last executing test programs: 23.020028438s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x1000000000000, 0x240008c4}, 0x4054) 22.960377691s ago: executing program 3 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1f8}}, 0x20000010) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008850) 22.839143518s ago: executing program 3 (id=8): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000040000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="f21ba8ec70897bb2baf0f3da86f241961df73a515ef1f3be8ec1b97a5192a96570f715ed78677a14a9072668069b4287715eb03501c781cf54fc69f422d705a2c6e9f2fb6219c5cadb1af2f231c23c5723193408b3471edf4a07f9ff3199a1871d10025a31052456c70d93c343c98a016fda0512a3d9c2909e2c87f186e1d2061c0511a30ca1ecf8dc39f682568ce66e74455565aab44ffd1bb66fa599235377fe5e96", 0xa3}, {&(0x7f0000000080)="829a4c6ab8a32870bb1e6fe0aab83f2b6e12ad4f729cae35df97", 0x1a}], 0x2, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x20000000}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}], 0x30}, 0x0) 22.81038574s ago: executing program 3 (id=9): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x63600, 0x4], 0x90000, 0x12, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x10}}}, {{@ipv6={@loopback, @private2, [0x0, 0xffffffff, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff], 'nr0\x00', 'pimreg\x00', {0xff}, {}, 0x2c, 0x74, 0x3, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x2, 0x1, [0x6, 0x5, 0xc94b, 0x9, 0x7, 0x392, 0x0, 0x5, 0x3, 0xd, 0x3, 0x0, 0xdc55, 0x8, 0x1000, 0x8], 0xf}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xe, 0x20, "cc66ed12c9cd480b27f2ad2614975b1e743a47196a743c63d4a700d9f768"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) brk(0x8200000fbbffd) r0 = getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r2, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x202, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0xa8}}, 0x0) r4 = syz_pidfd_open(r0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="2d6d01de627240b6"], 0x8) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fallocate(r5, 0x0, 0x9, 0x1c0) r6 = pidfd_getfd(r4, r4, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$pppl2tp(0x18, 0x1, 0x1) setns(r6, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x1) 21.913071093s ago: executing program 3 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}, 0x1, 0x0, 0x6000000000000000}, 0x0) 19.770189289s ago: executing program 3 (id=42): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0x1c}], 0x1}, 0x80) 19.75465106s ago: executing program 32 (id=42): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0x1c}], 0x1}, 0x80) 2.747951069s ago: executing program 0 (id=294): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r1, 0x107, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x77359400}}, &(0x7f0000000740)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26b, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xf8, 0x6, 0x9, 0x0, 0x7, 0x14041, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x80, 0x80000000, 0x8, 0x9, 0xffff8afb, 0x21f5, 0x0, 0x1000, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 2.100659427s ago: executing program 0 (id=308): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r2 = epoll_create(0xaf2) r3 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000200f}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x15, &(0x7f0000001bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x88}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 1.683276222s ago: executing program 0 (id=316): r0 = socket$inet(0xa, 0x801, 0x84) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000200)=0x60) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="94", 0x1}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0xf, 0x80000001, 0x2, 0x1ff, 0x8001, 0x4}}, {0xc, 0x2, [0x8, 0x7ffd, 0x1, 0xffff]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x1, 0x3, 0x5, 0xf, 0xa}}, {0x18, 0x2, [0x7, 0x1, 0xa4b, 0xfffe, 0x533b, 0x7fff, 0xfffd, 0x8, 0xffff, 0x7]}}]}]}, 0xa0}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe09) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0xff, 0x0, 0x0, 0x2, 0xf4261, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xb60e}, 0x9092, 0x5, 0x43a1bd76, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$kcm(0x10, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') pread64(r6, &(0x7f0000000600)=""/151, 0x97, 0x59) sendmsg$inet(r3, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="fe1178ebb2fcb91940db86f3e1341375f2dcef361744a177346b86b228d6d8c4bf8457997a99b724745be053280de3139c7f919ed1fd1e7fb20cc967aea3da7a901c5674c04d2eb3f729f01c4eb252b09a5ea0b12e692ae38ad64813c13632a4ea1105df2fbf48232271504f8777f6dfe3bca7ff83f6f59f2b5c2190067892373b538406d50629f935b60dbd793fbd8a5de050b7e1f85e81445e7becbc1cc523a60d3b2d0e146739e6a6906b2a894c2b1160b7c8098eefde6907", 0xba}, {&(0x7f0000000700)="c3b541be140739c27468461c549169affe3c6fb1910ed084dc5e7239f005034b324f3f3474ddce5bc52297a0385e28e58fcbf77c9d0c21104617cb71b65cbfce1b727e96cf6fccd5cccc3c55df09be5164a40bbca308d46c4904a58e72605af5858d8f4840c84538", 0x68}, {&(0x7f0000000840)="1b39cb58c96ed33bba5f9b478e6ec54d921f6dfb5078241c97751da7b300bbebe7940417646b68e38882fba726126450c0eb67f886be88dd4ce43b1bd2835a912f1f52d521401926de877a81309ea83b00f2bdd11b56b867fee36f9e47922a24e2f2594465a3e507", 0x68}, {&(0x7f0000001980)="6e178495539ff855aee831d5c6c6f8ea35c71ffc31ab1d7fb79fdbbd747affd903d2f43b541cde7b1b58cfff0e6d2e29e86680c63766c7733b8245fca7f56a1729d2f2430609979a13b636e692a043c8b6468450b0601f8aeccf7d9108ccc2c2f258947d8edf3a1f3ca8327f8777486559aa43a329e9dcb2b253cd50f13f45e330c4b60e864a550de8af8a3d57b64f4d394782c0af632fc39487018f8e46d6e0d9747dab70f1525e06f08c9113d0ad56611e24f0e63edaa8efc09dd7aff3f128384ecab2cb43982b61572b2566f5006dada4e02ca52c46df482d9a347bba3c1b525f73fb8ffcb6d17babfa04d9ab3621f51ae7c21d97e046e6defe6954e78f81419c6611dc31ac5907e8401e76237ed31abc45388d7c8f14a4613be16f2467aa189ef1028707f33140eed280a7857fde09c21a175ec66d2d03934fafe2cb142dacde5c1ff193885879b3157d38fb7a71ed2ffceb78bc1655135373c04372f0faa9afa506950fdc0c470895a0381508f0d007c0cd643470a54ac5f55d91e82e116fe89a220d31ccf91a76080f0e06477ea6a42cfd2bdadcbebde7ebf9eee8c51fd116a6f4f99f69320ec6d640c30223a43c9e96154ba9507b4396bc840db0ddcf67a836ef629c9a99770a321c6e7f63bdfe051b0608ab4c577dc6fc37e20afdd4daf7a886ba188ca0d4cdba2a7cbb8381538205dc17c9c80f9ae97f35bf38477eb063df35553d04dc965e021b01c9053735415851f97035c3be725024a6f81f26fa2d2195f878e3889a63e9192d545f827c9cf98232a65ac9528108f95f2fff000ea86b551750843e49594bb7adc63ab3743e098102e4eccdbe1d991ca59855e98872c44f8a7112c43e442939863c5d26c1c8abd7b1b38f93ac22c5091b37ef0bc2c54215ea43af8bfe1ac504cbbf111678f0afd189d5a5077c5f73af04781e705098e73206c375ef75f3ce7e9a31b07b6655675755192a55028b58df0d86c516fdd01c25f486c98c23761643fb5616367aaa4b5fd83e4e4dec445a245bb3629482b513a1505eb83506070353ed3157371c5cb758eae9db2027d65d4970529c5cf6d12d76ce6927ceff277a92056d8fa89dd453c57430e5f39c3336b20ff2f23e8600f42394919c971bea98b619a666cdcadb59c7c13f582cb5359765d3696fb2e2ef98887fe877d5744c85e1a49551f41bf66b89ecf8976a1d48c39f9f3d487c50db50e6b2ae3ef4b5fe3b0f40236c6fa5ceaa51cb1a85b7267926985dede675c5b2cb32dea5e4cf817ea36d8e9a15f9cedddca1dc5771b31e4dc9a8cfe0edbdf5d410a065112d1eba91ddabaa7fea0b9f4c8460ef1d188843e8b312f18b2c5a2a0c5bfc663125715e982c90f41577961dbe9d8159652b135219d3a72b2a68851f14cd5991a53868c3f454682aa3310938aeb23e7b2d1d751df201f23bb351294dc351b1f8531ceae7fe16214b93f7d8fb8de778201ee46b64bcab8842e33cf650d3c3b6610eca5cfecf4fa43273b0f043a106fccfe1e8", 0x437}], 0x4}, 0x48800) sendmsg$sock(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)="035d", 0x2}], 0x1}, 0x40000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000000)=0x818) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800024000000002080001400000000308000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) fsopen(&(0x7f00000001c0)='tmpfs\x00', 0x9d3c8446fcb3c8cd) 1.662715893s ago: executing program 0 (id=317): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 1.579901268s ago: executing program 0 (id=320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="7c010000190001000000000000000004000000000000000000000000000000006401010000000000000000000000000000000000000080000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000041da0000000000000000000000000000000000000000000000000000000000000000000000000000c4000500e0000001000000000000000000000000000004d56c000000020000000000000000000000000000000000000000000000010303000400000002000000030000000a010101000000000000000000000000000004d32b00000002"], 0x17c}, 0x1, 0x0, 0x0, 0x4}, 0x4894) 1.54305774s ago: executing program 0 (id=322): creat(&(0x7f0000000380)='./file0\x00', 0x10) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x2b6]}, 0x8) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008002, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ppoll(&(0x7f0000000340)=[{r0, 0x2293}, {r0, 0x402}], 0x2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x2000, 0x8, 0x294}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff"], 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x890b, &(0x7f0000000000)=@buf={0x0, 0xffffffffffffffff}) 1.332679112s ago: executing program 4 (id=326): r0 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newae={0x4c, 0x1e, 0x80c, 0x70bd29, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x2, 0x33}, @in=@multicast1, 0x0, 0x3501}, [@lastused={0xc, 0xf, 0x6}]}, 0x4c}}, 0x880) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000001c0)={0x8, 'erspan0\x00', {'virt_wifi0\x00'}, 0x4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2, 0x0, 0x159, 0x8013, r2, 0x9, '\x00', r1, r2, 0x3, 0x4, 0x4, 0x1, @value=r2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000200)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x6f}, @jmp={0x5, 0x0, 0x1, 0xa, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x0, 0x0, 0x0, 0xb, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f0000000280)='GPL\x00', 0x5b42, 0x0, 0x0, 0x41100, 0x39, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)=[r2, r3], &(0x7f00000003c0)=[{0x0, 0x5, 0xd, 0x1}, {0x4, 0x1, 0x8, 0x8}, {0x4, 0x3, 0xa, 0x8}, {0x4, 0x3, 0xa, 0x7}, {0x2, 0x3, 0xf, 0x3}, {0x0, 0x2, 0x8, 0xb}, {0x4, 0x3, 0x6, 0xb}, {0x4, 0x3, 0x10, 0x7}], 0x10, 0x3}, 0x94) fsetxattr$security_evm(r0, &(0x7f0000000500), &(0x7f0000000540)=@ng={0x4, 0xd, "3a4ff93efca2b33e98"}, 0xb, 0x2) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000580)=0x1000) fsopen(&(0x7f00000005c0)='ocfs2_dlmfs\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x40000, 0x80) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000880)={{0x0, 0x4, 0x401, 0x2, 0x3, 0xb100, 0x1, 0x71, 0x3, 0xd, 0x9, 0x1, 0x3, 0x0, 0x2d96c73a}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000001880)={r6, r7, "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", "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"}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$packet(0x11, 0x3, 0x300) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000002880)={@null, 0x9, 'rose0\x00'}) pipe2$9p(&(0x7f0000002980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80900) write$P9_RLERRORu(r8, &(0x7f00000029c0)={0x1a, 0x7, 0x1, {{0xd, 'security.evm\x00'}, 0x1ff}}, 0x1a) unlinkat(r4, &(0x7f0000002a00)='./file0\x00', 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a80), r2) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x24, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48480}, 0x40880) sendto$unix(r5, &(0x7f0000002b80)="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", 0xfe, 0x20000000, &(0x7f0000002c80)=@abs={0xae04304b2115e178, 0x0, 0x4e20}, 0x6e) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d00)={0x1b, 0x0, 0x0, 0x900, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, r4, 0x3, 0x2, 0x4}, 