053][T29913] hierarchical_memory_limit 314572800 [ 817.848495][T29913] hierarchical_memsw_limit 9223372036854771712 [ 817.854675][T29913] total_cache 280576000 [ 817.858821][T29913] total_rss 81920 [ 817.862479][T29913] total_shmem 280576000 [ 817.866622][T29913] total_mapped_file 0 [ 817.870710][T29913] total_dirty 0 [ 817.874163][T29913] total_writeback 0 [ 817.877957][T29913] total_workingset_refault_anon 2966 [ 817.883277][T29913] total_workingset_refault_file 25038 [ 817.888676][T29913] total_swap 61071360 [ 817.892733][T29913] total_swapcached 4096 [ 817.896961][T29913] total_pgpgin 1161756 [ 817.901154][T29913] total_pgpgout 1093235 [ 817.905374][T29913] total_pgfault 882875 [ 817.909523][T29913] total_pgmajfault 589 [ 817.911426][T30508] loop7: detected capacity change from 0 to 128 [ 817.913597][T29913] total_inactive_anon 95309824 [ 817.913609][T29913] total_active_anon 185294848 [ 817.929280][T29913] total_inactive_file 0 [ 817.933432][T29913] total_active_file 0 [ 817.937443][T29913] total_unevictable 0 [ 817.941486][T29913] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29966,uid=0 [ 817.956410][T29913] Memory cgroup out of memory: Killed process 29966 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 817.985358][ T29] audit: type=1400 audit(1046.696:190880): avc: denied { ioctl } for pid=30507 comm="syz.7.19001" path="socket:[219892]" dev="sockfs" ino=219892 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 818.244914][ T29] audit: type=1326 audit(1046.883:190881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30513 comm="syz.4.19003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8310cacb9 code=0x7ffc0000 [ 818.268314][ T29] audit: type=1326 audit(1046.883:190882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30513 comm="syz.4.19003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8310cacb9 code=0x7ffc0000 [ 818.291582][ T29] audit: type=1326 audit(1046.883:190883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30513 comm="syz.4.19003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8310cacb9 code=0x7ffc0000 [ 818.314949][ T29] audit: type=1326 audit(1046.883:190884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30513 comm="syz.4.19003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd8310cacb9 code=0x7ffc0000 [ 818.391015][T30523] loop5: detected capacity change from 0 to 512 [ 818.401501][T30524] loop7: detected capacity change from 0 to 512 [ 818.420517][T30523] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 818.430873][T30523] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.19005: iget: bad i_size value: 12154757448730 [ 818.444220][T30523] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.19005: couldn't read orphan inode 13 (err -117) [ 818.467957][T30523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.482702][T30524] EXT4-fs: Ignoring removed mblk_io_submit option [ 818.489804][T30524] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 818.503028][T30528] netlink: 'syz.8.19007': attribute type 1 has an invalid length. [ 818.536452][T30524] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -6 [ 818.546008][T30523] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 818.558906][T30523] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 818.568703][T30528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 818.575912][T30523] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 818.598507][T30528] macvlan3: entered promiscuous mode [ 818.670168][T21913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.912653][T30547] netlink: 91 bytes leftover after parsing attributes in process `syz.8.19013'. [ 819.109476][T30541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19012'. [ 819.178413][T30541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19012'. [ 819.203969][T29972] syz.2.18827 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 819.213712][T29972] CPU: 0 UID: 0 PID: 29972 Comm: syz.2.18827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 819.213744][T29972] Tainted: [W]=WARN [ 819.213753][T29972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 819.213787][T29972] Call Trace: [ 819.213794][T29972] [ 819.213804][T29972] __dump_stack+0x1d/0x30 [ 819.213832][T29972] dump_stack_lvl+0x95/0xd0 [ 819.213920][T29972] dump_stack+0x15/0x1b [ 819.214018][T29972] dump_header+0x80/0x240 [ 819.214155][T29972] oom_kill_process+0x295/0x350 [ 819.214181][T29972] out_of_memory+0x97d/0xb80 [ 819.214204][T29972] try_charge_memcg+0x62e/0xa10 [ 819.214366][T29972] charge_memcg+0x51/0xc0 [ 819.214394][T29972] __mem_cgroup_charge+0x28/0xb0 [ 819.214429][T29972] shmem_get_folio_gfp+0x47b/0xd60 [ 819.214535][T29972] shmem_write_begin+0xfc/0x1f0 [ 819.214559][T29972] generic_perform_write+0x183/0x490 [ 819.214588][T29972] shmem_file_write_iter+0xc5/0xf0 [ 819.214657][T29972] __kernel_write_iter+0x319/0x590 [ 819.214679][T29972] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 819.214712][T29972] dump_user_range+0x63e/0x8f0 [ 819.214750][T29972] elf_core_dump+0x21a2/0x2330 [ 819.214861][T29972] ? 0xffffffffff600000 [ 819.214889][T29972] coredump_write+0xacf/0xdf0 [ 819.214924][T29972] vfs_coredump+0x26bc/0x3120 [ 819.214952][T29972] ? __memcg_slab_free_hook+0xbc/0x230 [ 819.215035][T29972] ? proc_coredump_connector+0x160/0x2b0 [ 819.215063][T29972] ? kmem_cache_free+0xdf/0x380 [ 819.215089][T29972] get_signal+0xd7b/0xf60 [ 819.215200][T29972] arch_do_signal_or_restart+0x96/0x450 [ 819.215270][T29972] irqentry_exit+0xf7/0x510 [ 819.215304][T29972] ? force_sig+0x89/0xb0 [ 819.215407][T29972] exc_general_protection+0x153/0x1e0 [ 819.215440][T29972] asm_exc_general_protection+0x26/0x30 [ 819.215460][T29972] RIP: 0033:0x7f543bf7acc1 [ 819.215475][T29972] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 819.215492][T29972] RSP: 002b:0000200000000380 EFLAGS: 00010217 [ 819.215514][T29972] RAX: 0000000000000000 RBX: 00007f543c1f6090 RCX: 00007f543bf7acb9 [ 819.215531][T29972] RDX: 0000200000000100 RSI: 0000200000000380 RDI: 000000000a000000 [ 819.215588][T29972] RBP: 00007f543bfe8bf7 R08: 00002000000001c0 R09: 00002000000001c0 [ 819.215604][T29972] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 819.215618][T29972] R13: 00007f543c1f6128 R14: 00007f543c1f6090 R15: 00007fffbeffb078 [ 819.215636][T29972] [ 819.215642][T29972] memory: usage 307200kB, limit 307200kB, failcnt 66958 [ 819.468022][T29972] memory+swap: usage 366664kB, limit 9007199254740988kB, failcnt 0 [ 819.475944][T29972] kmem: usage 5344kB, limit 9007199254740988kB, failcnt 0 [ 819.483048][T29972] Memory cgroup stats for /syz2: [ 819.484406][T29972] cache 308858880 [ 819.493002][T29972] rss 229376 [ 819.496293][T29972] shmem 308858880 [ 819.499919][T29972] mapped_file 0 [ 819.503370][T29972] dirty 0 [ 819.506437][T29972] writeback 0 [ 819.509749][T29972] workingset_refault_anon 2970 [ 819.514557][T29972] workingset_refault_file 25038 [ 819.519444][T29972] swap 60891136 [ 819.522892][T29972] swapcached 12288 [ 819.526653][T29972] pgpgin 1179162 [ 819.530235][T29972] pgpgout 1103698 [ 819.533875][T29972] pgfault 884132 [ 819.537418][T29972] pgmajfault 590 [ 819.541047][T29972] inactive_anon 216424448 [ 819.545412][T29972] active_anon 92151808 [ 819.549522][T29972] inactive_file 0 [ 819.553191][T29972] active_file 0 [ 819.556638][T29972] unevictable 0 [ 819.560139][T29972] hierarchical_memory_limit 314572800 [ 819.565517][T29972] hierarchical_memsw_limit 9223372036854771712 [ 819.571701][T29972] total_cache 308858880 [ 819.575853][T29972] total_rss 229376 [ 819.579571][T29972] total_shmem 308858880 [ 819.583790][T29972] total_mapped_file 0 [ 819.587835][T29972] total_dirty 0 [ 819.591288][T29972] total_writeback 0 [ 819.595211][T29972] total_workingset_refault_anon 2970 [ 819.600519][T29972] total_workingset_refault_file 25038 [ 819.605948][T29972] total_swap 60891136 [ 819.609933][T29972] total_swapcached 12288 [ 819.614227][T29972] total_pgpgin 1179162 [ 819.618286][T29972] total_pgpgout 1103698 [ 819.622431][T29972] total_pgfault 884132 [ 819.626576][T29972] total_pgmajfault 590 [ 819.630632][T29972] total_inactive_anon 216424448 [ 819.635486][T29972] total_active_anon 92151808 [ 819.640064][T29972] total_inactive_file 0 [ 819.644203][T29972] total_active_file 0 [ 819.648270][T29972] total_unevictable 0 [ 819.652245][T29972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29915,uid=0 [ 819.667061][T29972] Memory cgroup out of memory: Killed process 29915 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 819.728616][T30557] loop5: detected capacity change from 0 to 128 [ 819.738869][T30559] loop4: detected capacity change from 0 to 512 [ 819.765256][T30559] EXT4-fs: Ignoring removed mblk_io_submit option [ 819.783476][T30559] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 819.836712][T30559] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 819.838951][T30566] netlink: 'syz.5.19020': attribute type 10 has an invalid length. [ 819.854287][T30566] team0: Failed to send options change via netlink (err -105) [ 819.861889][T30566] team0: Port device dummy0 added [ 819.872730][T30566] netlink: 'syz.5.19020': attribute type 10 has an invalid length. [ 819.881309][T30566] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 819.899658][T30566] team0: Failed to send options change via netlink (err -105) [ 819.907254][T30566] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 819.916190][T30566] team0: Port device dummy0 removed [ 819.922959][T30566] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 819.986742][T30572] loop5: detected capacity change from 0 to 512 [ 820.004721][T30570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 820.030374][T30572] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 820.056468][T30572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.074596][T30570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.178962][T21913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.279928][T24246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.451700][T30592] FAT-fs (loop5): bogus logical sector size 2303 [ 820.458106][T30592] FAT-fs (loop5): Can't find a valid FAT filesystem [ 820.487096][T30598] __nla_validate_parse: 1 callbacks suppressed [ 820.487116][T30598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19031'. [ 820.564727][T30605] netlink: 168 bytes leftover after parsing attributes in process `syz.5.19032'. [ 820.635388][T30610] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 820.673615][T30612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 820.724531][T30612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.897332][T30632] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19043'. [ 820.919256][T24246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.941981][T30639] netlink: 'syz.8.19046': attribute type 20 has an invalid length. [ 820.950022][T30639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19046'. [ 820.987699][ T41] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.989018][T30639] netlink: 'syz.8.19046': attribute type 20 has an invalid length. [ 820.998641][T30643] set_capacity_and_notify: 4 callbacks suppressed [ 820.998659][T30643] loop7: detected capacity change from 0 to 512 [ 821.004394][T30639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19046'. [ 821.034777][ T41] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.054943][ T41] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.073362][T30645] loop5: detected capacity change from 0 to 2048 [ 821.087114][T30643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 821.099667][ T41] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.162917][T30643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.185520][T30655] netlink: 