last executing test programs:

1m58.300517884s ago: executing program 0 (id=354):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000350cce55a94b4c9f000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1m58.275178246s ago: executing program 0 (id=355):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x40000)

1m58.17765711s ago: executing program 0 (id=357):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$UHID_CREATE(r0, &(0x7f00000000c0)={0xa000000, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120)

1m58.163349491s ago: executing program 0 (id=359):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x282dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4000000000000008, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timerfd_create(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@barrier_val={'barrier', 0x3d, 0x10}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003800090000000000000000000400"], 0x2c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x354, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x338, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x100, 0xe, 0x0, 0x1, [{0x26, 0x0, "3089eb388a9be75ce4327323405a94d7c9ebd9d33ba91800bedba7701d6bba5f1891"}, {0xd0, 0x0, "4c60a1f1995252b5255843d39139c50542a75737fcda3919d3b7d0914099f8400674be911e527c570e01b81823e5bf7deed1d0f6479e1b2d608f94ef297c4c9b28e7b93185947218f81722fd64eb15ee318a4c584c008d511a9c55374eec4ab28581f574d054367f99650baa00ab6ff300ae38e37f90d714874c7f466de5b5021096649484f222041e9de21b900d1d4009bbb9f3f69298590139198e00ea0af0d5d9480ae30cfb17295ee7922bea77f0a61f628b9138adbededfd89b323f131e87f824965d47b59fb69f9594"}, {0x4}]}, @NL80211_NAN_FUNC_SRF={0x22c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC")
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x240, 0x2b8, 0xb0000010, 0x240, 0x5c8f0200, 0x310, 0x3a8, 0x3a8, 0x310, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x240, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'dvmrp0\x00', {0x8, 0x103, 0x0, 0x2, 0x20000a, 0x80001, 0x7fffffff, 0x5, 0x78, 0xe0}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4bba542500e92eab2e507d4e04c0a92ef98f938b8a3de27236e73a674522"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
fchdir(r4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xd8ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
write$cgroup_type(r4, &(0x7f0000000140), 0x9)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
wait4(r8, 0x0, 0x40000000, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000040)={0x3})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
socket$packet(0x11, 0x2, 0x300)

1m57.351476091s ago: executing program 0 (id=366):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0}, 0x1}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}, 0x1, 0x0, 0xfeffff}, 0x0)

1m57.113492673s ago: executing program 0 (id=368):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x14, 0x45620, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x81, 0x6}, 0x2002, 0x8a6, 0x7, 0x7, 0xb, 0xf, 0x2, 0x0, 0x6, 0x0, 0x2009}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock2(&(0x7f0000a71000/0x3000)=nil, 0x3000, 0x1)
mincore(&(0x7f0000322000/0xc00000)=nil, 0xc00000, &(0x7f0000000ec0)=""/4096)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={<r2=>0x0, <r3=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40044}}], 0x1, 0x5)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=<r4=>0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2000, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x100)
setresuid(r7, r7, 0x0)
mount$9p_xen(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6014, &(0x7f00000004c0)={'trans=xen,', {[{@privport}], [{@appraise}, {@uid_lt={'uid<', r3}}, {@euid_lt={'euid<', r4}}, {@fowner_gt={'fowner>', r5}}, {@uid_lt={'uid<', r6}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@audit}, {@uid_lt={'uid<', r7}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}})
r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x10, 0x2002)
mmap$usbmon(&(0x7f0000a17000/0x2000)=nil, 0x2000, 0x0, 0x810, r8, 0x0)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000001c0)="3dbbb30bb249dc2d3fdf7504debc8d0dcc22ffffffffffffff7f0ef041a82c0773d6bc96262fc606e7323bcc35c9536868701999b06c269ee984653d9a707dea7a2ddf260d2542f296decc809e42e482ca86b5a280efbd2d17a35f270171ce447c87bafda06c4fa4c2ec53e5e9cc97c4096ce89eadf7ad5da48e1ea57b7457c56f01f4fb0b6fdfeaf131f62a3f5cae48b9b623f689f8c739a425f05703c48bef16d253d7edfba1579b87a2f6e5f435f22098473556ce447066de3d1526070e459413f56ba9709aafea303f4b05808c58d1", 0xd1, 0x7, 0x1}], 0x0)
r9 = io_uring_setup(0x787b, &(0x7f00000000c0)={0x0, 0x8c43b, 0x1, 0x3, 0xb6})
io_uring_enter(r9, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)
io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f00000005c0)={0x3, 0x7}, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x14, 0x45620, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x81, 0x6}, 0x2002, 0x8a6, 0x7, 0x7, 0xb, 0xf, 0x2, 0x0, 0x6, 0x0, 0x2009}, 0x0, 0x8, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async)
mlock2(&(0x7f0000a71000/0x3000)=nil, 0x3000, 0x1) (async)
mincore(&(0x7f0000322000/0xc00000)=nil, 0xc00000, &(0x7f0000000ec0)=""/4096) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async)
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40044}}], 0x1, 0x5) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000) (async)
statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2000, 0x1, &(0x7f00000003c0)) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100), 0x100) (async)
setresuid(r7, r7, 0x0) (async)
mount$9p_xen(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6014, &(0x7f00000004c0)={'trans=xen,', {[{@privport}], [{@appraise}, {@uid_lt={'uid<', r3}}, {@euid_lt={'euid<', r4}}, {@fowner_gt={'fowner>', r5}}, {@uid_lt={'uid<', r6}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@audit}, {@uid_lt={'uid<', r7}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) (async)
syz_open_dev$usbmon(&(0x7f0000000000), 0x10, 0x2002) (async)
mmap$usbmon(&(0x7f0000a17000/0x2000)=nil, 0x2000, 0x0, 0x810, r8, 0x0) (async)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000001c0)="3dbbb30bb249dc2d3fdf7504debc8d0dcc22ffffffffffffff7f0ef041a82c0773d6bc96262fc606e7323bcc35c9536868701999b06c269ee984653d9a707dea7a2ddf260d2542f296decc809e42e482ca86b5a280efbd2d17a35f270171ce447c87bafda06c4fa4c2ec53e5e9cc97c4096ce89eadf7ad5da48e1ea57b7457c56f01f4fb0b6fdfeaf131f62a3f5cae48b9b623f689f8c739a425f05703c48bef16d253d7edfba1579b87a2f6e5f435f22098473556ce447066de3d1526070e459413f56ba9709aafea303f4b05808c58d1", 0xd1, 0x7, 0x1}], 0x0) (async)
io_uring_setup(0x787b, &(0x7f00000000c0)={0x0, 0x8c43b, 0x1, 0x3, 0xb6}) (async)
io_uring_enter(r9, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) (async)
io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f00000005c0)={0x3, 0x7}, 0x1) (async)

1m57.066254965s ago: executing program 32 (id=368):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x14, 0x45620, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x81, 0x6}, 0x2002, 0x8a6, 0x7, 0x7, 0xb, 0xf, 0x2, 0x0, 0x6, 0x0, 0x2009}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock2(&(0x7f0000a71000/0x3000)=nil, 0x3000, 0x1)
mincore(&(0x7f0000322000/0xc00000)=nil, 0xc00000, &(0x7f0000000ec0)=""/4096)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={<r2=>0x0, <r3=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40044}}], 0x1, 0x5)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=<r4=>0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2000, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x100)
setresuid(r7, r7, 0x0)
mount$9p_xen(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6014, &(0x7f00000004c0)={'trans=xen,', {[{@privport}], [{@appraise}, {@uid_lt={'uid<', r3}}, {@euid_lt={'euid<', r4}}, {@fowner_gt={'fowner>', r5}}, {@uid_lt={'uid<', r6}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@audit}, {@uid_lt={'uid<', r7}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}})
r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x10, 0x2002)
mmap$usbmon(&(0x7f0000a17000/0x2000)=nil, 0x2000, 0x0, 0x810, r8, 0x0)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000001c0)="3dbbb30bb249dc2d3fdf7504debc8d0dcc22ffffffffffffff7f0ef041a82c0773d6bc96262fc606e7323bcc35c9536868701999b06c269ee984653d9a707dea7a2ddf260d2542f296decc809e42e482ca86b5a280efbd2d17a35f270171ce447c87bafda06c4fa4c2ec53e5e9cc97c4096ce89eadf7ad5da48e1ea57b7457c56f01f4fb0b6fdfeaf131f62a3f5cae48b9b623f689f8c739a425f05703c48bef16d253d7edfba1579b87a2f6e5f435f22098473556ce447066de3d1526070e459413f56ba9709aafea303f4b05808c58d1", 0xd1, 0x7, 0x1}], 0x0)
r9 = io_uring_setup(0x787b, &(0x7f00000000c0)={0x0, 0x8c43b, 0x1, 0x3, 0xb6})
io_uring_enter(r9, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)
io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f00000005c0)={0x3, 0x7}, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x14, 0x45620, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x81, 0x6}, 0x2002, 0x8a6, 0x7, 0x7, 0xb, 0xf, 0x2, 0x0, 0x6, 0x0, 0x2009}, 0x0, 0x8, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async)
mlock2(&(0x7f0000a71000/0x3000)=nil, 0x3000, 0x1) (async)
mincore(&(0x7f0000322000/0xc00000)=nil, 0xc00000, &(0x7f0000000ec0)=""/4096) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async)
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40044}}], 0x1, 0x5) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000) (async)
statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2000, 0x1, &(0x7f00000003c0)) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100), 0x100) (async)
setresuid(r7, r7, 0x0) (async)
mount$9p_xen(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6014, &(0x7f00000004c0)={'trans=xen,', {[{@privport}], [{@appraise}, {@uid_lt={'uid<', r3}}, {@euid_lt={'euid<', r4}}, {@fowner_gt={'fowner>', r5}}, {@uid_lt={'uid<', r6}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@audit}, {@uid_lt={'uid<', r7}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) (async)
syz_open_dev$usbmon(&(0x7f0000000000), 0x10, 0x2002) (async)
mmap$usbmon(&(0x7f0000a17000/0x2000)=nil, 0x2000, 0x0, 0x810, r8, 0x0) (async)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000001c0)="3dbbb30bb249dc2d3fdf7504debc8d0dcc22ffffffffffffff7f0ef041a82c0773d6bc96262fc606e7323bcc35c9536868701999b06c269ee984653d9a707dea7a2ddf260d2542f296decc809e42e482ca86b5a280efbd2d17a35f270171ce447c87bafda06c4fa4c2ec53e5e9cc97c4096ce89eadf7ad5da48e1ea57b7457c56f01f4fb0b6fdfeaf131f62a3f5cae48b9b623f689f8c739a425f05703c48bef16d253d7edfba1579b87a2f6e5f435f22098473556ce447066de3d1526070e459413f56ba9709aafea303f4b05808c58d1", 0xd1, 0x7, 0x1}], 0x0) (async)
io_uring_setup(0x787b, &(0x7f00000000c0)={0x0, 0x8c43b, 0x1, 0x3, 0xb6}) (async)
io_uring_enter(r9, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) (async)
io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f00000005c0)={0x3, 0x7}, 0x1) (async)

41.705316651s ago: executing program 3 (id=868):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000000)=0x6, 0x4)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00'})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8)

39.434311232s ago: executing program 3 (id=878):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r6, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r3, 0x20, &(0x7f0000000a40)={&(0x7f0000000940)=""/43, 0x2b, <r8=>0x0, &(0x7f00000009c0)=""/88, 0x58}}, 0x10)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1a, 0x21, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd3b}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @ldst={0x1, 0x3, 0x3, 0x6, 0x6, 0x50, 0x10}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @tail_call, @exit, @tail_call, @call={0x85, 0x0, 0x0, 0x16}, @jmp={0x5, 0x1, 0x8, 0x2, 0x7, 0x8, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x401, 0x1000, &(0x7f0000000c00)=""/4096, 0x40f00, 0x5c, '\x00', r6, @tracing=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r1, 0x6, &(0x7f0000000ac0)=[r0, r9, r0], &(0x7f0000001c00)=[{0x4, 0x2, 0xd, 0xb}, {0x1, 0x5, 0xd, 0x5}, {0x5, 0x5, 0xb, 0x7}, {0x2, 0x3, 0xf, 0x1}, {0x4, 0x1, 0xb, 0x2}, {0x2, 0x2, 0xa, 0x7}], 0x10, 0xddc}, 0x94)