0x50) read$rfkill(r2, &(0x7f0000002d80), 0x8) 1.255834837s ago: executing program 4 (id=327): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x258, 0x20a, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xf, 0x6, 0x5, 0x7, 'snmp_trap\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000004500)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES16], 0xf0}}, 0x4040021) bind$can_raw(r0, &(0x7f0000000040), 0x10) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r2}, 0x10) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4a1e, &(0x7f0000000140)=ANY=[@ANYRESOCT=r4], 0x4, 0x335, &(0x7f0000000d80)="$eJzs3E9IG1kcwPGfMcYkapLDsssuLD52L7uXQbN7XjYsCssGVtQsqwsLo07akGkimWBJKVVPvZbeeyr0IB69Ca23nrz01kLppTcvhR70UDolkxnzxxhjTIlNvh+QvLz3fs57My/wm2Fmjv59cCubtrS0XhRfUMm4iMiJSEx84hlyP31OOSC1to5l7P3L7xeWlv9KJJMz80rNJhZ/iSulIpNPb98Nud32R+Uw9v/Ru/jbw68Pvz36uHgzY6mMpXL5otLVSv5NUV8xDbWWsbKaUnOmoVuGyuQso1Bpz1fa02Z+fb2k9NzaRHi9YFiW0nMllTVKqphXxUJJ6Tf0TE5pmqYmwtLa6+cXdBgAqZ35eT3RYfBqlweDz6RQSOjDIhI605La6cmAAABATzXm/z6RrUvl//Kzm/9LxMn/y52r+f/uDwfFsX/2Im7+vx9olv//+qryv+ry/6CIdJL/P5I2839pmhENlivl/7geJgNnqobqvpXz/7D7+3Vs/7c75RTI/wEAAAAAAAAAAAAAAAAAAAAA+BKc2HbUtu2o9+n9VR8hcL+jL513/EdFJFg++jbHv58tLC1L0Hlwzx8RMe9vpDZSlU+3w4GImGLIlETlg7MeXOWy9+SRKovJM3PTjd/cSA07LYm0ZJz4aYlKrDHetmf/TM5Mqwo3/vQxpXBtfFyi8lXz+Hh9vLv9gPz0Y028JlF5sSp5MWXNWdfV+HvTSv3xd7IhPuT0AwAAAACgH2jqVNPzd007r73ylpHT8+um1wcq59dTTc/P/dHv/L2ePQAAAAAAg8Eq3cnqpmkUWhRCcnGfjgrepYJ2OgcaakZadR6umWG74wk497uINDT5RORS83rc5l6tK3g3UtQ1Bd3KznavN/9uHS/vtgxvt7QR5W8c/GS5Ql11PN5lo8A5+1nmzkb5WqyEka4t7G8ePjnu3g/ktz1vBVzcebvTbQUbV51TGHE3zBU6AAAAoI9Uk36v5vfa5qGeDAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAHT+fvJxtt+L12v5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcF58CAAD//60z+84=") timer_settime(r4, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000400)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x84) fchdir(r6) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40815) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x244403, 0x0) perf_event_open(0x0, 0x0, 0x0, r7, 0xa) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x82) fchdir(r9) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r10, 0xfffffffffffffffe, 0xff80) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) lseek(r11, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) 1.19596459s ago: executing program 4 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x800000000000000}, 0x40080c0) 1.19551156s ago: executing program 4 (id=331): mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x460042, 0x0, 0x1b}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000240)={[{@nolazytime}, {@abort}, {@jqfmt_vfsv0}, {@inode_readahead_blks}, {@nomblk_io_submit}, {@auto_da_alloc}, {@nouid32}]}, 0x2, 0x47e, &(0x7f0000000c40)="$eJzs3MtrXNUfAPDvvXm0v76SX62P1qrRIgYfSZM+7MKNouCioqCLuoyTtJSmjTQRbCk2ilQUQQq6cCUuBf8Cd25EXQludS+Fot20CkLk3rk3nUwzTaaZzLSdzwemPWfuuXPOd869c8+ccycBdK2h7J8kYktE/BYRA9Xs0gJD1f+uXTlX+fvKuUoSCwuv/5nk5a5eOVcpi5b7bS4yw2lE+mFSVLLU7JmzJyamp6dOF/nRuZNvj86eOfvM8ZMTx6aOTZ0aP3Ro/76xZw+OH2hJnFlcV3e9N7N758tvXnylcuTiWz99m7V3S7G9No5WGcoC/2shV7/t8VZX1mFba9JJbwcbQlN6IiLrrr78/B+InrjeeQPx0gcdbRywrrJr04bGm+cXgLtYEp1uAdAZ5YU++/5bPto09LgtXH6++gUoi/ta8ahu6Y20KNNX9/22lYYi4sj8P19lj1ineQgAgFqfVr44HE8vN/5L476actuKNZTBiPh/RGyPiHsiYkdE3BuRl70/Ih5osv76paEbxz/ppVsKbJWy8d9zxdrW0vFfOfqLwZ4itzWPvy85enx6am/xngxH34YsP3aTOr5/8dfPGm2rHf9lj6z+cixYtONSb90E3eTE3EQ+KG2By+9H7OpdLv5kcSUgiYidEbGruZfeVib6n/xmd6NCK8ef+fLjZXduwTrTwtcRT1T7fz7q4i8ljdcnPzk4fmB0Y0xP7R0tj4ob/fzLhdca1b+6+NdP1v+blh7/9UUGk9r12tnm67jw+0eVRp1Vxt/f5PHfn7yRfx71F8+9OzE3d3osoj85nOeXPD9+fd8yX5bP4h/ek8f/b/GVePH8317sk8X/YERkB/FDEfFwRDxStP3RiHgsIvbcJP4fX2i87Xbo/8llP/8Wj/+6/m8+0XPih+8a1b+6z7/9eWq4eCbr/54V4lptA9f05gEAAMAdIs3vgU/SkcV0mo6MVO/h3xGb0umZ2bmnjs68c2qyeq/8YPSl5UzXQM186FgyX7xiNT9ezBWX2/cV88af9/wvz49UZqYnOxw7dLvNDc7/zB8rTbIBd766pZn8psDx/g41Bmir+qXZdGn2/KvL7JOsZ4OAtvF7beheK5z/abvaAbSf6z90r+XO//N1eWsBcHdy/YfuVXf+b+xUO4D2c/2H7nXL579JAbiTreV3/RLdnIh07a/TG2vZvWuP3ha88ysnVvrkaNEfIAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhn/wUAAP//yE7xAw==") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 923.879496ms ago: executing program 2 (id=334): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000014000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 923.565966ms ago: executing program 5 (id=335): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003230000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000200000000002000100000000000000070cfeffff7f03000500000000000a"], 0x118}, 0x1, 0x7}, 0x10) 908.700557ms ago: executing program 5 (id=336): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001900)={0x18, r2, 0x8d973159d937b11d, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x48080) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0xce21, 0x2, 0x2, 0x0, 0x0, 0x21}, {@in=@empty, 0xfe, 0x32}, @in6=@empty, {0x100000001, 0x0, 0xfffffffffffffffd, 0x8, 0x41, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x81, 0x10, 0x3}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e21, @in=@loopback}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 884.231019ms ago: executing program 4 (id=337): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000000000005a90f57f07703aefe7364ebbee07022c2277ae2a0000000000000000001000000000", 0x2a}, {&(0x7f0000000040)="aa1d484ea0f50000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 839.785621ms ago: executing program 5 (id=338): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800022, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000500), 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x40) lseek(r0, 0x897, 0x4) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = dup2(r5, r5) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='x'], 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x800) accept$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0008df250f00000005002f000000000005003800010000000500290001000000"], 0x2c}}, 0x10) 803.309363ms ago: executing program 2 (id=339): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r1, 0x107, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x77359400}}, &(0x7f0000000740)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='cpu&-0\xff\xff\xff\xff\xff\xb1\xc1\x1f\x16\xc0\xcf\xc6\xfd9\xc5\x86\xc8\xce\x17X=NZ\b\x9b\xed\xc9\xeef\\;\xc7\x82\xfa\x15K\x8f\xc5\xa3\xf8\xf0R\xfbb\xc2/\xdfsh\xa7}\xc1\x96\xb5\xc0\x9d\x86\x81e!\xbd\x02\xd2;\xc1:DQ o#|(\xb9\xd5PL\xe1\xc2s\x9e\xca\xdc\xbc\x89z\xd8\xaez\x8c\x97\t\xb3=\xc1A\'rql\xb1\xe6\x9d\xd4;\x1c{\x11]\xdc\xa3\xdf,\xa327E\x8bz\x8a\x93\fS\\\xa5\x01\xa8+3\x1b\xe3\xdf0\xce\x82>\xa0$z\xb1r\xffo\xea1*\xdf\x13\xd8\xf7>\x99\xe9\xd9k\x9eE\x98\xb3\xa0=\x89c$\xf7\x8a\x13\xf6BGp\xb4\x88\x1c\xd3\x9dR\xf3^\r\xf0\xe4\xf9\x0e\xe6\a94Z\xc0\x1d\xe2\x9d') sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xf8, 0x6, 0x9, 0x0, 0x7, 0x14041, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x80, 0x80000000, 0x8, 0x9, 0xffff8afb, 0x21f5, 0x0, 0x1000, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 776.671705ms ago: executing program 4 (id=340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) listen(r2, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000040)=0x41) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 657.971362ms ago: executing program 5 (id=342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7c0100001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000500000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000050000000000000000000000000000000000000000140000000000000000000000000000000000000008000000000000000000000000000000020000000000000100010000000000c4000500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff34800000000000fdffffff000000003c200000ac141443000000000000000000b8c1b030257d6a701440d8424553"], 0x17c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) 592.789606ms ago: executing program 5 (id=343): add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) 530.636199ms ago: executing program 5 (id=344): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000300)=[{0x2, 0x0, {0x1, 0xff, 0x1}, {0x0, 0xf0, 0x3}, 0xfd, 0x1}, {0x3, 0x1, {0x2, 0x1}, {0x0, 0x1, 0x2}, 0xff, 0xfd}], 0xfce2) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000101030000000a000000010002000009240001800c000280040001002100400014000180080001"], 0x38}, 0x1, 0x100000000000000, 0x0, 0x20000014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x11, 0x6, @link_local}, 0xfffffe12) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) recvmmsg(r5, &(0x7f0000002180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/75, 0x4b}, 0x1f}], 0x1, 0x2, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @link_local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 519.57659ms ago: executing program 2 (id=346): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 427.643035ms ago: executing program 2 (id=349): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000015001001800128008000100677470000c000280050005000100000008000a00", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x2400c080) 319.629132ms ago: executing program 2 (id=352): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="8ab24a33c4f264e505c8f86ea86c56664b27fc1c7df6eef09902701359f2c977194f8a0a754dcc93b420e33a375e3eb742f7e61a27"], 0x10) (async) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x5, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0xfffffffffffffffc}, 0x101000, 0x7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) listen(r1, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 302.688923ms ago: executing program 2 (id=354): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_pidfd_open(r3, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r6, 0x0, 0x5e, 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0x1, &(0x7f0000000440)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = pidfd_getfd(r5, r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766ff008695", @ANYRESHEX=r8, @ANYBLOB=',\x00']) prlimit64(0x0, 0x4, &(0x7f0000000480)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000040)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@errors_remount}, {@jqfmt_vfsv0}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") r9 = creat(&(0x7f0000000200)='./file1\x00', 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_FSSETXATTR(r9, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r11, r11, 0x0, 0x548) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r12, 0x40284504, &(0x7f0000000000)=""/56) sendmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0x10, &(0x7f0000000300)={&(0x7f0000000380)={0x5, 0x100, 0x9, {0x77359400}, {}, {0x4, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x3f, 0x1, 0x0, 0x0, "157207962b6ab0e19bb2801ba03d6eb77a3901abe26320b0aa22d0d824c06828c0a83627b72a3c28bfc770a35e99fafd954a9d9259b32bf77038b1ed62e9ecad"}}, 0x80}, 0x1, 0x0, 0x0, 0x24000805}, 0x48040) 222.259747ms ago: executing program 1 (id=357): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@quota}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) fchdir(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x75, 0x0, 0x40000}, 0x20) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x75, 0x0, 0x40000}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x12440, 0x0) pwrite64(r5, &(0x7f0000000280), 0x0, 0x7fff) (async) pwrite64(r5, &(0x7f0000000280), 0x0, 0x7fff) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet_sctp(r4, &(0x7f00000004c0)=[{&(0x7f00000002c0)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="0e3513226d7a3b626705378262fad9add1bf8901cf5130d857e12792cbe17d8bb353a81aae06932c2e09", 0x2a}, {&(0x7f0000000380)="db73ebfa66b5c6c4e4f043304ced50d5c9b81e245f017b25425b1edc307e5f071d55e8a6324fa3c577c24bb6da92255fb54460808a661115fcf9be6cc92a68b5fbbc512535ebbf00621756fa1ab6be380034f3cf6aa6d935afe5aaf0df6f3476434f16be8098d8125820cffdb5795b5bbb58653cde223a21c0cfce5d213819465317c2d1d9f515dc666295d3d70c5fa3bd20763362bc40171194ff43a2014f7dee31da0e", 