last executing test programs: 1m1.983259865s ago: executing program 4 (id=7): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) ptrace$cont(0x21, 0x0, 0x80000001, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x292, 0x0, 0x0, 0x0) 1m1.300820077s ago: executing program 4 (id=15): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1m1.061458382s ago: executing program 4 (id=17): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b00000009000000030000004f0c00000100000075430ef1e4b5a947763cc9975bbdecc66dde9e77645ba79c6ef4c7efe1b23b53ffb1f75185dcf7b728bf873158011b4df290217f7564c3e99b66f4cd280061d50991582e2ded72ea7fe605ff7a8ba18ffa21cf45ac9c15d1d6aeb05b0584a8ca893aaefeb09fdcfe861670366953c6d89ef8c503f3d11dbf69a5e9", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2001, 0x0, 0x61, 0x5) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000002c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) epoll_create1(0x80000) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r7 = syz_open_pts(r6, 0x0) dup3(r7, r6, 0x80000) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000001800)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e533005a5b152308435c559a2e30053a727c9"}) unshare(0x22020400) socket$nl_netfilter(0x10, 0x3, 0xc) 59.183653938s ago: executing program 4 (id=25): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getpgrp(0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e21, 0x7, @empty, 0xb}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffffffffffffff9}) r5 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x512, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x9}, 0x0, 0xffff, 0x8, 0x1, 0x2, 0x20005, 0x8b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x13, &(0x7f0000000340)={0x0, &(0x7f0000000240)}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000040)=0x8001, 0x4) close_range(r6, 0xffffffffffffffff, 0x2) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00203c002400000000000100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r9, 0x4, 0x7, 0xa, 0x5, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x47, 0x20, 0x7f, 0xff}}) 57.847463907s ago: executing program 4 (id=31): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x13fc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0900006593546e00080000000800000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@deltfilter={0x38, 0x2d, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0x7, 0xc}, {0xd, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x38}}, 0x4000041) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x19, 0x0, 0x3b) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r8, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchmod(r8, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000040)={0x6, 0x8, 0x80}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) write$evdev(r0, &(0x7f0000000580)=[{{0x0, 0x2710}, 0x1, 0x5, 0x8001}, {{0x0, 0xea60}, 0x3, 0xfff8}, {{0x77359400}, 0x16, 0x7ff, 0x200}, {{}, 0x2, 0x2, 0xbd6b}, {{0x0, 0xea60}, 0x16, 0x0, 0x7}], 0x78) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x66, &(0x7f0000001940)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000480)=0x1020, 0x0) 57.459408954s ago: executing program 4 (id=33): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x13fc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0900006593546e00080000000800000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@deltfilter={0x38, 0x2d, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0x7, 0xc}, {0xd, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x38}}, 0x4000041) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x19, 0x0, 0x3b) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r8, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchmod(r8, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000040)={0x6, 0x8, 0x80}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) write$evdev(r0, &(0x7f0000000580), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x66, &(0x7f0000001940)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000480)=0x1020, 0x0) 57.44044121s ago: executing program 32 (id=33): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x13fc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0900006593546e00080000000800000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@deltfilter={0x38, 0x2d, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0x7, 0xc}, {0xd, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x38}}, 0x4000041) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x19, 0x0, 0x3b) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r8, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchmod(r8, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000040)={0x6, 0x8, 0x80}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) write$evdev(r0, &(0x7f0000000580), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x66, &(0x7f0000001940)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000480)=0x1020, 0x0) 3.852545775s ago: executing program 2 (id=400): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x100000001, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791808000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.248193481s ago: executing program 2 (id=410): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) listen(r1, 0x2000fff) r2 = accept(r1, 0xfffffffffffffffd, &(0x7f0000000180)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x802) 3.158629575s ago: executing program 2 (id=412): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x4, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x51) getdents64(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) getdents64(r2, &(0x7f0000000280)=""/89, 0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000276, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x625f00ac, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'gre0\x00', {0x2}, 0xad41}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.662479042s ago: executing program 1 (id=418): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f0000001bc0)={0xa, 0x4e1d, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000000100)="54b444", 0x3}], 0x1}}], 0x1, 0x40) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x19b1, 0x35725d35}, 0x0, 0x1000, 0x20da, 0x0, 0x3, 0x20025, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) shutdown(r0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2.519655615s ago: executing program 1 (id=420): r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3800000010000100225bfbcaccc053d6bd7000f9dbdf250089000000", @ANYRES32=0x0, @ANYBLOB="158804008701020008001b000000000008000d000300000008001c00", @ANYRES32=r0, @ANYBLOB="9378a8c18cb71f90797dc7c05afb16660e5df6f509a79dea8d0286bba81bc702ebb63c3ed43b5fd87c81e83b439a6b26503600667c672bcf8bfb08f3014fac7865081d9a8f482983d29db79cdf62fc4e0798497c1b6f3ebc8b254f7fcd6f9eca1846d454a07d2074537ad6fb19c023bd32b25255772b80ec5cc071e535a2e9aaa737359557e842d98cd5377fe7dba6a6d1c27a10ed4b52a02acff599c4bae301497ffc258dd23afacfd3001b3fac08762ccb8920efc6a3bfa0e2b9e5614e9ea88f209f34e9754e4290d46babf9ecaf64f9baf9e6b5"], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xbe4, 0x2}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000005060138f7d8b1390206f10100ddc0bf635d000000000000"], 0x14}}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.324895038s ago: executing program 2 (id=424): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) fchdir(r2) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x800, 0x1) 2.293781952s ago: executing program 1 (id=425): mlockall(0x3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x1) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x20, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x8000) setresuid(0x0, 0xee01, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0x10f}, &(0x7f00000000c0), &(0x7f0000000080)) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.742198078s ago: executing program 2 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x1, 0x0, 0x0, 0x8000000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x104c04, 0x0, 0x10000, 0x8, 0x40000000002, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xc0}, 0x0, 0xd, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="5dac7c52000000000000000000000000850000006b"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="5dac7c52000000000000000000000000850000006b"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32], 0x2c}}, 0x0) syz_io_uring_setup(0x2161, &(0x7f0000000480)={0x0, 0x7736, 0x8, 0x2000000, 0xe5}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffffffff399304ae6adf068608", @ANYRES32=0x0, @ANYBLOB="0c009900020000007580000004000d80"], 0x2c}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffffffff399304ae6adf068608", @ANYRES32=0x0, @ANYBLOB="0c009900020000007580000004000d80"], 0x2c}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00008de000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf25020001000800020008000000080002000400000008000340080000000800030007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x2000000) r7 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea000010071101d0000000000950086d820020000"], 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea000010071101d0000000000950086d820020000"], 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) (async) sendmsg$inet(r6, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000300)=@md0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e23, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) (async) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x107ff, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x107ff, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.680959937s ago: executing program 3 (id=432): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000021000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x103) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x80000000}, 0xb) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xfffc}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x40442, 0x0) unshare(0x20040600) fcntl$setlease(r4, 0x400, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r6, 0xa00000000, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)={[{@data_err_abort}, {@quota}, {@quota}, {@oldalloc}, {@user_xattr}]}, 0xff, 0x503, &(0x7f0000000c00)="$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") 1.577912567s ago: executing program 2 (id=433): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0xfd, 0x0, 0x2, 0xf0e61, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01e90c"], &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8, 0x1}, 0x28) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2, 0x0, 0x10ffe, 0x8, 0x2, 0x8000000e, 0xfffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x28060080) unshare(0x28020600) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 1.562256824s ago: executing program 3 (id=435): unshare(0x62040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000fc85000000a000000085000000a00000009500000000000000929caaa99d7a198f66f29fc7f32d3b4d7ef0d332430900000000000000e6eb32f612bc0761b855f9758b661ecebd956671880d750014fbd3eeb55c9e1390811637ee8c4ff8a04946dfa64f6ea68b5bc0123150ddcc95e8c6655c00aeddb721a064209bb09c7bc366c0dfcfec6d8579880000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad0200"/14, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f00000002c0)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffff3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8, 0x9}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000006800e97804000000000000000a0000000000000004000400262f626f46a491a9e909988ae28f7fa820469527a42a400ab5df9874710133cda854d2cd54d7489007000000d25b524e303e0d3e8666b0f0bf0cb5e90cfb4bf7bb6d8d9ac450763ae876c863f121a35b48241ae9d3d89eb0c4f1b05c91f0bdcd49554d01495ce8c5ce54ed33957791260257"], 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x2, 0x3c, 0x8, 0x2, 0x0, 0xe075, 0x4004, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x8, 0x8000000000000000, 0x1, 0x3, 0x6, 0xfffffffb, 0x5, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x35, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x98b2, 0x4, 0x6, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r4, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4da5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000100)=0x2, 0x4) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r8 = socket(0x10, 0x3, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x4c540, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0)=0xb, 0x4594) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000009c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x0, 0x400, 0x1, 0x5e71, 0x2, 0x8, 0x7, 0x1, 0xc098, 0xd3e, 0x20c5, 0xffffffff, 0x80, 0xa6, 0xf042, 0x2, 0x3, 0x200, 0x856f, 0x1, 0x1, 0x5b2, 0x0, 0x5be, 0x0, 0x1, 0x102, 0x9, 0x6, 0x200, 0xa62, 0xb, 0x67a6c594, 0x9e280, 0x3723, 0x713, 0x4f80, 0x9, 0x3, 0x6, 0x1, 0xff, 0xc000000, 0xf, 0x6, 0x7fffffff, 0xc00000, 0xfffffc51, 0xed, 0x9, 0x1, 0x7, 0x9, 0x1c, 0x3, 0x5, 0x8, 0xfffffffc, 0x0, 0x2, 0x3, 0x3, 0x8, 0xa8, 0x6, 0x8, 0x6, 0x0, 0x7, 0x3, 0x80, 0x0, 0xa, 0x0, 0x44d, 0x3, 0x3, 0x7, 0x4, 0x80000000, 0x9, 0x6, 0x8, 0x7f, 0xd, 0xc, 0x7f, 0x200, 0x7, 0x9, 0x4, 0x200, 0x10, 0xffff, 0x7, 0x6, 0x10, 0x8, 0x7fffffff, 0x40, 0x5, 0x3, 0x4002, 0xfc3, 0x9, 0x7ff, 0x7, 0x9, 0x6, 0x5, 0x4, 0xfffffbf3, 0x0, 0xda1, 0x80, 0x8001, 0x8, 0x8, 0x0, 0x3b, 0x10001, 0x0, 0x8001, 0x3, 0x3, 0x1, 0x7, 0x7], "09508942095f5ac1ae92b6eb"}}) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x24}}, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00'}) 1.346845374s ago: executing program 1 (id=437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) creat(&(0x7f0000000800)='./file0\x00', 0x10) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0xfffffff9, 0x4}]}, 0xc, 0x0) 1.225221631s ago: executing program 0 (id=438): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x4, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x51) getdents64(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) getdents64(r2, &(0x7f0000000280)=""/89, 0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000276, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x625f00ac, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'gre0\x00', {0x2}, 0xad41}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.201609676s ago: executing program 3 (id=441): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}]}}}}}}, 0x46) 1.173191491s ago: executing program 1 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x4c405) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r3, &(0x7f00000001c0)={0xffffffffffffffff, r2, 0x3ff}) r5 = socket(0x10, 0x803, 0x0) fcntl$getflags(r2, 0xb) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54f"], 0x0) 748.580901ms ago: executing program 3 (id=444): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x43c}, 0x1, 0x0, 0x0, 0x20002011}, 0x4008800) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) chdir(&(0x7f0000000040)='./file0/../file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x12100, 0x0) r4 = open_tree(r3, &(0x7f0000000140)='./file0/../file0\x00', 0x0) move_mount(r4, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[], 0x10c}, 0x1, 0xba01}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x43c}, 0x1, 0x0, 0x0, 0x20002011}, 0x4008800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async) chdir(&(0x7f0000000040)='./file0/../file0\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x12100, 0x0) (async) open_tree(r3, &(0x7f0000000140)='./file0/../file0\x00', 0x0) (async) move_mount(r4, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[], 0x10c}, 0x1, 0xba01}, 0x0) (async) 685.76672ms ago: executing program 5 (id=445): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x370) prlimit64(r0, 0x7, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes io+'], 0xf) 682.359859ms ago: executing program 3 (id=446): r0 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = syz_io_uring_setup(0x4dc, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}) (async) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = eventfd2(0x3, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r5, 0x1) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 623.552648ms ago: executing program 5 (id=447): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0xf4ffffff, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 593.887522ms ago: executing program 3 (id=448): r0 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xd, 0x4) 492.443733ms ago: executing program 33 (id=448): r0 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xd, 0x4) 481.310141ms ago: executing program 0 (id=450): perf_event_open(&(0x7f0000000000)={0xeb5132039803fdd1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x3) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r6, 0x0, 0x0, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(r1, r1, 0x0) 423.56846ms ago: executing program 5 (id=451): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000000)="13c7a428", &(0x7f0000000ec0)=""/4096, &(0x7f0000000040), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xb48}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 394.258004ms ago: executing program 5 (id=452): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102260, 0x10000, 0x0, 0x1, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x100, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0xc, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) r8 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x94d7, 0x0, 0x0, 0x97}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000005000)=""/4119, 0x3f5d9f}], 0x100000000000011a) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 377.223691ms ago: executing