38.367097233s ago: executing program 3 (id=890):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x7fffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x0, 'netdevsim0\x00', {0x4}, 0xfffe})
syz_clone(0x800, &(0x7f00000001c0)="b47674ec16269924fc693f98e735db606bef92c75f06343e75ce1f6684a5a9637b124cab425c0329c5188314f4d3de097fe581d5cc58accca14ef1bbe8cd718c854702bb2088955672a887ef25c5104f587d4c1c13514b38287739f01452509ee402bc9475c29da68a9c070d32208122f6c06f9d2316b9c2d8e5444cdec4a59eb3aca8af6a42519d090d20342d72e0b001", 0x91, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000300)="4bc955d1edc5616497b605be5f72d0f15f1541fa99b48b78049c6bf4d8e5d14e62607f4fc9b92d88276dad00bc27da2adc580f02db91dcd4b22158ff43b0ef9eb103f0baaae4d07aaf257f56c74e9fee64949eff09e5fa1e21144783b762594a23498c22e23ef191f15f8d44ca8073ecf7e735424498a4c74454f2e6a198b302b6a38f7a6c71f46c20a8c7f4ce80999d263df861f379e96b7e8f5279f1479c0d9bcad20967b0b19c69a5")
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
writev(r4, &(0x7f0000000780)=[{&(0x7f0000001440)="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", 0x1ab}], 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0xffffffff, 0x0, 0xce024d}, 0x9c)

37.292417656s ago: executing program 3 (id=911):
r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x8, 0x0, 0xf, 0x6, 0x0, 0xff, 0x40219, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x4}, 0xa01, 0x7fffffffffffffff, 0x0, 0x1, 0x16, 0x7, 0x0, 0x0, 0x6, 0x0, 0x592a215c}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4)
r1 = perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x8002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7ff, &(0x7f00000001c0)="$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")
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getdents(r5, &(0x7f00000005c0)=""/59, 0x3b)
r6 = pidfd_getfd(r4, r4, 0x0)
ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000080))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, {0xb}}, 0x14}}, 0x0)
setns(r6, 0x66020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x8, 0x0, 0xf, 0x6, 0x0, 0xff, 0x40219, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x4}, 0xa01, 0x7fffffffffffffff, 0x0, 0x1, 0x16, 0x7, 0x0, 0x0, 0x6, 0x0, 0x592a215c}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) (async)
perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x8002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) (async)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) (async)
getpgid(0x0) (async)
syz_pidfd_open(r3, 0x0) (async)
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7ff, &(0x7f00000001c0)="$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") (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
getdents(r5, &(0x7f00000005c0)=""/59, 0x3b) (async)
pidfd_getfd(r4, r4, 0x0) (async)
ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000080)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, {0xb}}, 0x14}}, 0x0) (async)
setns(r6, 0x66020000) (async)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async)

36.19378594s ago: executing program 3 (id=918):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x7]}, 0x8, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getsa={0x130, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0xa, 0x6c}, [@migrate={0xe8, 0x11, [{@in=@remote, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x6c, 0x3, 0x0, 0x3506, 0x2, 0xa}, {@in=@rand_addr=0x64010102, @in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x6c, 0x4, 0x0, 0x3502, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x26}, @in=@rand_addr=0x64010101, @in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6c, 0x3, 0x0, 0x3506, 0xa, 0xa}]}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @mark={0xc, 0x15, {0x35075d, 0x49}}]}, 0x130}, 0x1, 0x0, 0x0, 0x240088d0}, 0x489c4)
syz_io_uring_setup(0x2231, &(0x7f0000000480)={0x0, 0xfec9, 0x0, 0xff7ffffa, 0x274, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000280))
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x94, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x67, 0xa8, @random="742dc760acece690307b9a31539a6ffde2929baf80656895c68cf3ff3ce14bf62b8b16c7f76e57ba0f3a1ab0adcfa3a8d1ca96de7c274f2833cdf9d431415a838dc72bd1d2a4de11b2b4c6646c233c2dc0e111b575619c7ef258b202d0ec4458bb7a16"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c}, 0x40081)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x800, @empty, 0x4}, 0x1c)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={<r5=>0x0, 0xfffffff8}, &(0x7f0000000380)=0xc)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r5, 0x9b}, &(0x7f0000000400)=0x8)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

34.599215698s ago: executing program 3 (id=926):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = io_uring_setup(0x1895, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800000})
futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0xfffffffe)
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r7=>0x0})
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r11=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r13}, 0xc)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x34, r10, 0x309, 0x70bd2c, 0x0, {0x1d}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x541b, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1081}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r14, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2400c005)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x7c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x9}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x7}, @TCA_RED_FLAGS={0xc}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x10, 0xff}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb39}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800)

34.56701903s ago: executing program 33 (id=926):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = io_uring_setup(0x1895, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800000})
futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0xfffffffe)
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r7=>0x0})
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r11=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r13}, 0xc)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x34, r10, 0x309, 0x70bd2c, 0x0, {0x1d}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x541b, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1081}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r14, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2400c005)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x7c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x9}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x7}, @TCA_RED_FLAGS={0xc}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x10, 0xff}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb39}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800)

34.304051193s ago: executing program 4 (id=928):
socket$inet(0x2, 0x80002, 0x1)
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./cgroup/../file0\x00')
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f8, &(0x7f0000001340)="$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")
syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

33.417715476s ago: executing program 4 (id=931):
openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async)
openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x106020, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x106020, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x1, 0x87, 0xffffffff, 0x3f})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6b)
socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f0000001040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x2000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x2000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x10000000)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001180)={0x7, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0xfffffffffffffee6, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0xfffffffffffffee6, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_read_part_table(0x5a7, &(0x7f00000005c0)="$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") (async)
syz_read_part_table(0x5a7, &(0x7f00000005c0)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288, 0x7d18}, 0x2416, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)
gettid()
epoll_create1(0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000010c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@directio}, {@fscache}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@appraise_type}]}})
socket$nl_rdma(0x10, 0x3, 0x14)
pread64(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000, 0x4)
sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044)

33.151659239s ago: executing program 4 (id=938):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x8, 0x28}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'lo\x00'})
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29, 0x0, 0x0, 0x0, 0x5000000}]}}}}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e)
connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=<r6=>0x0)
perf_event_open(&(0x7f0000000a40)={0x5, 0x80, 0x9, 0x7, 0x71, 0xa8, 0x0, 0x8000000000000001, 0x201, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x8, 0x1ff}, 0xa, 0x2d8, 0x3, 0x1, 0x6, 0x100, 0x5, 0x0, 0x4, 0x0, 0xfffffffff1c9da77}, r6, 0x3, r0, 0xa)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x110, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x18}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc7}]}, @CTA_TUPLE_MASTER={0x74, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_SEQ_ADJ_REPLY={0x0, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0xe4}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0xe}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x480c4}, 0x4048000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)

32.803493136s ago: executing program 4 (id=941):
r0 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@grpquota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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")
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
faccessat(r0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x33)
socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x10005, 0x1, 0xfffffc03, 0x3, 0x3, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x10000000002009}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x9)
r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000006800010000000000000000000a0000000000000008000600f2000000080005"], 0x28}}, 0x4000)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
recvfrom$inet6(r2, &(0x7f0000000140)=""/72, 0x48, 0x1, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}, 0x1c)
symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

32.424746214s ago: executing program 4 (id=947):
semctl$GETZCNT(0x0, 0x0, 0xf, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x560, &(0x7f0000000b00)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0xecff, 0x2}, 0x32)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x40000000015, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x10)

31.90390385s ago: executing program 4 (id=950):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000040), 0x12)
r1 = timerfd_create(0x7, 0x80800)
timerfd_settime(r1, 0x3, &(0x7f0000000180), &(0x7f0000000140)={{<r2=>0x0, <r3=>0x0}, {0x0, <r4=>0x0}})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2)
readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
r5 = syz_io_uring_setup(0x72e5, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file1\x00', 0x4d4884, &(0x7f0000000e00)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYRESOCT=r3, @ANYRESDEC=r3, @ANYRES8=r2, @ANYBLOB="abaf31ca356580ab742b16786bfdd82f1224252ca480cae33eee51ecc749acb139389de9d54012185fd456aee637cf6d511800831d3e2f5436a53b310e05ce898d252c61028ef4dc66ab7d4cd000f211b0aa60ed826edc2ee013100d45ca287b4a9d0ecdc8439a15cf6d3e7281901cd94100f0c9a5c7b10eebf9143045a6b5a2c24445ecbed795589f34aaa9c4", @ANYRESDEC=r4, @ANYRESOCT=r0], 0x5, 0x289, &(0x7f0000000b40)="$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")
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r6, &(0x7f0000000000), 0x4000, 0xa00}])
r7 = socket$kcm(0xf, 0x3, 0x2)
write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[], 0xfefb)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan4\x00'})
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000280)={0x9, 0x0, 0x0, 'queue1\x00', 0x1})
write$sndseq(r9, &(0x7f0000000000), 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
rmdir(&(0x7f00000001c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0xa)
pipe2(&(0x7f0000000040), 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000801801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095", @ANYRES64=r1, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

31.725287589s ago: executing program 34 (id=950):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000040), 0x12)
r1 = timerfd_create(0x7, 0x80800)
timerfd_settime(r1, 0x3, &(0x7f0000000180), &(0x7f0000000140)={{<r2=>0x0, <r3=>0x0}, {0x0, <r4=>0x0}})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2)
readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
r5 = syz_io_uring_setup(0x72e5, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file1\x00', 0x4d4884, &(0x7f0000000e00)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYRESOCT=r3, @ANYRESDEC=r3, @ANYRES8=r2, @ANYBLOB="abaf31ca356580ab742b16786bfdd82f1224252ca480cae33eee51ecc749acb139389de9d54012185fd456aee637cf6d511800831d3e2f5436a53b310e05ce898d252c61028ef4dc66ab7d4cd000f211b0aa60ed826edc2ee013100d45ca287b4a9d0ecdc8439a15cf6d3e7281901cd94100f0c9a5c7b10eebf9143045a6b5a2c24445ecbed795589f34aaa9c4", @ANYRESDEC=r4, @ANYRESOCT=r0], 0x5, 0x289, &(0x7f0000000b40)="$eJzs2strE20Ux/Ezvby9kSavV1oQD4qom6HJ2kWLtCAGBG3EqkindKJDxkzJDIGI2K4UXXXtyrW4dCEI0qWb/g8u6qqbuqsgjjSTmKZmsCnVlPr9LNrDPM8vc57MhSHM+qXlh4V8j+StQLoMQ7rGZUk2DUlJl9QtycXzMx9P3Zi5fXUim528rjo1MZ3OqOrw6Q93Hr85sxIM3Xw7/L5PVlP31jcya6snVkfWv08/cHx1fC16gVo653mBNefaOu/4BVN12bUt31an6NulpvG86y0sVNQqzicGF0q276tVrGjBrmjgaVCqqHXfcopqmqYmBgV786X6N/d6Mwy/boS9sxKG4cArGVqRxCdJivG/GkfHjeOzxsklY2QjDJOdbhh/xGYYCsf/37Xtpt4v4j4r58q56H80PpEXR1yxZUyS8k22TpOaqJ66kp0c06qUPHUXa/nFcq67mn9Rz6clKanW+XSU1+Z8nwxu33/m3RE59mv+c3d2MtMy3y8Xzm7Lm7UFiSvzspVt7P9JWvXyteyO/Gh1HgAAwGFj6k8tn99MM248yrfxfFh/vjJEZLGc65HRns6uHSJ+5VHBcl27tJ9FaMQMbZ1Tu/gcb5/7aVUYtS8gZs5AY0vsnMNSvGxskf4D0M/virXaz367S0X3MRmoH+997qf9i+hWIvbS6/2v+epso5++1pPv9u51yX/n/oPOahz0TncCAAAAAAAAAAAAAAAAAGjHjpf+ku28cthUnHseO9TpNQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIPtRwAAAP//HKm4Fw==")
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x80)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r6, &(0x7f0000000000), 0x4000, 0xa00}])
r7 = socket$kcm(0xf, 0x3, 0x2)
write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[], 0xfefb)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan4\x00'})
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000280)={0x9, 0x0, 0x0, 'queue1\x00', 0x1})
write$sndseq(r9, &(0x7f0000000000), 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
rmdir(&(0x7f00000001c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0xa)
pipe2(&(0x7f0000000040), 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000801801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095", @ANYRES64=r1, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.679860356s ago: executing program 6 (id=1129):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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")
clock_gettime(0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000002540)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0xfcb6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @broadcast}, 0x14)
utimes(0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
r5 = socket$inet(0x2, 0x2, 0x1)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000280)={0x101, 0x6, 0x8, 0x7f, 0x5})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x6, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendto$packet(r0, &(0x7f0000000200)="5f32998190cb3ea362019ea3ca5546810da5a76811", 0x15, 0x20000000, &(0x7f0000000240)={0x11, 0xf7, r8, 0x1, 0x2, 0x6, @remote}, 0x14)
sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="0800e5bb59ec815a", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x40}, 0x4800)