0xa4}], 0x2, &(0x7f0000000480)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xa}}], 0x18, 0x4000005}], 0x1, 0x24004000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaed}, 0x14105, 0x1, 0xfffffbff, 0x3, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaed}, 0x14105, 0x1, 0xfffffbff, 0x3, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) listen(0xffffffffffffffff, 0xfffffffc) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=,rfdno=\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=,rfdno=\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000011c0)={@llc={0x1a, 0x30c, 0x7f, 0x0, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, {&(0x7f0000001140)=""/31, 0x1f}, &(0x7f0000001180), 0x34}, 0xa0) openat$cgroup_pressure(r1, &(0x7f0000000280)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 160.179761ms ago: executing program 1 (id=358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000003f00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 122.700473ms ago: executing program 1 (id=359): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000ff000000009500680000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 59.870127ms ago: executing program 1 (id=360): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 59.547487ms ago: executing program 1 (id=361): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") 0s ago: executing program 1 (id=362): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0x85, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) r1 = socket(0x10, 0x80002, 0x0) connect$netlink(r1, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xb000000d}) recvfrom$unix(r5, 0x0, 0x0, 0x40002000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x40) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x12, 0x0, &(0x7f00000001c0)) unshare(0x2040400) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n, priority 0 [ 32.763834][ T3518] tipc: Disabling bearer [ 32.784598][ T3519] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 32.787388][ T3519] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.810601][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.824349][ T3518] batadv_slave_1: left promiscuous mode [ 32.856916][ T3490] syz.3.9 (3490) used greatest stack depth: 10208 bytes left [ 32.890749][ T3309] syz-executor: attempt to access beyond end of device [ 32.890749][ T3309] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 33.079399][ T3534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.104050][ T3534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.139796][ T3534] loop2: detected capacity change from 0 to 512 [ 33.174594][ T3540] netlink: 'syz.4.25': attribute type 4 has an invalid length. [ 33.182316][ T3540] netlink: 17 bytes leftover after parsing attributes in process `syz.4.25'. [ 33.201217][ T3541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 33.210208][ T3541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 33.234354][ T3534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.248671][ T3534] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.261016][ T3534] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.20: corrupted inode contents [ 33.275228][ T3534] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.20: mark_inode_dirty error [ 33.290177][ T3534] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.20: corrupted inode contents [ 33.306841][ T3534] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.20: mark_inode_dirty error [ 33.348165][ T3551] Zero length message leads to an empty skb [ 33.355566][ T3551] smc: net device bond0 applied user defined pnetid SYZ2 [ 33.364894][ T3551] netlink: 14 bytes leftover after parsing attributes in process `syz.4.28'. [ 33.378414][ T3551] smc: removing net device bond0 with user defined pnetid SYZ2 [ 33.391119][ T3551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.406880][ T3551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.425658][ T3554] loop0: detected capacity change from 0 to 256 [ 33.435808][ T3551] bond0 (unregistering): Released all slaves [ 33.456301][ T3556] lo speed is unknown, defaulting to 1000 [ 33.468377][ T3556] lo speed is unknown, defaulting to 1000 [ 33.482738][ T3556] lo speed is unknown, defaulting to 1000 [ 33.523194][ C1] hrtimer: interrupt took 24676 ns [ 33.536221][ T3556] infiniband syz0: set active [ 33.541281][ T3556] infiniband syz0: added lo [ 33.546610][ T3423] lo speed is unknown, defaulting to 1000 [ 33.563963][ T3556] RDS/IB: syz0: added [ 33.570034][ T3556] smc: adding ib device syz0 with port count 1 [ 33.576569][ T3556] smc: ib device syz0 port 1 has no pnetid [ 33.588231][ T3423] lo speed is unknown, defaulting to 1000 [ 33.594140][ T3556] lo speed is unknown, defaulting to 1000 [ 33.645383][ T3556] lo speed is unknown, defaulting to 1000 [ 33.684751][ T3556] lo speed is unknown, defaulting to 1000 [ 33.726085][ T3556] lo speed is unknown, defaulting to 1000 [ 33.769234][ T3556] lo speed is unknown, defaulting to 1000 [ 33.805396][ T3561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3561 comm=syz.1.30 [ 33.948473][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.030313][ T3573] capability: warning: `syz.2.34' uses deprecated v2 capabilities in a way that may be insecure [ 34.140265][ T3578] netlink: 152 bytes leftover after parsing attributes in process `syz.2.36'. [ 34.169087][ T3580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 34.178249][ T3580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 34.272899][ T3588] netlink: 124 bytes leftover after parsing attributes in process `syz.2.39'. [ 34.341356][ T3591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.351767][ T3591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.361878][ T3591] bond0 (unregistering): Released all slaves [ 34.992870][ T2031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.149724][ T3599] lo speed is unknown, defaulting to 1000 [ 35.224323][ T3599] chnl_net:caif_netlink_parms(): no params data found [ 35.259819][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.267099][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.274335][ T3599] bridge_slave_0: entered allmulticast mode [ 35.280973][ T3599] bridge_slave_0: entered promiscuous mode [ 35.287669][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.294731][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.301994][ T3599] bridge_slave_1: entered allmulticast mode [ 35.308536][ T3599] bridge_slave_1: entered promiscuous mode [ 35.325353][ T3599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.335808][ T3599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.355311][ T3599] team0: Port device team_slave_0 added [ 35.362028][ T3599] team0: Port device team_slave_1 added [ 35.376945][ T3599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.383972][ T3599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.409916][ T3599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.421295][ T3599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.428265][ T3599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.454268][ T3599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.480284][ T3599] hsr_slave_0: entered promiscuous mode [ 35.486198][ T3599] hsr_slave_1: entered promiscuous mode [ 35.492839][ T3599] debugfs: 'hsr0' already exists in 'hsr' [ 35.498766][ T3599] Cannot create hsr debugfs directory [ 35.609250][ T2031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.669163][ T2031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.719492][ T2031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.790103][ T2031] bridge_slave_1: left allmulticast mode [ 35.795889][ T2031] bridge_slave_1: left promiscuous mode [ 35.801720][ T2031] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.809876][ T2031] bridge_slave_0: left allmulticast mode [ 35.815560][ T2031] bridge_slave_0: left promiscuous mode [ 35.821238][ T2031] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.909072][ T2031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.919140][ T2031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.928790][ T2031] bond0 (unregistering): Released all slaves [ 35.974368][ T2031] hsr_slave_0: left promiscuous mode [ 35.980277][ T2031] hsr_slave_1: left promiscuous mode [ 35.986101][ T2031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.993540][ T2031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.001696][ T2031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.009313][ T2031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.019725][ T2031] veth1_macvtap: left promiscuous mode [ 36.025556][ T2031] veth0_macvtap: left promiscuous mode [ 36.031268][ T2031] veth1_vlan: left promiscuous mode [ 36.036618][ T2031] veth0_vlan: left promiscuous mode [ 36.102212][ T2031] team0 (unregistering): Port device team_slave_1 removed [ 36.112351][ T2031] team0 (unregistering): Port device team_slave_0 removed [ 37.218972][ T3584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.237810][ T3599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.263902][ T3599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.286430][ T3599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.311006][ T3625] loop0: detected capacity change from 0 to 512 [ 37.311610][ T3599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.322829][ T3624] loop1: detected capacity change from 0 to 512 [ 37.332572][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 37.332661][ T28] audit: type=1400 audit(1770698588.750:190): avc: denied { bpf } for pid=3620 comm="syz.1.47" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.359164][ T28] audit: type=1400 audit(1770698588.750:191): avc: denied { perfmon } for pid=3620 comm="syz.1.47" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.380855][ T3621] bridge_slave_1: left allmulticast mode [ 37.381968][ T3625] EXT4-fs: Ignoring removed nobh option [ 37.386617][ T3621] bridge_slave_1: left promiscuous mode [ 37.392648][ T3624] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.398276][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.411396][ T3624] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.438791][ T3618] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.456389][ T3625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.475848][ T3624] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.491334][ T3625] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.526918][ T28] audit: type=1400 audit(1770698588.960:192): avc: denied { unlink } for pid=3622 comm="syz.0.45" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.534786][ T3624] EXT4-fs (loop1): 1 truncate cleaned up [ 37.552392][ T28] audit: type=1400 audit(1770698588.960:193): avc: denied { write open } for pid=3622 comm="syz.0.45" path="/13/bus/bus" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.581569][ T3618] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.594520][ T3624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.625561][ T3624] EXT4-fs (loop1): shut down requested (0) [ 37.640435][ T28] audit: type=1400 audit(1770698589.070:194): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 37.662623][ T28] audit: type=1400 audit(1770698589.070:195): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.684160][ T28] audit: type=1400 audit(1770698589.070:196): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.706094][ T28] audit: type=1400 audit(1770698589.070:197): avc: denied { add_name } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.727362][ T28] audit: type=1400 audit(1770698589.070:198): avc: denied { create } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.748543][ T28] audit: type=1400 audit(1770698589.070:199): avc: denied { append open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.749597][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.795669][ T3618] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.818590][ T3599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.825582][ T3665] loop4: detected capacity change from 0 to 512 [ 37.834608][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.850030][ T3665] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 37.858065][ T3599] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.879203][ T3618] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.918490][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.926083][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.949518][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.958548][ T2031] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.965715][ T2031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.976144][ T3665] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 38.002991][ T1034] IPVS: starting estimator thread 0... [ 38.063576][ T2031] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.096833][ T3681] IPVS: using max 2256 ests per chain, 112800 per kthread [ 38.129194][ T2031] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.164725][ T2031] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.233394][ T3599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.285760][ T3712] loop1: detected capacity change from 0 to 512 [ 38.297360][ T3712] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.301106][ T3712] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.301926][ T3712] EXT4-fs warning (device loop1): ext4_enable_quotas:7226: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 38.302240][ T3712] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 38.302346][ T3712] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.62: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.302395][ T3712] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.302590][ T3712] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.62: couldn't read orphan inode 13 (err -117) [ 38.302621][ T3712] loop1: lost filesystem error report for type 5 error -117 [ 38.304703][ T3712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.320454][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.444611][ T3740] batadv_slave_1: entered promiscuous mode [ 38.444947][ T3740] __nla_validate_parse: 3 callbacks suppressed [ 38.444964][ T3740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 38.509947][ T3748] syzkaller0: entered promiscuous mode [ 38.509971][ T3748] syzkaller0: entered allmulticast mode [ 38.511658][ T3750] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 38.511658][ T3750] program syz.2.70 not setting count and/or reply_len properly [ 38.513535][ T3748] tipc: Started in network mode [ 38.513602][ T3748] tipc: Node identity 9ee3737fc4bc, cluster identity 4711 [ 38.513642][ T3748] tipc: Enabled bearer , priority 0 [ 38.523299][ T3748] tipc: Resetting bearer [ 38.525483][ T3748] tipc: Disabling bearer [ 38.560495][ T3599] veth0_vlan: entered promiscuous mode [ 38.725613][ T3748] batadv_slave_1: left promiscuous mode [ 38.748893][ T3599] veth1_vlan: entered promiscuous mode [ 38.780081][ T3599] veth0_macvtap: entered promiscuous mode [ 38.794683][ T3599] veth1_macvtap: entered promiscuous mode [ 38.816592][ T3599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.841866][ T3599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.865008][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.912545][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.937685][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.976530][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.989038][ T3777] xt_hashlimit: max too large, truncated to 1048576 [ 39.100426][ T3786] netlink: 'syz.2.75': attribute type 4 has an invalid length. [ 39.108140][ T3786] netlink: 17 bytes leftover after parsing attributes in process `syz.2.75'. [ 39.136040][ T3788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.76'. [ 39.144935][ T3788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 39.242166][ T3794] loop0: detected capacity change from 0 to 512 [ 39.286802][ T3794] EXT4-fs (loop0): #blocks per group too big: 65535 [ 39.306479][ T3799] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 39.434055][ T3804] wireguard0: entered promiscuous mode [ 39.439635][ T3804] wireguard0: entered allmulticast mode [ 39.544994][ T3812] loop5: detected capacity change from 0 to 1024 [ 39.588479][ T3812] EXT4-fs: Ignoring removed orlov option [ 39.677557][ T3812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.790047][ T3824] tmpfs: Bad value for 'mpol' [ 39.915559][ T3827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.955361][ T3827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.975020][ T3829] loop2: detected capacity change from 0 to 8192 [ 40.066756][ T3303] loop2: p1 p2[DM] p4 [ 40.071119][ T3303] loop2: p1 size 196608 extends beyond EOD, truncated [ 40.083426][ T3303] loop2: p2 start 4292936063 is beyond EOD, truncated [ 40.090314][ T3303] loop2: p4 size 50331648 extends beyond EOD, truncated [ 40.167352][ T3829] loop2: p1 p2[DM] p4 [ 40.174113][ T3599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.183483][ T3829] loop2: p1 size 196608 extends beyond EOD, truncated [ 40.228511][ T3829] loop2: p2 start 4292936063 is beyond EOD, truncated [ 40.235426][ T3829] loop2: p4 size 50331648 extends beyond EOD, truncated [ 40.408160][ T3810] loop4: detected capacity change from 0 to 1024 [ 40.628042][ T3810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.696870][ T3850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 40.876602][ T3816] EXT4-fs error (device loop4): ext4_xattr_set_entry:1670: inode #15: comm syz.4.83: corrupted xattr entries [ 40.918646][ T3816] EXT4-fs error (device loop4): ext4_xattr_block_set:2220: inode #15: comm syz.4.83: bad block 113 [ 40.950835][ T3865] netlink: 168 bytes leftover after parsing attributes in process `syz.1.100'. [ 40.988671][ T3869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.101'. [ 41.098145][ T3855] loop2: detected capacity change from 0 to 32768 [ 41.113347][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.189871][ T3888] FAULT_INJECTION: forcing a failure. [ 41.189871][ T3888] name failslab, interval 1, probability 0, space 0, times 1 [ 41.202729][ T3888] CPU: 1 UID: 0 PID: 3888 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.202762][ T3888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 41.202777][ T3888] Call Trace: [ 41.202784][ T3888] [ 41.202793][ T3888] __dump_stack+0x1d/0x30 [ 41.202912][ T3888] dump_stack_lvl+0x95/0xd0 [ 41.203012][ T3888] dump_stack+0x15/0x1b [ 41.203070][ T3888] should_fail_ex+0x263/0x280 [ 41.203171][ T3888] should_failslab+0x8c/0xb0 [ 41.203272][ T3888] kmem_cache_alloc_noprof+0x68/0x490 [ 41.203297][ T3888] ? radix_tree_node_alloc+0x8a/0x1f0 [ 41.203326][ T3888] radix_tree_node_alloc+0x8a/0x1f0 [ 41.203354][ T3888] idr_get_free+0x1fa/0x550 [ 41.203459][ T3888] idr_alloc_u32+0xf2/0x1a0 [ 41.203519][ T3888] idr_alloc_cyclic+0x7b/0x140 [ 41.203550][ T3888] btf_new_fd+0x5bf/0x7b0 [ 41.203574][ T3888] ? ns_capable+0x7c/0xb0 [ 41.203641][ T3888] bpf_btf_load+0x112/0x130 [ 41.203669][ T3888] __sys_bpf+0x357/0x7b0 [ 41.203699][ T3888] __x64_sys_bpf+0x41/0x50 [ 41.203719][ T3888] x64_sys_call+0x28e1/0x3000 [ 41.203815][ T3888] do_syscall_64+0xc0/0x2a0 [ 41.203854][ T3888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.203876][ T3888] RIP: 0033:0x7fea1ddaaf79 [ 41.203896][ T3888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.203922][ T3888] RSP: 002b:00007fea1c7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.203948][ T3888] RAX: ffffffffffffffda RBX: 00007fea1e025fa0 RCX: 00007fea1ddaaf79 [ 41.203966][ T3888] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000012 [ 41.203982][ T3888] RBP: 00007fea1c7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 41.203997][ T3888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.204013][ T3888] R13: 00007fea1e026038 R14: 00007fea1e025fa0 R15: 00007ffed72c5188 [ 41.204068][ T3888] [ 41.506875][ T3902] loop5: detected capacity change from 0 to 512 [ 41.528245][ T3902] EXT4-fs (loop5): 1 orphan inode deleted [ 41.529298][ T3896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.537453][ T3902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.586955][ T3902] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.641592][ T3913] netlink: 148 bytes leftover after parsing attributes in process `syz.0.109'. [ 41.658295][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.658845][ T3599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.690921][ T3914] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.713009][ T3914] syz.1.118 uses obsolete (PF_INET,SOCK_PACKET) [ 41.920117][ T3940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 41.928974][ T3940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 42.144111][ T3948] EXT4-fs: Ignoring removed orlov option [ 42.182597][ T3948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.185858][ T3950] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 42.215032][ T3956] bridge_slave_1: left allmulticast mode [ 42.220987][ T3956] bridge_slave_1: left promiscuous mode [ 42.226779][ T3956] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.290235][ T3958] EXT4-fs (loop5): #clusters per group too big: 65535 [ 42.321365][ T3960] team_slave_0: entered promiscuous mode [ 42.327171][ T3960] team_slave_1: entered promiscuous mode [ 42.337935][ T28] kauditd_printk_skb: 184 callbacks suppressed [ 42.337953][ T28] audit: type=1400 audit(1770698593.770:384): avc: denied { read } for pid=3962 comm="syz.4.135" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.363378][ T3960] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 42.365176][ T28] audit: type=1400 audit(1770698593.770:385): avc: denied { open } for pid=3962 comm="syz.4.135" path="net:[4026532882]" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.377229][ T3961] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 42.404873][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.414925][ T28] audit: type=1400 audit(1770698593.830:386): avc: denied { create } for pid=3962 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.420741][ T3965] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 42.435469][ T28] audit: type=1400 audit(1770698593.830:387): avc: denied { write } for pid=3962 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.462474][ T28] audit: type=1400 audit(1770698593.830:388): avc: denied { read } for pid=3962 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.579148][ T3979] set_capacity_and_notify: 5 callbacks suppressed [ 42.579168][ T3979] loop5: detected capacity change from 0 to 512 [ 42.605676][ T3983] loop4: detected capacity change from 0 to 1024 [ 42.616533][ T3979] ------------[ cut here ]------------ [ 42.622039][ T3979] EA inode 11 i_nlink=2 [ 42.622056][ T3979] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.5.142/3979 [ 42.637720][ T3979] Modules linked in: [ 42.641653][ T3979] CPU: 1 UID: 0 PID: 3979 Comm: syz.5.142 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.651502][ T3979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 42.662199][ T3979] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 42.669110][ T3979] Code: a4 bd 9a ff 4c 8d 2d 5d 15 3e 05 49 8d 7e 40 e8 04 a9 b6 ff 49 8b 6e 40 4c 89 e7 e8 38 a4 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 df e0 d0 03 66 66 66 66 66 66 2e [ 42.689018][ T3979] RSP: 0018:ffffc9000247f778 EFLAGS: 00010246 [ 42.695114][ T3979] RAX: ffff888122fdaae8 RBX: ffff88811b806950 RCX: ffffffff81be2ae8 [ 