'syz.8.19051': attribute type 10 has an invalid length. [ 821.195067][T30655] team0: Failed to send options change via netlink (err -105) [ 821.200303][T30657] loop4: detected capacity change from 0 to 512 [ 821.202885][T30655] team0: Port device dummy0 added [ 821.217696][T30655] netlink: 'syz.8.19051': attribute type 10 has an invalid length. [ 821.226184][T30655] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 821.238247][T30655] team0: Failed to send options change via netlink (err -105) [ 821.245801][T30655] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 821.254799][T30655] team0: Port device dummy0 removed [ 821.261800][T30655] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 821.287503][T16606] Alternate GPT is invalid, using primary GPT. [ 821.294183][T16606] loop5: p2 p3 p7 [ 821.294332][T30657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 821.314776][T30645] Alternate GPT is invalid, using primary GPT. [ 821.321212][T30645] loop5: p2 p3 p7 [ 821.332802][T30657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.523024][T29205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.572544][T17213] udevd[17213]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 821.584705][T24246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.593849][T17212] udevd[17212]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 821.594247][T16606] udevd[16606]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 821.656872][T17210] udevd[17210]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 821.668522][T17213] udevd[17213]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 821.680303][T16606] udevd[16606]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 821.698723][T30674] loop4: detected capacity change from 0 to 512 [ 821.711424][T17213] udevd[17213]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 821.718025][T30676] netlink: 'syz.7.19059': attribute type 10 has an invalid length. [ 821.722817][T17210] udevd[17210]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 821.741589][T30676] bond0: (slave dummy0): Releasing backup interface [ 821.751367][T30676] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 821.760188][T30676] team0: Failed to send options change via netlink (err -105) [ 821.767722][T30676] team0: Port device dummy0 added [ 821.773845][T30674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 821.791715][T30676] netlink: 'syz.7.19059': attribute type 10 has an invalid length. [ 821.800604][T30676] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 821.806619][T30674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.822731][T30676] team0: Failed to send options change via netlink (err -105) [ 821.830325][T30676] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 821.839263][T30676] team0: Port device dummy0 removed [ 821.846462][T30676] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 821.857295][T29927] syz.2.18827 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 821.867099][T29927] CPU: 0 UID: 0 PID: 29927 Comm: syz.2.18827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 821.867134][T29927] Tainted: [W]=WARN [ 821.867179][T29927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 821.867192][T29927] Call Trace: [ 821.867199][T29927] [ 821.867209][T29927] __dump_stack+0x1d/0x30 [ 821.867236][T29927] dump_stack_lvl+0x95/0xd0 [ 821.867255][T29927] dump_stack+0x15/0x1b [ 821.867296][T29927] dump_header+0x80/0x240 [ 821.867319][T29927] oom_kill_process+0x295/0x350 [ 821.867342][T29927] out_of_memory+0x97d/0xb80 [ 821.867400][T29927] try_charge_memcg+0x62e/0xa10 [ 821.867441][T29927] charge_memcg+0x51/0xc0 [ 821.867518][T29927] __mem_cgroup_charge+0x28/0xb0 [ 821.867552][T29927] shmem_get_folio_gfp+0x47b/0xd60 [ 821.867646][T29927] shmem_write_begin+0xfc/0x1f0 [ 821.867732][T29927] generic_perform_write+0x183/0x490 [ 821.867767][T29927] shmem_file_write_iter+0xc5/0xf0 [ 821.867834][T29927] __kernel_write_iter+0x319/0x590 [ 821.867878][T29927] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 821.867956][T29927] dump_user_range+0x63e/0x8f0 [ 821.867983][T29927] elf_core_dump+0x21a2/0x2330 [ 821.868047][T29927] ? 0xffffffffff600000 [ 821.868074][T29927] coredump_write+0xacf/0xdf0 [ 821.868169][T29927] vfs_coredump+0x26bc/0x3120 [ 821.868231][T29927] ? __memcg_slab_free_hook+0xbc/0x230 [ 821.868266][T29927] ? proc_coredump_connector+0x160/0x2b0 [ 821.868304][T29927] ? kmem_cache_free+0xdf/0x380 [ 821.868403][T29927] get_signal+0xd7b/0xf60 [ 821.868435][T29927] arch_do_signal_or_restart+0x96/0x450 [ 821.868467][T29927] irqentry_exit+0xf7/0x510 [ 821.868495][T29927] ? force_sig+0x89/0xb0 [ 821.868584][T29927] exc_general_protection+0x153/0x1e0 [ 821.868615][T29927] asm_exc_general_protection+0x26/0x30 [ 821.868636][T29927] RIP: 0033:0x7f543bf7acc1 [ 821.868651][T29927] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 821.868692][T29927] RSP: 002b:0000200000000380 EFLAGS: 00010217 [ 821.868708][T29927] RAX: 0000000000000000 RBX: 00007f543c1f6090 RCX: 00007f543bf7acb9 [ 821.868721][T29927] RDX: 0000200000000100 RSI: 0000200000000380 RDI: 000000000a000000 [ 821.868756][T29927] RBP: 00007f543bfe8bf7 R08: 00002000000001c0 R09: 00002000000001c0 [ 821.868771][T29927] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 821.868785][T29927] R13: 00007f543c1f6128 R14: 00007f543c1f6090 R15: 00007fffbeffb078 [ 821.868802][T29927] [ 821.868814][T29927] memory: usage 307200kB, limit 307200kB, failcnt 69320 [ 822.120424][T29927] memory+swap: usage 360084kB, limit 9007199254740988kB, failcnt 0 [ 822.128378][T29927] kmem: usage 5304kB, limit 9007199254740988kB, failcnt 0 [ 822.135562][T29927] Memory cgroup stats for /syz2: [ 822.135812][T29927] cache 306651136 [ 822.144392][T29927] rss 225280 [ 822.147630][T29927] shmem 306651136 [ 822.151331][T29927] mapped_file 0 [ 822.154867][T29927] dirty 0 [ 822.157870][T29927] writeback 12288 [ 822.161490][T29927] workingset_refault_anon 2970 [ 822.166318][T29927] workingset_refault_file 25038 [ 822.171197][T29927] swap 56377344 [ 822.174644][T29927] swapcached 24576 [ 822.178347][T29927] pgpgin 1179169 [ 822.181996][T29927] pgpgout 1104242 [ 822.185615][T29927] pgfault 884135 [ 822.189194][T29927] pgmajfault 590 [ 822.192819][T29927] inactive_anon 95129600 [ 822.197111][T29927] active_anon 211365888 [ 822.201321][T29927] inactive_file 0 [ 822.204954][T29927] active_file 0 [ 822.208411][T29927] unevictable 0 [ 822.211933][T29927] hierarchical_memory_limit 314572800 [ 822.217302][T29927] hierarchical_memsw_limit 9223372036854771712 [ 822.223571][T29927] total_cache 306651136 [ 822.227725][T29927] total_rss 225280 [ 822.231439][T29927] total_shmem 306651136 [ 822.235659][T29927] total_mapped_file 0 [ 822.239719][T29927] total_dirty 0 [ 822.243320][T29927] total_writeback 12288 [ 822.247463][T29927] total_workingset_refault_anon 2970 [ 822.252835][T29927] total_workingset_refault_file 25038 [ 822.258231][T29927] total_swap 56377344 [ 822.262280][T29927] total_swapcached 24576 [ 822.266567][T29927] total_pgpgin 1179169 [ 822.270639][T29927] total_pgpgout 1104242 [ 822.274789][T29927] total_pgfault 884135 [ 822.278894][T29927] total_pgmajfault 590 [ 822.283024][T29927] total_inactive_anon 95129600 [ 822.287867][T29927] total_active_anon 211365888 [ 822.292689][T29927] total_inactive_file 0 [ 822.296866][T29927] total_active_file 0 [ 822.300840][T29927] total_unevictable 0 [ 822.304824][T29927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29926,uid=0 [ 822.319635][T29927] Memory cgroup out of memory: Killed process 29926 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:50688kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 822.377095][T30692] loop5: detected capacity change from 0 to 1024 [ 822.397591][T24246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.407688][T30692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 822.432882][T30696] lo speed is unknown, defaulting to 1000 [ 822.456615][T30692] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 822.507431][T30696] lo speed is unknown, defaulting to 1000 [ 822.771745][T30703] loop4: detected capacity change from 0 to 1024 [ 822.781393][T21913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 822.791140][T30703] EXT4-fs: Ignoring removed orlov option [ 822.826171][T30703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.883391][T24246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.984642][T30718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19074'. [ 823.050100][T30720] loop4: detected capacity change from 0 to 512 [ 823.112412][T30720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.150459][T30726] loop7: detected capacity change from 0 to 512 [ 823.178980][T30726] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 823.219635][T30726] EXT4-fs (loop7): invalid journal inode [ 823.231386][T30720] C: renamed from team_slave_0 [ 823.237977][T30720] netlink: 152 bytes leftover after parsing attributes in process `syz.4.19075'. [ 823.267502][T30726] EXT4-fs (loop7): can't get journal size [ 823.278568][T24246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.299650][T30726] EXT4-fs (loop7): 1 truncate cleaned up [ 823.319797][T30726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.395467][T30731] lo speed is unknown, defaulting to 1000 [ 823.431946][T30726] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 823.464439][T30731] lo speed is unknown, defaulting to 1000 [ 823.513798][T29205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.561843][T30742] bridge0: port 3(veth0_to_bridge) entered blocking state [ 823.569115][T30742] bridge0: port 3(veth0_to_bridge) entered disabled state [ 823.592964][T30742] veth0_to_bridge: entered allmulticast mode [ 823.600619][T30742] veth0_to_bridge: entered promiscuous mode [ 823.608252][T30744] netlink: 'syz.7.19083': attribute type 1 has an invalid length. [ 823.623232][T30744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 823.645741][T30744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19083'. [ 823.654787][T30744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19083'. [ 823.715793][T30744] bond0: (slave dummy0): Releasing backup interface [ 823.720556][T30748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19086'. [ 823.735537][T30744] bond4: (slave dummy0): making interface the new active one [ 823.744332][T30744] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 823.760382][T30744] bond4 (unregistering): (slave dummy0): Releasing active interface [ 823.772311][T30744] bond4 (unregistering): Released all slaves [ 823.852746][T30753] bond0: (slave dummy0): Releasing backup interface [ 823.861243][T30753] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 823.863630][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 823.863645][ T29] audit: type=1400 audit(1052.196:190983): avc: denied { getattr } for pid=30754 comm="syz.8.19089" path="socket:[221418]" dev="sockfs" ino=221418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 823.870128][T30753] team0: Failed to send options change via netlink (err -105) [ 823.902893][T30756] validate_nla: 1 callbacks suppressed [ 823.902939][T30756] netlink: 'syz.4.19088': attribute type 10 has an invalid length. [ 823.906962][T30753] team0: Port device dummy0 added [ 823.965387][T30756] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 824.001609][T30756] team0: Failed to send options change via netlink (err -105) [ 824.013768][T30756] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 824.035931][T30756] team0: Port device dummy0 removed [ 824.056417][T30756] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 824.066739][T30766] program syz.7.19093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 