5.898347762s ago: executing program 6 (id=1136):
creat(&(0x7f00000002c0)='./file0\x00', 0x195)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020071850100000700d6dea26d7109b000000000000007f8000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = memfd_create(&(0x7f0000000ac0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\x82)\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x80\x00\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xa9\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\x9d\x87\v\xd6p\x97\x90\xa7-uZ\xdf\xd5\xd87ra\xea@\xbe\x97\xf9\xaf\x80B?\xd7\xeeb6\x81\xa4\x82\xbc\xc8eLAA-m\xdfR\xdc\xbdS\xcdZ\x82r\xcc\tB\xf7(pL\xad\xe2eh\xa2\x85M\x1a\x03\xb4\xdc\a\x9dd;\xaamM2\x9d\x18\xb3m\xdd\xfe\xa5\xab\xde\x80\aE\xee\xb3*$-\xd8nu\xeen\xb6sw\x8f\xef\x13\xe0\x9c\xa7\xa7\x00z`N\xb1\xb0\xb3\xbcu\xd0J\xb2\v\ac\xd9\xb7V\xffm\x13X\xe1d\xda\xa6}\a\xd1\xb0@)\xe7\xc7\xachwd\xf6\xc5U\xcc*Z\x13\x85\x90iS\xd7\a\x00\xd5(\xc9\x8b\xde\'\xcfw\xb3\xb7o\xb0\xfc\xdeL\xae\xbf\xd4\x1a\x91X-lj\xb1XP\xd8\"\xd8Q\b\xa2[\x86\xed\x94v\xbf\xd9\x1cjS\xec\xb8\r\x84\x96 \xc0\xaai\xa5\xc5\xe5>p^s', 0x3)
write$binfmt_misc(r1, &(0x7f0000000180)="cf", 0x1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xe0001, 0x0)
sendfile(r2, r1, &(0x7f0000000000), 0x3)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x88)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
getsockname$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
readv(r5, &(0x7f0000000300)=[{&(0x7f0000000940)=""/114, 0x72}], 0x1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=[0x1], &(0x7f0000000180), 0x7fff, 0x1}}, 0x40)

4.805771175s ago: executing program 6 (id=1144):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xba01}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r4 = inotify_init1(0x0)
r5 = creat(&(0x7f0000000240)='./file0\x00', 0xa9)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x2000008})
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x10000006)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x1)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x134, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe6}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x15}, @NFTA_SET_USERDATA={0xe2, 0xd, 0x1, 0x0, "e6a16da1046074154682b53fee5bde7dd3669e714761b28afd11b6fc109d67da35c0afaf75055c04963462d966b3dae2a7fa3907e818118bfb66fdc8585e15fefb2045eb26de9e12dcb37d6043699c82cae0f6f082e46b974301e63b37ec9918dfcce3c91da99c6ba34ff50a0668ccdd8b23ef8e8b1929eeb80dbb743000bef55bec263d8d1c7a8e35edba8bfb2f3901b3078d6ff1fd8e69f8e45c7666e35a1a446e9e724888e5442a61fa71a8167f9163519290f86511ee8f31d9045144ba9b71cd89944aec6777004888527a87784cc1b5046d4eb2c084e645d2cc4e7c"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000040}, 0x84)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@random={'security.', '\x00'})
r8 = socket$packet(0x11, 0x3, 0x300)
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f4"], 0x1c, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r9=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}})
accept$packet(r8, &(0x7f0000000140), &(0x7f00000001c0)=0x14)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80890a, &(0x7f0000000200)={[{@debug}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7b5, &(0x7f0000000540)="$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")
open(&(0x7f0000000080)='./bus\x00', 0x14b145, 0x0)

3.664216751s ago: executing program 6 (id=1147):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012cbd7000ffdbdf250f0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=r6, @ANYBLOB="080003000100091d89fd79821f1ec95939770e00f1fa149a955917165e1a0e00"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81100)
move_mount(r9, 0x0, r8, 0x0, 0x46)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0)

3.581954345s ago: executing program 5 (id=1148):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x10001, 0x4)

3.581472285s ago: executing program 5 (id=1149):
syz_open_procfs(0x0, &(0x7f0000000ec0)='net/vlan/config\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000ec0)='net/vlan/config\x00')
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x3e)

3.517166018s ago: executing program 5 (id=1150):
r0 = socket$inet6(0xa, 0x802, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

3.449535272s ago: executing program 7 (id=1152):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88d0}, 0x4004800)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1000000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xc0)

3.333728837s ago: executing program 7 (id=1154):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xf, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000e6000035090100000000009500000000000000b7020000000000007b2af8ff00000000b509f6ffffffffffc28af8ff10010000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000ceb6e742f7ff1472005f86dbdb4a18308d2ec3a93fb457d9c112e0366a0496863cb2666ad647bea45bc6449a1a7332b57c24a8555e2db4fc8895fcf313f2c6", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000180), 0x6e, &(0x7f0000002080)=[{0x0}], 0x1}, 0x2000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1)
mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000300)={[{@name={'name', 0x3d, 'security.selinux\x00'}}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000580)={{0x80, 0x8}, 'port1\x00', 0x72, 0x470c4a7a478ab8d9, 0x4, 0x8000007, 0x3, 0x1, 0x1})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800700, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f0000000740)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1103, 0xff})

3.218650093s ago: executing program 6 (id=1155):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x7, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, 0x0, 0x0)
connect$unix(r0, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
r2 = gettid()
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x5e)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x101, 0x1, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, r1, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x8000000000000)
timer_create(0x3, 0x0, &(0x7f0000000100))
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0xfffffffc)
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_read_part_table(0x407c, &(0x7f000000db40)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@init_itable}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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")

2.109746967s ago: executing program 2 (id=1156):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_clone(0x88020000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x1, r1, 0x2007)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x100, 0x80000000004}, 0x10a0a2, 0x4005, 0xb, 0x3, 0x2, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x1, 0x4, 0x4, 0x5})

1.889344028s ago: executing program 1 (id=1157):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@jqfmt_vfsv0}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
fallocate(r0, 0x0, 0x8e14, 0x8ffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023)
r3 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x8918, 0x0)
sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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")
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x8, 0x0, 0xfffffffffffffffc}}, 0x10)
io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x4000, 0xa00}])
open(&(0x7f0000000200)='./file1\x00', 0x4027e, 0xe7)
r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3)

965.901343ms ago: executing program 7 (id=1158):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08210340000000045c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002700)={0x90ed, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r1=>0x0}], 0x5, "97db2bb9fc1951"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000700)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r2=>0x0}], 0x0, "6e5ff325bf6617"})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40)
write$P9_RSTATu(r4, &(0x7f0000003700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xc5)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r6, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001700)={r2, 0x5d})

869.848008ms ago: executing program 6 (id=1159):
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', <r1=>0x0, 0x2100, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x60, 0x0, 0x10, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x67, 0x0, 0x1}, 0x28)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, 0x0, 0x4000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x7ffe}, 0x50)
io_uring_setup(0x1b7b, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
r5 = epoll_create(0x7)
r6 = epoll_create1(0x0)
r7 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180))
socket(0xa, 0x4, 0x87)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64=r4, @ANYRESOCT=r3, @ANYRES64=r9], 0x128}, 0x24000890)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff})
close_range(r12, 0xffffffffffffffff, 0x2)
io_uring_setup(0x323, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x182})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0))
r13 = epoll_create1(0xcd2ab2d986cbc352)
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r7, &(0x7f0000000100))
r14 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000140)={0x60000000})
epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000000))

832.113029ms ago: executing program 2 (id=1160):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x28000600)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x5000)

829.737099ms ago: executing program 2 (id=1161):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x3b)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, &(0x7f0000000300))

783.590612ms ago: executing program 2 (id=1162):
prlimit64(0x0, 0x7, &(0x7f0000000040)={0xb, 0x8b}, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x14)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x400c020}, 0x50)

781.484012ms ago: executing program 1 (id=1163):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) (fail_nth: 12)

767.740083ms ago: executing program 7 (id=1164):
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x304}, "64c67f320c4076e3", "03785fff4a0d563f96e4aba08aba4c6d", '\n5/D', "27679868ab3b5d7d"}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "c9bae94572726b2d", "4c502b3961ae7dacec77d5362bc897ab", "bd18e953", "091000c56a001700"}, 0x28)
sendto$inet6(r3, &(0x7f0000000340)="d1", 0x1, 0x8090, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet6(r3, &(0x7f0000000480)="e5c7fa610000", 0x6, 0x4000801, 0x0, 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x33c, &(0x7f00000079c0)="$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")
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001300290aaf5100a59232c38ef1dd9342ce6d45640000000000860400007b8e", @ANYRES32=r2, @ANYBLOB="500000000000000004000c8014001a80100002800c0001800800000040000000", @ANYRESOCT=r4], 0x38}}, 0x8000)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c00000010000104fe3f0000000000000000ffbf", @ANYRES32=0x0, @ANYBLOB="08910400000000005800128009000100766c616e00000000480002800c0002000b0000000f00000004000480340003800c00010005000000bab600000c00010005000000000000000c00010007000000ffffff7f0c000100128500000800000014000300766c616e30"], 0x8c}}, 0x0)
r6 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r7, 0x0, r9, 0x0, 0x39000, 0x0)
splice(r8, 0x0, r7, 0x0, 0xe5d8, 0xe)
write$cgroup_devices(r9, 0x0, 0x9)
write$binfmt_elf64(r9, 0x0, 0xfffffe3e)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@dioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@resgid}, {@data_ordered}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@auto_da_alloc}]}, 0x1, 0x477, &(0x7f0000000780)="$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")
r10 = socket(0x3, 0x5, 0x0)
connect$unix(r10, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x8}, 0x18)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200), 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==")

709.993825ms ago: executing program 2 (id=1165):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0xc)
fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x6, 0x1, r1})
r2 = dup(r0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r3, 0x4)
fcntl$setown(0xffffffffffffffff, 0x8, r1)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r3, 0x4)
write$UHID_INPUT(r2, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006)

683.073687ms ago: executing program 1 (id=1166):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x8000, 0x1}, 0x1c)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0)
lseek(r5, 0x1000000, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x12a, 0x4}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xff, 0x0, "70f350cfdceb47237dc8a76af24a32fc90c61ae25cdc8fa04360222e80ee"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r10 = dup(r9)
r11 = dup(r6)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @empty, 0x1}}, 0x400, 0xbffc, 0xe652, 0x2, 0x24, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000780)={r8, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2c}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r12, &(0x7f000000aac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x85, @private0, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000540)="e4", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x240048d1)

630.296989ms ago: executing program 1 (id=1167):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

526.305604ms ago: executing program 1 (id=1168):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x1c, "566d4e21f4b587f5ca07cdf9575a22cdb92f1d79512e4d2979d21032"}, &(0x7f00000000c0)=0x24)
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
fallocate(r2, 0x81, 0x13, 0x10)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)

138.787194ms ago: executing program 5 (id=1169):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140)=0x28c287359851a07f, 0x4) (async)
r2 = semget$private(0x0, 0x7, 0x191)
semtimedop(r2, &(0x7f0000000200)=[{0x0, 0x10, 0x2000}], 0x1, 0x0) (async)
semctl$SETVAL(r2, 0x0, 0x10, &(0x7f0000000080)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r5, 0x8946, &(0x7f0000000040)) (async)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0) (async)
semctl$GETNCNT(r2, 0x2, 0xe, &(0x7f0000000340)=""/246) (async)
r7 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x28, 0x8, 0x0, 0x44) (async)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, r0, 0x10, 0x18, 0x0, @void, @value=r6}, 0x20) (async)
r8 = epoll_create1(0x0) (async)
shutdown(0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0xc, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r9 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x4000, 0xfefffffd, 0x1a6}, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async)
io_uring_enter(r9, 0x47f6, 0x0, 0x4, 0x0, 0x0) (async)
fsetxattr$security_capability(r6, &(0x7f0000000000), 0x0, 0x0, 0x1) (async)
fgetxattr(r6, &(0x7f0000000000)=ANY=[], 0x0, 0x3) (async)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) (async)
sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x52)