42.703333][ T3979] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc4030 [ 42.711413][ T3979] RBP: 000000000000000b R08: 000188811b806903 R09: 0000000000000000 [ 42.719692][ T3979] R10: ffffc9000247f6a8 R11: 0001c9000247f6a8 R12: ffff88811b806900 [ 42.727797][ T3979] R13: ffffffff86fc4030 R14: ffff88811b8068b8 R15: 0000000000000001 [ 42.736038][ T3979] FS: 00007fba69fd76c0(0000) GS:ffff8882aec55000(0000) knlGS:0000000000000000 [ 42.745060][ T3979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.751997][ T3979] CR2: 00007fba6b564180 CR3: 00000001213f0000 CR4: 00000000003506f0 [ 42.755971][ T3983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.760040][ T3979] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 42.760060][ T3979] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 42.760078][ T3979] Call Trace: [ 42.791555][ T3979] [ 42.794518][ T3979] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 42.800589][ T3979] ? errseq_check+0x2c/0x50 [ 42.805132][ T3979] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 42.810700][ T3979] ? ext4_truncate+0x92b/0xad0 [ 42.814193][ T28] audit: type=1400 audit(1770698593.930:389): avc: denied { module_request } for pid=3968 comm="syz.4.139" kmod="arpt_NFLOG" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 42.815522][ T3979] ext4_evict_inode+0xa1f/0xd40 [ 42.837212][ T28] audit: type=1400 audit(1770698593.950:390): avc: denied { prog_load } for pid=3967 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.837247][ T28] audit: type=1400 audit(1770698593.950:391): avc: denied { bpf } for pid=3967 comm="syz.0.138" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.842125][ T3979] ? __pfx_ext4_evict_inode+0x10/0x10 [ 42.842157][ T3979] evict+0x2af/0x510 [ 42.861091][ T28] audit: type=1400 audit(1770698593.950:392): avc: denied { perfmon } for pid=3967 comm="syz.0.138" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.861173][ T28] audit: type=1400 audit(1770698593.950:393): avc: denied { prog_run } for pid=3967 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.892706][ T3983] EXT4-fs: Ignoring removed orlov option [ 42.911621][ T3979] ? __dquot_initialize+0x146/0x7c0 [ 42.911667][ T3979] iput+0x41a/0x580 [ 42.911694][ T3979] ext4_process_orphan+0x1a9/0x1c0 [ 42.911800][ T3979] ext4_orphan_cleanup+0x6a8/0xa00 [ 42.950694][ T3992] batadv_slave_1: entered promiscuous mode [ 42.955924][ T3979] ext4_fill_super+0x3476/0x3800 [ 42.966756][ T3979] ? set_blocksize+0x1a3/0x310 [ 42.971571][ T3979] ? setup_bdev_super+0x30e/0x370 [ 42.976952][ T3979] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.982299][ T3979] get_tree_bdev_flags+0x291/0x300 [ 42.987505][ T3979] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.993000][ T3979] get_tree_bdev+0x1f/0x30 [ 42.997469][ T3979] ext4_get_tree+0x1c/0x30 [ 43.002021][ T3979] vfs_get_tree+0x57/0x1d0 [ 43.006517][ T3979] do_new_mount+0x288/0x8d0 [ 43.011117][ T3979] path_mount+0x4d0/0xbc0 [ 43.015495][ T3979] ? user_path_at+0xbf/0x130 [ 43.020408][ T3979] __se_sys_mount+0x28c/0x2e0 [ 43.020895][ T3993] tipc: Started in network mode [ 43.025221][ T3979] __x64_sys_mount+0x67/0x80 [ 43.030175][ T3993] tipc: Node identity 52eaf6903e61, cluster identity 4711 [ 43.034786][ T3979] x64_sys_call+0x2cca/0x3000 [ 43.042072][ T3993] tipc: Enabled bearer , priority 0 [ 43.046745][ T3979] do_syscall_64+0xc0/0x2a0 [ 43.057970][ T3979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.064227][ T3979] RIP: 0033:0x7fba6b57c20a [ 43.068770][ T3979] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.088586][ T3979] RSP: 002b:00007fba69fd6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.097111][ T3979] RAX: ffffffffffffffda RBX: 00007fba69fd6ee0 RCX: 00007fba6b57c20a [ 43.105111][ T3979] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fba69fd6ea0 [ 43.113306][ T3979] RBP: 00002000000009c0 R08: 00007fba69fd6ee0 R09: 0000000000800718 [ 43.121319][ T3979] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 43.129354][ T3979] R13: 00007fba69fd6ea0 R14: 000000000000048d R15: 0000200000000200 [ 43.137575][ T3979] [ 43.140624][ T3979] ---[ end trace 0000000000000000 ]--- [ 43.146392][ T3979] EXT4-fs (loop5): 1 orphan inode deleted [ 43.152344][ T3983] EXT4-fs (loop4): can't enable nombcache during remount [ 43.157065][ T3979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.172895][ T3993] tipc: Disabling bearer [ 43.198603][ T3983] EXT4-fs: Ignoring removed orlov option [ 43.204557][ T3983] EXT4-fs (loop4): can't enable nombcache during remount [ 43.246857][ T3993] batadv_slave_1: left promiscuous mode [ 43.252974][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.281222][ T3999] netlink: 'syz.0.146': attribute type 3 has an invalid length. [ 43.317421][ T4001] netlink: 'syz.4.147': attribute type 3 has an invalid length. [ 43.427703][ T3599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.454123][ T4009] loop5: detected capacity change from 0 to 128 [ 43.468245][ T4009] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.481859][ T4009] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.512195][ T30] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.700374][ T4028] loop5: detected capacity change from 0 to 128 [ 43.718484][ T4028] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 43.732155][ T4028] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.774964][ T3599] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.833098][ T4039] loop0: detected capacity change from 0 to 128 [ 43.848199][ T4042] __nla_validate_parse: 8 callbacks suppressed [ 43.848216][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 43.867895][ T4039] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 43.869388][ T4036] loop5: detected capacity change from 0 to 1024 [ 43.880589][ T4039] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.887204][ T4036] EXT4-fs: Ignoring removed bh option [ 43.902940][ T4036] EXT4-fs: inline encryption not supported [ 43.911520][ T4036] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.922964][ T4036] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 43.932279][ T4036] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.159: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.946886][ T4036] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.947875][ T4036] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.159: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.971113][ T4036] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.971571][ T4036] EXT4-fs error (device loop5): ext4_acquire_dquot:6991: comm syz.5.159: Failed to acquire dquot type 0 [ 43.992150][ T4036] loop5: lost filesystem error report for type 5 error -117 [ 44.002531][ T4036] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 44.012061][ T4036] loop5: lost filesystem error report for type 5 error -117 [ 44.012261][ T4036] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.159: mark_inode_dirty error [ 44.030905][ T4036] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.031040][ T4036] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 44.050523][ T4036] EXT4-fs (loop5): 1 orphan inode deleted [ 44.056815][ T4036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.057129][ T39] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.088948][ T39] EXT4-fs error (device loop5): ext4_release_dquot:7027: comm kworker/u8:2: Failed to release dquot type 0 [ 44.102882][ T4036] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.103672][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.116764][ T4036] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 44.132313][ T4036] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 44.140476][ T4036] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.159: lblock 0 mapped to illegal pblock 48 (length 1) [ 44.156718][ T4036] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 44.167973][ T4046] netlink: 'syz.0.163': attribute type 13 has an invalid length. [ 44.189678][ T3599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.213770][ T4052] netlink: 32 bytes leftover after parsing attributes in process `syz.2.166'. [ 44.309022][ T4062] loop2: detected capacity change from 0 to 2048 [ 44.357008][ T4062] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 44.362263][ T4062] loop2: partition table partially beyond EOD, truncated [ 44.369701][ T4062] loop2: p1 start 4278190080 is beyond EOD, truncated [ 44.376611][ T4062] loop2: p2 start 16908800 is beyond EOD, truncated [ 44.384667][ T4062] loop2: p5 start 16908800 is beyond EOD, truncated [ 44.414983][ T4062] lo speed is unknown, defaulting to 1000 [ 44.474754][ T4067] netlink: 'syz.0.169': attribute type 3 has an invalid length. [ 44.666797][ T4082] team0: Device gtp0 is up. Set it down before adding it as a team port [ 44.821772][ T4092] loop1: detected capacity change from 0 to 1024 [ 44.822294][ T4092] EXT4-fs: Ignoring removed orlov option [ 44.850076][ T4092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.900041][ T4096] loop4: detected capacity change from 0 to 512 [ 44.931665][ T4092] FAULT_INJECTION: forcing a failure. [ 44.931665][ T4092] name failslab, interval 1, probability 0, space 0, times 0 [ 44.944503][ T4092] CPU: 0 UID: 0 PID: 4092 Comm: syz.1.180 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 44.944539][ T4092] Tainted: [W]=WARN [ 44.944546][ T4092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 44.944561][ T4092] Call Trace: [ 44.944570][ T4092] [ 44.944606][ T4092] __dump_stack+0x1d/0x30 [ 44.944638][ T4092] dump_stack_lvl+0x95/0xd0 [ 44.944728][ T4092] dump_stack+0x15/0x1b [ 44.944752][ T4092] should_fail_ex+0x263/0x280 [ 44.944788][ T4092] should_failslab+0x8c/0xb0 [ 44.944813][ T4092] kmem_cache_alloc_noprof+0x68/0x490 [ 44.944860][ T4092] ? mb_cache_entry_create+0xf0/0x540 [ 44.944931][ T4092] mb_cache_entry_create+0xf0/0x540 [ 44.944960][ T4092] ext4_xattr_block_cache_insert+0x80/0xa0 [ 44.945041][ T4092] ext4_xattr_block_set+0x15b8/0x1a60 [ 44.945093][ T4092] ext4_xattr_set_handle+0xb26/0xf80 [ 44.945127][ T4092] ext4_xattr_set+0x18e/0x240 [ 44.945162][ T4092] ext4_xattr_trusted_set+0x3c/0x50 [ 44.945209][ T4092] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 44.945279][ T4092] __vfs_setxattr+0x2e6/0x310 [ 44.945369][ T4092] __vfs_setxattr_noperm+0xe8/0x410 [ 44.945409][ T4092] __vfs_setxattr_locked+0x105/0x220 [ 44.945455][ T4092] vfs_setxattr+0x12c/0x2a0 [ 44.945562][ T4092] filename_setxattr+0x1b7/0x420 [ 44.945584][ T4092] path_setxattrat+0x2cd/0x310 [ 44.945618][ T4092] __x64_sys_lsetxattr+0x71/0x90 [ 44.945641][ T4092] x64_sys_call+0x2ef0/0x3000 [ 44.945809][ T4092] do_syscall_64+0xc0/0x2a0 [ 44.945837][ T4092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.945950][ T4092] RIP: 0033:0x7ff6f38caf79 [ 44.945968][ T4092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.945986][ T4092] RSP: 002b:00007ff6f2327028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 44.946007][ T4092] RAX: ffffffffffffffda RBX: 00007ff6f3b45fa0 RCX: 00007ff6f38caf79 [ 44.946028][ T4092] RDX: 0000200000000940 RSI: 0000200000000840 RDI: 0000200000000000 [ 44.946043][ T4092] RBP: 00007ff6f2327090 R08: 0000000000000000 R09: 0000000000000000 [ 44.946068][ T4092] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000001 [ 44.946080][ T4092] R13: 00007ff6f3b46038 R14: 00007ff6f3b45fa0 R15: 00007ffcd4fc6198 [ 44.946099][ T4092] [ 45.184038][ T4096] EXT4-fs (loop4): 1 orphan inode deleted [ 45.190291][ T4096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.227522][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.248204][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.323010][ T4104] netlink: 52 bytes leftover after parsing attributes in process `syz.4.184'. [ 45.397973][ T4111] FAULT_INJECTION: forcing a failure. [ 45.397973][ T4111] name failslab, interval 