824.262792][T30780] netlink: 'syz.4.19100': attribute type 1 has an invalid length. [ 824.279732][T30780] 8021q: adding VLAN 0 to HW filter on device bond5 [ 824.444206][T30800] netlink: 'syz.7.19105': attribute type 10 has an invalid length. [ 824.454562][T30800] team0: Failed to send options change via netlink (err -105) [ 824.462083][T30800] team0: Port device dummy0 added [ 824.469318][T30795] bond0: (slave dummy0): Releasing backup interface [ 824.469410][T30800] netlink: 'syz.7.19105': attribute type 10 has an invalid length. [ 824.498088][T30795] bond5: (slave dummy0): making interface the new active one [ 824.521685][T30795] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 824.553982][ T30] oom_reaper: reaped process 29926 (syz.2.18827), now anon-rss:40kB, file-rss:50688kB, shmem-rss:0kB [ 824.577224][T30798] bond5 (unregistering): (slave dummy0): Releasing active interface [ 824.594266][ T29] audit: type=1326 audit(1052.878:190984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.8.19106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 824.617602][ T29] audit: type=1326 audit(1052.878:190985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.8.19106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 824.619218][T29927] syz.2.18827 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 824.646260][ T29] audit: type=1326 audit(1052.878:190986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.8.19106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 824.650681][T29927] CPU: 1 UID: 0 PID: 29927 Comm: syz.2.18827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 824.650714][T29927] Tainted: [W]=WARN [ 824.650721][T29927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 824.650735][T29927] Call Trace: [ 824.650743][T29927] [ 824.650751][T29927] __dump_stack+0x1d/0x30 [ 824.650777][T29927] dump_stack_lvl+0x95/0xd0 [ 824.650866][T29927] dump_stack+0x15/0x1b [ 824.650887][T29927] dump_header+0x80/0x240 [ 824.650908][T29927] oom_kill_process+0x295/0x350 [ 824.650932][T29927] out_of_memory+0x97d/0xb80 [ 824.651012][T29927] try_charge_memcg+0x62e/0xa10 [ 824.651053][T29927] charge_memcg+0x51/0xc0 [ 824.651129][T29927] __mem_cgroup_charge+0x28/0xb0 [ 824.651160][T29927] shmem_get_folio_gfp+0x47b/0xd60 [ 824.651243][T29927] shmem_write_begin+0xfc/0x1f0 [ 824.651271][T29927] generic_perform_write+0x183/0x490 [ 824.651344][T29927] shmem_file_write_iter+0xc5/0xf0 [ 824.651509][T29927] __kernel_write_iter+0x319/0x590 [ 824.651604][T29927] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 824.651639][T29927] dump_user_range+0x63e/0x8f0 [ 824.651668][T29927] elf_core_dump+0x21a2/0x2330 [ 824.651749][T29927] ? 0xffffffffff600000 [ 824.651777][T29927] coredump_write+0xacf/0xdf0 [ 824.651808][T29927] vfs_coredump+0x26bc/0x3120 [ 824.651847][T29927] ? __memcg_slab_free_hook+0xbc/0x230 [ 824.651879][T29927] ? proc_coredump_connector+0x160/0x2b0 [ 824.651918][T29927] ? kmem_cache_free+0xdf/0x380 [ 824.651945][T29927] get_signal+0xd7b/0xf60 [ 824.651978][T29927] arch_do_signal_or_restart+0x96/0x450 [ 824.652013][T29927] irqentry_exit+0xf7/0x510 [ 824.652116][T29927] ? force_sig+0x89/0xb0 [ 824.652138][T29927] exc_general_protection+0x153/0x1e0 [ 824.652197][T29927] asm_exc_general_protection+0x26/0x30 [ 824.652221][T29927] RIP: 0033:0x7f543bf7acc1 [ 824.652239][T29927] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 824.652295][T29927] RSP: 002b:0000200000000380 EFLAGS: 00010217 [ 824.652313][T29927] RAX: 0000000000000000 RBX: 00007f543c1f6090 RCX: 00007f543bf7acb9 [ 824.652403][T29927] RDX: 0000200000000100 RSI: 0000200000000380 RDI: 000000000a000000 [ 824.652418][T29927] RBP: 00007f543bfe8bf7 R08: 00002000000001c0 R09: 00002000000001c0 [ 824.652433][T29927] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 824.652452][T29927] R13: 00007f543c1f6128 R14: 00007f543c1f6090 R15: 00007fffbeffb078 [ 824.652472][T29927] [ 824.652480][T29927] memory: usage 307200kB, limit 307200kB, failcnt 70775 [ 824.673918][ T29] audit: type=1326 audit(1052.878:190987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.8.19106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 824.685490][T29927] memory+swap: usage 366664kB, limit 9007199254740988kB, failcnt 0 [ 824.685510][T29927] kmem: usage 5272kB, limit 9007199254740988kB, failcnt 0 [ 824.689303][ T29] audit: type=1326 audit(1052.878:190988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.8.19106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 824.699373][T29927] Memory cgroup stats for [ 824.702643][ T29] audit: type=1326 audit(1052.878:190989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.8.19106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 824.705551][T29927] /syz2 [ 824.709849][ T29] audit: type=1326 audit(1052.878:190990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.8.19106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 824.714342][T29927] : [ 824.737009][T30798] bond5 (unregistering): Released all slaves [ 824.737124][ T29] audit: type=1326 audit(1052.878:190991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.8.19106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 824.754438][T29927] cache 308912128 [ 824.756329][ T29] audit: type=1326 audit(1052.878:190992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30803 comm="syz.8.19106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 824.761707][T29927] rss 249856 [ 825.103406][T29927] shmem 308912128 [ 825.107025][T29927] mapped_file 0 [ 825.110497][T29927] dirty 0 [ 825.113423][T29927] writeback 12288 [ 825.117040][T29927] workingset_refault_anon 2970 [ 825.121824][T29927] workingset_refault_file 25038 [ 825.126661][T29927] swap 60891136 [ 825.130132][T29927] swapcached 12288 [ 825.133910][T29927] pgpgin 1188402 [ 825.137452][T29927] pgpgout 1112920 [ 825.141175][T29927] pgfault 884813 [ 825.144706][T29927] pgmajfault 590 [ 825.148279][T29927] inactive_anon 203780096 [ 825.152620][T29927] active_anon 104607744 [ 825.156758][T29927] inactive_file 0 [ 825.160388][T29927] active_file 0 [ 825.163861][T29927] unevictable 0 [ 825.167455][T29927] hierarchical_memory_limit 314572800 [ 825.172903][T29927] hierarchical_memsw_limit 9223372036854771712 [ 825.179149][T29927] total_cache 308912128 [ 825.183286][T29927] total_rss 249856 [ 825.187019][T29927] total_shmem 308912128 [ 825.191171][T29927] total_mapped_file 0 [ 825.195166][T29927] total_dirty 0 [ 825.198650][T29927] total_writeback 12288 [ 825.202779][T29927] total_workingset_refault_anon 2970 [ 825.208076][T29927] total_workingset_refault_file 25038 [ 825.213436][T29927] total_swap 60891136 [ 825.217432][T29927] total_swapcached 12288 [ 825.221734][T29927] total_pgpgin 1188402 [ 825.225783][T29927] total_pgpgout 1112920 [ 825.229940][T29927] total_pgfault 884813 [ 825.234003][T29927] total_pgmajfault 590 [ 825.238089][T29927] total_inactive_anon 203780096 [ 825.242928][T29927] total_active_anon 104607744 [ 825.247686][T29927] total_inactive_file 0 [ 825.251830][T29927] total_active_file 0 [ 825.255795][T29927] total_unevictable 0 [ 825.259777][T29927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29932,uid=0 [ 825.274687][T29927] Memory cgroup out of memory: Killed process 29932 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:57216kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 825.293898][T30800] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 825.306197][T30800] team0: Failed to send options change via netlink (err -105) [ 825.313839][T30800] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 825.322828][T30800] team0: Port device dummy0 removed [ 825.330629][T30800] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 825.384845][T30807] lo speed is unknown, defaulting to 1000 [ 825.430014][T30807] lo speed is unknown, defaulting to 1000 [ 825.643942][T30841] netlink: 'syz.4.19120': attribute type 1 has an invalid length. [ 825.671694][T30841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 825.697421][T30841] bond5: (slave dummy0): making interface the new active one [ 825.706941][T30841] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 825.791093][T29933] syz.2.18827 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 825.800838][T29933] CPU: 1 UID: 0 PID: 29933 Comm: syz.2.18827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 825.800907][T29933] Tainted: [W]=WARN [ 825.800914][T29933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 825.800926][T29933] Call Trace: [ 825.800932][T29933] [ 825.800939][T29933] __dump_stack+0x1d/0x30 [ 825.800962][T29933] dump_stack_lvl+0x95/0xd0 [ 825.801008][T29933] dump_stack+0x15/0x1b [ 825.801116][T29933] dump_header+0x80/0x240 [ 825.801139][T29933] oom_kill_process+0x295/0x350 [ 825.801165][T29933] out_of_memory+0x97d/0xb80 [ 825.801271][T29933] try_charge_memcg+0x62e/0xa10 [ 825.801390][T29933] charge_memcg+0x51/0xc0 [ 825.801524][T29933] __mem_cgroup_charge+0x28/0xb0 [ 825.801596][T29933] shmem_get_folio_gfp+0x47b/0xd60 [ 825.801630][T29933] shmem_write_begin+0xfc/0x1f0 [ 825.801661][T29933] generic_perform_write+0x183/0x490 [ 825.801688][T29933] ? __mark_inode_dirty+0x1af/0x740 [ 825.801754][T29933] shmem_file_write_iter+0xc5/0xf0 [ 825.801835][T29933] __kernel_write_iter+0x319/0x590 [ 825.801858][T29933] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 825.801891][T29933] dump_user_range+0x63e/0x8f0 [ 825.801918][T29933] elf_core_dump+0x21a2/0x2330 [ 825.801986][T29933] ? 0xffffffffff600000 [ 825.802011][T29933] coredump_write+0xacf/0xdf0 [ 825.802038][T29933] vfs_coredump+0x26bc/0x3120 [ 825.802067][T29933] ? __memcg_slab_free_hook+0xbc/0x230 [ 825.802161][T29933] ? proc_coredump_connector+0x160/0x2b0 [ 825.802186][T29933] ? kmem_cache_free+0xdf/0x380 [ 825.802245][T29933] get_signal+0xd7b/0xf60 [ 825.802275][T29933] arch_do_signal_or_restart+0x96/0x450 [ 825.802302][T29933] irqentry_exit+0xf7/0x510 [ 825.802359][T29933] ? force_sig+0x89/0xb0 [ 825.802382][T29933] exc_general_protection+0x153/0x1e0 [ 825.802411][T29933] asm_exc_general_protection+0x26/0x30 [ 825.802431][T29933] RIP: 0033:0x7f543bf7acc1 [ 825.802548][T29933] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 825.802589][T29933] RSP: 002b:0000200000000380 EFLAGS: 00010217 [ 825.802605][T29933] RAX: 0000000000000000 RBX: 00007f543c1f6090 RCX: 00007f543bf7acb9 [ 825.802618][T29933] RDX: 0000200000000100 RSI: 0000200000000380 RDI: 000000000a000000 [ 825.802631][T29933] RBP: 00007f543bfe8bf7 R08: 00002000000001c0 R09: 00002000000001c0 [ 825.802647][T29933] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 825.802729][T29933] R13: 00007f543c1f6128 R14: 00007f543c1f6090 R15: 00007fffbeffb078 [ 825.802748][T29933] [ 825.802756][T29933] memory: usage 307200kB, limit 307200kB, failcnt 72456 [ 825.878741][T30850] sctp: [Deprecated]: syz.7.19123 (pid 30850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 825.878741][T30850] Use struct sctp_sack_info instead [ 825.880335][T29933] memory+swap: usage 366452kB, limit 9007199254740988kB, failcnt 0 [ 826.084773][T29933] kmem: usage 4884kB, limit 9007199254740988kB, failcnt 0 [ 826.092008][T29933] Memory cgroup stats for /syz2: [ 826.095713][T30841] bond5 (unregistering): (slave dummy0): Releasing active interface [ 826.105148][T29933] cache 304062464 [ 826.112508][T29933] rss 73728 [ 826.115690][T29933] shmem 304062464 [ 826.119309][T29933] mapped_file 0 [ 826.122790][T29933] dirty 0 [ 826.125836][T29933] writeback 0 [ 826.129181][T29933] workingset_refault_anon 2970 [ 826.133938][T29933] workingset_refault_file 25038 [ 826.138815][T29933] swap 60903424 [ 826.142272][T29933] swapcached 0 [ 826.145817][T29933] pgpgin 1197639 [ 826.149390][T29933] pgpgout 1123387 [ 826.153061][T29933] pgfault 885487 [ 