108.813815ms ago: executing program 7 (id=1170):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3})
r3 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x103cfa, 0x2, 0x3, 0x69}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
semtimedop(0x0, 0x0, 0x0, 0x0)

65.875297ms ago: executing program 2 (id=1180):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x101, 0x0)
pipe2(&(0x7f0000000540)={<r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, &(0x7f0000000040)=0x7, 0xacc9, 0x9)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x7fffffff, 0xe05a, 0x4, 0x4, 0x0, 0x8000, 0x7}, 0x1c)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x800, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$rds(0x15, 0x5, 0x0)
sendmsg$sock(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r3)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010)
syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNBDEUBNC503rtDUgIth6agDYgJYJ6KICAapCgCqSVkQ01wAXvBSP90ciSw78qSbYl9/t1r+lr8vg6u9PbyBy997n7vBq5j6hrS2pOs/96LslNknUb51Pej9+Xl6TlfG4lbd41pedhrO7qz+Ijty9//2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDzfAQAA//83nRHZ")

65.644177ms ago: executing program 5 (id=1171):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_clone(0x88020000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x1, r1, 0x2007)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x100, 0x80000000004}, 0x10a0a2, 0x4005, 0xb, 0x3, 0x2, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x1, 0x4, 0x4, 0x5})

28.820739ms ago: executing program 1 (id=1172):
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x8}, 0x18)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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")

224.28µs ago: executing program 5 (id=1173):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') (async)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) (async)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) (async)
ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000100)) (async)
r3 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9)
write$binfmt_format(r3, &(0x7f0000000080)='-1\x00', 0x3) (async)
r4 = epoll_create(0x3ff) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r5) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff7) (async)
ioctl$TUNGETVNETLE(r5, 0x40047452, &(0x7f0000000180)) (async)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000080)={0xe0000000, 0x1b54c8}) (async)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000440)={0x2000000}) (async)
ioctl$TIOCCONS(r2, 0x541d) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

0s ago: executing program 7 (id=1174):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@jqfmt_vfsv0}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
fallocate(r0, 0x0, 0x8e14, 0x8ffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023)
r3 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x8918, 0x0)
sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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")
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x8, 0x0, 0xfffffffffffffffc}}, 0x10)
io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x4000, 0xa00}])

kernel console output (not intermixed with test programs):