1, probability 0, space 0, times 0 [ 45.410694][ T4111] CPU: 1 UID: 0 PID: 4111 Comm: syz.4.188 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 45.410735][ T4111] Tainted: [W]=WARN [ 45.410744][ T4111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 45.410808][ T4111] Call Trace: [ 45.410816][ T4111] [ 45.410823][ T4111] __dump_stack+0x1d/0x30 [ 45.410855][ T4111] dump_stack_lvl+0x95/0xd0 [ 45.410876][ T4111] dump_stack+0x15/0x1b [ 45.410968][ T4111] should_fail_ex+0x263/0x280 [ 45.410996][ T4111] should_failslab+0x8c/0xb0 [ 45.411018][ T4111] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 45.411107][ T4111] ? __d_alloc+0x37/0x340 [ 45.411172][ T4111] __d_alloc+0x37/0x340 [ 45.411227][ T4111] d_alloc_pseudo+0x1e/0x80 [ 45.411258][ T4111] alloc_file_pseudo+0x91/0x190 [ 45.411351][ T4111] anon_inode_getfd+0xbf/0x190 [ 45.411380][ T4111] btf_new_fd+0x67a/0x7b0 [ 45.411414][ T4111] ? ns_capable+0x7c/0xb0 [ 45.411476][ T4111] bpf_btf_load+0x112/0x130 [ 45.411504][ T4111] __sys_bpf+0x357/0x7b0 [ 45.411533][ T4111] __x64_sys_bpf+0x41/0x50 [ 45.411560][ T4111] x64_sys_call+0x28e1/0x3000 [ 45.411614][ T4111] do_syscall_64+0xc0/0x2a0 [ 45.411648][ T4111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.411736][ T4111] RIP: 0033:0x7f0fa9c1af79 [ 45.411755][ T4111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.411811][ T4111] RSP: 002b:00007f0fa8677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.411832][ T4111] RAX: ffffffffffffffda RBX: 00007f0fa9e95fa0 RCX: 00007f0fa9c1af79 [ 45.411856][ T4111] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000012 [ 45.411880][ T4111] RBP: 00007f0fa8677090 R08: 0000000000000000 R09: 0000000000000000 [ 45.411952][ T4111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.411964][ T4111] R13: 00007f0fa9e96038 R14: 00007f0fa9e95fa0 R15: 00007ffdabe6b838 [ 45.411982][ T4111] [ 45.445309][ T4115] loop4: detected capacity change from 0 to 512 [ 45.555579][ T4116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.641295][ T4115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.646819][ T4116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.685432][ T4116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13788 sclass=netlink_route_socket pid=4116 comm=syz.2.185 [ 45.689104][ T4115] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.189: bad orphan inode 131083 [ 45.708704][ T4115] loop4: lost filesystem error report for type 5 error -117 [ 45.713670][ T4116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.737429][ T4115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.771029][ T4115] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz.4.189: path /43/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 45.828382][ T4123] EXT4-fs (loop0): 1 orphan inode deleted [ 45.835794][ T4123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.862210][ T4123] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.885835][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.969249][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.093974][ T4137] EXT4-fs (loop0): #blocks per group too big: 65535 [ 46.138590][ T4139] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 46.184955][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 46.248268][ T4145] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 46.882522][ T4158] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.895087][ T4158] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.203: bad orphan inode 131083 [ 46.905788][ T4158] loop4: lost filesystem error report for type 5 error -117 [ 46.906769][ T4158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.928468][ T4158] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz.4.203: path /46/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 46.999406][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.021627][ T4162] mmap: syz.4.204 (4162) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.074409][ T4165] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.205: ea_inode with extended attributes [ 47.087228][ T4165] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.088175][ T4165] EXT4-fs (loop1): Remounting filesystem read-only [ 47.104801][ T4165] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 47.121247][ T4165] EXT4-fs (loop1): 1 orphan inode deleted [ 47.142015][ T4165] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.163131][ T4174] netlink: 'syz.0.209': attribute type 4 has an invalid length. [ 47.170948][ T4174] netlink: 17 bytes leftover after parsing attributes in process `syz.0.209'. [ 47.228705][ T4165] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 47.273549][ T4165] netlink: 60 bytes leftover after parsing attributes in process `syz.1.205'. [ 47.283550][ T4165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'. [ 47.292630][ T4165] netlink: 60 bytes leftover after parsing attributes in process `syz.1.205'. [ 47.303775][ T4165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.205'. [ 47.312820][ T4165] netlink: 52 bytes leftover after parsing attributes in process `syz.1.205'. [ 47.335135][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 47.346776][ T4172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.357632][ T4172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.381552][ T4179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.394471][ T4179] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.396409][ T4183] batadv_slave_1: entered promiscuous mode [ 47.423357][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.472143][ T4187] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.483806][ T4187] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.214: bad orphan inode 131083 [ 47.494662][ T4187] loop0: lost filesystem error report for type 5 error -117 [ 47.496107][ T4187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.498926][ T4189] tipc: Enabled bearer , priority 0 [ 47.505134][ T4187] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.214: path /51/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 47.548105][ T4189] tipc: Disabling bearer [ 47.597054][ T4189] batadv_slave_1: left promiscuous mode [ 47.614935][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.659493][ T4193] set_capacity_and_notify: 9 callbacks suppressed [ 47.659507][ T4193] loop0: detected capacity change from 0 to 512 [ 47.677649][ T4193] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.216: bg 0: block 393: padding at end of block bitmap is not set [ 47.692443][ T4193] loop0: lost filesystem error report for type 5 error -117 [ 47.692804][ T4193] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 47.709098][ T4193] loop0: lost filesystem error report for type 5 error -117 [ 47.709626][ T4193] EXT4-fs (loop0): 2 truncates cleaned up [ 47.723052][ T4193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.740642][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 47.740653][ T28] audit: type=1400 audit(1770698599.170:474): avc: denied { read } for pid=4192 comm="syz.0.216" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.769248][ T28] audit: type=1400 audit(1770698599.170:475): avc: denied { open } for pid=4192 comm="syz.0.216" path="/53/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.802881][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.857048][ T4201] syzkaller0: entered promiscuous mode [ 47.862759][ T4201] syzkaller0: entered allmulticast mode [ 47.872438][ T4201] tipc: Started in network mode [ 47.877440][ T4201] tipc: Node identity c686f8e53b5d, cluster identity 4711 [ 47.884825][ T4201] tipc: Enabled bearer , priority 0 [ 47.892022][ T4200] tipc: Resetting bearer [ 47.900611][ T4200] tipc: Disabling bearer [ 48.187866][ T28] audit: type=1400 audit(1770698599.620:476): avc: denied { mount } for pid=4209 comm="syz.4.221" name="/" dev="configfs" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.210968][ T28] audit: type=1400 audit(1770698599.620:477): avc: denied { search } for pid=4209 comm="syz.4.221" name="/" dev="configfs" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.233283][ T28] audit: type=1400 audit(1770698599.620:478): avc: denied { search } for pid=4209 comm="syz.4.221" name="/" dev="configfs" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.255521][ T28] audit: type=1400 audit(1770698599.620:479): avc: denied { read open } for pid=4209 comm="syz.4.221" path="/" dev="configfs" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.290797][ T28] audit: type=1400 audit(1770698599.720:480): avc: denied { connect } for pid=4212 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.351664][ T4214] netlink: 'syz.4.223': attribute type 4 has an invalid length. [ 48.353405][ T4217] FAULT_INJECTION: forcing a failure. [ 48.353405][ T4217] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.373137][ T4217] CPU: 0 UID: 0 PID: 4217 Comm: syz.1.224 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 48.373237][ T4217] Tainted: [W]=WARN [ 48.373245][ T4217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 48.373259][ T4217] Call Trace: [ 48.373267][ T4217] [ 48.373275][ T4217] __dump_stack+0x1d/0x30 [ 48.373323][ T4217] dump_stack_lvl+0x95/0xd0 [ 48.373338][ T4217] dump_stack+0x15/0x1b [ 48.373351][ T4217] should_fail_ex+0x263/0x280 [ 48.373454][ T4217] should_fail_alloc_page+0xf2/0x100 [ 48.373479][ T4217] __alloc_frozen_pages_noprof+0x108/0x350 [ 48.373507][ T4217] alloc_pages_mpol+0xb3/0x260 [ 48.373550][ T4217] ? css_rstat_updated+0xbb/0x280 [ 48.373567][ T4217] vma_alloc_folio_noprof+0x1a9/0x300 [ 48.373587][ T4217] handle_mm_fault+0x111f/0x3030 [ 48.373608][ T4217] ? vma_start_read+0x1c7/0x2c0 [ 48.373696][ T4217] do_user_addr_fault+0x62f/0x1050 [ 48.373783][ T4217] ? ksys_mmap_pgoff+0xc1/0x310 [ 48.373801][ T4217] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 48.373817][ T4217] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 48.373901][ T4217] ? irqentry_exit+0x3c/0x510 [ 48.373916][ T4217] exc_page_fault+0x62/0xa0 [ 48.373930][ T4217] asm_exc_page_fault+0x26/0x30 [ 48.373944][ T4217] RIP: 0033:0x7ff6f3782898 [ 48.373986][ T4217] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 48.374002][ T4217] RSP: 002b:00007ff6f2326470 EFLAGS: 00010286 [ 48.374015][ T4217] RAX: 0000000000001000 RBX: 00007ff6f2326530 RCX: 0000000000000001 [ 48.374025][ T4217] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 00007ff6f23265d0 [ 48.374033][ T4217] RBP: 00000000000000db R08: 00007ff6e9f07000 R09: 00000000000000ff [ 48.374042][ T4217] R10: 0000000000000000 R11: 00007ff6f2326540 R12: 0000000000000001 [ 48.374130][ T4217] R13: 00007ff6f3980a20 R14: 0000000000000000 R15: 00007ff6f23265d0 [ 48.374151][ T4217] [ 48.374164][ T4217] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 48.413575][ T4216] netlink: 'syz.4.223': attribute type 4 has an invalid length. [ 48.417531][ T4217] loop1: detected capacity change from 0 to 512 [ 48.611815][ T4219] loop2: detected capacity change from 0 to 512 [ 48.627298][ T4219] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.636874][ T4217] EXT4-fs (loop1): #blocks per group too big: 65535 [ 48.648359][ T4219] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.225: bad orphan inode 131083 [ 48.658891][ T4219] loop2: lost filesystem error report for type 5 error -117 [ 48.661913][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.684755][ T4219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.701652][ T4219] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 13: comm syz.2.225: path /41/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 48.773565][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.788036][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.850784][ T4232] loop0: detected capacity change from 0 to 512 [ 48.867099][ T4219] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.225: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 48.891777][ T28] audit: type=1400 audit(1770698600.290:481): avc: denied { create } for pid=4218 comm="syz.2.225" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.914539][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.919409][ T4234] loop4: detected capacity change from 0 to 512 [ 48.936672][ T4234] EXT4-fs (loop4): cluster size (1024) smaller than block size (4096) [ 48.941657][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.974050][ T4232] EXT4-fs (loop0): 1 orphan inode deleted [ 48.998657][ T28] audit: type=1400 audit(1770698600.370:482): avc: denied { search } for pid=4235 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.020762][ T28] audit: type=1400 audit(1770698600.370:483): avc: denied { search } for pid=4235 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.027410][ T4232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.043545][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.064878][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.065463][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.177411][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.247657][ T4264] FAULT_INJECTION: forcing a failure. [ 49.247657][ T4264] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.261159][ T4264] CPU: 1 UID: 0 PID: 4264 Comm: syz.0.236 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 49.261250][ T4264] Tainted: [W]=WARN [ 49.261257][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 49.261271][ T4264] Call Trace: [ 49.261279][ T4264] [ 49.261289][ T4264] __dump_stack+0x1d/0x30 [ 49.261387][ T4264] dump_stack_lvl+0x95/0xd0 [ 49.261445][ T4264] dump_stack+0x15/0x1b [ 49.261470][ T4264] should_fail_ex+0x263/0x280 [ 49.261568][ T4264] should_fail+0xb/0x20 [ 49.261592][ T4264] should_fail_usercopy+0x1a/0x20 [ 49.261627][ T4264] _copy_to_user+0x20/0xa0 [ 49.261713][ T4264] simple_read_from_buffer+0xb5/0x130 [ 49.261753][ T4264] proc_fail_nth_read+0x10e/0x150 [ 49.261845][ T4264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.261868][ T4264] vfs_read+0x1ab/0x7f0 [ 49.261916][ T4264] ? __fput+0x555/0x650 [ 49.261945][ T4264] ? __rcu_read_unlock+0x4e/0x70 [ 49.261970][ T4264] ? __fget_files+0x184/0x1c0 [ 49.261990][ T4264] ? mutex_lock+0x57/0x90 [ 49.262074][ T4264] ksys_read+0xdc/0x1a0 [ 49.262105][ T4264] __x64_sys_read+0x40/0x50 [ 49.262134][ T4264] x64_sys_call+0x2889/0x3000 [ 49.262159][ T4264] do_syscall_64+0xc0/0x2a0 [ 49.262261][ T4264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.262293][ T4264] RIP: 0033:0x7f1d26a2b84e [ 49.262312][ T4264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.262404][ T4264] RSP: 002b:00007f1d254c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.262429][ T4264] RAX: ffffffffffffffda RBX: 00007f1d254c76c0 RCX: 00007f1d26a2b84e [ 49.262447][ T4264] RDX: 000000000000000f RSI: 00007f1d254c70a0 RDI: 0000000000000005 [ 49.262513][ T4264] RBP: 00007f1d254c7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.262528][ T4264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.262544][ T4264] R13: 00007f1d26ce6038 R14: 00007f1d26ce5fa0 R15: 00007ffd62d11a48 [ 49.262566][ T4264] [ 49.542819][ T4281] __nla_validate_parse: 4 callbacks suppressed [ 49.542838][ T4281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 49.580668][ T4285] loop0: detected capacity change from 0 to 512 [ 49.594852][ T4281] smc: adding net device bond0 with user defined pnetid SYZ2 [ 49.613090][ T4288] loop2: detected capacity change from 0 to 1024 [ 49.623357][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.638280][ T4285] capability: warning: `syz.0.242' uses 32-bit capabilities (legacy support in use) [ 49.676003][ T4296] loop1: detected capacity change from 0 to 512 [ 49.682986][ T4296] EXT4-fs: Ignoring removed nobh option [ 49.695659][ T4300] loop0: detected capacity change from 0 to 512 [ 49.707321][ T4296] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.714042][ T4291] bond0: (slave batadv1): Opening slave failed [ 49.734839][ T4296] EXT4-fs (loop1): 1 truncate cleaned up [ 49.735932][ T4288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 49.741111][ T4296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.791785][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.847263][ T4311] loop1: detected capacity change from 0 to 512 [ 49.847691][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 49.854648][ T4311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.886769][ T4311] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.250: iget: bad extended attribute block 262144 [ 49.899954][ T4311] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.906707][ T4311] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.250: couldn't read orphan inode 15 (err -117) [ 49.927672][ T4311] loop1: lost filesystem error report for type 5 error -117 [ 49.939112][ T4311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.975639][ T4316] batadv_slave_1: entered promiscuous mode [ 49.982531][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 50.049662][ T4324] tipc: Enabled bearer , priority 0 [ 50.060784][ T4324] tipc: Disabling bearer [ 50.068937][ T4311] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 50.077550][ T4326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4326 comm=syz.1.250 [ 50.093854][ T4311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'. [ 50.107117][ T4324] batadv_slave_1: left promiscuous mode [ 50.116420][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.262467][ T4354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.279876][ T4354] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.290379][ T4354] EXT4-fs warning (device loop0): ext4_enable_quotas:7226: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 50.305768][ T4354] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 50.321712][ T4354] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.257: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 50.340040][ T4354] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.340402][ T4354] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.257: couldn't read orphan inode 13 (err -117) [ 50.361411][ T4354] loop0: lost filesystem error report for type 5 error -117 [ 50.362517][ T4354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.398158][ T4369] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.429877][ T4369] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.472701][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.490347][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.513955][ T4373] random: crng reseeded on system resumption [ 50.529694][ T4378] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.261: bg 0: block 248: padding at end of block bitmap is not set [ 50.544058][ T4378] loop1: lost filesystem error report for type 5 error -117 [ 50.549024][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 50.567072][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.603322][ T4378] EXT4-fs error (device loop1): ext4_acquire_dquot:6991: comm syz.1.261: Failed to acquire dquot type 1 [ 50.614678][ T4378] loop1: lost filesystem error report for type 5 error -117 [ 50.615404][ T4378] EXT4-fs (loop1): 1 truncate cleaned up [ 50.630637][ T4378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.644506][ T4378] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.695354][ T4378] syz.1.261 (4378) used greatest stack depth: 9408 bytes left [ 50.702622][ T4399] netlink: 'syz.4.265': attribute type 4 has an invalid length. [ 50.710707][ T4399] netlink: 17 bytes leftover after parsing attributes in process `syz.4.265'. [ 50.721388][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.789100][ T4407] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.816336][ T4407] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.840617][ T4407] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.267: corrupted inode contents [ 50.852811][ T4407] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 50.853947][ T4407] EXT4-fs (loop4): Remounting filesystem read-only [ 50.870144][ T4407] EXT4-fs (loop4): 1 truncate cleaned up [ 50.876307][ T39] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.886889][ T39] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.923327][ T39] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.934188][ T4407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.948173][ T4418] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.963358][ T4418] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.995863][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.008424][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.110266][ T4436] syzkaller0: entered promiscuous mode [ 51.115956][ T4436] syzkaller0: entered allmulticast mode [ 51.124731][ T4436] tipc: Enabled bearer , priority 0 [ 51.137521][ T4435] tipc: Resetting bearer [ 51.157782][ T4435] tipc: Disabling bearer [ 51.168069][ T4440] team0: Device gtp0 is up. Set it down before adding it as a team port [ 51.227814][ T4442] netlink: 'syz.1.279': attribute type 21 has an invalid length. [ 51.246884][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 51.255984][ T4442] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 51.375220][ T4458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 51.412402][ T4465] tc_dump_action: action bad kind [ 51.458526][ T4469] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.465010][ T4469] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 51.496884][ T4469] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 51.518394][ T4469] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.283: attempt to clear invalid blocks 2 len 1 [ 51.531382][ T4469] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 51.538091][ T4472] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.549464][ T4469] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.283: invalid indirect mapped block 1819239214 (level 0) [ 51.559502][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 51.571648][ T4469] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 51.581363][ T4469] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.283: invalid indirect mapped block 1819239214 (level 1) [ 51.589826][ T4477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'. [ 51.590604][ T4469] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 51.624551][ T4469] EXT4-fs (loop0): 1 truncate cleaned up [ 51.668517][ T4482] EXT4-fs: Ignoring removed oldalloc option [ 51.672551][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 51.674562][ T4482] EXT4-fs: Ignoring removed bh option [ 51.698083][ T4469] bridge0: entered promiscuous mode [ 51.705570][ T4468] bridge0: left promiscuous mode [ 51.838183][ T4495] netlink: 'syz.0.290': attribute type 4 has an invalid length. [ 51.846053][ T4496] wireguard0: entered promiscuous mode [ 51.851645][ T4496] wireguard0: entered allmulticast mode [ 51.881586][ T4495] netlink: 'syz.0.290': attribute type 4 has an invalid length. [ 52.072859][ T4533] FAULT_INJECTION: forcing a failure. [ 52.072859][ T4533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.086192][ T4533] CPU: 1 UID: 0 PID: 4533 Comm: syz.2.295 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.086227][ T4533] Tainted: [W]=WARN [ 52.086235][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 52.086249][ T4533] Call Trace: [ 52.086257][ T4533] [ 52.086268][ T4533] __dump_stack+0x1d/0x30 [ 52.086295][ T4533] dump_stack_lvl+0x95/0xd0 [ 52.086331][ T4533] dump_stack+0x15/0x1b [ 52.086375][ T4533] should_fail_ex+0x263/0x280 [ 52.086408][ T4533] should_fail_alloc_page+0xf2/0x100 [ 52.086431][ T4533] __alloc_frozen_pages_noprof+0x108/0x350 [ 52.086465][ T4533] alloc_pages_mpol+0xb3/0x260 [ 52.086547][ T4533] ? css_rstat_updated+0xbb/0x280 [ 52.086575][ T4533] vma_alloc_folio_noprof+0x1a9/0x300 [ 52.086610][ T4533] handle_mm_fault+0x111f/0x3030 [ 52.086656][ T4533] ? vma_start_read+0x1c7/0x2c0 [ 52.086730][ T4533] do_user_addr_fault+0x62f/0x1050 [ 52.086759][ T4533] ? ksys_mmap_pgoff+0xc1/0x310 [ 52.086789][ T4533] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 52.086950][ T4533] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 52.086986][ T4533] ? irqentry_exit+0x3c/0x510 [ 52.087010][ T4533] exc_page_fault+0x62/0xa0 [ 52.087080][ T4533] asm_exc_page_fault+0x26/0x30 [ 52.087100][ T4533] RIP: 0033:0x7fea1dc627e3 [ 52.087120][ T4533] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 52.087200][ T4533] RSP: 002b:00007fea1c7fe470 EFLAGS: 00010206 [ 52.087219][ T4533] RAX: 0000000000002000 RBX: 00007fea1c7fe530 RCX: 00007fea143df000 [ 52.087299][ T4533] RDX: 00007fea1c7fe6d0 RSI: 0000000000000017 RDI: 00007fea1c7fe5d0 [ 52.087314][ T4533] RBP: 000000000000000a R08: 0000000000000009 R09: 00000000000001aa [ 52.087330][ T4533] R10: 00000000000001b4 R11: 00007fea1c7fe530 R12: 0000000000000001 [ 52.087345][ T4533] R13: 00007fea1de60a20 R14: 00000000000000ed R15: 00007fea1c7fe5d0 [ 52.087368][ T4533] [ 52.282703][ T4533] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 52.312158][ T4533] EXT4-fs (loop2): #blocks per group too big: 65535 [ 52.376009][ T4541] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.394954][ T4537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 52.440761][ T4546] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 52.476784][ T4546] ..0ªî{X¹¦: entered allmulticast mode [ 52.487236][ T4546] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 52.528458][ T4556] netlink: 'syz.4.302': attribute type 39 has an invalid length. [ 52.618593][ T4565] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4565 comm=syz.4.305 [ 52.652387][ T4567] EXT4-fs error (device loop1): __ext4_fill_super:5558: inode #2: comm syz.1.306: iget: checksum invalid [ 52.663761][ T4567] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 52.666189][ T4567] EXT4-fs (loop1): get root inode failed [ 52.681021][ T4567] EXT4-fs (loop1): mount failed [ 52.729719][ T4576] set_capacity_and_notify: 14 callbacks suppressed [ 52.729739][ T4576] loop2: detected capacity change from 0 to 128 [ 52.779692][ T4576] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.807240][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 52.807259][ T28] audit: type=1400 audit(1770698604.240:540): avc: denied { block_suspend } for pid=4569 comm="syz.0.308" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.851668][ T28] audit: type=1400 audit(1770698604.260:541): avc: denied { create } for pid=4583 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 52.871102][ T28] audit: type=1400 audit(1770698604.270:542): avc: denied { ioctl } for pid=4583 comm="syz.1.312" path="socket:[8115]" dev="sockfs" ino=8115 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 52.904948][ T28] audit: type=1326 audit(1770698604.280:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa9c1af79 code=0x7ffc0000 [ 52.928407][ T28] audit: type=1326 audit(1770698604.280:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa9c1af79 code=0x7ffc0000 [ 52.951755][ T28] audit: type=1326 audit(1770698604.280:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa9c1af79 code=0x7ffc0000 [ 52.975303][ T28] audit: type=1326 audit(1770698604.280:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa9c1af79 code=0x7ffc0000 [ 52.998923][ T28] audit: type=1326 audit(1770698604.280:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa9c1af79 code=0x7ffc0000 [ 53.022193][ T28] audit: type=1326 audit(1770698604.280:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa9c1af79 code=0x7ffc0000 [ 53.045752][ T28] audit: type=1326 audit(1770698604.310:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa9c1af79 code=0x7ffc0000 [ 53.055643][ T4588] loop1: detected capacity change from 0 to 128 [ 53.156736][ T4598] loop2: detected capacity change from 0 to 256 [ 53.280033][ T4607] delete_channel: no stack [ 53.285185][ T4607] delete_channel: no stack [ 53.358130][ T4616] loop4: detected capacity change from 0 to 512 [ 53.375321][ T4616] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 53.394615][ T4617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.403269][ T4617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.481190][ T4599] loop5: detected capacity change from 0 to 32768 [ 53.522884][ T4625] loop4: detected capacity change from 0 to 128 [ 53.532443][ T4625] vfat: Unknown parameter '00000000000000000000000' [ 53.601474][ T4629] loop4: detected capacity change from 0 to 512 [ 53.610683][ T4629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.629670][ T4629] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.331: iget: bad extended attribute block 262144 [ 53.642584][ T4629] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.650762][ T4632] FAULT_INJECTION: forcing a failure. [ 53.650762][ T4632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.656750][ T4629] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.331: couldn't read orphan inode 15 (err -117) [ 53.660047][ T4632] CPU: 0 UID: 0 PID: 4632 Comm: syz.5.328 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.660082][ T4632] Tainted: [W]=WARN [ 53.660151][ T4632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 53.660165][ T4632] Call Trace: [ 53.660172][ T4632] [ 53.660181][ T4632] __dump_stack+0x1d/0x30 [ 53.660206][ T4632] dump_stack_lvl+0x95/0xd0 [ 53.660227][ T4632] dump_stack+0x15/0x1b [ 53.660251][ T4632] should_fail_ex+0x263/0x280 [ 53.660281][ T4632] should_fail+0xb/0x20 [ 53.660307][ T4632] should_fail_usercopy+0x1a/0x20 [ 53.660337][ T4632] _copy_from_user+0x1c/0xb0 [ 53.660431][ T4632] evdev_ioctl_handler+0x455/0x16d0 [ 53.660467][ T4632] ? __pfx_evdev_ioctl+0x10/0x10 [ 53.660495][ T4632] evdev_ioctl+0x24/0x30 [ 53.660522][ T4632] __se_sys_ioctl+0xce/0x140 [ 53.660632][ T4632] __x64_sys_ioctl+0x43/0x50 [ 53.660750][ T4632] x64_sys_call+0x14b0/0x3000 [ 53.660799][ T4632] do_syscall_64+0xc0/0x2a0 [ 53.660829][ T4632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.660853][ T4632] RIP: 0033:0x7fba6b57af79 [ 53.660871][ T4632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.660936][ T4632] RSP: 002b:00007fba69fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.660959][ T4632] RAX: ffffffffffffffda RBX: 00007fba6b7f5fa0 RCX: 00007fba6b57af79 [ 53.660974][ T4632] RDX: 0000200000000000 RSI: 0000000040284504 RDI: 0000000000000004 [ 53.661024][ T4632] RBP: 00007fba69fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.661038][ T4632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.661077][ T4632] R13: 00007fba6b7f6038 R14: 00007fba6b7f5fa0 R15: 00007ffd2420c858 [ 53.661097][ T4632] [ 53.863608][ T4629] loop4: lost filesystem error report for type 5 error -117 [ 53.914707][ T4642] netlink: 'syz.1.332': attribute type 83 has an invalid length. [ 53.941776][ T4642] loop1: detected capacity change from 0 to 1756 [ 53.948602][ T4642] iso9660: Unknown parameter 'd' [ 53.973203][ T4651] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 53.973203][ T4651] program syz.4.337 not setting count and/or reply_len properly [ 53.992133][ T4649] loop5: detected capacity change from 0 to 1024 [ 54.037086][ T4649] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 54.062211][ T4649] vhci_hcd vhci_hcd.2: invalid port number 96 [ 54.068729][ T4649] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 54.072793][ T4659] loop1: detected capacity change from 0 to 512 [ 54.094959][ T4659] EXT4-fs: Ignoring removed nobh option [ 54.109143][ T4649] sd 0:0:1:0: device reset [ 54.120168][ T4660] xt_TCPMSS: Only works on TCP SYN packets [ 54.134407][ T4659] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.240438][ T4668] batadv_slave_1: entered promiscuous mode [ 54.341035][ T4673] tipc: Enabling of bearer rejected, failed to enable media [ 54.350512][ T4673] batadv_slave_1: left promiscuous mode [ 54.381397][ T4681] team0: Device gtp1 is up. Set it down before adding it as a team port [ 54.450718][ T4686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.466070][ T3391] lo speed is unknown, defaulting to 1000 [ 54.472007][ T3391] syz0: Port: 1 Link DOWN [ 54.493366][ T3391] lo speed is unknown, defaulting to 1000 [ 54.595270][ T4702] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.623248][ T4704] 9p: Bad value for 'trans' [ 54.626737][ T4702] 9p: Bad value for 'trans' [ 54.709635][ T4710] EXT4-fs (loop1): #blocks per group too big: 65535 [ 54.721785][ T4695] 9pnet_fd: Insufficient options for proto=fd [ 54.734671][ T4695] EXT4-fs (loop2): 1 truncate cleaned up [ 54.770519][ T4713] EXT4-fs (loop1): 1 orphan inode deleted [ 54.778878][ T4713] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.875772][ T4716] ================================================================== [ 54.884145][ T4716] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 54.891461][ T4716] [ 54.893871][ T4716] read-write to 0xffff888107bb3908 of 8 bytes by task 4695 on cpu 1: [ 54.901939][ T4716] xas_clear_mark+0x91/0x180 [ 54.906570][ T4716] __folio_start_writeback+0x270/0x370 [ 54.912041][ T4716] ext4_bio_write_folio+0x5ad/0x9f0 [ 54.917254][ T4716] mpage_process_page_bufs+0x4a1/0x620 [ 54.922728][ T4716] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 54.928540][ T4716] ext4_do_writepages+0x6fe/0x2800 [ 54.933667][ T4716] ext4_writepages+0x18f/0x320 [ 54.938446][ T4716] do_writepages+0x1c6/0x310 [ 54.943050][ T4716] file_write_and_wait_range+0x178/0x2f0 [ 54.948808][ T4716] generic_buffers_fsync_noflush+0x45/0x130 [ 54.954726][ T4716] ext4_sync_file+0x1aa/0x680 [ 54.959427][ T4716] vfs_fsync_range+0xc5/0xe0 [ 54.964032][ T4716] ext4_buffered_write_iter+0x34f/0x3c0 [ 54.969600][ T4716] ext4_file_write_iter+0x380/0xf70 [ 54.974900][ T4716] vfs_write+0x5a6/0x9f0 [ 54.979167][ T4716] __x64_sys_pwrite64+0xfd/0x150 [ 54.984194][ T4716] x64_sys_call+0x9f7/0x3000 [ 54.988899][ T4716] do_syscall_64+0xc0/0x2a0 [ 54.993411][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.999737][ T4716] [ 55.002125][ T4716] read to 0xffff888107bb3908 of 8 bytes by task 4716 on cpu 0: [ 55.009686][ T4716] xas_find_marked+0x213/0x620 [ 55.014518][ T4716] filemap_get_folios_tag+0xfa/0x510 [ 55.019805][ T4716] mpage_prepare_extent_to_map+0x328/0xc50 [ 55.025792][ T4716] ext4_do_writepages+0x6fe/0x2800 [ 55.030907][ T4716] ext4_writepages+0x18f/0x320 [ 55.035795][ T4716] do_writepages+0x1c6/0x310 [ 55.040380][ T4716] filemap_write_and_wait_range+0x166/0x370 [ 55.046359][ T4716] ext4_fileattr_set+0x4e6/0xe40 [ 55.051290][ T4716] vfs_fileattr_set+0x666/0x6b0 [ 55.056341][ T4716] ioctl_setflags+0x13e/0x180 [ 55.061030][ T4716] do_vfs_ioctl+0x661/0xe70 [ 55.065535][ T4716] __se_sys_ioctl+0x82/0x140 [ 55.070210][ T4716] __x64_sys_ioctl+0x43/0x50 [ 55.074906][ T4716] x64_sys_call+0x14b0/0x3000 [ 55.079665][ T4716] do_syscall_64+0xc0/0x2a0 [ 55.084173][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.090076][ T4716] [ 55.092410][ T4716] value changed: 0x7ffffffffffffc01 -> 0x7ffffffffffff001 [ 55.099505][ T4716] [ 55.101824][ T4716] Reported by Kernel Concurrency Sanitizer on: [ 55.107964][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: syz.2.354 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.119159][ T4716] Tainted: [W]=WARN [ 55.122952][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 55.133005][ T4716] ================================================================== [ 55.142492][ T4657] 9pnet_fd: p9_fd_create_tcp (4657): problem connecting socket to 127.0.0.1 [ 55.155005][ T4720] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 55.168751][ T4720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=4720 comm=syz.1.362