826.156612][T29933] pgmajfault 590 [ 826.160211][T29933] inactive_anon 189538304 [ 826.164595][T29933] active_anon 112713728 [ 826.168774][T29933] inactive_file 0 [ 826.172456][T29933] active_file 0 [ 826.175900][T29933] unevictable 0 [ 826.179497][T29933] hierarchical_memory_limit 314572800 [ 826.184892][T29933] hierarchical_memsw_limit 9223372036854771712 [ 826.191142][T29933] total_cache 304062464 [ 826.195309][T29933] total_rss 73728 [ 826.198934][T29933] total_shmem 304062464 [ 826.203227][T29933] total_mapped_file 0 [ 826.207194][T29933] total_dirty 0 [ 826.210697][T29933] total_writeback 0 [ 826.214497][T29933] total_workingset_refault_anon 2970 [ 826.219764][T29933] total_workingset_refault_file 25038 [ 826.225201][T29933] total_swap 60903424 [ 826.229176][T29933] total_swapcached 0 [ 826.233082][T29933] total_pgpgin 1197639 [ 826.237139][T29933] total_pgpgout 1123387 [ 826.241293][T29933] total_pgfault 885487 [ 826.245386][T29933] total_pgmajfault 590 [ 826.249446][T29933] total_inactive_anon 189538304 [ 826.254397][T29933] total_active_anon 112713728 [ 826.259123][T29933] total_inactive_file 0 [ 826.263366][T29933] total_active_file 0 [ 826.267340][T29933] total_unevictable 0 [ 826.271335][T29933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29970,uid=0 [ 826.286216][T29933] Memory cgroup out of memory: Killed process 29970 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:57088kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 826.313793][T30841] bond5 (unregistering): Released all slaves [ 826.341745][T30846] lo speed is unknown, defaulting to 1000 [ 826.356286][T30845] lo speed is unknown, defaulting to 1000 [ 826.364033][T30846] lo speed is unknown, defaulting to 1000 [ 826.415770][T30868] __nla_validate_parse: 5 callbacks suppressed [ 826.415796][T30868] netlink: 184 bytes leftover after parsing attributes in process `syz.7.19129'. [ 826.453372][T30845] lo speed is unknown, defaulting to 1000 [ 826.509409][T30873] loop4: detected capacity change from 0 to 1756 [ 826.526502][T30871] lo speed is unknown, defaulting to 1000 [ 826.674207][T30871] lo speed is unknown, defaulting to 1000 [ 826.704712][T30887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19137'. [ 827.100881][T30898] netlink: 'syz.5.19142': attribute type 10 has an invalid length. [ 827.153048][T30898] bond0: (slave dummy0): Releasing backup interface [ 827.159720][T30902] Cannot find del_set index 286 as target [ 827.168651][T30904] netlink: 'syz.5.19142': attribute type 10 has an invalid length. [ 827.188294][T30898] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 827.222342][T30898] team0: Failed to send options change via netlink (err -105) [ 827.229896][T30898] team0: Port device dummy0 added [ 827.236134][T30905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19143'. [ 827.262758][T30904] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 827.294797][T30904] team0: Failed to send options change via netlink (err -105) [ 827.313593][T30904] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 827.354062][T30904] team0: Port device dummy0 removed [ 827.361088][T30904] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 827.393725][T30907] netlink: 'syz.5.19144': attribute type 21 has an invalid length. [ 827.401695][T30907] netlink: 128 bytes leftover after parsing attributes in process `syz.5.19144'. [ 827.424121][T30907] netlink: 'syz.5.19144': attribute type 4 has an invalid length. [ 827.432031][T30907] netlink: 'syz.5.19144': attribute type 3 has an invalid length. [ 827.439926][T30907] netlink: 3 bytes leftover after parsing attributes in process `syz.5.19144'. [ 827.539718][T30921] loop5: detected capacity change from 0 to 1024 [ 827.547943][T30921] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 827.651914][T30921] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.19149: Invalid block bitmap block 0 in block_group 0 [ 827.668000][T30932] team0: Failed to send options change via netlink (err -105) [ 827.675555][T30932] team0: Port device dummy0 added [ 827.691705][T29972] syz.2.18827 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 827.701489][T29972] CPU: 1 UID: 0 PID: 29972 Comm: syz.2.18827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 827.701520][T29972] Tainted: [W]=WARN [ 827.701537][T29972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 827.701552][T29972] Call Trace: [ 827.701559][T29972] [ 827.701631][T29972] __dump_stack+0x1d/0x30 [ 827.701657][T29972] dump_stack_lvl+0x95/0xd0 [ 827.701676][T29972] dump_stack+0x15/0x1b [ 827.701752][T29972] dump_header+0x80/0x240 [ 827.701818][T29972] oom_kill_process+0x295/0x350 [ 827.701906][T29972] out_of_memory+0x97d/0xb80 [ 827.701926][T29972] try_charge_memcg+0x62e/0xa10 [ 827.701981][T29972] charge_memcg+0x51/0xc0 [ 827.702024][T29972] __mem_cgroup_charge+0x28/0xb0 [ 827.702051][T29972] shmem_get_folio_gfp+0x47b/0xd60 [ 827.702080][T29972] shmem_write_begin+0xfc/0x1f0 [ 827.702176][T29972] generic_perform_write+0x183/0x490 [ 827.702251][T29972] shmem_file_write_iter+0xc5/0xf0 [ 827.702301][T29972] __kernel_write_iter+0x319/0x590 [ 827.702323][T29972] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 827.702391][T29972] dump_user_range+0x63e/0x8f0 [ 827.702423][T29972] elf_core_dump+0x21a2/0x2330 [ 827.702534][T29972] ? 0xffffffffff600000 [ 827.702558][T29972] coredump_write+0xacf/0xdf0 [ 827.702585][T29972] vfs_coredump+0x26bc/0x3120 [ 827.702666][T29972] ? __memcg_slab_free_hook+0xbc/0x230 [ 827.702766][T29972] ? proc_coredump_connector+0x160/0x2b0 [ 827.702791][T29972] ? kmem_cache_free+0xdf/0x380 [ 827.702815][T29972] get_signal+0xd7b/0xf60 [ 827.702873][T29972] arch_do_signal_or_restart+0x96/0x450 [ 827.702899][T29972] irqentry_exit+0xf7/0x510 [ 827.702994][T29972] ? force_sig+0x89/0xb0 [ 827.703091][T29972] exc_general_protection+0x153/0x1e0 [ 827.703117][T29972] asm_exc_general_protection+0x26/0x30 [ 827.703138][T29972] RIP: 0033:0x7f543bf7acc1 [ 827.703203][T29972] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 827.703225][T29972] RSP: 002b:0000200000000380 EFLAGS: 00010217 [ 827.703300][T29972] RAX: 0000000000000000 RBX: 00007f543c1f6090 RCX: 00007f543bf7acb9 [ 827.703313][T29972] RDX: 0000200000000100 RSI: 0000200000000380 RDI: 000000000a000000 [ 827.703328][T29972] RBP: 00007f543bfe8bf7 R08: 00002000000001c0 R09: 00002000000001c0 [ 827.703344][T29972] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 827.703358][T29972] R13: 00007f543c1f6128 R14: 00007f543c1f6090 R15: 00007fffbeffb078 [ 827.703378][T29972] [ 827.703385][T29972] memory: usage 307200kB, limit 307200kB, failcnt 72975 [ 827.704210][T30932] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 827.714934][T29972] memory+swap: usage 366648kB, limit 9007199254740988kB, failcnt 0 [ 827.714959][T29972] kmem: usage 4656kB, limit 9007199254740988kB, failcnt 0 [ 827.715041][T29972] Memory cgroup stats for /syz2: [ 827.728603][T30921] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.19149: Failed to acquire dquot type 0 [ 827.729292][T29972] cache 309596160 [ 827.732507][T30921] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.19149: Freeing blocks not in datazone - block = 0, count = 4096 [ 827.735113][T29972] rss 200704 [ 827.735122][T29972] shmem 309596160 [ 827.735234][T29972] mapped_file 0 [ 827.761520][T30921] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.19149: Invalid inode bitmap blk 0 in block_group 0 [ 827.762014][T29972] dirty 0 [ 827.778546][T30921] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 827.781215][T29972] writeback 0 [ 827.781226][T29972] workingset_refault_anon 2981 [ 827.786175][ T3586] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 827.791397][T29972] workingset_refault_file 25038 [ 827.791406][T29972] swap 60874752 [ 827.817499][T30921] EXT4-fs (loop5): 1 orphan inode deleted [ 827.821379][T29972] swapcached 28672 [ 827.821390][T29972] pgpgin 1205666 [ 827.821397][T29972] pgpgout 1130030 [ 827.821404][T29972] pgfault 886015 [ 827.821412][T29972] pgmajfault 600 [ 827.849507][T30921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.851032][T29972] inactive_anon 250556416 [ 827.851043][T29972] active_anon 58712064 [ 827.851051][T29972] inactive_file 0 [ 828.124055][T29972] active_file 0 [ 828.127549][T29972] unevictable 0 [ 828.131027][T29972] hierarchical_memory_limit 314572800 [ 828.136442][T29972] hierarchical_memsw_limit 9223372036854771712 [ 828.142644][T29972] total_cache 309596160 [ 828.146828][T29972] total_rss 200704 [ 828.150598][T29972] total_shmem 309596160 [ 828.154742][T29972] total_mapped_file 0 [ 828.158822][T29972] total_dirty 0 [ 828.162272][T29972] total_writeback 0 [ 828.166081][T29972] total_workingset_refault_anon 2981 [ 828.171402][T29972] total_workingset_refault_file 25038 [ 828.176773][T29972] total_swap 60874752 [ 828.180779][T29972] total_swapcached 28672 [ 828.185008][T29972] total_pgpgin 1205666 [ 828.189095][T29972] total_pgpgout 1130030 [ 828.193317][T29972] total_pgfault 886015 [ 828.197376][T29972] total_pgmajfault 600 [ 828.201492][T29972] total_inactive_anon 250556416 [ 828.206333][T29972] total_active_anon 58712064 [ 828.210966][T29972] total_inactive_file 0 [ 828.215119][T29972] total_active_file 0 [ 828.219146][T29972] total_unevictable 0 [ 828.223155][T29972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29933,uid=0 [ 828.238056][T29972] Memory cgroup out of memory: Killed process 29933 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 828.255543][T30932] team0: Failed to send options change via netlink (err -105) [ 828.264464][T21913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.274651][T30932] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 828.295082][T30932] team0: Port device dummy0 removed [ 828.301888][T30932] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 828.330413][T30937] rtc_cmos 00:00: Alarms can be up to one day in the future [ 828.346384][T30937] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 828.347544][T30939] Cannot find del_set index 286 as target [ 828.397231][T30937] loop5: detected capacity change from 0 to 1024 [ 828.438154][T30937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 828.547100][T30937] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.19155: bg 0: block 112: padding at end of block bitmap is not set [ 828.616901][T30954] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 828.617642][T30957] EXT4-fs warning (device loop5): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 828.660324][T30937] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 828.672742][T30937] EXT4-fs (loop5): This should not happen!! Data will be lost [ 828.672742][T30937] [ 828.684850][T30961] netlink: 28 bytes leftover after parsing attributes in process `syz.7.19162'. [ 828.705640][T30961] netlink: 2 bytes leftover after parsing attributes in process `syz.7.19162'. [ 828.731141][T30961] team0: entered promiscuous mode [ 828.736256][T30961] team_slave_0: entered promiscuous mode [ 828.742007][T30961] team_slave_1: entered promiscuous mode [ 828.784144][T30961] bridge0: port 3(team0) entered blocking state [ 828.790478][T30961] bridge0: port 3(team0) entered disabled state [ 828.813882][T30961] team0: entered allmulticast mode [ 828.819156][T30961] team_slave_0: entered allmulticast mode [ 828.824888][T30961] team_slave_1: entered allmulticast mode [ 828.868548][T21913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 828.935280][T30980] loop5: detected capacity change from 0 to 512 [ 828.944462][T30980] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.19168: EA inode hash validation failed [ 829.000568][T30980] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.19168: corrupted inode contents [ 