k: 12 bytes leftover after parsing attributes in process `syz.4.694'.
[  166.865650][ T6070] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.881482][ T6070] bond0: (slave bond1): Enslaving as an active interface with an up link
[  167.175539][ T6077] loop4: detected capacity change from 0 to 128
[  167.223694][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  167.223710][   T28] audit: type=1326 audit(1773806929.919:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.4.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc651c5c799 code=0x7ffc0000
[  167.303526][   T28] audit: type=1326 audit(1773806929.919:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.4.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc651c5c799 code=0x7ffc0000
[  167.373841][   T28] audit: type=1326 audit(1773806929.959:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.4.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7fc651c5c799 code=0x7ffc0000
[  167.450226][   T28] audit: type=1326 audit(1773806929.959:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.4.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc651c5c799 code=0x7ffc0000
[  167.452484][ T6085] syzkaller1: entered promiscuous mode
[  167.475971][   T28] audit: type=1326 audit(1773806929.959:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.4.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc651c5c799 code=0x7ffc0000
[  167.523391][ T6087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6087 comm=syz.4.699
[  167.566464][ T6085] syzkaller1: entered allmulticast mode
[  167.577194][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'.
[  167.731202][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.781778][ T6104] loop1: detected capacity change from 0 to 128
[  168.040728][ T6112] loop2: detected capacity change from 0 to 128
[  168.061111][   T28] audit: type=1326 audit(1773806930.749:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  168.155766][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.166289][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.182422][ T6116] batman_adv: batadv0: Interface deactivated: dummy0
[  168.404968][ T6118] loop2: detected capacity change from 0 to 512
[  168.758681][ T6118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.874994][ T6118] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  169.047443][   T28] audit: type=1326 audit(1773806930.759:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1976ddb19 code=0x7ffc0000
[  169.089732][   T28] audit: type=1326 audit(1773806930.759:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  170.075442][   T28] audit: type=1326 audit(1773806930.759:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  170.129784][   T28] audit: type=1400 audit(1773806931.919:1055): avc:  denied  { read append } for  pid=6115 comm="syz.2.708" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  170.215736][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.355117][ T6142] loop3: detected capacity change from 0 to 512
[  170.387959][ T6141] loop4: detected capacity change from 0 to 256
[  170.443917][ T6141] FAT-fs (loop4): Directory bread(block 1285) failed
[  170.456058][ T6141] FAT-fs (loop4): Directory bread(block 1286) failed
[  170.467947][ T6141] FAT-fs (loop4): Directory bread(block 1287) failed
[  170.478818][ T6141] FAT-fs (loop4): Directory bread(block 1288) failed
[  170.499845][ T6142] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  170.542972][ T6141] usb usb1: usbfs: process 6141 (syz.4.713) did not claim interface 0 before use
[  170.582974][ T6147] loop2: detected capacity change from 0 to 512
[  170.591748][ T6142] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  170.637660][ T6142] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.715: Corrupt directory, running e2fsck is recommended
[  170.690098][ T6147] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  170.697449][ T6142] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  170.725208][ T6147] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  170.749700][ T6147] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.714: Corrupt directory, running e2fsck is recommended
[  170.768570][ T6147] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  170.772618][ T6142] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.715: corrupted in-inode xattr: e_name out of bounds
[  170.802816][ T6147] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.714: corrupted in-inode xattr: e_name out of bounds
[  170.855468][ T6142] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  170.855679][ T6142] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.715: couldn't read orphan inode 15 (err -117)
[  170.870808][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  170.870837][    C1] EXT4-fs (loop3): initial error at time 1773806933: ext4_iget_extra_inode:5025: inode 15
[  170.870872][    C1] EXT4-fs (loop3): last error at time 1773806933: ext4_iget_extra_inode:5025: inode 15
[  170.900799][ T6147] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  170.920106][ T6142] loop3: lost filesystem error report for type 5 error -117
[  170.959072][ T6147] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.714: couldn't read orphan inode 15 (err -117)
[  170.967341][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  170.967363][    C0] EXT4-fs (loop2): initial error at time 1773806933: ext4_iget_extra_inode:5025: inode 15
[  170.967400][    C0] EXT4-fs (loop2): last error at time 1773806933: ext4_iget_extra_inode:5025: inode 15
[  170.974054][ T6142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.002424][ T6147] loop2: lost filesystem error report for type 5 error -117
[  171.080409][ T6147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.197927][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.220692][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.503957][ T6159] netlink: 48 bytes leftover after parsing attributes in process `syz.2.717'.
[  171.521386][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'.
[  171.678838][ T6161] loop3: detected capacity change from 0 to 256
[  171.844252][ T6161] FAT-fs (loop3): IO charset cp852 not found
[  173.001877][ T6173] loop3: detected capacity change from 0 to 512
[  173.022516][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  173.022532][   T28] audit: type=1400 audit(1773806935.719:1058): avc:  denied  { getopt } for  pid=6174 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  173.060022][ T6173] EXT4-fs: Ignoring removed bh option
[  173.089794][ T6173] EXT4-fs: inline encryption not supported
[  173.203721][ T6173] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  173.268393][ T6173] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  173.311542][ T6179] loop1: detected capacity change from 0 to 128
[  173.344431][ T6173] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.721: bg 0: block 248: padding at end of block bitmap is not set
[  173.370098][ T6173] loop3: lost filesystem error report for type 5 error -117
[  173.370328][ T6173] Quota error (device loop3): write_blk: dquota write failed
[  173.388231][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  173.388251][    C0] EXT4-fs (loop3): last error at time 1773806936: ext4_validate_block_bitmap:441
[  173.447324][   T28] audit: type=1326 audit(1773806936.129:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322a9c799 code=0x7ffc0000
[  173.484988][ T6173] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  173.529720][   T28] audit: type=1326 audit(1773806936.129:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322a9c799 code=0x7ffc0000
[  173.530380][ T6173] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.721: Failed to acquire dquot type 1
[  173.619696][   T28] audit: type=1326 audit(1773806936.129:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7fa322a9c799 code=0x7ffc0000
[  173.649313][ T6173] loop3: lost filesystem error report for type 5 error -117
[  173.691076][ T6173] EXT4-fs (loop3): 1 truncate cleaned up
[  173.719110][   T28] audit: type=1326 audit(1773806936.129:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322a9c799 code=0x7ffc0000
[  173.724843][ T6173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  173.800362][ T6190] process 'syz.1.727' launched '/dev/fd/4' with NULL argv: empty string added
[  173.800389][   T28] audit: type=1326 audit(1773806936.129:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322a9c799 code=0x7ffc0000
[  173.856423][   T28] audit: type=1326 audit(1773806936.279:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb19773c799 code=0x0
[  173.888664][   T28] audit: type=1400 audit(1773806936.589:1065): avc:  denied  { execute_no_trans } for  pid=6189 comm="syz.1.727" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  174.105024][ T6200] loop1: detected capacity change from 0 to 512
[  174.182899][ T6200] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.731: corrupted inode contents
[  174.210619][ T6173] syz.3.721 (6173) used greatest stack depth: 9160 bytes left
[  174.231398][ T6205] 9p: Bad value for 'wfdno'
[  174.241745][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  174.270234][ T6200] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  174.270523][ T6200] EXT4-fs (loop1): Remounting filesystem read-only
[  174.283576][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  174.283596][    C1] EXT4-fs (loop1): initial error at time 1773806936: ext4_do_update_inode:5569: inode 15
[  174.283640][    C1] EXT4-fs (loop1): last error at time 1773806936: ext4_do_update_inode:5569: inode 15
[  174.330545][ T6200] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -30)
[  174.369732][ T6200] EXT4-fs (loop1): 1 orphan inode deleted
[  174.395718][ T6200] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.448747][ T6210] loop3: detected capacity change from 0 to 1024
[  174.508262][ T6210] EXT4-fs: dax option not supported
[  174.557671][ T3315] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  174.610578][ T6210] netlink: 'syz.3.734': attribute type 3 has an invalid length.
[  174.651223][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'.
[  174.693396][ T3392] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  174.729813][ T3392] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  174.739207][ T3392] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  174.799719][ T3392] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  174.809388][ T3392] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  174.859088][ T3392] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  174.871095][ T3392] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  174.899860][ T3392] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  174.908416][ T3392] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  174.944571][ T3392] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[  174.972499][ T6252] bond2: peer notification delay (2048) is not a multiple of miimon (100), value rounded to 2000 ms
[  174.988805][ T6257] loop2: detected capacity change from 0 to 256
[  174.996685][ T3392] hid-generic 0000:0000:0004.0001: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  175.007889][ T6257] FAT-fs (loop2): Directory bread(block 1285) failed
[  175.028996][ T6252] 8021q: adding VLAN 0 to HW filter on device bond2
[  175.123286][ T6257] FAT-fs (loop2): Directory bread(block 1286) failed
[  175.173294][ T6260] fido_id[6260]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  175.199547][ T6257] FAT-fs (loop2): Directory bread(block 1287) failed
[  175.240315][ T6257] FAT-fs (loop2): Directory bread(block 1288) failed
[  175.308145][ T6267] FAT-fs (loop2): Directory bread(block 1285) failed
[  175.315928][ T6267] FAT-fs (loop2): Directory bread(block 1286) failed
[  175.323245][ T6267] FAT-fs (loop2): Directory bread(block 1287) failed
[  175.337563][ T6268] loop4: detected capacity change from 0 to 1024
[  175.352073][ T6268] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  175.374884][ T6267] FAT-fs (loop2): Directory bread(block 1288) failed
[  175.493726][ T6275] loop1: detected capacity change from 0 to 1024
[  175.524893][ T6278] smc: net device ip_vti0 applied user defined pnetid SYZ0
[  175.557330][ T6257] usb usb1: usbfs: process 6257 (syz.2.740) did not claim interface 0 before use
[  175.720575][ T6275] EXT4-fs: Ignoring removed orlov option
[  175.825325][ T6275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.900502][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'.
[  176.342346][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.746'.
[  176.419284][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.456919][ T6298] loop4: detected capacity change from 0 to 512
[  176.480564][ T6298] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  176.533152][ T6302] loop3: detected capacity change from 0 to 256
[  176.558212][ T6298] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  176.638209][ T6298] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.753: Corrupt directory, running e2fsck is recommended
[  176.657906][ T6302] syz.3.754: attempt to access beyond end of device
[  176.657906][ T6302] loop3: rw=2049, sector=256, nr_sectors = 8 limit=256
[  176.679502][ T6306] loop1: detected capacity change from 0 to 512
[  176.683517][ T6298] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  176.704776][ T6298] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.753: corrupted in-inode xattr: e_name out of bounds
[  176.739486][ T6306] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  176.857329][ T6306] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  176.890131][ T6298] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  176.890661][ T6298] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.753: couldn't read orphan inode 15 (err -117)
[  176.908353][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  176.908387][    C1] EXT4-fs (loop4): initial error at time 1773806939: ext4_iget_extra_inode:5025: inode 15
[  176.908420][    C1] EXT4-fs (loop4): last error at time 1773806939: ext4_iget_extra_inode:5025: inode 15
[  176.927118][ T6306] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.752: Corrupt directory, running e2fsck is recommended
[  176.990813][ T6306] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  177.002752][ T6298] loop4: lost filesystem error report for type 5 error -117
[  177.002971][ T6306] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.752: corrupted in-inode xattr: e_name out of bounds
[  177.028298][ T6298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.066211][ T6315] tmpfs: Bad value for 'mpol'
[  177.073387][ T6315] ALSA: seq fatal error: cannot create timer (-22)
[  177.082195][ T6306] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  177.082396][ T6306] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.752: couldn't read orphan inode 15 (err -117)
[  177.093478][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  177.093500][    C1] EXT4-fs (loop1): initial error at time 1773806939: ext4_iget_extra_inode:5025: inode 15
[  177.093564][    C1] EXT4-fs (loop1): last error at time 1773806939: ext4_iget_extra_inode:5025: inode 15
[  177.138429][ T6306] loop1: lost filesystem error report for type 5 error -117
[  177.158906][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.190112][ T6306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.265787][ T6323] EXT4-fs: inline encryption not supported
[  177.280740][ T6323] EXT4-fs: Ignoring removed bh option
[  177.313821][ T6323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.329244][ T6330] netlink: 'syz.4.763': attribute type 1 has an invalid length.
[  177.380542][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.392220][ T6323] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.762: Allocating blocks 449-513 which overlap fs metadata
[  177.434667][ T6323] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.762: Allocating blocks 417-513 which overlap fs metadata
[  177.481421][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.824222][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.834294][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.015056][ T6350] FAT-fs (loop5): Directory bread(block 1285) failed
[  178.233802][ T6350] FAT-fs (loop5): Directory bread(block 1286) failed
[  178.274650][ T6352] set_capacity_and_notify: 4 callbacks suppressed
[  178.274667][ T6352] loop4: detected capacity change from 0 to 512
[  178.399389][ T6350] FAT-fs (loop5): Directory bread(block 1287) failed
[  178.411891][ T6352] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  178.494881][ T6352] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.767: Invalid block bitmap block 0 in block_group 0
[  178.596928][ T6350] FAT-fs (loop5): Directory bread(block 1288) failed
[  178.619171][ T6352] loop4: lost filesystem error report for type 5 error -117
[  178.619840][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  178.636530][    C1] EXT4-fs (loop4): initial error at time 1773806941: ext4_read_block_bitmap_nowait:483
[  178.648386][    C1] EXT4-fs (loop4): last error at time 1773806941: ext4_read_block_bitmap_nowait:483
[  178.661205][ T6352] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  178.738780][ T6352] loop4: lost filesystem error report for type 5 error -117
[  178.757905][ T6352] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.767: attempt to clear invalid blocks 983261 len 1
[  178.902880][ T6350] FAT-fs (loop5): Directory bread(block 1285) failed