program 0 (id=453): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) getpeername$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r8, &(0x7f0000000000)) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r5) syz_io_uring_submit(r3, r4, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x0, 0x4a}, 0x28) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 318.02922ms ago: executing program 1 (id=454): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}]}}}}}}, 0x46) 171.860512ms ago: executing program 0 (id=455): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x11000, 0x0, 0x7f, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e25, @multicast1}, 0x52) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x20, 0x104, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) kexec_load(0xfffffffffffffffe, 0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x200400004, 0xfffffffffffffffe}, {0x0, 0x58661fc5f6fcce39, 0x3dfffffffffe, 0x8000}], 0x3c0000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), 0x0}, 0x20) sendmsg$unix(0xffffffffffffffff, 0x0, 0x44041) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000030000000018ff733d461f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x9, 0x800, 0x10001, 0x1ff}, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00200000cc32b51c8e7a", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x20, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8001}, 0x50) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) shutdown(r2, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 33.132666ms ago: executing program 0 (id=456): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x200, 0xfffffff9, 0xd215, 0x8, 0xa, 0x7, 0x1000, {0x0, @in6={{0xa, 0x4e21, 0x4b6c, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffff7f}}, 0x4, 0x8, 0x9, 0x244d, 0x1}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={r0, 0x3c, "69b2ff59fb92e76e71fe805f14f3440d326cac1a3e490627bdef7cc5c0e971b72685c2175f2402671902d84473da08f108330356c84770ad8bbbcfcf"}, &(0x7f0000000180)=0x44) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x80) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0xdc58, @loopback, 0x8}}, 0x7, 0x6, 0x5, 0x0, 0x8, 0x10000, 0x5}, 0x9c) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) migrate_pages(0xffffffffffffffff, 0x4, &(0x7f00000003c0)=0x100, &(0x7f0000000400)=0x7) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001940)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/217, 0xd9}, {&(0x7f0000001640)=""/228, 0xe4}, {&(0x7f0000001740)=""/130, 0x82}], 0x5, &(0x7f0000001880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40012121) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, &(0x7f0000001980), &(0x7f00000019c0)=0x4) lseek(r13, 0x9, 0x4) (async) ioctl$BLKRASET(r9, 0x1262, &(0x7f0000001a00)=0x3) (async) setsockopt(r11, 0x2, 0x5d90, &(0x7f0000001a40)="3405ba683bd77248810f7819aab9123228116b7c4fb1c3b456db81a07eaf9fd5f7aed3f5a12aaf40905d5e3783cf43165d2ab3f830aeb9ccb5ee3a3ee96ec02ed05561c58ea984e3a5abe0868e8c84983243da06948f3e481617de4f9d802417a4bc8a9fcce5b25c96899ce100ec61ea5c944551c5816000893548edaed33107452e6ddd0ae7ccd3a13267431a31f58c371412505a93c46050445ca825cb250ee07b201ba7", 0xa5) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000001b00)) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f0000001b80)={0x44}, 0x1) (async) capset(&(0x7f0000001bc0)={0x19980330, r6}, &(0x7f0000001c00)={0xd, 0x1, 0x9, 0x4, 0x3, 0x5}) (async) syz_open_dev$vcsa(&(0x7f0000001c40), 0x0, 0x800) (async) flistxattr(r13, &(0x7f0000001c80)=""/234, 0xea) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f0000001d80)={0x8, 'caif0\x00', {'hsr0\x00'}, 0x3}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000001dc0), r12) (async) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000001e00)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, "a3a0765fc83ef40a0af861fbcf8d4acf78e4a722b556903a3a14ed6b6ff7eb79", 0x0, 0xfe8, 0x400}, 0x3c) (async) preadv2(r8, &(0x7f0000001e80)=[{&(0x7f0000001e40)=""/45, 0x2d}], 0x1, 0x9923, 0x8a, 0xc) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f00), r11) sendmsg$TIPC_NL_LINK_RESET_STATS(r10, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x68, r14, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x92}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4180) sendmsg$tipc(r12, &(0x7f0000002400)={&(0x7f0000002040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x2}}, 0x10, &(0x7f0000002380)=[{&(0x7f0000002080)="14d51b4929136a1ffe0d5718b36ee2a953b1082e265d825ac7a04b39d2afea8ef6c6bcbc17c58cd6a44d72b0bd4f", 0x2e}, {&(0x7f00000020c0)="4c50c5a2b12b7d90d8b3dc2bee19a669317746246e69a096066f54834b04a74153591f60bccd04", 0x27}, {&(0x7f0000002100)="8c07dc99ceaf8904194429e9ac321f5b99dc2c0585bebf9b2272a75fb2abc1b88537eb592d2f6a8d0cd2a64ddb244b136e7e363366053e71adf4155400d405", 0x3f}, {&(0x7f0000002140)="c63925a598497e1e0575a808478efa5cb794f427f703a11bb56bd8e399a881ccbc970c7cb52cadfcdf849a8fe83b103596bcc1ebca755dc684db5dac313d7c3eb8a0e6ce4bca1c59731f40b5ee220b23e281797413dd225a0f85ecc0d767eab5c0e8b101ad0ebfa1f7ecfc0495649e10886dac2413a76bccccf70bd40ef999bb54e4427192a612391ebf7d2955ea1bb2b6560d444d56f7f62cb3f8469b39ebb605212079ab40605518576766c263e3e4295535f4fe6c507359feb6c9dd647c719e", 0xc1}, {&(0x7f0000002240)="caced61b2cf7e9b7cac31570014421425589eb577e4c11073e20217ab16fa078edd8b16bef4bd67b2a58614d18d329a4ec59b288c469224332a0f1951b91baeb836cc637dea693b429f7aec235e1fec86e9816bea56c6ff5c1a89be33a4fe43961a0b369d4cf0215467227d1518ea9d38b1e4834c909a6ff0b16c903720741063b7c4e0f3298c74d20620ef94327ddf784eae135e5ef898b8e82a69a87da9b3c666f5538ea4445dbf18d494c7f74dc49e457e00cc15b67355110175210e07e077769b25c39e1a3822e53eb96c7", 0xcd}, {&(0x7f0000002340)="8252aa965dc1db8b2a0b4756a7eaaff3affac2b4", 0x14}], 0x6, 0x0, 0x0, 0x4000}, 0x20000804) (async) recvmsg$unix(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/72, 0x48}, {&(0x7f00000034c0)}, {&(0x7f0000003500)=""/157, 0x9d}, {&(0x7f00000035c0)=""/137, 0x89}], 0x5, &(0x7f0000003700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x0) 32.014226ms ago: executing program 5 (id=457): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x53, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x4010, r0, 0x6a871000) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000100), 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000140)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r1, r2, 0x6, 0x0, @val=@target_btf_id=r3}, 0x14) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @rand_addr, @initdev}, &(0x7f0000000580)=0xc) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={r5, 0x1, 0x6, @random="eb70221579e6"}, 0x10) pread64(r2, &(0x7f0000000600)=""/15, 0xf, 0x2) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000840)) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40d4}, 0x8004) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000009c0)=0xc052, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x2b, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @generic={0x8, 0x7, 0xa, 0x2, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @jmp={0x5, 0x0, 0xb, 0xa, 0x9, 0x18, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0xffff, 0x32, &(0x7f0000000bc0)=""/50, 0x40f00, 0x32, '\x00', r5, 0x25, r9, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0xb, 0x4, 0x800}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[r0, r0, r0, r0, r9, r9, r6, r0], &(0x7f0000000cc0)=[{0x3, 0x5, 0x10, 0x5}, {0x1, 0x1, 0x5, 0x6}], 0x10, 0x2}, 0x94) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002) fsetxattr$security_evm(r6, &(0x7f0000000dc0), &(0x7f0000000e00)=@v2={0x5, 0x2, 0x1, 0xa9, 0x98, "88843bd082a9adc9ecee3aeb6f0c00eecb6b4eeab139fbea5176114a9db33399068132496146bbbe3a873c51898097df1cc872ceb104a56577e8560784d8ba6c112563e25a47540163deffaaea1cce750bfd49bb734fb2d71d1ae7c0405fc9b7ac40595d390f89e2c222451ec212acd323cc061017fdbca80444ca2204ffcde61036af11374f050c9d2c60344f860b1353526123b776317b"}, 0xa1, 0x2) getdents(r9, &(0x7f0000000ec0)=""/101, 0x65) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000013c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000f80)={0x3bc, r7, 0x70a, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x155, 0x7f, [@fast_bss_trans={0x37, 0x137, {0x1, 0xa, "5cfb5ed66f502ef161e9a27d3551dfb2", "3ba0c2e836d491edc30d88f459396843f95ba40d3f28872787f6c1d1d6f2727f", "383afea769183c1e46d6d21cf954da26621db5b0bfa067e46b5f31aaa4882ed7", [{0x4, 0x28, "c87fa515a2e649e3bab6560638375686d9e8c93fc727e4fca91c0c535dfc017830e373a4c90c4a75"}, {0x4, 0x17, "50bac9a1a31d574c413a5288a6a232166d93b53ba7ddff"}, {0x2, 0xa, "46e3cb9264156b8b3064"}, {0x1, 0x8, "7653e62f042372e0"}, {0x4, 0x13, "c635a6479ef65525163fc39e587d70ad6fd26e"}, {0x3, 0x1a, "58da96f1275b8847c0abc9adf7c8def4e0bef1015722ec119848"}, {0x1, 0x6, "a825024f002d"}, {0x1, 0x28, "49597703e73130e796907c4c2875f2f245ab830fee5dd187e8d9d5ed31406f996f68a71c8dda34db"}, {0x1, 0xa, "d60f1c7184dfabdff34a"}, {0x1, 0x1b, "298f32705c55e10371ca55ea0f74a0c1a90a9f90df903d027a4563"}]}}, @dsss={0x3, 0x1, 0x30}, @mic={0x8c, 0x10, {0xf84, "ad6bb14a698a", @short="dacd6984913f5f26"}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x111, 0x80, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ssid={0x0, 0x6, @default_ap_ssid}, @measure_req={0x26, 0xf5, {0x0, 0x8, 0x8, "9b38c9b5dcc7679ffc8c51e6727a64af3dc071786fe8345f292c46bf12ff628210076faebad7f91ccf1121934e27891191ec9132e1cdb171dac8f0c554dbac9dd462e22302553f01fbcd4f00a87b52b6edceb5a69dd9f66fb57c7b1a86329114616407d1c7056dc4a37a6449850a08d9d540cac42d488cfb00f111b0de59bbb33cccb658c256106573d9f265166708511759f75216b3d9643cd5fbe603d9fba8b109a81caf84d84c615d3bb9ebfd92b7e676174751ade2eca019e5db43d751a26879c502fb891b0d8d9fbb28a57818094c3d82834651455aef2a6e8afc513e02717370b5ddcbc4ebae6d070856bceb10558d"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE={0x9, 0x2a, [@supported_rates={0x1, 0x3, [{0x1}, {0x60, 0x1}, {0x16, 0x1}]}]}, @NL80211_ATTR_IE={0x86, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @prep={0x83, 0x1f, {{}, 0x7, 0x6, @device_a, 0x9, @void, 0x8, 0x10000, @device_a, 0xa7c}}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x2, 0x0, {0xffff, 0x4, 0x0, 0x3f2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0x3, 0x5}}, @gcr_ga={0xbd, 0x6}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @prep={0x83, 0x1f, {{}, 0x0, 0x7f, @device_a, 0x10001, @void, 0x0, 0x9, @device_b, 0x9}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1c, 0x7f, [@ibss={0x6, 0x2, 0x9}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}]}, @NL80211_ATTR_IE={0x71, 0x2a, [@measure_req={0x26, 0x4e, {0x0, 0x9, 0x7, "79a9926386b71b9b45ff9e0f4ba55bdd925004adb7571128d28d31a27d58f3a28635fa3dafad254eebec506af603d0cb78a3baa4e80d3eea8ae0582914d52db1247166dbe7d694f70785cc"}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x2e, 0x9, @device_a, 0x1ff, 0xc, 0x80000000}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x2, 0x7f}}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4}, 0x200080a0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1000}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fsetxattr$security_selinux(r10, &(0x7f0000001500), &(0x7f0000001540)='system_u:object_r:tun_tap_device_t:s0\x00', 0x26, 0x1) faccessat(r9, &(0x7f0000001580)='./file0\x00', 0x8) 12.234603ms ago: executing program 0 (id=458): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000001700)={0x54e9, &(0x7f0000001800)="e897d2d79734107b4cfa8424a1a2960aed53e284193eeda584eb08bc91b0ca560a7fbf12bd1703935b4fcc149dad20357390f36e32e436eebe90c1877639aa9bc454ccd63802aa6f16b2d55f301da3f19ca96450e83949be45b177d0ab3c9763f45ffd72eec54423beb433cae2ca3c6248e8fb435632f6c59c82cd670b3a72dd97e430d3e622d096051379dadc80355e969c7218"}) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x3976) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000016c0)=0x0) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r1, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000015c0)=@IORING_OP_SENDMSG={0x9, 0x42, 0x0, r1, 0x0, &(0x7f0000001580)={&(0x7f0000000340)=@nl, 0x80, &(0x7f0000001500)=[{&(0x7f00000000c0)="dee036531ceffea5847637aa735bbdaaa36dd9e967c90b47c773429d0c2d5dbfece1d72e94eb4dd72bab4392d05c8a74940710ee67fdd59764", 0x39}, {&(0x7f00000003c0)="cfca1a98ffde69d28e1194353b3ed88fc194fb377b57d51ded298878e9477dbbd1df0f6f1dd6f248f2efcaee54cdabc5d24e6d1e8c2b57b6c5", 0x39}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="6f943db4d645edcf52ead0bd72bb39005d5a9d1b384a0cc04c9c842fd0adf0e446b9685e4d99156507d17c0d52214ce511e14f235d4f84fc81bee289c5d963e71416d5831a83296a88c5429137bf6328b914a22995e3f93d94993651e1ea6e36c0b6805ab00ea87ba66f59456b706f4c9f6525e76e6b9218cff96b", 0x7b}, {&(0x7f0000001480)="147c81dedcc9b77ddacfd8541a7e529e4257eada34de1062410223c953acf9c2dfcb8554f44748b0268aee465fc2a37d2fb34e8a9e51fb1acee8e37c92a3eb69efe11475bf0cb676e1881b6ca022aac55303f717308f0cb0ae9b8ed82de21e3ee1c940ad0d734a", 0x67}], 0x5}}) (async) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0x402}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) connect$nfc_llcp(r1, &(0x7f0000000140)={0x27, r2, 0xffffffffffffffff, 0x4, 0x7, 0x5d, "deca7f164c013b8e3c994810ca750147be9fd665120f180625e5b136d653c57d1a81460fefe274b3f258a40b1d2c5bbd5f2b5163f1fa05c2756399651d61dc", 0x24}, 0x60) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001640)={0x1, &(0x7f0000001600)=[{0x81, 0x9, 0xd0, 0x4}]}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r7, 0x3, r6, 0xfffffffb, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001680)={r7, 0x65, 0x800}) (async) r8 = socket(0x21, 0x5, 0x0) io_uring_setup(0x20002880, &(0x7f0000000000)={0x0, 0xb07c, 0x7e}) (async) connect$inet6(r8, &(0x7f00000003c0)={0xa, 0x4e22, 0x16, @mcast2, 0x1}, 0x1c) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r9) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000001c0)={0x1, 0x9, 0x23, 0x0, 0x0, 0xffffa, 0x0}) 0s ago: executing program 5 (id=459): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x4, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x51) getdents64(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) getdents64(r2, &(0x7f0000000280)=""/89, 0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000276, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x625f00ac, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'gre0\x00', {0x2}, 0xad41}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) kernel console output (not intermixed with test programs): 693] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 41.932845][ T3630] team0: Port device team_slave_1 added [ 41.943143][ T3693] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.42: corrupted in-inode xattr: e_name out of bounds [ 41.974969][ T3630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.984826][ T3693] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.985728][ T3630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.994896][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 41.994916][ C0] EXT4-fs (loop3): initial error at time 1773141224: ext4_iget_extra_inode:5025: inode 15 [ 41.994951][ C0] EXT4-fs (loop3): last error at time 1773141224: ext4_iget_extra_inode:5025: inode 15 [ 42.048864][ T3693] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.42: couldn't read orphan inode 15 (err -117) [ 42.063127][ T3693] loop3: lost filesystem error report for type 5 error -117 [ 42.071212][ T3693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.099731][ T3693] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 42.112789][ T3630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.124038][ T3693] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 42.135148][ T3693] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.42: Corrupt directory, running e2fsck is recommended [ 42.155987][ T3696] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 42.167836][ T3696] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 42.179687][ T3696] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.42: Corrupt directory, running e2fsck is recommended [ 42.196709][ T3693] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 42.210377][ T3693] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 42.223197][ T3693] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.42: Corrupt directory, running e2fsck is recommended [ 42.243645][ T3693] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 42.256760][ T3693] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.42: path /10/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 42.281657][ T3693] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.42: path /10/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 42.320339][ T3589] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 42.661997][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.700274][ T3630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.712578][ T3630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.739235][ T3630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.753417][ T3693] 8021q: VLANs not supported on gre0 [ 42.799933][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.822310][ T3630] hsr_slave_0: entered promiscuous mode [ 42.828389][ T3630] hsr_slave_1: entered promiscuous mode [ 42.947668][ T3719] loop1: detected capacity change from 0 to 128 [ 43.007506][ T3717] tipc: Started in network mode [ 43.103423][ T3717] tipc: Node identity 84e, cluster identity 4711 [ 43.112164][ T3717] tipc: Node number set to 2126 [ 43.175944][ T12] IPVS: stop unused estimator thread 0... [ 43.201099][ T3387] IPVS: starting estimator thread 0... [ 43.283835][ T3630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.310113][ T3729] IPVS: using max 2400 ests per chain, 120000 per kthread [ 43.399820][ T3630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.414747][ T3733] loop3: detected capacity change from 0 to 512 [ 43.450800][ T3630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.465575][ T3733] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.487271][ T3630] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.531694][ T3733] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.47: bg 0: block 393: padding at end of block bitmap is not set [ 43.566436][ T3733] loop3: lost filesystem error report for type 5 error -117 [ 43.567255][ T3733] EXT4-fs (loop3): Remounting filesystem read-only [ 43.574755][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 43.574789][ C0] EXT4-fs (loop3): initial error at time 1773141226: ext4_validate_block_bitmap:441 [ 43.574810][ C0] EXT4-fs (loop3): last error at time 1773141226: ext4_validate_block_bitmap:441 [ 43.608972][ T3630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.616419][ T3733] EXT4-fs (loop3): 2 truncates cleaned up [ 43.623028][ T3733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.624433][ T3630] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.651860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.659316][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.688611][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.695839][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.793852][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 43.793869][ T28] audit: type=1400 audit(1773141226.366:318): avc: denied { ioctl } for pid=3759 comm="syz.2.49" path="socket:[6393]" dev="sockfs" ino=6393 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.811195][ T3630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.835973][ T3734] kworker/u8:9: attempt to access beyond end of device [ 43.835973][ T3734] loop1: rw=1, sector=129, nr_sectors = 8 limit=128 [ 43.844884][ T28] audit: type=1400 audit(1773141226.366:319): avc: denied { bind } for pid=3759 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.864094][ T3734] kworker/u8:9: attempt to access beyond end of device [ 43.864094][ T3734] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 43.883150][ T3630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.902958][ T3734] kworker/u8:9: attempt to access beyond end of device [ 43.902958][ T3734] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 43.939329][ T3760] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 43.940795][ T3734] kworker/u8:9: attempt to access beyond end of device [ 43.940795][ T3734] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 43.945320][ T3760] syzkaller1: Refused to change device type [ 43.959929][ T3734] kworker/u8:9: attempt to access beyond end of device [ 43.959929][ T3734] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 43.967211][ T28] audit: type=1400 audit(1773141226.506:320): avc: denied { ioctl } for pid=3759 comm="syz.2.49" path="socket:[6399]" dev="sockfs" ino=6399 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.979892][ T3734] kworker/u8:9: attempt to access beyond end of device [ 43.979892][ T3734] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 44.025901][ T3734] kworker/u8:9: attempt to access beyond end of device [ 44.025901][ T3734] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 44.033562][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 44.055548][ T3734] kworker/u8:9: attempt to access beyond end of device [ 44.055548][ T3734] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 44.100148][ T3734] kworker/u8:9: attempt to access beyond end of device [ 44.100148][ T3734] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 44.108452][ T3630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.125518][ T3734] kworker/u8:9: attempt to access beyond end of device [ 44.125518][ T3734] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 44.214105][ T28] audit: type=1400 audit(1773141226.786:321): avc: denied { mounton } for pid=3788 comm="syz.2.51" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 44.279236][ T3793] capability: warning: `syz.2.52' uses deprecated v2 capabilities in a way that may be insecure [ 44.287927][ T28] audit: type=1400 audit(1773141226.816:322): avc: denied { mount } for pid=3788 comm="syz.2.51" name="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 44.333882][ T28] audit: type=1400 audit(1773141226.816:323): avc: denied { search } for pid=3788 comm="syz.2.51" name="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.419244][ T28] audit: type=1400 audit(1773141226.816:324): avc: denied { search } for pid=3788 comm="syz.2.51" name="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.446268][ T28] audit: type=1400 audit(1773141226.816:325): avc: denied { read open } for pid=3788 comm="syz.2.51" path="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.496005][ T3630] veth0_vlan: entered promiscuous mode [ 44.504146][ T3803] loop0: detected capacity change from 0 to 512 [ 44.521465][ T28] audit: type=1400 audit(1773141226.816:326): avc: denied { ioctl } for pid=3788 comm="syz.2.51" path="/" dev="configfs" ino=2028 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.531262][ T3630] veth1_vlan: entered promiscuous mode [ 44.534067][ T3803] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.586467][ T28] audit: type=1400 audit(1773141226.816:327): avc: denied { ioctl } for pid=3788 comm="syz.2.51" path="socket:[5655]" dev="sockfs" ino=5655 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.611531][ T3803] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 44.626259][ T3803] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.54: Corrupt directory, running e2fsck is recommended [ 44.674011][ T3630] veth0_macvtap: entered promiscuous mode [ 44.681906][ T3630] veth1_macvtap: entered promiscuous mode [ 44.691918][ T3803] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 44.696680][ T3630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.711975][ T3630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.721502][ T3803] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.54: corrupted in-inode xattr: e_name out of bounds [ 44.724223][ T3734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.744604][ T3734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.780624][ T3803] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.782079][ T3803] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.54: couldn't read orphan inode 15 (err -117) [ 44.785981][ T3734] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.792692][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 44.820102][ T3734] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.820213][ C1] EXT4-fs (loop0): initial error at time 1773141227: ext4_iget_extra_inode:5025: inode 15 [ 44.839664][ C1] EXT4-fs (loop0): last error at time 1773141227: ext4_iget_extra_inode:5025: inode 15 [ 44.874118][ T3815] netlink: 'syz.1.56': attribute type 21 has an invalid length. [ 44.886381][ T3815] netlink: 'syz.1.56': attribute type 20 has an invalid length. [ 45.010230][ T3803] loop0: lost filesystem error report for type 5 error -117 [ 45.037746][ T3803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.231675][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.318027][ T3828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 45.333964][ T3828] Cannot find add_set index 0 as target [ 45.346864][ T3828] bridge0: entered promiscuous mode [ 45.371700][ T3828] bridge0: port 3(macsec1) entered blocking state [ 45.378402][ T3828] bridge0: port 3(macsec1) entered disabled state [ 45.400248][ T3828] macsec1: entered allmulticast mode [ 45.405678][ T3828] bridge0: entered allmulticast mode [ 45.440090][ T3828] macsec1: left allmulticast mode [ 45.445391][ T3828] bridge0: left allmulticast mode [ 45.451002][ T3828] bridge0: left promiscuous mode [ 46.304082][ T3841] loop2: detected capacity change from 0 to 128 [ 46.336532][ T3815] Set syz1 is full, maxelem 65536 reached [ 46.368837][ T3815] syz.1.56 (3815) used greatest stack depth: 9608 bytes left [ 46.804979][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.870138][ T3824] loop5: detected capacity change from 0 to 128 [ 46.890277][ T3824] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.884225][ T3870] SELinux: security policydb version 16 (MLS) not backwards compatible [ 47.904999][ T3870] SELinux: failed to load policy [ 47.918482][ T3870] netlink: 'syz.3.69': attribute type 13 has an invalid length. [ 47.995734][ T3870] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.003018][ T3870] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.052529][ T3870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.068737][ T3870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.171923][ T3872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.70'. [ 48.243700][ T3877] loop0: detected capacity change from 0 to 512 [ 48.268993][ T3877] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.72: invalid indirect mapped block 4294967295 (level 1) [ 48.291494][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.314900][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.349274][ T3881] netlink: 104 bytes leftover after parsing attributes in process `syz.5.73'. [ 48.367019][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.377188][ T3877] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.432185][ T3877] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.72: invalid indirect mapped block 4294967295 (level 1) [ 48.441437][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 48.441456][ C1] EXT4-fs (loop0): initial error at time 1773141230: ext4_free_branches:1023: inode 11 [ 48.441496][ C1] EXT4-fs (loop0): last error at time 1773141230: ext4_free_branches:1023: inode 11 [ 48.467131][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.520169][ T3877] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.520498][ T3877] EXT4-fs (loop0): 2 truncates cleaned up [ 48.535929][ T3877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.781141][ T3894] Option ' í,Ç' to dns_resolver key: bad/missing value [ 48.805326][ T3896] Option ' í,Ç' to dns_resolver key: bad/missing value [ 48.987409][ T3901] netlink: 'syz.5.77': attribute type 5 has an invalid length. [ 49.001333][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 49.001352][ T28] audit: type=1400 audit(1773141231.576:350): avc: denied { read } for pid=3899 comm="syz.5.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.050282][ T28] audit: type=1400 audit(1773141231.576:351): avc: denied { create } for pid=3899 comm="syz.5.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 49.075910][ T28] audit: type=1400 audit(1773141231.576:352): avc: denied { connect } for pid=3899 comm="syz.5.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 49.274209][ T3906] loop5: detected capacity change from 0 to 512 [ 49.323891][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.369243][ T3906] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.450466][ T3906] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 49.470296][ T3906] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.79: Corrupt directory, running e2fsck is recommended [ 49.512627][ T3906] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 49.537142][ T3913] FAULT_INJECTION: forcing a failure. [ 49.537142][ T3913] name failslab, interval 1, probability 0, space 0, times 1 [ 49.554207][ T3906] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.79: corrupted in-inode xattr: e_name out of bounds [ 49.571819][ T3913] CPU: 1 UID: 0 PID: 3913 Comm: syz.3.82 Not tainted syzkaller #0 PREEMPT(full) [ 49.571867][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.571886][ T3913] Call Trace: [ 49.571893][ T3913] [ 49.571901][ T3913] __dump_stack+0x1d/0x30 [ 49.572014][ T3913] dump_stack_lvl+0x95/0xd0 [ 49.572048][ T3913] dump_stack+0x15/0x1b [ 49.572126][ T3913] should_fail_ex+0x263/0x280 [ 49.572151][ T3913] should_failslab+0x8c/0xb0 [ 49.572171][ T3913] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 49.572224][ T3913] ? __d_alloc+0x37/0x340 [ 49.572247][ T3913] __d_alloc+0x37/0x340 [ 49.572358][ T3913] ? default_pointer+0xf2/0x5e0 [ 49.572399][ T3913] d_alloc+0x2e/0x100 [ 49.572424][ T3913] lookup_one_qstr_excl+0x99/0x250 [ 49.572532][ T3913] start_dirop+0x3e/0x70 [ 49.572582][ T3913] simple_start_creating+0xa2/0xd0 [ 49.572603][ T3913] debugfs_start_creating+0xda/0x150 [ 49.572623][ T3913] __debugfs_create_file+0x70/0x2b0 [ 49.572665][ T3913] debugfs_create_file_full+0x3f/0x60 [ 49.572692][ T3913] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 49.572724][ T3913] ref_tracker_dir_debugfs+0x10e/0x220 [ 49.572812][ T3913] alloc_netdev_mqs+0x1a7/0xa40 [ 49.572837][ T3913] rtnl_create_link+0x239/0x720 [ 49.572883][ T3913] rtnl_newlink_create+0x174/0x650 [ 49.572901][ T3913] ? security_capable+0x7b/0x90 [ 49.572922][ T3913] ? netlink_ns_capable+0x86/0xa0 [ 49.573006][ T3913] rtnl_newlink+0x10a0/0x1330 [ 49.573040][ T3913] ? __rcu_read_unlock+0x4e/0x70 [ 49.573058][ T3913] ? xa_load+0xb1/0xe0 [ 49.573087][ T3913] ? __rcu_read_unlock+0x4e/0x70 [ 49.573106][ T3913] ? avc_has_perm_noaudit+0xab/0x130 [ 49.573130][ T3913] ? cred_has_capability+0x224/0x2a0 [ 49.573214][ T3913] ? selinux_capable+0x31/0x40 [ 49.573241][ T3913] ? security_capable+0x7b/0x90 [ 49.573265][ T3913] ? ns_capable+0x7c/0xb0 [ 49.573279][ T3913] ? __pfx_rtnl_newlink+0x10/0x10 [ 49.573340][ T3913] rtnetlink_rcv_msg+0x64b/0x720 [ 49.573372][ T3913] ? avc_has_perm_noaudit+0xab/0x130 [ 49.573399][ T3913] netlink_rcv_skb+0x123/0x220 [ 49.573421][ T3913] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.573478][ T3913] rtnetlink_rcv+0x1c/0x30 [ 49.573520][ T3913] netlink_unicast+0x5c0/0x690 [ 49.573542][ T3913] netlink_sendmsg+0x5c8/0x6f0 [ 49.573566][ T3913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.573659][ T3913] ____sys_sendmsg+0x563/0x5b0 [ 49.573691][ T3913] ___sys_sendmsg+0x195/0x1e0 [ 49.573743][ T3913] __x64_sys_sendmsg+0xd4/0x160 [ 49.573775][ T3913] x64_sys_call+0x194c/0x3020 [ 49.573858][ T3913] do_syscall_64+0x12c/0x370 [ 49.573881][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.573904][ T3913] RIP: 0033:0x7f8d9e4cc799 [ 49.573934][ T3913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.573948][ T3913] RSP: 002b:00007f8d9cf1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.573983][ T3913] RAX: ffffffffffffffda RBX: 00007f8d9e745fa0 RCX: 00007f8d9e4cc799 [ 49.574052][ T3913] RDX: 0000000004008040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 49.574068][ T3913] RBP: 00007f8d9cf1f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.574079][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.574089][ T3913] R13: 00007f8d9e746038 R14: 00007f8d9e745fa0 R15: 00007ffcbff634d8 [ 49.574106][ T3913] [ 49.929342][ T3906] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.930072][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 49.947362][ C0] EXT4-fs (loop5): initial error at time 1773141232: ext4_iget_extra_inode:5025: inode 15 [ 49.959202][ C0] EXT4-fs (loop5): last error at time 1773141232: ext4_iget_extra_inode:5025: inode 15 [ 49.973899][ T3906] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.79: couldn't read orphan inode 15 (err -117) [ 49.990901][ T3906] loop5: lost filesystem error report for type 5 error -117 [ 50.007779][ T3906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.046719][ T28] audit: type=1400 audit(1773141232.616:353): avc: denied { create } for pid=3918 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.080383][ T28] audit: type=1400 audit(1773141232.616:354): avc: denied { connect } for pid=3918 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.108029][ T28] audit: type=1400 audit(1773141232.616:355): avc: denied { ioctl } for pid=3918 comm="syz.2.84" path="socket:[5841]" dev="sockfs" ino=5841 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.134964][ T28] audit: type=1400 audit(1773141232.636:356): avc: denied { create } for pid=3918 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.162310][ T28] audit: type=1400 audit(1773141232.636:357): avc: denied { setopt } for pid=3918 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.205414][ T28] audit: type=1400 audit(1773141232.676:358): avc: denied { bind } for pid=3918 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.236588][ T3630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.297140][ T3930] netlink: 104 bytes leftover after parsing attributes in process `syz.5.85'. [ 50.317319][ T3932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.330269][ T28] audit: type=1400 audit(1773141232.886:359): avc: denied { read write } for pid=3931 comm="syz.0.87" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.342272][ T3932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.467778][ T3941] netlink: 44 bytes leftover after parsing attributes in process `syz.0.87'. [ 50.490807][ T3950] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 50.496885][ T3950] syzkaller1: Refused to change device type [ 50.514888][ T3950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.92'. [ 50.679125][ T3961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.95'. [ 50.699363][ T3959] loop3: detected capacity change from 0 to 512 [ 50.749108][ T3965] loop1: detected capacity change from 0 to 512 [ 50.752360][ T3959] EXT4-fs (loop3): 1 truncate cleaned up [ 50.772113][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.790260][ T3965] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.802091][ T3965] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 50.812797][ T3965] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.96: Corrupt directory, running e2fsck is recommended [ 50.827107][ T3969] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 50.827492][ T3965] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 50.846130][ T3965] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.96: corrupted in-inode xattr: e_name out of bounds [ 50.861401][ T3965] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.870049][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 50.888233][ C1] EXT4-fs (loop1): initial error at time 1773141233: ext4_iget_extra_inode:5025: inode 15 [ 50.898431][ C1] EXT4-fs (loop1): last error at time 1773141233: ext4_iget_extra_inode:5025: inode 15 [ 50.913017][ T3965] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.96: couldn't read orphan inode 15 (err -117) [ 50.925613][ T3965] loop1: lost filesystem error report for type 5 error -117 [ 50.926498][ T3965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.949737][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.999702][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.259507][ T3978] netlink: 104 bytes leftover after parsing attributes in process `syz.3.98'. [ 51.443223][ T3985] loop2: detected capacity change from 0 to 128 [ 51.529339][ T3985] 9p: Could not find request transport: xen [ 51.550642][ T3985] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 51.562594][ T3983] loop0: detected capacity change from 0 to 1024 [ 51.578700][ T3983] EXT4-fs: Ignoring removed orlov option [ 51.595572][ T3992] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 51.651892][ T3994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.105'. [ 51.676050][ T3983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.774660][ T3985] team0: Port device dummy0 added [ 51.793758][ T3992] team0: Port device dummy0 removed [ 51.821165][ T3992] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 51.849180][ T3985] syz.2.103 (3985) used greatest stack depth: 8520 bytes left [ 51.859248][ T4001] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 51.867608][ T4001] syzkaller1: Refused to change device type [ 51.894472][ T4001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 51.988954][ T4004] FAULT_INJECTION: forcing a failure. [ 51.988954][ T4004] name failslab, interval 1, probability 0, space 0, times 0 [ 52.007673][ T4004] CPU: 1 UID: 0 PID: 4004 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(full) [ 52.007771][ T4004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 52.007784][ T4004] Call Trace: [ 52.007858][ T4004] [ 52.007867][ T4004] __dump_stack+0x1d/0x30 [ 52.007895][ T4004] dump_stack_lvl+0x95/0xd0 [ 52.007975][ T4004] dump_stack+0x15/0x1b [ 52.007997][ T4004] should_fail_ex+0x263/0x280 [ 52.008050][ T4004] should_failslab+0x8c/0xb0 [ 52.008068][ T4004] kmem_cache_alloc_noprof+0x66/0x400 [ 52.008091][ T4004] ? skb_clone+0x151/0x1f0 [ 52.008117][ T4004] skb_clone+0x151/0x1f0 [ 52.008187][ T4004] __netlink_deliver_tap+0x2c9/0x500 [ 52.008217][ T4004] netlink_unicast+0x66b/0x690 [ 52.008300][ T4004] netlink_sendmsg+0x5c8/0x6f0 [ 52.008335][ T4004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.008361][ T4004] ____sys_sendmsg+0x563/0x5b0 [ 52.008413][ T4004] ___sys_sendmsg+0x195/0x1e0 [ 52.008502][ T4004] __x64_sys_sendmsg+0xd4/0x160 [ 52.008531][ T4004] x64_sys_call+0x194c/0x3020 [ 52.008553][ T4004] do_syscall_64+0x12c/0x370 [ 52.008570][ T4004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.008588][ T4004] RIP: 0033:0x7f78d8bfc799 [ 52.008601][ T4004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.008617][ T4004] RSP: 002b:00007f78d764f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.008669][ T4004] RAX: ffffffffffffffda RBX: 00007f78d8e75fa0 RCX: 00007f78d8bfc799 [ 52.008831][ T4004] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000007 [ 52.008844][ T4004] RBP: 00007f78d764f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.008856][ T4004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.008866][ T4004] R13: 00007f78d8e76038 R14: 00007f78d8e75fa0 R15: 00007ffd680c03d8 [ 52.008881][ T4004] [ 52.245196][ T4011] loop2: detected capacity change from 0 to 128 [ 52.287779][ T4011] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.311545][ T4011] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.425748][ T4022] netlink: 104 bytes leftover after parsing attributes in process `syz.1.112'. [ 52.474439][ T4025] loop5: detected capacity change from 0 to 512 [ 52.550835][ T4025] EXT4-fs: Ignoring removed nobh option [ 52.580212][ T4025] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.608102][ T4025] EXT4-fs (loop5): 1 truncate cleaned up [ 52.672065][ T4025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.424511][ T4034] FAULT_INJECTION: forcing a failure. [ 53.424511][ T4034] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.439498][ T3630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.469022][ T4034] CPU: 0 UID: 0 PID: 4034 Comm: syz.1.116 Not tainted syzkaller #0 PREEMPT(full) [ 53.469083][ T4034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.469094][ T4034] Call Trace: [ 53.469101][ T4034] [ 53.469110][ T4034] __dump_stack+0x1d/0x30 [ 53.469172][ T4034] dump_stack_lvl+0x95/0xd0 [ 53.469193][ T4034] dump_stack+0x15/0x1b [ 53.469244][ T4034] should_fail_ex+0x263/0x280 [ 53.469264][ T4034] should_fail+0xb/0x20 [ 53.469295][ T4034] should_fail_usercopy+0x1a/0x20 [ 53.469360][ T4034] _copy_from_user+0x1c/0xb0 [ 53.469383][ T4034] io_submit_one+0x52/0x1350 [ 53.469485][ T4034] __se_sys_io_submit+0xfb/0x280 [ 53.469517][ T4034] __x64_sys_io_submit+0x43/0x50 [ 53.469537][ T4034] x64_sys_call+0x19d5/0x3020 [ 53.469632][ T4034] do_syscall_64+0x12c/0x370 [ 53.469657][ T4034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.469677][ T4034] RIP: 0033:0x7f93f9a1c799 [ 53.469693][ T4034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.469727][ T4034] RSP: 002b:00007f93f8477028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 53.469748][ T4034] RAX: ffffffffffffffda RBX: 00007f93f9c95fa0 RCX: 00007f93f9a1c799 [ 53.469762][ T4034] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f93f8433000 [ 53.469775][ T4034] RBP: 00007f93f8477090 R08: 0000000000000000 R09: 0000000000000000 [ 53.469788][ T4034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.469833][ T4034] R13: 00007f93f9c96038 R14: 00007f93f9c95fa0 R15: 00007ffe03ecdae8 [ 53.469850][ T4034] [ 53.722705][ T4037] loop5: detected capacity change from 0 to 1024 [ 53.811191][ T4037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.106368][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.221541][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.281669][ T4048] FAULT_INJECTION: forcing a failure. [ 54.281669][ T4048] name failslab, interval 1, probability 0, space 0, times 0 [ 54.295105][ T4048] CPU: 0 UID: 0 PID: 4048 Comm: syz.0.119 Not tainted syzkaller #0 PREEMPT(full) [ 54.295132][ T4048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.295143][ T4048] Call Trace: [ 54.295149][ T4048] [ 54.295189][ T4048] __dump_stack+0x1d/0x30 [ 54.295213][ T4048] dump_stack_lvl+0x95/0xd0 [ 54.295231][ T4048] dump_stack+0x15/0x1b [ 54.295302][ T4048] should_fail_ex+0x263/0x280 [ 54.295322][ T4048] should_failslab+0x8c/0xb0 [ 54.295339][ T4048] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 54.295372][ T4048] ? __alloc_skb+0x2d6/0x690 [ 54.295417][ T4048] ? __rtnl_unlock+0x95/0xb0 [ 54.295430][ T4048] __alloc_skb+0x2d6/0x690 [ 54.295443][ T4048] ? __alloc_skb+0x200/0x690 [ 54.295454][ T4048] netlink_ack+0xfd/0x500 [ 54.295510][ T4048] netlink_rcv_skb+0x192/0x220 [ 54.295532][ T4048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 54.295580][ T4048] rtnetlink_rcv+0x1c/0x30 [ 54.295595][ T4048] netlink_unicast+0x5c0/0x690 [ 54.295613][ T4048] netlink_sendmsg+0x5c8/0x6f0 [ 54.295686][ T4048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.295732][ T4048] ____sys_sendmsg+0x563/0x5b0 [ 54.295748][ T4048] ___sys_sendmsg+0x195/0x1e0 [ 54.295816][ T4048] __x64_sys_sendmsg+0xd4/0x160 [ 54.295841][ T4048] x64_sys_call+0x194c/0x3020 [ 54.295854][ T4048] do_syscall_64+0x12c/0x370 [ 54.295867][ T4048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.295879][ T4048] RIP: 0033:0x7f71b733c799 [ 54.295952][ T4048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.295961][ T4048] RSP: 002b:00007f71b5d8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.295973][ T4048] RAX: ffffffffffffffda RBX: 00007f71b75b5fa0 RCX: 00007f71b733c799 [ 54.296000][ T4048] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000007 [ 54.296056][ T4048] RBP: 00007f71b5d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.296143][ T4048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.296149][ T4048] R13: 00007f71b75b6038 R14: 00007f71b75b5fa0 R15: 00007ffef8b4f7b8 [ 54.296160][ T4048] [ 54.604126][ T3630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.919037][ T4064] netlink: 'syz.1.124': attribute type 10 has an invalid length. [ 54.987309][ T4064] netlink: 55 bytes leftover after parsing attributes in process `syz.1.124'. [ 55.064781][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 55.064798][ T28] audit: type=1400 audit(1773141237.636:384): avc: denied { cpu } for pid=4073 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.103712][ T28] audit: type=1400 audit(1773141237.636:385): avc: denied { write } for pid=4073 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.148967][ T4083] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.149581][ T4082] loop1: detected capacity change from 0 to 512 [ 55.171034][ T28] audit: type=1400 audit(1773141237.746:386): avc: denied { getopt } for pid=4081 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.202968][ T4085] loop0: detected capacity change from 0 to 128 [ 55.217418][ T28] audit: type=1400 audit(1773141237.766:387): avc: denied { create } for pid=4081 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.252716][ T28] audit: type=1400 audit(1773141237.776:388): avc: denied { ioctl } for pid=4081 comm="syz.2.126" path="socket:[6989]" dev="sockfs" ino=6989 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.262422][ T4085] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.294467][ T4082] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 55.310073][ T4082] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 55.321135][ T4082] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.127: Corrupt directory, running e2fsck is recommended [ 55.337456][ T4082] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 55.347100][ T4082] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.127: corrupted in-inode xattr: e_name out of bounds [ 55.361233][ T4082] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.361421][ T4082] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.127: couldn't read orphan inode 15 (err -117) [ 55.370742][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 55.370760][ C1] EXT4-fs (loop1): initial error at time 1773141237: ext4_iget_extra_inode:5025: inode 15 [ 55.370813][ C1] EXT4-fs (loop1): last error at time 1773141237: ext4_iget_extra_inode:5025: inode 15 [ 55.408500][ T4085] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.409612][ T4082] loop1: lost filesystem error report for type 5 error -117 [ 55.420614][ T4082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.482849][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.495492][ T28] audit: type=1400 audit(1773141238.066:389): avc: denied { write } for pid=4058 comm="syz.5.120" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.636896][ T28] audit: type=1400 audit(1773141238.066:390): avc: denied { open } for pid=4058 comm="syz.5.120" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.677277][ T4100] loop5: detected capacity change from 0 to 512 [ 56.705550][ T28] audit: type=1400 audit(1773141238.106:391): avc: denied { mount } for pid=4115 comm="syz.1.132" name="/" dev="ramfs" ino=6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.224739][ T4134] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.134'. [ 57.234969][ T4134] netlink: zone id is out of range [ 57.240264][ T4134] netlink: zone id is out of range [ 57.249792][ T4134] netlink: zone id is out of range [ 57.369862][ T4134] netlink: set zone limit has 8 unknown bytes [ 57.383412][ T4100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.396380][ T4131] loop1: detected capacity change from 0 to 512 [ 57.401483][ T4100] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.416013][ T4131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.470226][ T4131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.482891][ T4131] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.494398][ T28] audit: type=1400 audit(1773141240.066:392): avc: denied { add_name } for pid=4125 comm="syz.1.134" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.521042][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.530618][ T28] audit: type=1400 audit(1773141240.086:393): avc: denied { append } for pid=4125 comm="syz.1.134" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.642845][ T3630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.712435][ T4162] loop5: detected capacity change from 0 to 512 [ 57.720154][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.723332][ T4162] EXT4-fs: Ignoring removed nobh option [ 57.745213][ T4162] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.790776][ T4162] EXT4-fs (loop5): 1 truncate cleaned up [ 57.796760][ T4162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.814268][ T4175] loop1: detected capacity change from 0 to 512 [ 57.821128][ T4175] EXT4-fs: Ignoring removed nobh option [ 57.827106][ T4175] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.839804][ T4175] EXT4-fs (loop1): 1 truncate cleaned up [ 57.849842][ T4175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.989255][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.000100][ T3630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.023481][ T4199] loop1: detected capacity change from 0 to 512 [ 58.067070][ T4200] FAULT_INJECTION: forcing a failure. [ 58.067070][ T4200] name failslab, interval 1, probability 0, space 0, times 0 [ 58.081453][ T4200] CPU: 1 UID: 0 PID: 4200 Comm: syz.5.144 Not tainted syzkaller #0 PREEMPT(full) [ 58.081477][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.081543][ T4200] Call Trace: [ 58.081551][ T4200] [ 58.081560][ T4200] __dump_stack+0x1d/0x30 [ 58.081584][ T4200] dump_stack_lvl+0x95/0xd0 [ 58.081606][ T4200] dump_stack+0x15/0x1b [ 58.081671][ T4200] should_fail_ex+0x263/0x280 [ 58.081701][ T4200] should_failslab+0x8c/0xb0 [ 58.081719][ T4200] kmem_cache_alloc_noprof+0x66/0x400 [ 58.081783][ T4200] ? skb_clone+0x151/0x1f0 [ 58.081809][ T4200] skb_clone+0x151/0x1f0 [ 58.081831][ T4200] __netlink_deliver_tap+0x2c9/0x500 [ 58.081966][ T4200] ? netlink_attachskb+0x2e2/0x660 [ 58.081985][ T4200] netlink_sendskb+0x126/0x150 [ 58.082007][ T4200] netlink_unicast+0x2a2/0x690 [ 58.082079][ T4200] netlink_ack+0x4c8/0x500 [ 58.082103][ T4200] netlink_rcv_skb+0x192/0x220 [ 58.082125][ T4200] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.082164][ T4200] rtnetlink_rcv+0x1c/0x30 [ 58.082250][ T4200] netlink_unicast+0x5c0/0x690 [ 58.082274][ T4200] netlink_sendmsg+0x5c8/0x6f0 [ 58.082315][ T4200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.082338][ T4200] ____sys_sendmsg+0x563/0x5b0 [ 58.082388][ T4200] ___sys_sendmsg+0x195/0x1e0 [ 58.082425][ T4200] __x64_sys_sendmsg+0xd4/0x160 [ 58.082453][ T4200] x64_sys_call+0x194c/0x3020 [ 58.082477][ T4200] do_syscall_64+0x12c/0x370 [ 58.082545][ T4200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.082564][ T4200] RIP: 0033:0x7f470bd0c799 [ 58.082588][ T4200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.082682][ T4200] RSP: 002b:00007f470a767028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.082761][ T4200] RAX: ffffffffffffffda RBX: 00007f470bf85fa0 RCX: 00007f470bd0c799 [ 58.082773][ T4200] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000007 [ 58.082784][ T4200] RBP: 00007f470a767090 R08: 0000000000000000 R09: 0000000000000000 [ 58.082794][ T4200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.082805][ T4200] R13: 00007f470bf86038 R14: 00007f470bf85fa0 R15: 00007ffe077819a8 [ 58.082822][ T4200] [ 58.358274][ T4210] geneve2: entered promiscuous mode [ 58.371405][ T4208] loop2: detected capacity change from 0 to 256 [ 58.400066][ T4208] FAT-fs (loop2): Directory bread(block 64) failed [ 58.406752][ T4208] FAT-fs (loop2): Directory bread(block 65) failed [ 58.413644][ T4208] FAT-fs (loop2): Directory bread(block 66) failed [ 58.420954][ T4208] FAT-fs (loop2): Directory bread(block 67) failed [ 58.427716][ T4208] FAT-fs (loop2): Directory bread(block 68) failed [ 58.435137][ T4208] FAT-fs (loop2): Directory bread(block 69) failed [ 58.444457][ T4208] FAT-fs (loop2): Directory bread(block 70) failed [ 58.451600][ T4208] FAT-fs (loop2): Directory bread(block 71) failed [ 58.458320][ T4208] FAT-fs (loop2): Directory bread(block 72) failed [ 58.480766][ T4208] FAT-fs (loop2): Directory bread(block 73) failed [ 58.642268][ T4235] loop5: detected capacity change from 0 to 512 [ 58.660696][ T4235] EXT4-fs: Ignoring removed nobh option [ 58.711618][ T4235] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.761142][ T9] IPVS: starting estimator thread 0... [ 58.793296][ T4235] EXT4-fs (loop5): 1 truncate cleaned up [ 58.816017][ T4235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.860266][ T4239] IPVS: using max 2400 ests per chain, 120000 per kthread [ 59.556287][ T4250] geneve2: entered promiscuous mode [ 59.698259][ T3630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.707713][ T4258] FAULT_INJECTION: forcing a failure. [ 59.707713][ T4258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.721083][ T4258] CPU: 0 UID: 0 PID: 4258 Comm: syz.1.160 Not tainted syzkaller #0 PREEMPT(full) [ 59.721172][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.721182][ T4258] Call Trace: [ 59.721188][ T4258] [ 59.721195][ T4258] __dump_stack+0x1d/0x30 [ 59.721217][ T4258] dump_stack_lvl+0x95/0xd0 [ 59.721279][ T4258] dump_stack+0x15/0x1b [ 59.721371][ T4258] should_fail_ex+0x263/0x280 [ 59.721395][ T4258] should_fail+0xb/0x20 [ 59.721438][ T4258] should_fail_usercopy+0x1a/0x20 [ 59.721463][ T4258] _copy_to_user+0x20/0xa0 [ 59.721496][ T4258] simple_read_from_buffer+0xb5/0x130 [ 59.721517][ T4258] proc_fail_nth_read+0x10e/0x150 [ 59.721736][ T4258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.721798][ T4258] vfs_read+0x1ab/0x7f0 [ 59.721888][ T4258] ? __rcu_read_unlock+0x4e/0x70 [ 59.721910][ T4258] ? __fget_files+0x184/0x1c0 [ 59.721974][ T4258] ? mutex_lock+0x57/0x90 [ 59.721996][ T4258] ksys_read+0xdc/0x1a0 [ 59.722079][ T4258] __x64_sys_read+0x40/0x50 [ 59.722097][ T4258] x64_sys_call+0x2886/0x3020 [ 59.722123][ T4258] do_syscall_64+0x12c/0x370 [ 59.722213][ T4258] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 59.722241][ T4258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.722279][ T4258] RIP: 0033:0x7f93f99dcfce [ 59.722294][ T4258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.722312][ T4258] RSP: 002b:00007f93f8476fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.722382][ T4258] RAX: ffffffffffffffda RBX: 00007f93f84776c0 RCX: 00007f93f99dcfce [ 59.722393][ T4258] RDX: 000000000000000f RSI: 00007f93f84770a0 RDI: 0000000000000009 [ 59.722485][ T4258] RBP: 00007f93f8477090 R08: 0000000000000000 R09: 0000000000000000 [ 59.722499][ T4258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.722512][ T4258] R13: 00007f93f9c96038 R14: 00007f93f9c95fa0 R15: 00007ffe03ecdae8 [ 59.722527][ T4258] [ 60.203774][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 60.203787][ T28] audit: type=1400 audit(1773141242.776:399): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.466024][ T4278] loop0: detected capacity change from 0 to 164 [ 60.477235][ T4278] ISOFS: unable to read i-node block [ 60.482617][ T4278] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 60.497628][ T28] audit: type=1400 audit(1773141243.066:400): avc: denied { mount } for pid=4277 comm="syz.0.164" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 60.568129][ T28] audit: type=1400 audit(1773141243.136:401): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 60.793081][ T3420] IPVS: starting estimator thread 0... [ 61.209924][ T4300] loop3: detected capacity change from 0 to 512 [ 61.233452][ T4300] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.245795][ T4300] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 61.257727][ T4300] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.171: Corrupt directory, running e2fsck is recommended [ 61.274258][ T4300] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 61.282898][ T4295] IPVS: using max 2400 ests per chain, 120000 per kthread [ 61.293289][ T4300] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.171: corrupted in-inode xattr: e_name out of bounds [ 61.308384][ T4300] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.310190][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 61.326554][ C1] EXT4-fs (loop3): initial error at time 1773141243: ext4_iget_extra_inode:5025: inode 15 [ 61.328328][ T4306] loop1: detected capacity change from 0 to 512 [ 61.337220][ C1] EXT4-fs (loop3): last error at time 1773141243: ext4_iget_extra_inode:5025: inode 15 [ 61.345689][ T4306] EXT4-fs: Ignoring removed nobh option [ 61.356165][ T4300] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.171: couldn't read orphan inode 15 (err -117) [ 61.372833][ T4300] loop3: lost filesystem error report for type 5 error -117 [ 61.388765][ T4306] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.411241][ T4300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.429739][ T4306] EXT4-fs (loop1): 1 truncate cleaned up [ 61.436103][ T4306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.461772][ T4300] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.474288][ T4300] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 61.485082][ T4300] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.171: Corrupt directory, running e2fsck is recommended [ 61.516432][ T4300] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.529364][ T4300] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 61.542036][ T4300] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.171: Corrupt directory, running e2fsck is recommended [ 61.567196][ T4300] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.580304][ T4300] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 61.593606][ T4300] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.171: Corrupt directory, running e2fsck is recommended [ 61.616513][ T4300] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.644645][ T4312] loop0: detected capacity change from 0 to 512 [ 61.651261][ T4300] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.171: path /35/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 61.675336][ T4300] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.171: path /35/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 61.739564][ T4312] EXT4-fs (loop0): 1 truncate cleaned up [ 61.757062][ T4312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.774605][ T28] audit: type=1400 audit(1773141244.346:402): avc: denied { remove_name } for pid=4311 comm="syz.0.175" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.798064][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.843568][ T28] audit: type=1400 audit(1773141244.386:403): avc: denied { read } for pid=4311 comm="syz.0.175" name="file1" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.865656][ T28] audit: type=1400 audit(1773141244.386:404): avc: denied { map } for pid=4311 comm="syz.0.175" path="/28/file1/file1" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.888631][ T28] audit: type=1400 audit(1773141244.436:405): avc: denied { read } for pid=4316 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.988959][ T4300] 8021q: VLANs not supported on gre0 [ 62.030420][ T28] audit: type=1400 audit(1773141244.606:406): avc: denied { ioctl } for pid=4320 comm="syz.5.178" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=8310 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.095756][ T4322] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 62.133035][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.367264][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.623706][ T3381] IPVS: starting estimator thread 0... [ 62.732411][ T4356] IPVS: using max 2400 ests per chain, 120000 per kthread [ 62.768062][ T4359] netlink: 104 bytes leftover after parsing attributes in process `syz.2.186'. [ 62.888520][ T28] audit: type=1400 audit(1773141245.456:407): avc: denied { wake_alarm } for pid=4360 comm="syz.2.187" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.150849][ T28] audit: type=1400 audit(1773141245.726:408): avc: denied { write } for pid=4368 comm="syz.1.190" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.294580][ T4375] loop2: detected capacity change from 0 to 256 [ 63.302880][ T4375] msdos: Unknown parameter '˙' [ 63.329043][ T4375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.192'. [ 63.354162][ T4375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.192'. [ 63.390078][ T4373] loop3: detected capacity change from 0 to 512 [ 63.422351][ T4373] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 63.449394][ T4373] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 63.465357][ T4388] raw_sendmsg: syz.2.195 forgot to set AF_INET. Fix it! [ 63.469711][ T4373] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.191: Corrupt directory, running e2fsck is recommended [ 63.496768][ T4391] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 4, id = 0 [ 63.508854][ T4373] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 63.519367][ T4373] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.191: corrupted in-inode xattr: e_name out of bounds [ 63.536120][ T4373] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.542399][ T4373] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.191: couldn't read orphan inode 15 (err -117) [ 63.552192][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 63.552241][ C1] EXT4-fs (loop3): initial error at time 1773141246: ext4_iget_extra_inode:5025: inode 15 [ 63.552520][ C1] EXT4-fs (loop3): last error at time 1773141246: ext4_iget_extra_inode:5025: inode 15 [ 63.558064][ T4396] loop2: detected capacity change from 0 to 512 [ 63.573381][ T4373] loop3: lost filesystem error report for type 5 error -117 [ 63.617622][ T4373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.638930][ T4396] EXT4-fs: Ignoring removed nobh option [ 63.646626][ T4396] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.651310][ T4396] EXT4-fs (loop2): 1 truncate cleaned up [ 63.670617][ T4396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.690581][ T4373] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 63.703699][ T4373] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 63.716319][ T4373] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.191: Corrupt directory, running e2fsck is recommended [ 63.746427][ T4400] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 63.761061][ T4400] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 63.771521][ T4400] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.191: Corrupt directory, running e2fsck is recommended [ 63.793377][ T4373] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 63.806268][ T4373] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 63.817598][ T4373] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.191: Corrupt directory, running e2fsck is recommended [ 63.819203][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.840793][ T4400] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 63.853214][ T4400] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.191: path /38/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 63.879789][ T4400] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.191: path /38/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 63.942584][ T4407] loop2: detected capacity change from 0 to 128 [ 63.962577][ T4407] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.023359][ T4407] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.345217][ T4400] 8021q: VLANs not supported on gre0 [ 65.744657][ T4304] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 65.943257][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.960180][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.045082][ T4435] syzkaller0: entered promiscuous mode [ 66.051034][ T4435] syzkaller0: entered allmulticast mode [ 66.185781][ T4442] netlink: 'syz.2.209': attribute type 10 has an invalid length. [ 66.197158][ T4442] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 66.329591][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 66.329604][ T28] audit: type=1400 audit(1773141248.896:413): avc: denied { ioctl } for pid=4443 comm="syz.1.210" path="socket:[8499]" dev="sockfs" ino=8499 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.385931][ T28] audit: type=1400 audit(1773141248.956:414): avc: denied { create } for pid=4444 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.455856][ T28] audit: type=1400 audit(1773141249.006:415): avc: denied { connect } for pid=4444 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.562109][ T4457] loop1: detected capacity change from 0 to 512 [ 66.571548][ T28] audit: type=1400 audit(1773141249.136:416): avc: denied { ioctl } for pid=4444 comm="syz.3.212" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.631792][ T28] audit: type=1400 audit(1773141249.196:417): avc: denied { read write } for pid=4461 comm="syz.2.215" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 66.705438][ T4457] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.724680][ T4457] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 66.737881][ T4467] tipc: Failed to remove unknown binding: 66,0,0/0:283677552/283677554 [ 66.746575][ T4467] tipc: Failed to remove unknown binding: 66,0,0/0:283677552/283677553 [ 66.755807][ T4467] tipc: Failed to remove unknown binding: 66,0,0/0:283677552/283677554 [ 66.764497][ T4467] tipc: Failed to remove unknown binding: 66,0,0/0:283677552/283677553 [ 66.773224][ T28] audit: type=1400 audit(1773141249.196:418): avc: denied { open } for pid=4461 comm="syz.2.215" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 66.797053][ T28] audit: type=1400 audit(1773141249.206:419): avc: denied { connect } for pid=4461 comm="syz.2.215" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.818275][ T28] audit: type=1400 audit(1773141249.306:420): avc: denied { create } for pid=4466 comm="syz.5.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.838203][ T28] audit: type=1400 audit(1773141249.306:421): avc: denied { bind } for pid=4466 comm="syz.5.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.859058][ T4457] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.213: Corrupt directory, running e2fsck is recommended [ 66.877566][ T28] audit: type=1400 audit(1773141249.306:422): avc: denied { setopt } for pid=4466 comm="syz.5.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.926179][ T4457] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 66.949872][ T4457] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.213: corrupted in-inode xattr: e_name out of bounds [ 66.968057][ T4457] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.970037][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 66.971860][ T4457] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.213: couldn't read orphan inode 15 (err -117) [ 66.979825][ C0] EXT4-fs (loop1): initial error at time 1773141249: ext4_iget_extra_inode:5025: inode 15 [ 66.979858][ C0] EXT4-fs (loop1): last error at time 1773141249: ext4_iget_extra_inode:5025: inode 15 [ 67.035087][ T4457] loop1: lost filesystem error report for type 5 error -117 [ 67.044626][ T4457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.090915][ T4455] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 67.102659][ T4455] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 67.114000][ T4455] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.213: Corrupt directory, running e2fsck is recommended [ 67.129563][ T4455] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 67.143826][ T4455] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 67.154273][ T4455] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.213: Corrupt directory, running e2fsck is recommended [ 67.170235][ T4455] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 67.182258][ T4455] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 67.192467][ T4455] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.213: Corrupt directory, running e2fsck is recommended [ 67.207514][ T4455] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 67.219287][ T4455] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.213: path /46/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 67.249534][ T4455] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.213: path /46/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 67.569668][ T4457] 8021q: VLANs not supported on gre0 [ 67.890421][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.004128][ T4487] xt_policy: output policy not valid in PREROUTING and INPUT [ 68.209362][ T4462] Set syz1 is full, maxelem 65536 reached [ 68.374037][ T4504] netlink: 104 bytes leftover after parsing attributes in process `syz.2.229'. [ 68.489609][ T4501] loop3: detected capacity change from 0 to 512 [ 68.569751][ T4514] loop5: detected capacity change from 0 to 128 [ 68.581297][ T4511] loop2: detected capacity change from 0 to 736 [ 68.635581][ T4514] FAT-fs (loop5): bogus number of reserved sectors [ 68.641103][ T4501] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.642395][ T4514] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 68.642413][ T4514] FAT-fs (loop5): Can't find a valid FAT filesystem [ 68.742157][ T4501] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 68.768129][ T4511] netlink: zone id is out of range [ 68.773914][ T4501] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.228: Corrupt directory, running e2fsck is recommended [ 68.790131][ T4511] netlink: zone id is out of range [ 68.799100][ T4511] netlink: zone id is out of range [ 68.810807][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.821126][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.831931][ T4511] netlink: zone id is out of range [ 68.837452][ T4511] netlink: zone id is out of range [ 68.874984][ T4511] netlink: zone id is out of range [ 68.915510][ T4511] netlink: zone id is out of range [ 68.921421][ T4511] netlink: zone id is out of range [ 68.927007][ T4511] netlink: zone id is out of range [ 68.928026][ T4501] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 68.938182][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.972109][ T4501] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.228: corrupted in-inode xattr: e_name out of bounds [ 68.991866][ T4501] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.995492][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.004964][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 69.004978][ C0] EXT4-fs (loop3): initial error at time 1773141251: ext4_iget_extra_inode:5025: inode 15 [ 69.005005][ C0] EXT4-fs (loop3): last error at time 1773141251: ext4_iget_extra_inode:5025: inode 15 [ 69.050702][ T4501] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.228: couldn't read orphan inode 15 (err -117) [ 69.118038][ T4501] loop3: lost filesystem error report for type 5 error -117 [ 69.126927][ T4501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.159693][ T4538] xt_NFQUEUE: number of total queues is 0 [ 69.175225][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.184249][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.204612][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.224520][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.310891][ T4501] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 69.323273][ T4501] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 69.365337][ T4501] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.228: Corrupt directory, running e2fsck is recommended [ 69.386773][ T4545] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 69.399285][ T4545] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 69.409880][ T4545] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.228: Corrupt directory, running e2fsck is recommended [ 69.518617][ T4501] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 69.555774][ T4501] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 69.657710][ T4501] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.228: Corrupt directory, running e2fsck is recommended [ 69.840306][ T4545] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 69.930255][ T4545] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.228: path /42/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 70.090943][ T4565] bridge0: port 3(batadv1) entered blocking state [ 70.172898][ T4565] bridge0: port 3(batadv1) entered disabled state [ 70.192868][ T4565] batadv1: entered allmulticast mode [ 70.206024][ T4545] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.228: path /42/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 70.232724][ T4565] batadv1: entered promiscuous mode [ 70.241116][ T4573] loop1: detected capacity change from 0 to 512 [ 70.275919][ T4573] EXT4-fs: Mount option(s) incompatible with ext3 [ 70.349223][ T4573] loop1: detected capacity change from 0 to 512 [ 70.377189][ T4573] ext4: Invalid gid '0x00000000ffffffff' [ 70.537114][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.590402][ T332] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 70.599843][ T332] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 70.616076][ T4600] netlink: 168 bytes leftover after parsing attributes in process `syz.2.251'. [ 70.625497][ T4593] loop1: detected capacity change from 0 to 2048 [ 70.661682][ T4597] loop3: detected capacity change from 0 to 1024 [ 70.671280][ T4597] EXT4-fs: inline encryption not supported [ 70.694296][ T4597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.734085][ T3301] Alternate GPT is invalid, using primary GPT. [ 70.742637][ T3301] loop1: p1 p2 p3 [ 70.763532][ T4593] Alternate GPT is invalid, using primary GPT. [ 70.769910][ T4593] loop1: p1 p2 p3 [ 70.832371][ T4605] loop5: detected capacity change from 0 to 512 [ 71.148352][ T4605] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.218571][ T4605] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 71.229654][ T4605] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.253: Corrupt directory, running e2fsck is recommended [ 71.244870][ T4614] lo speed is unknown, defaulting to 1000 [ 71.256548][ T4605] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 71.266956][ T4614] lo speed is unknown, defaulting to 1000 [ 71.279341][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 71.291115][ T4605] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.253: corrupted in-inode xattr: e_name out of bounds [ 71.292170][ T3584] udevd[3584]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 71.318147][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 71.318368][ T4614] lo speed is unknown, defaulting to 1000 [ 71.347143][ T4605] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.348871][ T4605] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.253: couldn't read orphan inode 15 (err -117) [ 71.358659][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 71.358839][ C0] EXT4-fs (loop5): initial error at time 1773141253: ext4_iget_extra_inode:5025: inode 15 [ 71.359180][ C0] EXT4-fs (loop5): last error at time 1773141253: ext4_iget_extra_inode:5025: inode 15 [ 71.388151][ T4630] loop1: detected capacity change from 0 to 512 [ 71.390686][ T4605] loop5: lost filesystem error report for type 5 error -117 [ 71.403696][ T4605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.469768][ T4630] EXT4-fs (loop1): 1 truncate cleaned up [ 71.477583][ T4614] infiniband syU×: set down [ 71.482619][ T35] lo speed is unknown, defaulting to 1000 [ 71.497800][ T4605] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.518785][ T4630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.526480][ T4614] infiniband syU×: added lo [ 71.544321][ T4614] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 71.544507][ T4614] infiniband syU×: Couldn't open port 1 [ 71.554048][ T4605] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 71.572529][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 71.572543][ T28] audit: type=1400 audit(1773141254.146:442): avc: denied { read } for pid=4633 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.599014][ T4614] RDS/IB: syU×: added [ 71.600664][ T4605] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.253: Corrupt directory, running e2fsck is recommended [ 71.609889][ T4614] smc: adding ib device syU× with port count 1 [ 71.629244][ T4614] smc: ib device syU× port 1 has no pnetid [ 71.635618][ T3406] lo speed is unknown, defaulting to 1000 [ 71.641992][ T4614] lo speed is unknown, defaulting to 1000 [ 71.655198][ T4637] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.681035][ T4637] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 71.692237][ T4637] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.253: Corrupt directory, running e2fsck is recommended [ 71.714850][ T4646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 71.719571][ T4639] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.744579][ T4648] vhci_hcd vhci_hcd.4: default hub control req: 0000 v0000 i0000 l0 [ 71.754104][ T28] audit: type=1400 audit(1773141254.316:443): avc: denied { connect } for pid=4647 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.792769][ T4614] lo speed is unknown, defaulting to 1000 [ 71.798964][ T28] audit: type=1400 audit(1773141254.356:444): avc: denied { setcheckreqprot } for pid=4645 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.807478][ T4639] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 71.879756][ T4652] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.262' sets config #0 [ 71.911088][ T4614] lo speed is unknown, defaulting to 1000 [ 71.935538][ T4639] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.253: Corrupt directory, running e2fsck is recommended [ 71.968069][ T4658] tipc: Enabled bearer , priority 0 [ 71.990835][ T4605] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.002855][ T4614] lo speed is unknown, defaulting to 1000 [ 72.020107][ T4661] loop2: detected capacity change from 0 to 1024 [ 72.039369][ T4661] EXT4-fs: Ignoring removed nobh option [ 72.052595][ T4661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.060866][ T4662] syzkaller0: entered promiscuous mode [ 72.066401][ T4662] syzkaller0: entered allmulticast mode [ 72.075637][ T4662] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 72.086261][ T4605] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.253: path /51/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 72.086616][ T4662] tipc: Resetting bearer [ 72.107800][ T4614] lo speed is unknown, defaulting to 1000 [ 72.133381][ T4661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.180634][ T4605] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz.5.253: path /51/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 72.200908][ T28] audit: type=1400 audit(1773141254.766:445): avc: denied { link } for pid=4659 comm="syz.2.265" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.270089][ T28] audit: type=1400 audit(1773141254.796:446): avc: denied { execute } for pid=4659 comm="syz.2.265" path="/60/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.349413][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.362277][ T3630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.455555][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.571283][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.963632][ T4679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4679 comm=syz.2.269 [ 73.093730][ T3734] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.112074][ T4689] loop1: detected capacity change from 0 to 2048 [ 73.136578][ T4693] lo speed is unknown, defaulting to 1000 [ 73.198322][ T4689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.215883][ T28] audit: type=1400 audit(1773141255.786:447): avc: denied { read } for pid=4692 comm="syz.2.273" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 73.288670][ T28] audit: type=1400 audit(1773141255.786:448): avc: denied { read open } for pid=4692 comm="syz.2.273" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 73.313866][ T4698] loop2: detected capacity change from 0 to 256 [ 73.511428][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.539319][ T28] audit: type=1400 audit(1773141256.106:449): avc: denied { name_bind } for pid=4712 comm="syz.3.278" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 73.577654][ T28] audit: type=1400 audit(1773141256.106:450): avc: denied { kexec_image_load } for pid=4715 comm="syz.5.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 73.603932][ T4660] tipc: Resetting bearer [ 73.609976][ T28] audit: type=1400 audit(1773141256.116:451): avc: denied { create } for pid=4715 comm="syz.5.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.632951][ T4660] tipc: Disabling bearer [ 73.656186][ T4723] loop5: detected capacity change from 0 to 764 [ 73.665051][ T4723] iso9660: Unknown parameter '' [ 73.790847][ T4736] loop1: detected capacity change from 0 to 512 [ 73.812197][ T4736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.939865][ T4736] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.954904][ T4736] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.285: corrupted inode contents [ 73.967144][ T4736] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.285: mark_inode_dirty error [ 73.979049][ T4736] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.285: corrupted inode contents [ 73.991641][ T4736] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.285: mark_inode_dirty error [ 74.012322][ T4736] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.285: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 74.012322][ T4736] [ 74.410691][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.437039][ T4751] loop5: detected capacity change from 0 to 512 [ 74.508593][ T4762] loop1: detected capacity change from 0 to 512 [ 74.515756][ T4762] EXT4-fs: Ignoring removed bh option [ 74.521477][ T4762] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 74.532213][ T4762] EXT4-fs (loop1): 1 truncate cleaned up [ 74.538485][ T4762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.602286][ T4769] syzkaller0: entered promiscuous mode [ 74.608015][ T4769] syzkaller0: entered allmulticast mode [ 74.658952][ T4762] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=104 sclass=netlink_xfrm_socket pid=4762 comm=syz.1.293 [ 74.855894][ T4774] netlink: 828 bytes leftover after parsing attributes in process `syz.5.298'. [ 74.887903][ T4778] loop5: detected capacity change from 0 to 128 [ 74.897134][ T4778] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.909954][ T4778] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.100110][ T3548] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.106317][ T4691] Bluetooth: hci0: command 0x1003 tx timeout [ 75.113892][ T4690] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 75.294580][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.485531][ T4788] lo speed is unknown, defaulting to 1000 [ 76.202219][ T4808] loop1: detected capacity change from 0 to 512 [ 76.233997][ T4808] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.309: inode #0: comm syz.1.309: iget: illegal inode # [ 76.249458][ T4808] loop1: lost filesystem error report for type 5 error -117 [ 76.249722][ T4808] EXT4-fs (loop1): get orphan inode failed [ 76.257061][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 76.257084][ C1] EXT4-fs (loop1): initial error at time 1773141258: ext4_init_orphan_info:583 [ 76.257102][ C1] EXT4-fs (loop1): last error at time 1773141258: ext4_init_orphan_info:583 [ 76.294487][ T4808] EXT4-fs (loop1): mount failed [ 76.527791][ T4821] netlink: 72 bytes leftover after parsing attributes in process `syz.3.312'. [ 76.537231][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 76.601876][ T3630] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.733949][ T4834] loop1: detected capacity change from 0 to 512 [ 76.794846][ T4834] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 76.861809][ T4834] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 76.897506][ T4834] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.315: Corrupt directory, running e2fsck is recommended [ 76.964351][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.320'. [ 76.995972][ T4834] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 77.009428][ T4834] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.315: corrupted in-inode xattr: e_name out of bounds [ 77.025011][ T4834] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.026278][ T4834] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.315: couldn't read orphan inode 15 (err -117) [ 77.036118][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 77.036177][ C0] EXT4-fs (loop1): initial error at time 1773141259: ext4_iget_extra_inode:5025: inode 15 [ 77.036567][ C0] EXT4-fs (loop1): last error at time 1773141259: ext4_iget_extra_inode:5025: inode 15 [ 77.088502][ T4834] loop1: lost filesystem error report for type 5 error -117 [ 77.097553][ T4834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.135886][ T4834] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 77.169561][ T4834] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 77.185835][ T4834] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.315: Corrupt directory, running e2fsck is recommended [ 77.238152][ T4856] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 77.270231][ T4856] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 77.281512][ T4856] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.315: Corrupt directory, running e2fsck is recommended [ 77.336229][ T4834] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 77.390744][ T4834] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 77.429902][ T4834] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.315: Corrupt directory, running e2fsck is recommended [ 77.486725][ T4869] loop5: detected capacity change from 0 to 128 [ 77.736447][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 77.736469][ T28] audit: type=1400 audit(1773141260.086:467): avc: denied { read } for pid=4868 comm="syz.5.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.814555][ T4862] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 77.857133][ T28] audit: type=1400 audit(1773141260.086:468): avc: denied { read } for pid=4868 comm="syz.5.326" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.887175][ T4862] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.315: path /68/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 78.373295][ T4862] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.315: path /68/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 78.978783][ T4876] loop3: detected capacity change from 0 to 1024 [ 79.014515][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.048205][ T4876] EXT4-fs: Ignoring removed orlov option [ 79.136382][ T4883] loop5: detected capacity change from 0 to 512 [ 79.295418][ T28] audit: type=1400 audit(1773141261.856:469): avc: denied { write } for pid=4888 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.326511][ T4883] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 79.364979][ T4876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.388905][ T4892] loop1: detected capacity change from 0 to 1024 [ 79.396084][ T4883] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 79.470723][ T4892] EXT4-fs: Ignoring removed orlov option [ 79.515496][ T4883] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.330: Corrupt directory, running e2fsck is recommended [ 79.599666][ T4892] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 79.618749][ T4902] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 79.631709][ T28] audit: type=1400 audit(1773141262.186:470): avc: denied { mac_admin } for pid=4900 comm="syz.0.334" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.663422][ T4883] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 79.680370][ T4883] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.330: corrupted in-inode xattr: e_name out of bounds [ 79.696929][ T4883] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.698410][ T4883] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.330: couldn't read orphan inode 15 (err -117) [ 79.708059][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 79.708137][ C0] EXT4-fs (loop5): initial error at time 1773141262: ext4_iget_extra_inode:5025: inode 15 [ 79.708348][ C0] EXT4-fs (loop5): last error at time 1773141262: ext4_iget_extra_inode:5025: inode 15 [ 79.718325][ T28] audit: type=1400 audit(1773141262.246:471): avc: denied { relabelto } for pid=4900 comm="syz.0.334" name="50" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:updpwd_exec_t:s0" [ 79.803651][ T4883] loop5: lost filesystem error report for type 5 error -117 [ 79.843727][ T4883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.910098][ T28] audit: type=1400 audit(1773141262.246:472): avc: denied { associate } for pid=4900 comm="syz.0.334" name="50" dev="tmpfs" ino=284 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:updpwd_exec_t:s0" [ 79.937031][ T28] audit: type=1400 audit(1773141262.246:473): avc: denied { bind } for pid=4900 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.967419][ T4892] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 80.001099][ T4883] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 80.018653][ T28] audit: type=1400 audit(1773141262.556:474): avc: denied { remove_name } for pid=3312 comm="syz-executor" name="binderfs" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:updpwd_exec_t:s0" [ 80.076741][ T4883] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 80.092898][ T4892] loop1: detected capacity change from 0 to 1024 [ 80.125550][ T4883] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.330: Corrupt directory, running e2fsck is recommended [ 80.150714][ T28] audit: type=1400 audit(1773141262.556:475): avc: denied { rmdir } for pid=3312 comm="syz-executor" name="50" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:updpwd_exec_t:s0" [ 80.177302][ T4892] EXT4-fs: Ignoring removed i_version option [ 80.210118][ T4909] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 80.242230][ T4892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.252898][ T4909] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 80.270093][ T28] audit: type=1400 audit(1773141262.636:476): avc: denied { relabelto } for pid=4891 comm="syz.1.332" name="69" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 80.321983][ T4909] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.330: Corrupt directory, running e2fsck is recommended [ 80.362809][ T4910] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 80.444669][ T4892] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.332: Failed to acquire dquot type 0 [ 80.458758][ T4910] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 80.509387][ T4910] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.330: Corrupt directory, running e2fsck is recommended [ 80.542771][ T4892] loop1: lost filesystem error report for type 5 error -117 [ 80.547131][ T4892] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, [ 80.554485][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 80.554510][ C0] EXT4-fs (loop1): initial error at time 1773141263: ext4_acquire_dquot:7001 [ 80.554533][ C0] EXT4-fs (loop1): last error at time 1773141263: ext4_acquire_dquot:7001 [ 80.586740][ T4892] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 80.631142][ T4883] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 80.662386][ T4883] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.330: path /76/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 80.747701][ T4892] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #13: comm syz.1.332: corrupted inode contents [ 80.760211][ T4892] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 80.762080][ T4892] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #13: comm syz.1.332: mark_inode_dirty error [ 80.784746][ T4883] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz.5.330: path /76/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 80.810335][ T4892] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 80.820467][ T4892] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #13: comm syz.1.332: corrupted inode contents [ 80.860127][ T4892] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 80.860371][ T4892] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.332: mark_inode_dirty error [ 80.931791][ T4892] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 80.931984][ T4892] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #13: comm syz.1.332: corrupted inode contents [ 80.954233][ T3630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.002672][ T4892] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 81.003000][ T4892] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 81.038429][ T4920] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 81.069959][ T4920] bond1: entered promiscuous mode [ 81.075268][ T4920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.079063][ T4892] loop1: lost filesystem error report for type 5 error -117 [ 81.087540][ T4892] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #13: comm syz.1.332: corrupted inode contents [ 81.128587][ T4892] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 81.129781][ T4920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.151239][ T4892] EXT4-fs error (device loop1): ext4_truncate:4587: inode #13: comm syz.1.332: mark_inode_dirty error [ 81.167964][ T4920] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 81.178615][ T4892] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 81.178777][ T4920] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 81.197172][ T4892] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 81.206242][ T4892] loop1: lost filesystem error report for type 5 error -117 [ 81.206625][ T4892] EXT4-fs (loop1): 1 truncate cleaned up [ 81.240573][ T4892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.255985][ T4920] bond1: (slave vcan1): making interface the new active one [ 81.266515][ T4920] vcan1: entered promiscuous mode [ 81.273736][ T4920] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 81.283141][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 81.304712][ T4930] loop5: detected capacity change from 0 to 512 [ 81.333802][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.525415][ T4930] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 81.560508][ T4930] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 81.631378][ T4930] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.343: Corrupt directory, running e2fsck is recommended [ 81.756815][ T4930] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 81.813971][ T4930] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.343: corrupted in-inode xattr: e_name out of bounds [ 81.906828][ T4930] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.910080][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 81.925691][ C0] EXT4-fs (loop5): initial error at time 1773141264: ext4_iget_extra_inode:5025: inode 15 [ 81.935632][ C0] EXT4-fs (loop5): last error at time 1773141264: ext4_iget_extra_inode:5025: inode 15 [ 81.951356][ T4930] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.343: couldn't read orphan inode 15 (err -117) [ 81.976081][ T4930] loop5: lost filesystem error report for type 5 error -117 [ 81.983664][ T4930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.008509][ T4930] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.020980][ T4930] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 82.054776][ T4930] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.343: Corrupt directory, running e2fsck is recommended [ 82.089378][ T4943] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.103702][ T4943] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 82.113970][ T4943] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.343: Corrupt directory, running e2fsck is recommended [ 82.143234][ T4930] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.170474][ T4930] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 82.184541][ T4930] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.343: Corrupt directory, running e2fsck is recommended [ 82.210045][ T4930] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.271418][ T4930] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.343: path /79/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 82.430654][ T4930] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz.5.343: path /79/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 82.498685][ T4971] lo speed is unknown, defaulting to 1000 [ 82.738784][ T3630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.827538][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 82.827604][ T28] audit: type=1326 audit(1773141265.396:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f9a1c799 code=0x7ffc0000 [ 82.925382][ T28] audit: type=1326 audit(1773141265.426:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f9a1c799 code=0x7ffc0000 [ 82.967836][ T28] audit: type=1326 audit(1773141265.426:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f9a1c799 code=0x7ffc0000 [ 83.005295][ T28] audit: type=1326 audit(1773141265.426:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93f9a1c799 code=0x7ffc0000 [ 83.058779][ T28] audit: type=1326 audit(1773141265.426:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f9a1c799 code=0x7ffc0000 [ 83.123019][ T28] audit: type=1326 audit(1773141265.426:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f9a1c799 code=0x7ffc0000 [ 83.208987][ T28] audit: type=1326 audit(1773141265.426:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f9a1c799 code=0x7ffc0000 [ 83.288094][ T28] audit: type=1326 audit(1773141265.426:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f9a1c799 code=0x7ffc0000 [ 83.341054][ T4988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 83.606745][ T28] audit: type=1326 audit(1773141265.426:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f93f9a1c799 code=0x7ffc0000 [ 84.590589][ T28] audit: type=1326 audit(1773141265.426:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f9a1c799 code=0x7ffc0000 [ 85.357059][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.470869][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 85.490830][ T5006] loop1: detected capacity change from 0 to 512 [ 85.621978][ T5006] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.649141][ T5006] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 85.690224][ T5006] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.363: Corrupt directory, running e2fsck is recommended [ 85.768552][ T5006] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 85.789578][ T5006] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.363: corrupted in-inode xattr: e_name out of bounds [ 85.814130][ T5006] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.815421][ T5006] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.363: couldn't read orphan inode 15 (err -117) [ 85.826214][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 85.826267][ C1] EXT4-fs (loop1): initial error at time 1773141268: ext4_iget_extra_inode:5025: inode 15 [ 85.826350][ C1] EXT4-fs (loop1): last error at time 1773141268: ext4_iget_extra_inode:5025: inode 15 [ 85.866836][ T5006] loop1: lost filesystem error report for type 5 error -117 [ 85.875801][ T5006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.906134][ T5006] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.918460][ T5006] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 85.929630][ T5006] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.363: Corrupt directory, running e2fsck is recommended [ 85.951036][ T5006] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.963462][ T5006] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 85.974484][ T5006] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.363: Corrupt directory, running e2fsck is recommended [ 85.996076][ T5006] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.008230][ T5006] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 86.019380][ T5006] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.363: Corrupt directory, running e2fsck is recommended [ 86.047863][ T5030] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.060007][ T5030] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.363: path /76/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 86.085130][ T5030] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.363: path /76/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 86.602438][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.666925][ T5043] netlink: 'syz.5.373': attribute type 10 has an invalid length. [ 86.678420][ T5043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.688694][ T5043] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 86.701192][ T5043] netlink: 'syz.5.373': attribute type 10 has an invalid length. [ 86.709557][ T5043] netlink: 40 bytes leftover after parsing attributes in process `syz.5.373'. [ 86.718899][ T5043] batadv0: entered promiscuous mode [ 86.724461][ T5043] batadv0: entered allmulticast mode [ 86.738401][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 86.747335][ T5047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 86.756331][ T5047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.376'. [ 86.765230][ T5047] netlink: 540 bytes leftover after parsing attributes in process `syz.0.376'. [ 86.776495][ T5043] bond0: (slave batadv0): Releasing backup interface [ 86.806566][ T5043] bridge0: port 4(batadv0) entered blocking state [ 86.814489][ T5043] bridge0: port 4(batadv0) entered disabled state [ 87.130214][ T3734] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 87.139615][ T3734] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 89.139318][ T5064] loop1: detected capacity change from 0 to 1024 [ 89.159455][ T5064] EXT4-fs: Ignoring removed orlov option [ 89.171472][ T5065] loop5: detected capacity change from 0 to 256 [ 89.222249][ T5064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.258587][ T5065] FAT-fs (loop5): Directory bread(block 64) failed [ 89.279796][ T5065] FAT-fs (loop5): Directory bread(block 65) failed [ 89.296049][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 89.296064][ T28] audit: type=1400 audit(1773141271.866:518): avc: denied { setattr } for pid=5063 comm="syz.1.380" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.334914][ T5065] FAT-fs (loop5): Directory bread(block 66) failed [ 89.344323][ T5064] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.380: bit already cleared for inode 15 [ 89.369998][ T5065] FAT-fs (loop5): Directory bread(block 67) failed [ 89.377785][ T5065] FAT-fs (loop5): Directory bread(block 68) failed [ 89.394996][ T5065] FAT-fs (loop5): Directory bread(block 69) failed [ 89.410669][ T5065] FAT-fs (loop5): Directory bread(block 70) failed [ 89.431058][ T5065] FAT-fs (loop5): Directory bread(block 71) failed [ 89.437699][ T5065] FAT-fs (loop5): Directory bread(block 72) failed [ 89.444556][ T5065] FAT-fs (loop5): Directory bread(block 73) failed [ 89.500973][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.265997][ T5100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 90.367568][ T28] audit: type=1400 audit(1773141272.816:519): avc: denied { listen } for pid=5098 comm="syz.5.387" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.559163][ T28] audit: type=1400 audit(1773141272.906:520): avc: denied { lock } for pid=5094 comm="syz.2.382" path="socket:[10588]" dev="sockfs" ino=10588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 90.821799][ T28] audit: type=1400 audit(1773141273.396:521): avc: denied { create } for pid=5109 comm="syz.5.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 91.137715][ T28] audit: type=1400 audit(1773141273.396:522): avc: denied { write } for pid=5109 comm="syz.5.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 91.211243][ T28] audit: type=1400 audit(1773141273.416:523): avc: denied { write } for pid=5109 comm="syz.5.389" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 91.230882][ T5118] sctp: [Deprecated]: syz.1.390 (pid 5118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.230882][ T5118] Use struct sctp_sack_info instead [ 91.280180][ T28] audit: type=1400 audit(1773141273.496:524): avc: denied { write } for pid=5109 comm="syz.5.