829.049368][T30986] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 829.081855][T30980] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.19168: mark_inode_dirty error [ 829.152682][T30980] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.19168: corrupted inode contents [ 829.184474][T30989] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19173'. [ 829.205544][T30980] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.19168: mark_inode_dirty error [ 829.231618][T30980] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.19168: mark inode dirty (error -117) [ 829.250644][T30980] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 829.263689][T30980] EXT4-fs (loop5): 1 orphan inode deleted [ 829.272169][T30980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.286387][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 829.286403][ T29] audit: type=1326 audit(1057.265:191056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30979 comm="syz.5.19168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 829.357129][ T29] audit: type=1326 audit(1057.265:191057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30979 comm="syz.5.19168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 829.380416][ T29] audit: type=1326 audit(1057.265:191058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30979 comm="syz.5.19168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 829.403816][ T29] audit: type=1326 audit(1057.302:191059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30979 comm="syz.5.19168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 829.427093][ T29] audit: type=1326 audit(1057.302:191060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30979 comm="syz.5.19168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 829.450356][ T29] audit: type=1326 audit(1057.302:191061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30979 comm="syz.5.19168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 829.473675][ T29] audit: type=1326 audit(1057.302:191062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30979 comm="syz.5.19168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 829.496994][ T29] audit: type=1326 audit(1057.302:191063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30979 comm="syz.5.19168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 829.520228][ T29] audit: type=1326 audit(1057.302:191064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30979 comm="syz.5.19168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 829.543505][ T29] audit: type=1326 audit(1057.302:191065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30979 comm="syz.5.19168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd406b2acb9 code=0x7ffc0000 [ 829.580794][T31002] loop4: detected capacity change from 0 to 512 [ 829.598893][T21913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.612997][T31002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 829.653113][T31004] loop5: detected capacity change from 0 to 128 [ 829.660712][T31002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.688316][T29931] syz.2.18827 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 829.698064][T29931] CPU: 1 UID: 0 PID: 29931 Comm: syz.2.18827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 829.698152][T29931] Tainted: [W]=WARN [ 829.698160][T29931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 829.698173][T29931] Call Trace: [ 829.698224][T29931] [ 829.698232][T29931] __dump_stack+0x1d/0x30 [ 829.698260][T29931] dump_stack_lvl+0x95/0xd0 [ 829.698284][T29931] dump_stack+0x15/0x1b [ 829.698354][T29931] dump_header+0x80/0x240 [ 829.698377][T29931] oom_kill_process+0x295/0x350 [ 829.698455][T29931] out_of_memory+0x97d/0xb80 [ 829.698508][T29931] try_charge_memcg+0x62e/0xa10 [ 829.698552][T29931] charge_memcg+0x51/0xc0 [ 829.698581][T29931] __mem_cgroup_charge+0x28/0xb0 [ 829.698633][T29931] shmem_get_folio_gfp+0x47b/0xd60 [ 829.698666][T29931] shmem_write_begin+0xfc/0x1f0 [ 829.698696][T29931] generic_perform_write+0x183/0x490 [ 829.698737][T29931] shmem_file_write_iter+0xc5/0xf0 [ 829.698770][T29931] __kernel_write_iter+0x319/0x590 [ 829.698822][T29931] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 829.698854][T29931] dump_user_range+0x63e/0x8f0 [ 829.698885][T29931] elf_core_dump+0x21a2/0x2330 [ 829.698970][T29931] ? 0xffffffffff600000 [ 829.698999][T29931] coredump_write+0xacf/0xdf0 [ 829.699109][T29931] vfs_coredump+0x26bc/0x3120 [ 829.699159][T29931] ? __memcg_slab_free_hook+0xbc/0x230 [ 829.699227][T29931] ? proc_coredump_connector+0x160/0x2b0 [ 829.699252][T29931] ? kmem_cache_free+0xdf/0x380 [ 829.699282][T29931] get_signal+0xd7b/0xf60 [ 829.699319][T29931] arch_do_signal_or_restart+0x96/0x450 [ 829.699379][T29931] irqentry_exit+0xf7/0x510 [ 829.699430][T29931] ? force_sig+0x89/0xb0 [ 829.699457][T29931] exc_general_protection+0x153/0x1e0 [ 829.699528][T29931] asm_exc_general_protection+0x26/0x30 [ 829.699553][T29931] RIP: 0033:0x7f543bf7acc1 [ 829.699570][T29931] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 829.699590][T29931] RSP: 002b:0000200000000380 EFLAGS: 00010217 [ 829.699610][T29931] RAX: 0000000000000000 RBX: 00007f543c1f6090 RCX: 00007f543bf7acb9 [ 829.699655][T29931] RDX: 0000200000000100 RSI: 0000200000000380 RDI: 000000000a000000 [ 829.699671][T29931] RBP: 00007f543bfe8bf7 R08: 00002000000001c0 R09: 00002000000001c0 [ 829.699738][T29931] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 829.699752][T29931] R13: 00007f543c1f6128 R14: 00007f543c1f6090 R15: 00007fffbeffb078 [ 829.699773][T29931] [ 829.699781][T29931] memory: usage 307200kB, limit 307200kB, failcnt 74094 [ 829.952974][T29931] memory+swap: usage 366632kB, limit 9007199254740988kB, failcnt 0 [ 829.960869][T29931] kmem: usage 4524kB, limit 9007199254740988kB, failcnt 0 [ 829.968008][T29931] Memory cgroup stats for /syz2: [ 829.971299][T29931] cache 309764096 [ 829.979931][T29931] rss 151552 [ 829.983168][T29931] shmem 309764096 [ 829.986830][T29931] mapped_file 0 [ 829.990288][T29931] dirty 0 [ 829.993215][T29931] writeback 0 [ 829.996593][T29931] workingset_refault_anon 2997 [ 830.001429][T29931] workingset_refault_file 25038 [ 830.006291][T29931] swap 60858368 [ 830.009859][T29931] swapcached 45056 [ 830.013581][T29931] pgpgin 1222218 [ 830.017159][T29931] pgpgout 1146549 [ 830.020794][T29931] pgfault 886745 [ 830.024421][T29931] pgmajfault 612 [ 830.028297][T29931] inactive_anon 99659776 [ 830.032591][T29931] active_anon 210280448 [ 830.036738][T29931] inactive_file 0 [ 830.040401][T29931] active_file 0 [ 830.043912][T29931] unevictable 0 [ 830.047363][T29931] hierarchical_memory_limit 314572800 [ 830.052765][T29931] hierarchical_memsw_limit 9223372036854771712 [ 830.058937][T29931] total_cache 309764096 [ 830.063084][T29931] total_rss 151552 [ 830.066803][T29931] total_shmem 309764096 [ 830.071037][T29931] total_mapped_file 0 [ 830.075063][T29931] total_dirty 0 [ 830.078513][T29931] total_writeback 0 [ 830.082362][T29931] total_workingset_refault_anon 2997 [ 830.087636][T29931] total_workingset_refault_file 25038 [ 830.093014][T29931] total_swap 60858368 [ 830.096991][T29931] total_swapcached 45056 [ 830.101227][T29931] total_pgpgin 1222218 [ 830.105324][T29931] total_pgpgout 1146549 [ 830.109481][T29931] total_pgfault 886745 [ 830.113606][T29931] total_pgmajfault 612 [ 830.117667][T29931] total_inactive_anon 99659776 [ 830.122511][T29931] total_active_anon 210280448 [ 830.127200][T29931] total_inactive_file 0 [ 830.131345][T29931] total_active_file 0 [ 830.135346][T29931] total_unevictable 0 [ 830.139321][T29931] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29972,uid=0 [ 830.154124][T29931] Memory cgroup out of memory: Killed process 29972 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 830.176251][T31008] xt_hashlimit: overflow, rate too high: 0 [ 830.220723][T31008] netlink: 36 bytes leftover after parsing attributes in process `syz.5.19179'. [ 830.229787][T31008] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19179'. [ 830.242380][T24246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.428957][T31030] Cannot find del_set index 286 as target [ 830.574629][T31042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.629203][T31046] loop4: detected capacity change from 0 to 128 [ 830.652147][T31046] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 830.672988][T31042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.742815][T31042] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 830.790000][T24246] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 830.823785][T31042] bond0 (unregistering): Released all slaves [ 830.927946][T31057] loop7: detected capacity change from 0 to 2048 [ 831.043358][T31061] Cannot find del_set index 286 as target [ 831.617049][T31098] Cannot find del_set index 286 as target [ 831.689821][T31104] loop4: detected capacity change from 0 to 512 [ 831.732072][T31104] EXT4-fs (loop4): orphan cleanup on readonly fs [ 831.761458][T31107] loop5: detected capacity change from 0 to 512 [ 831.772805][T31104] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 831.788793][T31104] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 831.798424][T31104] EXT4-fs error (device loop4): __ext4_iget:5426: inode #14: block 1886221359: comm syz.4.19216: invalid block [ 831.802791][T31107] EXT4-fs (loop5): too many log groups per flexible block group [ 831.818183][T31104] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.19216: couldn't read orphan inode 14 (err -117) [ 831.831667][T31107] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 831.848788][T29945] syz.2.18827 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 831.858539][T29945] CPU: 0 UID: 0 PID: 29945 Comm: syz.2.18827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 831.858572][T29945] Tainted: [W]=WARN [ 831.858578][T29945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 831.858665][T29945] Call Trace: [ 831.858672][T29945] [ 831.858681][T29945] __dump_stack+0x1d/0x30 [ 831.858708][T29945] dump_stack_lvl+0x95/0xd0 [ 831.858778][T29945] dump_stack+0x15/0x1b [ 831.858835][T29945] dump_header+0x80/0x240 [ 831.858965][T29945] oom_kill_process+0x295/0x350 [ 831.858990][T29945] out_of_memory+0x97d/0xb80 [ 831.859015][T29945] try_charge_memcg+0x62e/0xa10 [ 831.859054][T29945] charge_memcg+0x51/0xc0 [ 831.859153][T29945] __mem_cgroup_charge+0x28/0xb0 [ 831.859180][T29945] shmem_get_folio_gfp+0x47b/0xd60 [ 831.859209][T29945] shmem_write_begin+0xfc/0x1f0 [ 831.859285][T29945] generic_perform_write+0x183/0x490 [ 831.859313][T29945] shmem_file_write_iter+0xc5/0xf0 [ 831.859403][T29945] __kernel_write_iter+0x319/0x590 [ 831.859421][T29945] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 831.859531][T29945] dump_user_range+0x63e/0x8f0 [ 831.859558][T29945] elf_core_dump+0x21a2/0x2330 [ 831.859645][T29945] ? 