[  178.944883][ T6352] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  178.945685][ T6352] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.767: Invalid inode table block 0 in block_group 0
[  179.090455][ T6350] FAT-fs (loop5): Directory bread(block 1286) failed
[  179.132117][ T6352] loop4: lost filesystem error report for type 5 error -117
[  179.132417][ T6352] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  179.219300][ T6350] FAT-fs (loop5): Directory bread(block 1287) failed
[  179.259130][ T6352] loop4: lost filesystem error report for type 5 error -117
[  179.259563][ T6352] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  179.387141][ T6350] FAT-fs (loop5): Directory bread(block 1288) failed
[  179.408408][ T6352] loop4: lost filesystem error report for type 5 error -117
[  179.408779][ T6352] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.767: Invalid inode table block 0 in block_group 0
[  179.464151][ T6349] usb usb1: usbfs: process 6349 (syz.5.765) did not claim interface 0 before use
[  179.473820][ T6352] loop4: lost filesystem error report for type 5 error -117
[  179.519970][ T6352] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  179.579867][ T6352] loop4: lost filesystem error report for type 5 error -117
[  179.580296][ T6352] EXT4-fs error (device loop4): ext4_truncate:4587: inode #11: comm syz.4.767: mark_inode_dirty error
[  179.696367][ T6352] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  179.696758][ T6352] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  179.746865][ T6352] loop4: lost filesystem error report for type 5 error -117
[  179.747088][ T6352] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.767: Invalid inode table block 0 in block_group 0
[  179.801532][ T6352] EXT4-fs (loop4): 1 truncate cleaned up
[  179.820508][ T6352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.901254][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.214360][ T6371] loop2: detected capacity change from 0 to 2048
[  180.275575][ T6371] EXT4-fs: Ignoring removed oldalloc option
[  180.325822][ T6386] loop4: detected capacity change from 0 to 2048
[  180.343460][ T6371] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  180.359163][ T6371] System zones: 0-7
[  180.363783][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.386840][ T6386] EXT4-fs: Ignoring removed oldalloc option
[  180.410825][ T6386] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  180.439366][ T6386] System zones: 0-7
[  180.449324][ T6386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.470482][ T6361] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.770: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  180.488803][ T6361] EXT4-fs (loop4): Remounting filesystem read-only
[  180.498368][ T6358] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.769: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  180.560268][ T6358] EXT4-fs (loop2): Remounting filesystem read-only
[  180.570524][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.660961][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.696650][   T28] kauditd_printk_skb: 30 callbacks suppressed
[  180.696664][   T28] audit: type=1400 audit(1773806943.389:1096): avc:  denied  { mount } for  pid=6421 comm="syz.5.778" name="/" dev="autofs" ino=15048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  180.738406][ T6422] loop5: detected capacity change from 0 to 512
[  180.781923][ T6422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.801322][ T6422] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.815990][ T6422] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.778: corrupted inode contents
[  180.833195][ T6422] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.778: mark_inode_dirty error
[  180.846577][ T6422] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.778: corrupted inode contents
[  180.860367][ T6422] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.778: mark_inode_dirty error
[  180.890516][ T6422] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.778: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  180.890516][ T6422] 
[  180.916727][   T28] audit: type=1400 audit(1773806943.619:1097): avc:  denied  { add_name } for  pid=6421 comm="syz.5.778" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  181.062317][ T6440] loop4: detected capacity change from 0 to 512
[  181.095864][ T6440] EXT4-fs: Ignoring removed nomblk_io_submit option
[  181.190298][ T6440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.204003][ T6440] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.220404][ T6440] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  181.247944][ T6440] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  181.287159][ T6440] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.774: Failed to acquire dquot type 1
[  181.342284][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.395667][ T6447] loop4: detected capacity change from 0 to 512
[  181.443266][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.470635][ T6447] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.521824][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.698516][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.709585][ T6458] loop2: detected capacity change from 0 to 256
[  181.720763][ T6458] FAT-fs (loop2): Directory bread(block 1285) failed
[  181.729220][ T6458] FAT-fs (loop2): Directory bread(block 1286) failed
[  181.741802][ T6458] FAT-fs (loop2): Directory bread(block 1287) failed
[  181.749515][ T6458] FAT-fs (loop2): Directory bread(block 1288) failed
[  181.766241][ T6458] FAT-fs (loop2): Directory bread(block 1285) failed
[  181.775154][ T6458] FAT-fs (loop2): Directory bread(block 1286) failed
[  181.784409][ T6458] FAT-fs (loop2): Directory bread(block 1287) failed
[  181.794197][ T6458] FAT-fs (loop2): Directory bread(block 1288) failed
[  181.875760][ T6458] usb usb1: usbfs: process 6458 (syz.2.781) did not claim interface 0 before use
[  182.459728][   T28] audit: type=1400 audit(1773806945.149:1098): avc:  denied  { getopt } for  pid=6474 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  182.545639][   T28] audit: type=1400 audit(1773806945.239:1099): avc:  denied  { bind } for  pid=6483 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  182.546138][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.785'.
[  182.608046][ T6473] loop5: detected capacity change from 0 to 2048
[  182.638722][ T6473] EXT4-fs: Ignoring removed oldalloc option
[  182.809859][ T6473] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  182.840246][ T6504] netlink: 'syz.4.789': attribute type 17 has an invalid length.
[  182.864728][ T6473] System zones: 0-7
[  182.901130][ T6473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.917968][ T6509] netlink: 104 bytes leftover after parsing attributes in process `syz.4.789'.
[  182.937616][ T6465] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.784: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  182.992187][ T6465] EXT4-fs (loop5): Remounting filesystem read-only
[  183.021531][ T6518] FAULT_INJECTION: forcing a failure.
[  183.021531][ T6518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.035024][ T6521] loop2: detected capacity change from 0 to 128
[  183.053738][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.1.793 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  183.053772][ T6518] Tainted: [W]=WARN
[  183.053842][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  183.053907][ T6518] Call Trace:
[  183.053915][ T6518]  <TASK>
[  183.053923][ T6518]  __dump_stack+0x1d/0x30
[  183.053977][ T6518]  dump_stack_lvl+0x95/0xd0
[  183.053999][ T6518]  dump_stack+0x15/0x1b
[  183.054019][ T6518]  should_fail_ex+0x263/0x280
[  183.054111][ T6518]  should_fail+0xb/0x20
[  183.054133][ T6518]  should_fail_usercopy+0x1a/0x20
[  183.054175][ T6518]  copy_fpstate_to_sigframe+0x650/0x7f0
[  183.054272][ T6518]  ? copy_fpstate_to_sigframe+0xe5/0x7f0
[  183.054300][ T6518]  ? x86_task_fpu+0x36/0x60
[  183.054381][ T6518]  get_sigframe+0x34c/0x470
[  183.054425][ T6518]  ? get_signal+0xdc3/0xf60
[  183.054457][ T6518]  x64_setup_rt_frame+0xa7/0x4e0
[  183.054484][ T6518]  arch_do_signal_or_restart+0x24b/0x450
[  183.054585][ T6518]  exit_to_user_mode_loop+0x6a/0x6f0
[  183.054672][ T6518]  do_syscall_64+0x249/0x370
[  183.054699][ T6518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.054770][ T6518] RIP: 0033:0x7fa322a9c797
[  183.054792][ T6518] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  183.054851][ T6518] RSP: 002b:00007fa3214f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  183.054901][ T6518] RAX: 0000000000000130 RBX: 00007fa322d15fa0 RCX: 00007fa322a9c799
[  183.054914][ T6518] RDX: 0200000002000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  183.054927][ T6518] RBP: 00007fa3214f7090 R08: 0000000000000000 R09: 0000000000000000
[  183.054941][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.054955][ T6518] R13: 00007fa322d16038 R14: 00007fa322d15fa0 R15: 00007ffe1fced738
[  183.054978][ T6518]  </TASK>
[  183.312263][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.415748][ T6530] lo: entered allmulticast mode
[  183.481188][   T28] audit: type=1400 audit(1773806946.179:1100): avc:  denied  { mount } for  pid=6532 comm="syz.3.797" name="/" dev="configfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  183.618881][ T6542] bridge_slave_1: left allmulticast mode
[  183.628812][ T6542] bridge_slave_1: left promiscuous mode
[  183.666378][   T28] audit: type=1400 audit(1773806946.339:1101): avc:  denied  { search } for  pid=6532 comm="syz.3.797" name="/" dev="configfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  183.725273][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.815390][   T28] audit: type=1400 audit(1773806946.509:1102): avc:  denied  { getopt } for  pid=6532 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  184.056301][ T6542] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  184.057438][ T6547] loop4: detected capacity change from 0 to 1024
[  184.057888][ T6547] EXT4-fs: Ignoring removed orlov option
[  184.098563][ T6551] loop5: detected capacity change from 0 to 1024
[  184.099018][ T6551] EXT4-fs: Ignoring removed orlov option
[  184.099058][ T6551] EXT4-fs: Ignoring removed bh option
[  184.129004][   T28] audit: type=1400 audit(1773806946.549:1103): avc:  denied  { read open } for  pid=6532 comm="syz.3.797" path="/" dev="configfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  184.138293][ T6547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.150349][ T6551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.174873][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.188785][ T6551] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.795: Allocating blocks 385-513 which overlap fs metadata
[  184.189218][ T6548] EXT4-fs (loop5): pa ffff888107e58150: logic 16, phys. 129, len 24
[  184.189244][ T6548] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8
[  184.214822][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.543737][ T6561] loop3: detected capacity change from 0 to 2048
[  184.562555][ T6561] EXT4-fs: Ignoring removed oldalloc option
[  184.577661][ T6564] syzkaller0: entered promiscuous mode
[  184.586471][ T6564] syzkaller0: entered allmulticast mode
[  184.593930][ T6561] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  184.634178][ T6561] System zones: 0-7
[  184.657524][ T6561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.810861][ T6559] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.805: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  184.966772][ T6576] 9p: Bad value for 'rfdno'
[  184.999163][ T6559] EXT4-fs (loop3): Remounting filesystem read-only
[  185.139496][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.510206][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.819'.
[  185.890970][ T6617] loop2: detected capacity change from 0 to 2048
[  185.930816][ T6617] EXT4-fs: Ignoring removed oldalloc option
[  185.984208][ T6616] loop4: detected capacity change from 0 to 1024
[  186.038887][ T6616] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.071295][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6641 comm=syz.1.825
[  186.113195][ T6617] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  186.130015][ T6617] System zones: 0-7
[  186.131432][ T6641] netlink: 'syz.1.825': attribute type 1 has an invalid length.
[  186.160231][ T6617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.263606][ T6641] bond2: (slave gretap1): making interface the new active one
[  186.307536][ T6611] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.821: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  186.331235][ T6641] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  186.375619][ T6646] vlan2: entered allmulticast mode
[  186.382555][ T6611] EXT4-fs (loop2): Remounting filesystem read-only
[  186.400689][ T6646] bond2: entered allmulticast mode
[  186.420847][ T6646] gretap1: entered allmulticast mode
[  186.428163][ T6646] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  186.537643][ T6657] netlink: 32 bytes leftover after parsing attributes in process `syz.5.826'.
[  186.564162][ T6667] loop1: detected capacity change from 0 to 1024
[  186.572276][ T6657] pim6reg1: entered promiscuous mode
[  186.578091][ T6657] pim6reg1: entered allmulticast mode
[  186.615031][ T6667] EXT4-fs (loop1): bad geometry: block count 4096 exceeds size of device (512 blocks)
[  186.776434][ T6616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.815683][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.968978][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.982373][ T6681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  186.982386][ T6681] IPv6: NLM_F_CREATE should be set when creating new route
[  186.982398][ T6681] IPv6: NLM_F_CREATE should be set when creating new route
[  186.988578][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  186.988594][   T28] audit: type=1400 audit(1773806949.689:1109): avc:  denied  { mounton } for  pid=6680 comm="syz.1.832" path="/186/file0" dev="tmpfs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  186.994931][ T6681] loop1: detected capacity change from 0 to 1024
[  187.000685][ T6681] EXT4-fs: Ignoring removed orlov option
[  187.020827][ T6681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.021536][ T6681] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.023321][ T6681] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  187.026103][   T28] audit: type=1400 audit(1773806949.719:1110): avc:  denied  { relabelto } for  pid=6680 comm="syz.1.832" name="186" dev="tmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  187.169757][   T28] audit: type=1400 audit(1773806949.719:1111): avc:  denied  { associate } for  pid=6680 comm="syz.1.832" name="186" dev="tmpfs" ino=1013 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0"
[  187.223387][ T6689] net_ratelimit: 11 callbacks suppressed
[  187.223403][ T6689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.314175][ T6698] netlink: 'syz.3.837': attribute type 4 has an invalid length.
[  187.315819][   T28] audit: type=1400 audit(1773806950.009:1112): avc:  denied  { ioctl } for  pid=6697 comm="syz.3.837" path="socket:[16391]" dev="sockfs" ino=16391 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  187.371538][ T6698] netlink: 152 bytes leftover after parsing attributes in process `syz.3.837'.
[  187.384815][ T6704] loop5: detected capacity change from 0 to 1024
[  187.405520][ T6698] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  187.444856][ T6704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  187.488566][ T6711] loop3: detected capacity change from 0 to 1024
[  187.520125][ T6711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  187.546229][ T6704] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.550307][ T6711] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.620569][   T28] audit: type=1400 audit(1773806950.309:1113): avc:  denied  { map } for  pid=6703 comm="syz.5.838" path="/75/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  187.623700][ T6703] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.838: lblock 0 mapped to illegal pblock 0 (length 1)
[  187.695950][ T6711] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.840: lblock 3 mapped to illegal pblock 3 (length 3)
[  187.696292][ T6702] loop4: detected capacity change from 0 to 2048
[  187.724124][ T6711] EXT4-fs (loop3): Remounting filesystem read-only
[  187.724666][ T6703] EXT4-fs (loop5): Remounting filesystem read-only
[  187.750318][ T6702] EXT4-fs: Ignoring removed oldalloc option
[  187.793058][ T6702] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  187.805508][ T6702] System zones: 0-7
[  187.815423][ T6702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.841072][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  187.854713][ T6702] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.839: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  187.876557][ T6702] EXT4-fs (loop4): Remounting filesystem read-only
[  187.894893][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  187.962211][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.090978][   T28] audit: type=1400 audit(1773806950.779:1114): avc:  denied  { create } for  pid=6755 comm="syz.1.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  188.409378][ T6771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.514521][ T6781] netlink: 188 bytes leftover after parsing attributes in process `syz.4.847'.