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.330781][ T5125] netlink: 52 bytes leftover after parsing attributes in process `syz.1.391'. [ 91.444196][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 91.509141][ T5070] net_ratelimit: 153 callbacks suppressed [ 91.509158][ T5070] Set syz1 is full, maxelem 65536 reached [ 91.523185][ T5127] lo speed is unknown, defaulting to 1000 [ 91.762227][ T5140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 91.826632][ T5143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.397'. [ 91.838393][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 91.873950][ T28] audit: type=1400 audit(1773141274.446:525): avc: denied { execute } for pid=5141 comm="syz.3.396" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 91.908908][ T28] audit: type=1400 audit(1773141274.446:526): avc: denied { connect } for pid=5141 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.939742][ T28] audit: type=1400 audit(1773141274.506:527): avc: denied { create } for pid=5154 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 92.057035][ T5160] loop3: detected capacity change from 0 to 1024 [ 92.065718][ T5160] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 92.401231][ T5166] loop5: detected capacity change from 0 to 256 [ 92.610532][ T5182] loop3: detected capacity change from 0 to 512 [ 92.674432][ T5166] FAT-fs (loop5): Directory bread(block 64) failed [ 92.690630][ T5166] FAT-fs (loop5): Directory bread(block 65) failed [ 92.698442][ T5182] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.698842][ T5166] FAT-fs (loop5): Directory bread(block 66) failed [ 92.720318][ T5182] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 92.731124][ T5182] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.411: Corrupt directory, running e2fsck is recommended [ 92.749240][ T5166] FAT-fs (loop5): Directory bread(block 67) failed [ 92.757788][ T5166] FAT-fs (loop5): Directory bread(block 68) failed [ 92.765667][ T5166] FAT-fs (loop5): Directory bread(block 69) failed [ 92.782229][ T5166] FAT-fs (loop5): Directory bread(block 70) failed [ 92.791035][ T5182] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 92.801104][ T5166] FAT-fs (loop5): Directory bread(block 71) failed [ 92.809751][ T5182] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.411: corrupted in-inode xattr: e_name out of bounds [ 92.812810][ T5166] FAT-fs (loop5): Directory bread(block 72) failed [ 92.824494][ T5182] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.833973][ T5193] loop1: detected capacity change from 0 to 256 [ 92.850086][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 92.856728][ C0] EXT4-fs (loop3): initial error at time 1773141275: ext4_iget_extra_inode:5025: inode 15 [ 92.857052][ T5166] FAT-fs (loop5): Directory bread(block 73) failed [ 92.866667][ C0] EXT4-fs (loop3): last error at time 1773141275: ext4_iget_extra_inode:5025: inode 15 [ 92.868324][ T5182] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.411: couldn't read orphan inode 15 (err -117) [ 92.899393][ T5182] loop3: lost filesystem error report for type 5 error -117 [ 92.926668][ T5182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.977922][ T5182] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.999018][ T5200] loop1: detected capacity change from 0 to 512 [ 93.009284][ T5182] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 93.029358][ T5182] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.411: Corrupt directory, running e2fsck is recommended [ 93.057778][ T5201] pimreg: entered allmulticast mode [ 93.069560][ T5204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.417'. [ 93.078598][ T5204] vxcan0: entered promiscuous mode [ 93.106152][ T5207] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.118426][ T5207] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 93.129728][ T5207] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.411: Corrupt directory, running e2fsck is recommended [ 93.145737][ T5182] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.163965][ T5182] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 93.195115][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.404'. [ 93.207233][ T5182] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.411: Corrupt directory, running e2fsck is recommended [ 93.221385][ T5215] netlink: 'syz.1.420': attribute type 4 has an invalid length. [ 93.236014][ T5215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.420'. [ 93.316178][ T5207] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.334092][ T5225] netlink: 'syz.1.420': attribute type 4 has an invalid length. [ 93.350244][ T5207] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.411: path /65/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 93.402554][ T5207] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.411: path /65/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 93.475568][ T5224] netlink: 84 bytes leftover after parsing attributes in process `syz.0.423'. [ 93.487088][ T5238] loop5: detected capacity change from 0 to 512 [ 93.535132][ T5238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 93.558630][ T5238] System zones: 1-12 [ 93.568357][ T5238] EXT4-fs (loop5): orphan cleanup on readonly fs [ 93.582799][ T5238] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.426: invalid indirect mapped block 8 (level 2) [ 93.628326][ T5238] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 93.628697][ T5238] EXT4-fs (loop5): 1 truncate cleaned up [ 93.637997][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 93.638020][ C1] EXT4-fs (loop5): initial error at time 1773141276: ext4_free_branches:1023: inode 11 [ 93.638050][ C1] EXT4-fs (loop5): last error at time 1773141276: ext4_free_branches:1023: inode 11 [ 93.680445][ T5238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 93.703316][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.024188][ T5255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.430'. [ 94.034437][ T5254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.430'. [ 94.071581][ T5257] bond2: (slave veth3): Enslaving as an active interface with a down link [ 94.087663][ T5260] loop3: detected capacity change from 0 to 512 [ 94.099331][ T5260] EXT4-fs: Ignoring removed oldalloc option [ 94.124176][ T5257] bond2: (slave veth5): Enslaving as an active interface with a down link [ 94.133315][ T5260] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 94.219902][ T5268] lo speed is unknown, defaulting to 1000 [ 94.245629][ T5271] loop3: detected capacity change from 0 to 512 [ 94.269975][ T5271] EXT4-fs (loop3): failed to initialize system zone (-117) [ 94.302381][ T5271] EXT4-fs (loop3): mount failed [ 94.371910][ T5266] ip6t_rpfilter: unknown options [ 94.417491][ T3630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.438622][ T5275] syzkaller0: entered promiscuous mode [ 94.444209][ T5275] syzkaller0: entered allmulticast mode [ 94.486653][ T5284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.439'. [ 95.028034][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 95.028089][ T28] audit: type=1400 audit(1773141790.590:536): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.068710][ T5308] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 95.086786][ T28] audit: type=1400 audit(1773141790.630:537): avc: denied { read } for pid=5307 comm="syz.5.445" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 95.245269][ T28] audit: type=1400 audit(1773141790.810:538): avc: denied { create } for pid=5317 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.334498][ T5313] lo speed is unknown, defaulting to 1000 [ 95.489246][ T5339] netlink: 'syz.5.452': attribute type 19 has an invalid length. [ 95.499319][ T3734] bridge_slave_1: left allmulticast mode [ 95.510706][ T3734] bridge_slave_1: left promiscuous mode [ 95.525980][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.558655][ T3734] bridge_slave_0: left allmulticast mode [ 95.575330][ T3734] bridge_slave_0: left promiscuous mode [ 95.588729][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.672243][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.696128][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.705858][ T3734] bond0 (unregistering): Released all slaves [ 95.713246][ T28] audit: type=1400 audit(1773141791.270:539): avc: denied { setopt } for pid=5359 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.755797][ T28] audit: type=1400 audit(1773141791.290:540): avc: denied { connect } for pid=5364 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.799904][ T28] audit: type=1400 audit(1773141791.290:541): avc: denied { bind } for pid=5364 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.848240][ T3734] IPVS: stopping backup sync thread 3969 ... [ 95.857865][ T5313] chnl_net:caif_netlink_parms(): no params data found [ 95.865030][ T28] audit: type=1400 audit(1773141791.300:542): avc: denied { write } for pid=5364 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.868247][ T5369] loop5: detected capacity change from 0 to 512 [ 95.935831][ T5365] usb usb9: usbfs: process 5365 (syz.0.458) did not claim interface 0 before use [ 95.944250][ T5369] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.957668][ T5369] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 95.971766][ T5369] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.459: Corrupt directory, running e2fsck is recommended [ 95.997188][ T5369] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 96.008322][ T5369] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.459: corrupted in-inode xattr: e_name out of bounds [ 96.025204][ T5369] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.026796][ T5369] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.459: couldn't read orphan inode 15 (err -117) [ 96.036403][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 96.036501][ C0] EXT4-fs (loop5): initial error at time 1773141791: ext4_iget_extra_inode:5025: inode 15 [ 96.036657][ C0] EXT4-fs (loop5): last error at time 1773141791: ext4_iget_extra_inode:5025: inode 15 [ 96.077692][ T3000] ================================================================== [ 96.077688][ T5377] loop1: detected capacity change from 0 to 2048 [ 96.085963][ T3000] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 96.085992][ T3000] [ 96.085998][ T3000] write to 0xffff888101d8e618 of 8 bytes by task 5377 on cpu 1: [ 96.086012][ T3000] inc_diskseq+0x2d/0x40 [ 96.093781][ T5369] loop5: lost filesystem error report for type 5 error -117 [ 96.099291][ T3000] disk_force_media_change+0x9e/0xe0 [ 96.099320][ T3000] loop_configure+0x6cb/0x9c0 [ 96.099341][ T3000] lo_ioctl+0x1e1/0x13a0 [ 96.099362][ T3000] blkdev_ioctl+0x387/0x460 [ 96.099378][ T3000] __se_sys_ioctl+0xce/0x140 [ 96.099395][ T3000] __x64_sys_ioctl+0x43/0x50 [ 96.099422][ T3000] x64_sys_call+0x1563/0x3020 [ 96.099446][ T3000] do_syscall_64+0x12c/0x370 [ 96.099464][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.099485][ T3000] [ 96.099491][ T3000] read to 0xffff888101d8e618 of 8 bytes by task 3000 on cpu 0: [ 96.099508][ T3000] block_uevent+0x31/0x50 [ 96.099529][ T3000] dev_uevent+0x375/0x400 [ 96.110709][ T5369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.113698][ T3000] uevent_show+0x11a/0x200 [ 96.113726][ T3000] dev_attr_show+0x3f/0xa0 [ 96.113743][ T3000] sysfs_kf_seq_show+0x1a3/0x280 [ 96.113760][ T3000] kernfs_seq_show+0x82/0xa0 [ 96.113776][ T3000] seq_read_iter+0x31e/0x940 [ 96.113802][ T3000] kernfs_fop_read_iter+0xc1/0x330 [ 96.113829][ T3000] vfs_read+0x6c0/0x7f0 [ 96.113856][ T3000] ksys_read+0xdc/0x1a0 [ 96.113883][ T3000] __x64_sys_read+0x40/0x50 [ 96.113899][ T3000] x64_sys_call+0x2886/0x3020 [ 96.113930][ T3000] do_syscall_64+0x12c/0x370 [ 96.113948][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.113969][ T3000] [ 96.259651][ T3000] value changed: 0x00000000000000c2 -> 0x00000000000000cc [ 96.266772][ T3000] [ 96.269189][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 96.276158][ T3000] CPU: 0 UID: 0 PID: 3000 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 96.285124][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 96.295192][ T3000] ================================================================== [ 96.305887][ T4789] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.316893][ T3734] hsr_slave_0: left promiscuous mode [ 96.324732][ T3734] hsr_slave_1: left promiscuous mode [ 96.340471][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.374161][ T3000] loop1: p1 p2 [ 96.396137][ T3000] loop1: p1 p2 [ 96.396830][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.413449][ T5377] loop1: p1 p2 [ 96.458931][ T4439] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.546591][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 96.561266][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 96.596640][ T41] smc: removing ib device syU× [ 96.753656][ T3000] loop1: p1 p2 [ 97.014550][ T3734] IPVS: stop unused estimator thread 0... [ 97.102087][ T3734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.144473][ T3734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.213769][ T3734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.274356][ T3734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.331079][ T3734] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.412696][ T3734] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.466478][ T3734] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.504683][ T3734] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.788659][ T3734] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.858312][ T3734] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.916938][ T3734] bond0: (slave netdevsim1): Releasing backup interface [ 97.925665][ T3734] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.964730][ T3734] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.042173][ T3734] bridge_slave_1: left allmulticast mode [ 98.047842][ T3734] bridge_slave_1: left promiscuous mode [ 98.053648][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.061244][ T3734] bridge_slave_0: left allmulticast mode [ 98.067102][ T3734] bridge_slave_0: left promiscuous mode [ 98.072992][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.081726][ T3734] bridge0: port 4(batadv0) entered disabled state [ 98.088942][ T3734] batadv1: left allmulticast mode [ 98.094277][ T3734] batadv1: left promiscuous mode [ 98.099338][ T3734] bridge0: port 3(batadv1) entered disabled state [ 98.106916][ T3734] bridge_slave_1: left allmulticast mode [ 98.112607][ T3734] bridge_slave_1: left promiscuous mode [ 98.118231][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.126467][ T3734] bridge_slave_0: left allmulticast mode [ 98.132181][ T3734] bridge_slave_0: left promiscuous mode [ 98.137874][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.146332][ T3734] bridge_slave_1: left allmulticast mode [ 98.152116][ T3734] bridge_slave_1: left promiscuous mode [ 98.157793][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.165347][ T3734] bridge_slave_0: left allmulticast mode [ 98.171191][ T3734] bridge_slave_0: left promiscuous mode [ 98.177015][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.185284][ T3734] bridge_slave_1: left allmulticast mode [ 98.190921][ T3734] bridge_slave_1: left promiscuous mode [ 98.196644][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.204855][ T3734] bridge_slave_0: left allmulticast mode [ 98.210511][ T3734] bridge_slave_0: left promiscuous mode [ 98.216615][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.373673][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.383578][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.393544][ T3734] bond0 (unregistering): Released all slaves [ 98.401833][ T3734] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 98.409834][ T3734] vcan1: left promiscuous mode [ 98.415675][ T3734] bond1 (unregistering): Released all slaves [ 98.425002][ T3734] bond2 (unregistering): (slave veth3): Releasing active interface [ 98.434471][ T3734] bond2 (unregistering): (slave veth5): Releasing active interface [ 98.444032][ T3734] bond2 (unregistering): Released all slaves [ 98.505720][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.515709][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.525784][ T3734] bond0 (unregistering): Released all slaves [ 98.583883][ T3734] bond0 (unregistering): Released all slaves [ 98.627925][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.637368][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.647069][ T3734] bond0 (unregistering): Released all slaves [ 98.674968][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.684687][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.694340][ T3734] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 98.703756][ T3734] bond0 (unregistering): Released all slaves [ 98.774734][ T3734] tipc: Left network mode [ 98.780132][ T3734] tipc: Left network mode [ 98.786803][ T3734] IPVS: stopping backup sync thread 4322 ... [ 98.793240][ T3734] IPVS: stopping master sync thread 4391 ... [ 98.801794][ T3734] hsr_slave_0: left promiscuous mode [ 98.808715][ T3734] hsr_slave_1: left promiscuous mode [ 98.815135][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.823147][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.830754][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.838314][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.847713][ T3734] hsr_slave_0: left promiscuous mode [ 98.853439][ T3734] hsr_slave_1: left promiscuous mode [ 98.859289][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.866734][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.874444][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.882354][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.891531][ T3734] hsr_slave_0: left promiscuous mode [ 98.897573][ T3734] hsr_slave_1: left promiscuous mode [ 98.904006][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.912057][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.922039][ T3734] hsr_slave_0: left promiscuous mode [ 98.928816][ T3734] hsr_slave_1: left promiscuous mode [ 98.935192][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.942839][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.951031][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.958932][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.971873][ T3734] veth1_macvtap: left promiscuous mode [ 98.977522][ T3734] veth0_macvtap: left promiscuous mode [ 98.983702][ T3734] veth1_vlan: left promiscuous mode [ 98.989357][ T3734] veth0_vlan: left promiscuous mode [ 98.995436][ T3734] veth1_macvtap: left promiscuous mode [ 99.001970][ T3734] veth0_macvtap: left promiscuous mode [ 99.007620][ T3734] veth1_vlan: left promiscuous mode [ 99.013028][ T3734] veth0_vlan: left promiscuous mode [ 99.018630][ T3734] veth1_macvtap: left promiscuous mode [ 99.025926][ T3734] veth0_macvtap: left promiscuous mode [ 99.032129][ T3734] veth1_vlan: left promiscuous mode [ 99.037878][ T3734] veth0_vlan: left promiscuous mode [ 99.136535][ T3734] pimreg (unregistering): left allmulticast mode [ 99.170292][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 99.180279][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 99.232911][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 99.242771][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 99.309685][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 99.319316][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 99.370866][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 99.379997][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 100.421904][ T3734] IPVS: stop unused estimator thread 0... [ 100.428627][ T3734] IPVS: stop unused estimator thread 0... [ 100.435124][ T3734] IPVS: stop unused estimator thread 0... [ 100.441294][ T3734] IPVS: stop unused estimator thread 0...