0xffffffffff600000 [ 831.859670][T29945] coredump_write+0xacf/0xdf0 [ 831.859745][T29945] vfs_coredump+0x26bc/0x3120 [ 831.859779][T29945] ? __memcg_slab_free_hook+0xbc/0x230 [ 831.859810][T29945] ? proc_coredump_connector+0x160/0x2b0 [ 831.859850][T29945] ? kmem_cache_free+0xdf/0x380 [ 831.859935][T29945] get_signal+0xd7b/0xf60 [ 831.859968][T29945] arch_do_signal_or_restart+0x96/0x450 [ 831.860078][T29945] irqentry_exit+0xf7/0x510 [ 831.860108][T29945] ? force_sig+0x89/0xb0 [ 831.860129][T29945] exc_general_protection+0x153/0x1e0 [ 831.860252][T29945] asm_exc_general_protection+0x26/0x30 [ 831.860340][T29945] RIP: 0033:0x7f543bf7acc1 [ 831.860357][T29945] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 831.860374][T29945] RSP: 002b:0000200000000380 EFLAGS: 00010217 [ 831.860391][T29945] RAX: 0000000000000000 RBX: 00007f543c1f6090 RCX: 00007f543bf7acb9 [ 831.860405][T29945] RDX: 0000200000000100 RSI: 0000200000000380 RDI: 000000000a000000 [ 831.860417][T29945] RBP: 00007f543bfe8bf7 R08: 00002000000001c0 R09: 00002000000001c0 [ 831.860430][T29945] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 831.860499][T29945] R13: 00007f543c1f6128 R14: 00007f543c1f6090 R15: 00007fffbeffb078 [ 831.860520][T29945] [ 831.860605][T29945] memory: usage 307200kB, limit 307200kB, failcnt 75555 [ 831.873027][T31107] EXT4-fs (loop5): mount failed [ 831.875966][T29945] memory+swap: usage 366636kB, limit 9007199254740988kB, failcnt 0 [ 831.875985][T29945] kmem: usage 4292kB, limit 9007199254740988kB, failcnt 0 [ 831.875999][T29945] Memory cgroup stats for [ 831.898326][T31104] EXT4-fs (loop4): 1 truncate cleaned up [ 831.901110][T29945] /syz2 [ 831.909395][T31104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 831.909848][T29945] : [ 831.986750][T29945] cache 309854208 [ 831.988165][T24246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.993255][T29945] rss 303104 [ 832.177435][T29945] shmem 309854208 [ 832.181125][T29945] mapped_file 0 [ 832.184568][T29945] dirty 0 [ 832.187530][T29945] writeback 0 [ 832.190803][T29945] workingset_refault_anon 3000 [ 832.195554][T29945] workingset_refault_file 25038 [ 832.200447][T29945] swap 60862464 [ 832.203899][T29945] swapcached 40960 [ 832.207693][T29945] pgpgin 1234576 [ 832.211254][T29945] pgpgout 1158849 [ 832.214872][T29945] pgfault 887133 [ 832.218419][T29945] pgmajfault 615 [ 832.221979][T29945] inactive_anon 232579072 [ 832.226306][T29945] active_anon 77598720 [ 832.230438][T29945] inactive_file 0 [ 832.234060][T29945] active_file 0 [ 832.237495][T29945] unevictable 0 [ 832.240950][T29945] hierarchical_memory_limit 314572800 [ 832.246302][T29945] hierarchical_memsw_limit 9223372036854771712 [ 832.252500][T29945] total_cache 309854208 [ 832.256647][T29945] total_rss 303104 [ 832.260415][T29945] total_shmem 309854208 [ 832.264606][T29945] total_mapped_file 0 [ 832.268578][T29945] total_dirty 0 [ 832.272036][T29945] total_writeback 0 [ 832.275885][T29945] total_workingset_refault_anon 3000 [ 832.281165][T29945] total_workingset_refault_file 25038 [ 832.286578][T29945] total_swap 60862464 [ 832.290555][T29945] total_swapcached 40960 [ 832.294845][T29945] total_pgpgin 1234576 [ 832.298903][T29945] total_pgpgout 1158849 [ 832.303054][T29945] total_pgfault 887133 [ 832.307156][T29945] total_pgmajfault 615 [ 832.311289][T29945] total_inactive_anon 232579072 [ 832.316202][T29945] total_active_anon 77598720 [ 832.320783][T29945] total_inactive_file 0 [ 832.325016][T29945] total_active_file 0 [ 832.329040][T29945] total_unevictable 0 [ 832.333027][T29945] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29930,uid=0 [ 832.348039][T29945] Memory cgroup out of memory: Killed process 29930 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:58992kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 832.426962][T31124] loop5: detected capacity change from 0 to 512 [ 832.479744][T31127] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 832.492611][T31124] EXT4-fs (loop5): 1 orphan inode deleted [ 832.510452][T14400] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 1 [ 832.522555][T31124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.564349][T31133] loop4: detected capacity change from 0 to 512 [ 832.608451][T31133] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 832.650489][T31138] SET target dimension over the limit! [ 832.665802][T21913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.689720][T31133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.707786][T31108] syz.2.19218 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 832.717568][T31108] CPU: 1 UID: 0 PID: 31108 Comm: syz.2.19218 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 832.717604][T31108] Tainted: [W]=WARN [ 832.717611][T31108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.717623][T31108] Call Trace: [ 832.717630][T31108] [ 832.717637][T31108] __dump_stack+0x1d/0x30 [ 832.717660][T31108] dump_stack_lvl+0x95/0xd0 [ 832.717679][T31108] dump_stack+0x15/0x1b [ 832.717699][T31108] dump_header+0x80/0x240 [ 832.717720][T31108] oom_kill_process+0x295/0x350 [ 832.717744][T31108] out_of_memory+0x97d/0xb80 [ 832.717767][T31108] try_charge_memcg+0x62e/0xa10 [ 832.717806][T31108] obj_cgroup_charge_pages+0xa6/0x150 [ 832.717835][T31108] obj_cgroup_charge_account+0x73/0x1a0 [ 832.717860][T31108] __memcg_slab_post_alloc_hook+0x396/0x530 [ 832.717887][T31108] kmem_cache_alloc_noprof+0x2b4/0x490 [ 832.717908][T31108] ? vm_area_dup+0x33/0x2c0 [ 832.717932][T31108] vm_area_dup+0x33/0x2c0 [ 832.717956][T31108] __split_vma+0xe9/0x660 [ 832.717974][T31108] vma_modify+0xb30/0xd30 [ 832.718004][T31108] vma_modify_flags+0x182/0x210 [ 832.718037][T31108] mprotect_fixup+0x30e/0x5e0 [ 832.718068][T31108] do_mprotect_pkey+0x67b/0x920 [ 832.718092][T31108] __x64_sys_mprotect+0x48/0x60 [ 832.718121][T31108] x64_sys_call+0x2c3b/0x3000 [ 832.718146][T31108] do_syscall_64+0xc0/0x2a0 [ 832.718167][T31108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.718186][T31108] RIP: 0033:0x7f543bf7aab7 [ 832.718201][T31108] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.718216][T31108] RSP: 002b:00007fffbeffb018 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 832.718234][T31108] RAX: ffffffffffffffda RBX: 00007f543a9b66c0 RCX: 00007f543bf7aab7 [ 832.718248][T31108] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f543a997000 [ 832.718262][T31108] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 832.718276][T31108] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffbeffb170 [ 832.718289][T31108] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 832.718309][T31108] [ 832.718315][T31108] memory: usage 307200kB, limit 307200kB, failcnt 76099 [ 832.937640][T31108] memory+swap: usage 342700kB, limit 9007199254740988kB, failcnt 0 [ 832.945531][T31108] kmem: usage 4068kB, limit 9007199254740988kB, failcnt 0 [ 832.952657][T31108] Memory cgroup stats for /syz2: [ 833.068322][T24246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.113433][T31108] cache 281530368 [ 833.117250][T31108] rss 290816 [ 833.120654][T31108] shmem 281530368 [ 833.124372][T31108] mapped_file 0 [ 833.127902][T31108] dirty 0 [ 833.130867][T31108] writeback 0 [ 833.134144][T31108] workingset_refault_anon 3000 [ 833.138925][T31108] workingset_refault_file 25038 [ 833.143764][T31108] swap 55947264 [ 833.147209][T31108] swapcached 40960 [ 833.151036][T31108] pgpgin 1234584 [ 833.154718][T31108] pgpgout 1165775 [ 833.158342][T31108] pgfault 887133 [ 833.161902][T31108] pgmajfault 615 [ 833.165444][T31108] inactive_anon 208728064 [ 833.169774][T31108] active_anon 72867840 [ 833.173900][T31108] inactive_file 0 [ 833.177554][T31108] active_file 0 [ 833.181066][T31108] unevictable 0 [ 833.184514][T31108] hierarchical_memory_limit 314572800 [ 833.189869][T31108] hierarchical_memsw_limit 9223372036854771712 [ 833.196179][T31108] total_cache 281530368 [ 833.200370][T31108] total_rss 290816 [ 833.204158][T31108] total_shmem 281530368 [ 833.208355][T31108] total_mapped_file 0 [ 833.212333][T31108] total_dirty 0 [ 833.215827][T31108] total_writeback 0 [ 833.219626][T31108] total_workingset_refault_anon 3000 [ 833.224939][T31108] total_workingset_refault_file 25038 [ 833.230305][T31108] total_swap 55947264 [ 833.234282][T31108] total_swapcached 40960 [ 833.238610][T31108] total_pgpgin 1234584 [ 833.242732][T31108] total_pgpgout 1165775 [ 833.246921][T31108] total_pgfault 887133 [ 833.250981][T31108] total_pgmajfault 615 [ 833.255072][T31108] total_inactive_anon 208728064 [ 833.259930][T31108] total_active_anon 72867840 [ 833.264514][T31108] total_inactive_file 0 [ 833.268688][T31108] total_active_file 0 [ 833.272661][T31108] total_unevictable 0 [ 833.276651][T31108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18827,pid=29931,uid=0 [ 833.291464][T31108] Memory cgroup out of memory: Killed process 29931 (syz.2.18827) total-vm:90292kB, anon-rss:1224kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 833.315261][T31155] validate_nla: 3 callbacks suppressed [ 833.315278][T31155] netlink: 'syz.5.19234': attribute type 1 has an invalid length. [ 833.333786][T31154] loop4: detected capacity change from 0 to 512 [ 833.378710][T31154] EXT4-fs (loop4): too many log groups per flexible block group [ 833.416734][T31154] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 833.423550][T31154] EXT4-fs (loop4): mount failed [ 833.450212][T31155] bond9: entered promiscuous mode [ 833.455459][T31155] 8021q: adding VLAN 0 to HW filter on device bond9 [ 833.580375][T31168] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 833.613496][T31155] __nla_validate_parse: 4 callbacks suppressed [ 833.613544][T31155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19234'. [ 833.731305][T31175] lo speed is unknown, defaulting to 1000 [ 833.756804][T31175] lo speed is unknown, defaulting to 1000 [ 833.934296][T31187] netlink: 134744 bytes leftover after parsing attributes in process `syz.8.19244'. [ 833.951003][T31187] netlink: zone id is out of range [ 833.956196][T31187] netlink: zone id is out of range [ 833.961345][T31187] netlink: get zone limit has 4 unknown bytes [ 834.085400][T31193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19247'. [ 834.220233][T31197] loop4: detected capacity change from 0 to 1024 [ 834.240454][T31199] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 834.265118][T31197] EXT4-fs: Ignoring removed orlov option [ 834.301582][T31197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.340559][T31203] netlink: 52 bytes leftover after parsing attributes in process `syz.7.19251'. [ 834.378220][T31216] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 834.446856][T24246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.519545][T31221] loop7: detected capacity change from 0 to 512 [ 834.530093][T31225] loop5: detected capacity change from 0 to 128 [ 834.544588][T31225] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 834.565383][T31227] ÿÿÿÿ: renamed from lo [ 834.574441][T31221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 834.593656][T31225] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.19260: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 834.625855][T31225] EXT4-fs (loop5): Remounting filesystem read-only [ 834.633845][T31221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.727158][T21913] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 834.765693][T29205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.916105][T31240] lo speed is unknown, defaulting to 1000 [ 834.922262][T31240] lo speed is unknown, defaulting to 1000 [ 834.967125][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 834.967141][ T29] audit: type=1326 audit(1062.587:191399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31254 comm="syz.8.19272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 835.007019][T31257] loop7: detected capacity change from 0 to 512 [ 835.013431][ T29] audit: type=1326 audit(1062.587:191400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31254 comm="syz.8.19272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 835.013461][ T29] audit: type=1326 audit(1062.587:191401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31254 comm="syz.8.19272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 835.060013][ T29] audit: type=1326 audit(1062.587:191402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31254 comm="syz.8.19272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 835.083417][ T29] audit: type=1326 audit(1062.605:191403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31254 comm="syz.8.19272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 