[  188.576713][   T28] audit: type=1400 audit(1773806951.249:1115): avc:  denied  { rmdir } for  pid=6770 comm="syz.5.855" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  189.250006][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.431986][ T6789] syzkaller0: entered allmulticast mode
[  189.477513][   T28] audit: type=1400 audit(1773806952.169:1116): avc:  denied  { setattr } for  pid=6803 comm="syz.4.861" name="/" dev="configfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  189.680127][ T6814] FAULT_INJECTION: forcing a failure.
[  189.680127][ T6814] name failslab, interval 1, probability 0, space 0, times 0
[  189.706683][ T6806] set_capacity_and_notify: 2 callbacks suppressed
[  189.706700][ T6806] loop5: detected capacity change from 0 to 2048
[  189.747706][ T6814] CPU: 1 UID: 0 PID: 6814 Comm: syz.1.863 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  189.747741][ T6814] Tainted: [W]=WARN
[  189.747749][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  189.747910][ T6814] Call Trace:
[  189.747917][ T6814]  <TASK>
[  189.747925][ T6814]  __dump_stack+0x1d/0x30
[  189.747958][ T6814]  dump_stack_lvl+0x95/0xd0
[  189.748010][ T6814]  dump_stack+0x15/0x1b
[  189.748035][ T6814]  should_fail_ex+0x263/0x280
[  189.748061][ T6814]  should_failslab+0x8c/0xb0
[  189.748086][ T6814]  kmem_cache_alloc_noprof+0x66/0x400
[  189.748150][ T6814]  ? security_file_alloc+0x32/0xf0
[  189.748172][ T6814]  security_file_alloc+0x32/0xf0
[  189.748192][ T6814]  init_file+0x5b/0x1b0
[  189.748366][ T6814]  alloc_empty_file+0x8b/0x200
[  189.748404][ T6814]  alloc_file_pseudo+0xf6/0x190
[  189.748435][ T6814]  __shmem_file_setup+0x1dd/0x210
[  189.748465][ T6814]  shmem_file_setup+0x3b/0x50
[  189.748512][ T6814]  memfd_alloc_file+0x4e/0x300
[  189.748549][ T6814]  __se_sys_memfd_create+0x2e1/0x3b0
[  189.748667][ T6814]  __x64_sys_memfd_create+0x31/0x40
[  189.748700][ T6814]  x64_sys_call+0x1f22/0x3020
[  189.748731][ T6814]  do_syscall_64+0x12c/0x370
[  189.748757][ T6814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.748835][ T6814] RIP: 0033:0x7fa322a9c799
[  189.748895][ T6814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.748912][ T6814] RSP: 002b:00007fa3214f6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  189.748933][ T6814] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007fa322a9c799
[  189.748949][ T6814] RDX: 00007fa3214f6ee0 RSI: 0000000000000000 RDI: 00007fa322b32e79
[  189.748962][ T6814] RBP: 0000200000000180 R08: 00000000ffffffff R09: 0000000000000000
[  189.748977][ T6814] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040
[  189.749033][ T6814] R13: 00007fa3214f6ee0 R14: 00007fa3214f6ea0 R15: 0000200000000080
[  189.749057][ T6814]  </TASK>
[  190.171326][ T6806] EXT4-fs: Ignoring removed oldalloc option
[  190.236719][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'.
[  190.360711][   T28] audit: type=1400 audit(1773806953.039:1117): avc:  denied  { bind } for  pid=6823 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  190.449556][   T28] audit: type=1400 audit(1773806953.099:1118): avc:  denied  { accept } for  pid=6823 comm="syz.3.866" lport=50077 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  190.495873][ T6806] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  190.511583][ T6832] loop3: detected capacity change from 0 to 128
[  190.519528][ T6806] System zones: 0-7
[  190.533284][ T6806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.517431][ T6791] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.857: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  191.590605][ T6791] EXT4-fs (loop5): Remounting filesystem read-only
[  191.634326][ T6839] loop1: detected capacity change from 0 to 1024
[  191.770264][ T6839] ext4: Unknown parameter 'obj_user'
[  191.817629][ T6842] netlink: 124 bytes leftover after parsing attributes in process `syz.4.871'.
[  191.840908][ T6839] netlink: 124 bytes leftover after parsing attributes in process `syz.1.869'.
[  191.851680][ T6843] netlink: 5 bytes leftover after parsing attributes in process `syz.2.870'.
[  191.952084][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.999651][   T28] kauditd_printk_skb: 41 callbacks suppressed
[  192.021988][   T28] audit: type=1400 audit(1773806954.689:1160): avc:  denied  { name_bind } for  pid=6841 comm="syz.4.871" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  192.114812][   T28] audit: type=1400 audit(1773806954.689:1161): avc:  denied  { node_bind } for  pid=6841 comm="syz.4.871" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  192.171204][ T6853] usb usb1: usbfs: process 6853 (syz.1.875) did not claim interface 0 before use
[  192.273140][   T28] audit: type=1400 audit(1773806954.969:1162): avc:  denied  { sqpoll } for  pid=6854 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  192.474448][   T28] audit: type=1326 audit(1773806955.059:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc651c5c799 code=0x7ffc0000
[  192.930107][   T28] audit: type=1326 audit(1773806955.059:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc651c5c799 code=0x7ffc0000
[  193.234095][ T6872] netlink: 32 bytes leftover after parsing attributes in process `syz.4.879'.
[  193.503709][ T6896] loop1: detected capacity change from 0 to 1024
[  193.586218][ T6899] loop4: detected capacity change from 0 to 8192
[  193.605142][ T6900] loop5: detected capacity change from 0 to 2048
[  193.619164][ T6900] EXT4-fs: Ignoring removed oldalloc option
[  193.655022][ T6899] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  193.721416][ T6899] bond3 (unregistering): Released all slaves
[  193.747989][ T6900] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  193.828206][ T6900] System zones: 0-7
[  193.836416][ T6900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.870735][ T6884] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.882: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  193.894372][ T6884] EXT4-fs (loop5): Remounting filesystem read-only
[  193.947248][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.973349][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'.
[  193.983351][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'.
[  193.994039][ T6916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.081573][ T6925] loop2: detected capacity change from 0 to 1024
[  194.110368][ T6928] loop1: detected capacity change from 0 to 256
[  194.158691][ T6925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.178846][   T28] audit: type=1326 audit(1773806956.836:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  194.201463][ T6925] xt_time: unknown flags 0xc
[  194.204862][   T28] audit: type=1326 audit(1773806956.854:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  194.237677][   T28] audit: type=1326 audit(1773806956.854:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  194.267081][   T28] audit: type=1326 audit(1773806956.854:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  194.294148][   T28] audit: type=1326 audit(1773806956.854:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  194.387612][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.510867][ T6939] macsec1: entered promiscuous mode
[  194.528063][ T6939] geneve1: entered promiscuous mode
[  194.541367][ T6939] macsec1: entered allmulticast mode
[  194.569771][ T6939] geneve1: entered allmulticast mode
[  194.761873][ T6961] bridge_slave_1: left allmulticast mode
[  194.795737][ T6961] bridge_slave_1: left promiscuous mode
[  194.824463][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.914812][ T6973] loop3: detected capacity change from 0 to 764
[  194.988784][ T6962] xt_CT: No such helper "snmp_trap"
[  195.005111][ T6975] loop5: detected capacity change from 0 to 2048
[  195.026326][ T6961] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  195.081309][ T6977] lo speed is unknown, defaulting to 1000
[  195.089849][ T6970] loop2: detected capacity change from 0 to 32768
[  195.129910][ T6979] team0 (unregistering): Port device team_slave_0 removed
[  195.139964][ T6979] team0 (unregistering): Port device team_slave_1 removed
[  195.150342][ T6973] lo speed is unknown, defaulting to 1000
[  195.177591][ T6979] loop4: detected capacity change from 0 to 512
[  195.191637][ T6975] Alternate GPT is invalid, using primary GPT.
[  195.210598][ T6975]  loop5: p2 p3 p7
[  195.216119][ T6979] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  195.251515][ T6979] EXT4-fs (loop4): 1 truncate cleaned up
[  195.273439][ T6979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.304593][ T6970] loop2: detected capacity change from 0 to 4096
[  195.322041][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  195.324074][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  195.334480][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[  195.359609][ T6970] EXT4-fs: Ignoring removed bh option
[  195.367776][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.429069][ T6970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.543464][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'.
[  195.697567][ T6995] loop1: detected capacity change from 0 to 128
[  196.997285][ T7025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.923'.
[  197.494625][  T309] bridge_slave_1: left allmulticast mode
[  197.516660][  T309] bridge_slave_1: left promiscuous mode
[  197.536134][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.551439][  T309] bridge_slave_0: left allmulticast mode
[  197.590837][  T309] bridge_slave_0: left promiscuous mode
[  197.638856][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.699083][ T7047] loop4: detected capacity change from 0 to 512
[  197.728822][ T7047] EXT4-fs: Ignoring removed nobh option
[  197.767523][ T7047] EXT4-fs mount: 1 callbacks suppressed
[  197.767539][ T7047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.794006][ T7047] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  197.820164][  T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.840311][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.852144][  T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.863074][  T309] bond0 (unregistering): Released all slaves
[  197.872438][  T309] bond1 (unregistering): Released all slaves
[  197.898573][ T7059] loop4: detected capacity change from 0 to 512
[  197.925998][ T7059] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  197.947772][ T7059] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  197.995005][ T7059] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.928: Corrupt directory, running e2fsck is recommended
[  198.092770][ T7059] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  198.143976][ T7059] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.928: corrupted in-inode xattr: e_name out of bounds
[  198.185729][  T309] hsr_slave_0: left promiscuous mode
[  198.452822][  T309] hsr_slave_1: left promiscuous mode
[  198.471498][  T309] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.492510][ T7059] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  198.492709][ T7059] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.928: couldn't read orphan inode 15 (err -117)
[  198.514736][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  198.514757][    C1] EXT4-fs (loop4): initial error at time 1773806960: ext4_iget_extra_inode:5025: inode 15
[  198.514782][    C1] EXT4-fs (loop4): last error at time 1773806960: ext4_iget_extra_inode:5025: inode 15
[  198.546105][  T309] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.569774][ T7059] fserror_report: 1 callbacks suppressed
[  198.569793][ T7059] loop4: lost filesystem error report for type 5 error -117
[  198.610801][ T7059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.722583][  T309] team0 (unregistering): Port device team_slave_1 removed
[  198.739727][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.751443][  T309] team0 (unregistering): Port device team_slave_0 removed
[  198.862677][  T309] lo (unregistering): left allmulticast mode
[  198.897219][ T7043] lo speed is unknown, defaulting to 1000
[  198.919946][ T7102] tmpfs: Bad value for 'mpol'
[  199.056357][   T28] kauditd_printk_skb: 111 callbacks suppressed
[  199.056372][   T28] audit: type=1400 audit(1773806961.391:1281): avc:  denied  { create } for  pid=7101 comm="syz.5.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  199.057086][ T7107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.938'.
[  199.294267][ T7114] lo speed is unknown, defaulting to 1000
[  199.307001][ T7043] chnl_net:caif_netlink_parms(): no params data found
[  199.393225][ T7134] loop4: detected capacity change from 0 to 128
[  199.443170][ T7134] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  199.487027][ T7134] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.500880][  T309] IPVS: stop unused estimator thread 0...
[  199.509689][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.517463][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.527220][ T7043] bridge_slave_0: entered allmulticast mode
[  199.534013][ T7043] bridge_slave_0: entered promiscuous mode
[  199.541606][ T7144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.942'.
[  199.542101][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.562709][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.574070][ T7043] bridge_slave_1: entered allmulticast mode
[  199.582552][ T7043] bridge_slave_1: entered promiscuous mode
[  199.608495][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.620659][   T28] audit: type=1400 audit(1773806961.906:1282): avc:  denied  { read } for  pid=7143 comm="syz.1.942" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  199.625788][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.657827][   T28] audit: type=1400 audit(1773806961.906:1283): avc:  denied  { open } for  pid=7143 comm="syz.1.942" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  199.686416][ T7043] team0: Port device team_slave_0 added
[  199.696758][ T7043] team0: Port device team_slave_1 added
[  199.761056][   T28] audit: type=1400 audit(1773806962.055:1284): avc:  denied  { unlink } for  pid=3319 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  199.765286][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.829557][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.865928][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.897745][ T7153] loop2: detected capacity change from 0 to 1024
[  199.913154][ T7153] EXT4-fs: inline encryption not supported
[  199.922420][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.930605][ T7153] EXT4-fs: Ignoring removed bh option
[  199.937218][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.966905][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.011623][ T7153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.026212][   T28] audit: type=1400 audit(1773806962.214:1285): avc:  denied  { open } for  pid=7141 comm="syz.5.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  200.090760][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.107872][ T7166] ext4: Unknown parameter 'obj_type'
[  200.122926][ T6206] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  200.155971][   T28] audit: type=1400 audit(1773806962.214:1286): avc:  denied  { kernel } for  pid=7141 comm="syz.5.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  200.183212][   T28] audit: type=1400 audit(1773806962.383:1287): avc:  denied  { tracepoint } for  pid=7154 comm="syz.1.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  200.274721][ T7043] hsr_slave_0: entered promiscuous mode
[  200.288217][ T7043] hsr_slave_1: entered promiscuous mode
[  200.295275][ T7043] debugfs: 'hsr0' already exists in 'hsr'
[  200.301540][ T7043] Cannot create hsr debugfs directory
[  200.497294][ T7170] set_capacity_and_notify: 1 callbacks suppressed
[  200.497313][ T7170] loop2: detected capacity change from 0 to 2048
[  200.524060][ T7170] EXT4-fs: Ignoring removed oldalloc option
[  200.568758][ T7170] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  200.605688][ T7170] System zones: 0-7
[  200.615004][ T7043] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  200.624927][ T7043] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  200.635601][ T7043] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  200.637742][ T7170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.659013][ T7168] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.949: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  200.664742][ T7043] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  200.705506][ T7168] EXT4-fs (loop2): Remounting filesystem read-only
[  200.787341][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.819574][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.833026][ T7043] 8021q: adding VLAN 0 to HW filter on device team0
[  200.873768][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.881522][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.901976][   T28] audit: type=1400 audit(1773806963.122:1288): avc:  denied  { setopt } for  pid=7213 comm="syz.1.954" lport=52966 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  200.943370][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.951224][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.972312][ T7192] lo speed is unknown, defaulting to 1000