835.106667][ T29] audit: type=1326 audit(1062.605:191404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31254 comm="syz.8.19272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 835.129937][ T29] audit: type=1326 audit(1062.605:191405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31254 comm="syz.8.19272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 835.153167][ T29] audit: type=1326 audit(1062.605:191406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31254 comm="syz.8.19272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 835.176576][ T29] audit: type=1326 audit(1062.605:191407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31254 comm="syz.8.19272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 835.199897][ T29] audit: type=1326 audit(1062.605:191408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31254 comm="syz.8.19272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecf8facb9 code=0x7ffc0000 [ 835.233630][T31257] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.19271: bg 0: block 393: padding at end of block bitmap is not set [ 835.268459][T31257] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 835.277671][T31257] EXT4-fs (loop7): 2 truncates cleaned up [ 835.284107][T31257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.296886][T31271] loop5: detected capacity change from 0 to 128 [ 835.333532][T31257] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 835.339916][T31257] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 835.349526][T31257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19271'. [ 835.359838][T31271] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 835.372014][T31257] hsr_slave_0: left promiscuous mode [ 835.382703][T31257] hsr_slave_1: left promiscuous mode [ 835.429715][T21913] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 835.446938][T31274] netlink: 'syz.2.19274': attribute type 10 has an invalid length. [ 835.490199][T31278] loop5: detected capacity change from 0 to 512 [ 835.536631][T31278] EXT4-fs (loop5): 1 orphan inode deleted [ 835.542811][T31280] netlink: 'syz.2.19274': attribute type 10 has an invalid length. [ 835.543110][T31278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.563516][T15133] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 1 [ 835.635632][T21913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.691364][T31274] bond0: (slave dummy0): Releasing backup interface [ 835.748178][T31288] loop4: detected capacity change from 0 to 128 [ 835.788110][T31288] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 835.844052][T29205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.945442][T31274] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 835.958470][T24246] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 836.076269][T31274] team0: Failed to send options change via netlink (err -105) [ 836.083933][T31274] team0: Port device dummy0 added [ 836.119615][T31287] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19279'. [ 836.261737][T31314] EXT4-fs (loop7): 1 orphan inode deleted [ 836.271277][T31314] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.285081][T16470] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 1 [ 836.323680][T31280] team0: Port device dummy0 removed [ 836.371563][T29205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.477644][T31280] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 836.931611][T31350] lo speed is unknown, defaulting to 1000 [ 836.981877][T31350] lo speed is unknown, defaulting to 1000 [ 837.157625][T31362] ext4: Unknown parameter 'subj_type' [ 837.855059][T31392] netlink: 'syz.7.19321': attribute type 25 has an invalid length. [ 837.894867][T31395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19323'. [ 838.114255][T31403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19325'. [ 838.123506][T31403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19325'. [ 838.144426][T13853] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53267 - 0 [ 838.218120][T31403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19325'. [ 838.218358][T13853] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53267 - 0 [ 838.287171][T31401] lo speed is unknown, defaulting to 1000 [ 838.296196][T31401] lo speed is unknown, defaulting to 1000 [ 838.304239][T13853] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53267 - 0 [ 838.367670][T13853] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53267 - 0 [ 838.601279][T13853] bridge_slave_1: left allmulticast mode [ 838.606968][T13853] bridge_slave_1: left promiscuous mode [ 838.612736][T13853] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.628366][T13853] bridge_slave_0: left allmulticast mode [ 838.634084][T13853] bridge_slave_0: left promiscuous mode [ 838.639823][T13853] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.913273][T13853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.923149][T13853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.932567][T13853] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 838.941798][T13853] bond0 (unregistering): Released all slaves [ 838.949344][T13853] bond1 (unregistering): Released all slaves [ 838.957344][T13853] bond2 (unregistering): Released all slaves [ 838.965537][T13853] bond3 (unregistering): Released all slaves [ 838.973669][T13853] bond4 (unregistering): Released all slaves [ 838.981916][T13853] bond5 (unregistering): Released all slaves [ 838.990402][T13853] bond6 (unregistering): Released all slaves [ 838.998914][T13853] bond7 (unregistering): Released all slaves [ 839.007129][T13853] bond8 (unregistering): Released all slaves [ 839.015549][T13853] bond9 (unregistering): Released all slaves [ 839.032183][T31458] __nla_validate_parse: 4 callbacks suppressed [ 839.032197][T31458] netlink: 68 bytes leftover after parsing attributes in process `syz.8.19335'. [ 839.049879][T31450] netlink: 16 bytes leftover after parsing attributes in process `syz.8.19335'. [ 839.085767][T13853] tipc: Disabling bearer [ 839.091027][T13853] tipc: Left network mode [ 839.228788][T31401] chnl_net:caif_netlink_parms(): no params data found [ 839.280441][T31492] netlink: 'syz.2.19346': attribute type 1 has an invalid length. [ 839.340461][T31492] bond5: entered promiscuous mode [ 839.373530][T31492] 8021q: adding VLAN 0 to HW filter on device bond5 [ 839.406047][T13853] hsr_slave_0: left promiscuous mode [ 839.421954][T13853] hsr_slave_1: left promiscuous mode [ 839.433522][T13853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.441779][T13853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.476170][T31504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19346'. [ 839.491133][T13853] team0 (unregistering): Port device team_slave_1 removed [ 839.503361][T13853] team0 (unregistering): Port device team_slave_0 removed [ 839.543340][T31401] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.550500][T31401] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.559341][T31401] bridge_slave_0: entered allmulticast mode [ 839.570151][T31401] bridge_slave_0: entered promiscuous mode [ 839.577391][T31401] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.584562][T31401] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.591942][T31401] bridge_slave_1: entered allmulticast mode [ 839.598649][T31401] bridge_slave_1: entered promiscuous mode [ 839.627004][T31401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.647610][T31401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.685892][T31401] team0: Port device team_slave_0 added [ 839.693246][T31401] team0: Port device team_slave_1 added [ 839.711006][T31401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.718053][T31401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.744035][T31401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.756550][T31401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.763515][T31401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.789750][T31401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.818771][T31401] hsr_slave_0: entered promiscuous mode [ 839.825512][T31401] hsr_slave_1: entered promiscuous mode [ 839.831801][T31401] debugfs: 'hsr0' already exists in 'hsr' [ 839.838010][T31401] Cannot create hsr debugfs directory [ 840.211067][T31401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 840.223983][T31401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 840.234340][T31401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 840.246640][T31401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 840.325764][T31401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.337870][T31401] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.349449][T13853] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.356556][T13853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.371233][T13853] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.378354][T13853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.401608][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 840.401624][ T29] audit: type=1400 audit(1067.666:191673): avc: denied { ioctl } for pid=31614 comm="syz.2.19359" path="socket:[224125]" dev="sockfs" ino=224125 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 840.469122][T31401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.562540][ T29] audit: type=1400 audit(1067.816:191674): avc: denied { relabelfrom } for pid=31643 comm="syz.7.19360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 840.590123][ T29] audit: type=1400 audit(1067.816:191675): avc: denied { relabelto } for pid=31643 comm="syz.7.19360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 840.609780][ T29] audit: type=1400 audit(1067.834:191676): avc: denied { attach_queue } for pid=31643 comm="syz.7.19360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 840.652835][T31401] veth0_vlan: entered promiscuous mode [ 840.661387][T31401] veth1_vlan: entered promiscuous mode [ 840.682887][T31654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31654 comm=syz.7.19364 [ 840.688635][T31401] veth0_macvtap: entered promiscuous mode [ 840.709600][T31401] veth1_macvtap: entered promiscuous mode [ 840.721441][T31401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.734131][T31401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.743932][T31656] netlink: 'syz.8.19363': attribute type 13 has an invalid length. [ 840.746352][T16470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.825245][T16470] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.851452][T16470] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.870938][T16470] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.891917][T31659] Cannot find add_set index 0 as target [ 840.902362][T31659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19365'. [ 841.019380][T31666] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19367'. [ 841.062502][T31668] set_capacity_and_notify: 2 callbacks suppressed [ 841.062519][T31668] loop5: detected capacity change from 0 to 512 [ 841.080814][T31666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.093259][T31670] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 841.105598][T31672] Cannot find del_set index 286 as target [ 841.113926][T31668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 841.129529][T31672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19369'. [ 841.142707][T31668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.163490][T31666] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 841.192206][T31666] bond0 (unregistering): Released all slaves [ 841.293297][T31401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.294832][T31677] loop7: detected capacity change from 0 to 512 [ 841.326716][T31677] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 841.372506][ T29] audit: type=1400 audit(1068.573:191677): avc: denied { write } for pid=31689 comm="syz.5.19375" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 841.397503][T31677] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.19370: bg 0: block 384: padding at end of block bitmap is not set [ 841.405576][ T29] audit: type=1326 audit(1068.602:191678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31689 comm="syz.5.19375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdc8a1acb9 code=0x0 [ 841.435790][T31677] EXT4-fs (loop7): Remounting filesystem read-only [ 841.442375][T31677] EXT4-fs (loop7): 1 truncate cleaned up [ 841.448128][T31695] wireguard0: entered promiscuous mode [ 841.448821][T31677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.453630][T31695] wireguard0: entered allmulticast mode [ 841.474640][T31700] loop5: detected capacity change from 0 to 256 [ 841.523753][T31700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19375'. [ 841.542163][T29205] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.553181][T31700] netlink: 'syz.5.19375': attribute type 3 has an invalid length. [ 841.561024][T31700] netlink: 240 bytes leftover after parsing attributes in process `syz.5.19375'. [ 841.574607][ T29] audit: type=1326 audit(1068.761:191679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31701 comm="syz.4.19378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8310cacb9 code=0x7ffc0000 [ 841.603673][ T29] audit: type=1326 audit(1068.789:191680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31701 comm="syz.4.19378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd8310cacb9 code=0x7ffc0000 [ 841.627150][ T29] audit: type=1326 audit(1068.789:191681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31701 comm="syz.4.19378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8310cacb9 code=0x7ffc0000 [ 841.650506][ T29] audit: type=1326 audit(1068.789:191682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31701 comm="syz.4.19378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8310cacb9 code=0x7ffc0000 [ 842.056157][T31727] netlink: 'syz.7.19384': attribute type 9 has an invalid length. [ 842.063977][T31727] netlink: 36 bytes leftover after parsing attributes in process `syz.7.19384'. [ 842.163925][T31731] loop7: detected capacity change from 0 to 512 [ 842.227534][T31731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.275425][T31731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.365281][T31747] netlink: 'syz.2.19385': attribute type 10 has an invalid length. [ 842.500040][T31756] netlink: 9 bytes leftover after parsing attributes in process `syz.2.19392'. [ 842.561550][T31764] loop4: detected capacity change from 0 to 1024 [ 842.573410][T31766] loop5: detected capacity change from 0 to 512 [ 842.581009][T31766] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 842.639535][T31773] loop4: detected capacity change from 0 to 164 [ 842.667267][T31773] isofs_fill_super: root inode is not a directory. Corrupted media? [ 842.702210][T31775] FAULT_INJECTION: forcing a failure. [ 842.702210][T31775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.715396][T31775] CPU: 1 UID: 0 PID: 31775 Comm: syz.5.19398 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 842.715429][T31775] Tainted: [W]=WARN [ 842.715436][T31775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 842.715447][T31775] Call Trace: [ 842.715453][T31775] [ 842.715461][T31775] __dump_stack+0x1d/0x30 [ 842.715552][T31775] dump_stack_lvl+0x95/0xd0 [ 842.715571][T31775] dump_stack+0x15/0x1b [ 842.715589][T31775] should_fail_ex+0x263/0x280 [ 842.715612][T31775] should_fail+0xb/0x20 [ 842.715630][T31775] should_fail_usercopy+0x1a/0x20 [ 842.715725][T31775] _copy_from_user+0x1c/0xb0 [ 842.715757][T31775] ___sys_sendmsg+0xc1/0x1e0 [ 842.715918][T31775] __x64_sys_sendmsg+0xd4/0x160 [ 842.715949][T31775] x64_sys_call+0x17ba/0x3000 [ 842.715973][T31775] do_syscall_64+0xc0/0x2a0 [ 842.715996][T31775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.716035][T31775] RIP: 0033:0x7efdc8a1acb9 [ 842.716053][T31775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.716072][T31775] RSP: 002b:00007efdc7477028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.716093][T31775] RAX: ffffffffffffffda RBX: 00007efdc8c95fa0 RCX: 00007efdc8a1acb9 [ 842.716110][T31775] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 842.716194][T31775] RBP: 00007efdc7477090 R08: 0000000000000000 R09: 0000000000000000 [ 842.716207][T31775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.716250][T31775] R13: 00007efdc8c96038 R14: 00007efdc8c95fa0 R15: 00007fff7e705098 [ 842.716271][T31775] [ 842.949353][T31785] ipvlan3: entered promiscuous mode [ 843.005026][T31795] netlink: 'syz.8.19405': attribute type 1 has an invalid length. [ 843.021903][T31795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.034101][T31795] bond0: (slave dummy0): making interface the new active one [ 843.061883][T31795] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 843.082007][T31803] loop4: detected capacity change from 0 to 512 [ 843.091988][T31803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 843.101223][T31804] bond0 (unregistering): (slave dummy0): Releasing active interface [ 843.120276][T31804] bond0 (unregistering): Released all slaves [ 843.132225][T31808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=31808 comm=syz.5.19409 [ 843.145106][T31808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=31808 comm=syz.5.19409 [ 843.247882][T31815] SELinux: failed to load policy [ 843.283012][T31826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 843.394286][T31835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31835 comm=syz.8.19420 [ 843.432518][T31840] netlink: 'syz.2.19423': attribute type 10 has an invalid length. [ 844.315237][T31877] netlink: 'syz.2.19435': attribute type 10 has an invalid length. [ 844.344358][T31880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31880 comm=syz.5.19436 [ 844.365930][T31884] netlink: 'syz.4.19438': attribute type 29 has an invalid length. [ 844.389040][T31884] netlink: 'syz.4.19438': attribute type 29 has an invalid length. [ 844.399612][T31884] __nla_validate_parse: 4 callbacks suppressed [ 844.399631][T31884] netlink: 500 bytes leftover after parsing attributes in process `syz.4.19438'. [ 844.713688][T31907] loop4: detected capacity change from 0 to 1024 [ 844.753332][T31907] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 844.765462][T31910] netlink: 'syz.8.19450': attribute type 8 has an invalid length. [ 844.807800][T31907] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.19449: Invalid block bitmap block 0 in block_group 0 [ 844.828970][T31907] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.19449: Failed to acquire dquot type 0 [ 844.844503][T31907] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.19449: Freeing blocks not in datazone - block = 0, count = 4096 [ 844.858206][T31907] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.19449: Invalid inode bitmap blk 0 in block_group 0 [ 844.877096][T24900] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:26: Failed to release dquot type 0 [ 844.895293][T31907] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 844.912275][T31907] EXT4-fs (loop4): 1 orphan inode deleted [ 844.944097][T31924] netlink: 'syz.8.19452': attribute type 1 has an invalid length. [ 844.973879][T31924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.992593][T31924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19452'. [ 845.012520][T31924] bond0: (slave dummy0): making interface the new active one [ 845.022828][T31924] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 845.074082][T31932] netlink: 'syz.4.19455': attribute type 10 has an invalid length. [ 845.076832][T31924] bond0 (unregistering): (slave dummy0): Releasing active interface [ 845.097484][T31924] bond0 (unregistering): Released all slaves [ 845.272242][T31948] loop5: detected capacity change from 0 to 128 [ 845.294748][T31948] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 845.302407][T31948] FAT-fs (loop5): Filesystem has been set read-only [ 845.462663][T31957] netlink: 'syz.8.19466': attribute type 10 has an invalid length. [ 845.523158][T31964] netlink: 'syz.8.19469': attribute type 1 has an invalid length. [ 845.537313][T31964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.545987][T31964] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19469'. [ 845.557918][T31964] bond0: (slave dummy0): making interface the new active one [ 845.566564][T31964] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 845.578864][T31964] bond0 (unregistering): (slave dummy0): Releasing active interface [ 845.588274][T31964] bond0 (unregistering): Released all slaves [ 845.640262][T31971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31971 comm=syz.5.19470 [ 845.779592][ T29] kauditd_printk_skb: 564 callbacks suppressed [ 845.779607][ T29] audit: type=1326 audit(1072.699:192244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31968 comm="syz.5.19467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7efdc8a1acb9 code=0x7ffc0000 [ 845.845558][T31988] EXT4-fs: Ignoring removed bh option [ 845.854402][T31989] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19477'. [ 845.868457][T31988] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19478'. [ 845.886447][ T3424] IPVS: starting estimator thread 0... [ 845.909689][T31989] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 845.937895][T31988] ================================================================== [ 845.946018][T31988] BUG: KCSAN: data-race in __tipc_sendstream / tipc_poll [ 845.953063][T31988] [ 845.955385][T31988] read-write to 0xffff888144d0b266 of 2 bytes by task 31997 on cpu 0: [ 845.963536][T31988] __tipc_sendstream+0x804/0xb60 [ 845.968486][T31988] tipc_sendstream+0x3e/0x60 [ 845.973090][T31988] __sock_sendmsg+0x145/0x170 [ 845.978213][T31988] sock_write_iter+0x1d2/0x210 [ 845.982983][T31988] vfs_write+0x5a6/0x9f0 [ 845.987218][T31988] ksys_write+0xdc/0x1a0 [ 845.991461][T31988] __x64_sys_write+0x40/0x50 [ 845.996046][T31988] x64_sys_call+0x2847/0x3000 [ 846.000723][T31988] do_syscall_64+0xc0/0x2a0 [ 846.005220][T31988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.011106][T31988] [ 846.013436][T31988] read to 0xffff888144d0b266 of 2 bytes by task 31988 on cpu 1: [ 846.021056][T31988] tipc_poll+0x1f9/0x340 [ 846.025309][T31988] sock_poll+0x21c/0x240 [ 846.029540][T31988] __io_arm_poll_handler+0x1ee/0xb60 [ 846.034820][T31988] io_poll_add+0x69/0xf0 [ 846.039054][T31988] __io_issue_sqe+0xfd/0x2d0 [ 846.043649][T31988] io_issue_sqe+0x56/0xa70 [ 846.048075][T31988] io_submit_sqes+0x78a/0x11b0 [ 846.052845][T31988] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 846.058381][T31988] __x64_sys_io_uring_enter+0x78/0x90 [ 846.063749][T31988] x64_sys_call+0x27e4/0x3000 [ 846.068424][T31988] do_syscall_64+0xc0/0x2a0 [ 846.072918][T31988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.078802][T31988] [ 846.081112][T31988] value changed: 0x0000 -> 0x0041 [ 846.086116][T31988] [ 846.088427][T31988] Reported by Kernel Concurrency Sanitizer on: [ 846.094565][T31988] CPU: 1 UID: 0 PID: 31988 Comm: syz.7.19478 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 846.106019][T31988] Tainted: [W]=WARN [ 846.109811][T31988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 846.119856][T31988] ================================================================== [ 846.129132][T31989] bond0 (unregistering): Released all slaves [ 846.195320][T31994] IPVS: using max 2400 ests per chain, 120000 per kthread