[  200.990819][   T28] audit: type=1400 audit(1773806963.122:1289): avc:  denied  { accept } for  pid=7213 comm="syz.1.954" lport=52966 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  201.022000][ T7043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.078853][   T28] audit: type=1400 audit(1773806963.281:1290): avc:  denied  { ioctl } for  pid=7213 comm="syz.1.954" path="socket:[18227]" dev="sockfs" ino=18227 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  201.202656][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.235488][ T7192] chnl_net:caif_netlink_parms(): no params data found
[  201.295708][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.304257][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.315526][ T7192] bridge_slave_0: entered allmulticast mode
[  201.327521][ T7192] bridge_slave_0: entered promiscuous mode
[  201.334976][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.344389][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.353539][ T7192] bridge_slave_1: entered allmulticast mode
[  201.361207][ T7192] bridge_slave_1: entered promiscuous mode
[  201.391289][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.410738][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.451314][ T7192] team0: Port device team_slave_0 added
[  201.466690][ T7192] team0: Port device team_slave_1 added
[  201.506771][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.517097][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.563873][ T7248] loop5: detected capacity change from 0 to 8192
[  201.576263][ T7192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.592099][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.602810][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.656868][ T7192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.727039][ T7192] hsr_slave_0: entered promiscuous mode
[  201.742974][ T7192] hsr_slave_1: entered promiscuous mode
[  201.750254][ T7192] debugfs: 'hsr0' already exists in 'hsr'
[  201.763732][ T7192] Cannot create hsr debugfs directory
[  201.772533][ T7248] netlink: 32 bytes leftover after parsing attributes in process `syz.5.959'.
[  201.878433][ T7043] veth0_vlan: entered promiscuous mode
[  201.914531][ T7043] veth1_vlan: entered promiscuous mode
[  201.961943][ T7043] veth0_macvtap: entered promiscuous mode
[  201.991466][ T7043] veth1_macvtap: entered promiscuous mode
[  202.048165][ T7192] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  202.075720][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.152691][ T7192] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  202.179530][ T7244] syz.5.959 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  202.199572][ T7192] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  202.249970][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.260519][ T7244] CPU: 1 UID: 0 PID: 7244 Comm: syz.5.959 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  202.260551][ T7244] Tainted: [W]=WARN
[  202.260559][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  202.260570][ T7244] Call Trace:
[  202.260577][ T7244]  <TASK>
[  202.260584][ T7244]  __dump_stack+0x1d/0x30
[  202.260629][ T7244]  dump_stack_lvl+0x95/0xd0
[  202.260655][ T7244]  dump_stack+0x15/0x1b
[  202.260733][ T7244]  dump_header+0x80/0x240
[  202.260756][ T7244]  oom_kill_process+0x295/0x350
[  202.260794][ T7244]  out_of_memory+0x97d/0xb80
[  202.260814][ T7244]  try_charge_memcg+0x62e/0xa10
[  202.260853][ T7244]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  202.261041][ T7244]  __swap_cache_prepare_and_add+0x386/0x530
[  202.261131][ T7244]  swap_cache_alloc_folio+0xa2/0x120
[  202.261165][ T7244]  swap_cluster_readahead+0x26e/0x3d0
[  202.261201][ T7244]  swapin_readahead+0xde/0x840
[  202.261304][ T7244]  ? _raw_spin_unlock+0x9/0x30
[  202.261333][ T7244]  ? swap_put_entries_cluster+0x385/0x3a0
[  202.261368][ T7244]  ? swap_put_entries_cluster+0x81/0x3a0
[  202.261402][ T7244]  ? __rcu_read_unlock+0x4e/0x70
[  202.261464][ T7244]  ? swap_cache_get_folio+0x26f/0x280
[  202.261494][ T7244]  do_swap_page+0x30d/0x2220
[  202.261523][ T7244]  ? css_rstat_updated+0xbb/0x280
[  202.261548][ T7244]  ? __rcu_read_lock+0x36/0x50
[  202.261569][ T7244]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  202.261601][ T7244]  handle_mm_fault+0xb46/0x3020
[  202.261693][ T7244]  ? vma_start_read+0x1c7/0x2c0
[  202.261749][ T7244]  do_user_addr_fault+0x62f/0x1050
[  202.261827][ T7244]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  202.261866][ T7244]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[  202.261893][ T7244]  ? trace_page_fault_user+0x1f/0xe0
[  202.261923][ T7244]  exc_page_fault+0x62/0xa0
[  202.262025][ T7244]  asm_exc_page_fault+0x26/0x30
[  202.262047][ T7244] RIP: 0033:0x7f968eada110
[  202.262080][ T7244] Code: c4 4c 0f 42 e0 83 3d ba dc 3a 00 00 0f 8e d9 fd ff ff e8 33 83 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 7e b5 ed 00 e8 03 00 00 48 8d 1d 7f be 3a 00 e8 8a 31 13 00
[  202.262100][ T7244] RSP: 002b:00007fffb761f870 EFLAGS: 00010202
[  202.262118][ T7244] RAX: 0000000000031352 RBX: 00007f968ee87da0 RCX: 0000000000031128
[  202.262326][ T7244] RDX: 000000000000022a RSI: 00007fffb761f850 RDI: 0000000000000001
[  202.262339][ T7244] RBP: 00007f968ee87da0 R08: 000000002112eda4 R09: 7fffffffffffffff
[  202.262353][ T7244] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00000000000313d8
[  202.262367][ T7244] R13: 00007f968ee8609c R14: 0000000000031275 R15: 00007f968ee86090
[  202.262388][ T7244]  </TASK>
[  202.583308][ T7244] memory: usage 267056kB, limit 307200kB, failcnt 230
[  202.589613][ T7255] loop1: detected capacity change from 0 to 2048
[  202.600271][ T7192] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  202.608343][ T7244] memory+swap: usage 234432kB, limit 9007199254740988kB, failcnt 0
[  202.619609][ T7255] EXT4-fs: Ignoring removed oldalloc option
[  202.656585][ T7244] kmem: usage 185448kB, limit 9007199254740988kB, failcnt 0
[  202.670736][ T7244] Memory cgroup stats for /syz5:
[  202.671009][ T7244] cache 8192
[  202.675509][ T7255] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  202.681538][ T7244] rss 4096
[  202.694404][ T7255] System zones: 
[  202.701691][ T7244] shmem 0
[  202.702176][ T7255] 0-7
[  202.717472][ T7244] mapped_file 0
[  202.718351][ T7255] 
[  202.738872][ T7255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.775605][ T7255] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.960: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  202.811628][ T7255] EXT4-fs (loop1): Remounting filesystem read-only
[  202.812157][ T7244] dirty 0
[  202.937072][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.982495][ T7244] writeback 0
[  202.988633][ T7244] workingset_refault_anon 282
[  203.022737][  T309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.042654][ T7244] workingset_refault_file 0
[  203.095395][ T7244] swap 4399104
[  203.100669][  T309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.132339][  T309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.156465][ T7244] swapcached 6193152
[  203.162496][ T7244] pgpgin 126413
[  203.207215][  T309] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.223735][ T7244] pgpgout 126406
[  203.260605][ T7244] pgfault 60680
[  203.265270][ T7244] pgmajfault 32
[  203.355616][ T7244] inactive_anon 0
[  203.405410][ T7244] active_anon 12288
[  203.450904][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.461001][ T7244] inactive_file 0
[  203.513575][ T7308] netlink: 60 bytes leftover after parsing attributes in process `syz.2.965'.
[  203.524557][ T7192] 8021q: adding VLAN 0 to HW filter on device team0
[  203.565723][ T7244] active_file 16384
[  203.581893][ T7308] unsupported nlmsg_type 40
[  203.592043][ T7244] unevictable 0
[  203.631446][  T309] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.644348][  T309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.659995][ T7244] hierarchical_memory_limit 314572800
[  203.670745][ T7244] hierarchical_memsw_limit 9223372036854771712
[  203.682000][ T7244] total_cache 8192
[  203.717423][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.731054][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.749054][ T7244] total_rss 4096
[  203.755361][ T7244] total_shmem 0
[  203.760628][ T7244] total_mapped_file 0
[  203.766417][ T7244] total_dirty 0
[  203.779042][ T7244] total_writeback 0
[  203.788142][ T7244] total_workingset_refault_anon 282
[  203.796239][ T7244] total_workingset_refault_file 0
[  203.811722][ T7327] loop1: detected capacity change from 0 to 512
[  203.825113][ T7326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.968'.
[  203.875116][ T7327] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  203.879768][ T7192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  203.934885][ T7192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  203.966338][ T7244] total_swap 4399104
[  203.977115][ T7244] total_swapcached 6193152
[  203.987592][ T7244] total_pgpgin 126413
[  204.002405][ T7327] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #15: comm syz.1.966: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0)
[  204.002895][ T7244] total_pgpgout 126406
[  204.035771][ T7244] total_pgfault 60680
[  204.044820][ T7244] total_pgmajfault 32
[  204.070272][ T7244] total_inactive_anon 0
[  204.078335][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.088120][ T7244] total_active_anon 12288
[  204.099093][ T7244] total_inactive_file 0
[  204.115221][ T7244] total_active_file 16384
[  204.116263][ T7318] xt_hashlimit: size too large, truncated to 1048576
[  204.130727][ T7244] total_unevictable 0
[  204.136100][ T7244] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.959,pid=7244,uid=0
[  204.177542][ T7244] Memory cgroup out of memory: Killed process 7244 (syz.5.959) total-vm:94296kB, anon-rss:1232kB, file-rss:22560kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  204.218296][ T7248] syz.5.959 (7248) used greatest stack depth: 8760 bytes left
[  204.265247][ T7245] syz.5.959 (7245) used greatest stack depth: 5880 bytes left
[  204.470481][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  204.470497][   T28] audit: type=1400 audit(1773806966.461:1296): avc:  denied  { shutdown } for  pid=7355 comm="syz.5.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  204.472422][ T7359] netlink: 212916 bytes leftover after parsing attributes in process `syz.5.970'.
[  204.602027][ T7192] veth0_vlan: entered promiscuous mode
[  204.644717][ T7192] veth1_vlan: entered promiscuous mode
[  204.730379][ T7192] veth0_macvtap: entered promiscuous mode
[  204.762601][ T7192] veth1_macvtap: entered promiscuous mode
[  204.826748][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.866938][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.916140][ T3444] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.939157][ T7369] loop6: detected capacity change from 0 to 2048
[  204.949550][ T3444] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.978743][ T3444] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.983448][ T7369] EXT4-fs: Ignoring removed oldalloc option
[  204.999414][ T3444] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.014171][ T7378] loop5: detected capacity change from 0 to 128
[  205.053807][ T7378] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  205.079780][ T7378] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.145631][ T7369] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  205.191184][ T7392] netlink: 'syz.7.978': attribute type 4 has an invalid length.
[  205.206126][ T7369] System zones: 0-7
[  205.211057][ T7369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.235774][ T4823] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  205.268355][ T7361] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.971: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  205.343067][ T7361] EXT4-fs (loop6): Remounting filesystem read-only
[  205.355251][ T3315] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  205.416017][   T28] audit: type=1400 audit(1773806967.340:1297): avc:  denied  { bind } for  pid=7398 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  205.463290][ T7043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.573326][ T7415] loop7: detected capacity change from 0 to 512
[  205.753845][ T7415] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  205.792156][ T7415] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it
[  205.864418][ T7415] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.986: Corrupt directory, running e2fsck is recommended
[  205.881255][ T7415] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  205.900007][ T7415] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.986: corrupted in-inode xattr: e_name out of bounds
[  205.916803][ T7415] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  205.917087][ T7415] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.986: couldn't read orphan inode 15 (err -117)
[  205.927512][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  205.927533][    C0] EXT4-fs (loop7): initial error at time 1773806967: ext4_iget_extra_inode:5025: inode 15
[  205.927568][    C0] EXT4-fs (loop7): last error at time 1773806967: ext4_iget_extra_inode:5025: inode 15
[  205.937557][ T7423] loop2: detected capacity change from 0 to 512
[  205.947967][   T28] audit: type=1400 audit(1773806967.836:1298): avc:  denied  { ioctl } for  pid=7424 comm="syz.1.988" path="/newroot/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  205.965319][ T7415] loop7: lost filesystem error report for type 5 error -117
[  205.970613][ T7423] EXT4-fs: Ignoring removed nobh option
[  205.979962][ T7415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.032904][ T7423] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  206.047462][ T7423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[  206.106911][ T7423] EXT4-fs (loop2): orphan cleanup on readonly fs
[  206.136740][ T7192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.151096][ T7423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.989: bg 0: block 273: padding at end of block bitmap is not set
[  206.179285][ T7423] loop2: lost filesystem error report for type 5 error -117
[  206.179483][ T7423] EXT4-fs (loop2): Remounting filesystem read-only
[  206.191374][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  206.191396][    C0] EXT4-fs (loop2): initial error at time 1773806968: ext4_validate_block_bitmap:441
[  206.191417][    C0] EXT4-fs (loop2): last error at time 1773806968: ext4_validate_block_bitmap:441
[  206.283531][ T7423] EXT4-fs (loop2): 1 truncate cleaned up
[  206.296668][ T7433] usb usb1: usbfs: process 7433 (syz.5.992) did not claim interface 0 before use
[  206.307725][ T7423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  206.339358][ T7433] loop5: detected capacity change from 0 to 1024
[  206.377510][ T7433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.405523][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  206.457734][ T7433] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters
[  206.480998][ T7433] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1024 with max blocks 1 with error 28
[  206.497072][ T7433] EXT4-fs (loop5): This should not happen!! Data will be lost
[  206.497072][ T7433] 
[  206.512891][ T7433] EXT4-fs (loop5): Total free blocks count 0
[  206.522744][ T7433] EXT4-fs (loop5): Free/Dirty block details
[  206.531251][ T7433] EXT4-fs (loop5): free_blocks=2588934144
[  206.542649][ T7433] EXT4-fs (loop5): dirty_blocks=32
[  206.550538][ T7433] EXT4-fs (loop5): Block reservation details
[  206.557318][ T7444] netlink: 64 bytes leftover after parsing attributes in process `syz.2.993'.
[  206.558085][ T7433] EXT4-fs (loop5): i_reserved_data_blocks=2
[  206.591062][ T7444] lo speed is unknown, defaulting to 1000
[  206.599763][ T7444] lo speed is unknown, defaulting to 1000
[  206.607191][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.994'.
[  206.619889][ T7444] lo speed is unknown, defaulting to 1000
[  206.627072][ T7444] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  206.646084][ T7444] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  206.656938][   T30] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  206.661014][ T7444] lo speed is unknown, defaulting to 1000
[  206.686673][ T7444] lo speed is unknown, defaulting to 1000
[  206.697755][ T7444] lo speed is unknown, defaulting to 1000
[  206.707620][ T7444] lo speed is unknown, defaulting to 1000
[  206.776896][ T7444] lo speed is unknown, defaulting to 1000
[  206.788987][ T7444] lo speed is unknown, defaulting to 1000
[  206.791421][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.5.997'.
[  206.796627][ T7444] lo speed is unknown, defaulting to 1000
[  206.815421][ T7448] smc: removing ib device syU×
[  206.867200][   T28] audit: type=1400 audit(1773806968.697:1299): avc:  denied  { ioctl } for  pid=7459 comm="syz.1.998" path="socket:[20059]" dev="sockfs" ino=20059 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  206.968788][ T7458] loop7: detected capacity change from 0 to 2048
[  206.981113][ T7458] EXT4-fs: Ignoring removed oldalloc option
[  207.049345][ T7458] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  207.157476][ T7462] loop1: detected capacity change from 0 to 8192
[  207.178243][ T7471] loop6: detected capacity change from 0 to 512
[  207.187597][ T7462]  loop1: p1 < > p2 p4 < p5 >
[  207.192457][ T7462] loop1: partition table partially beyond EOD, truncated
[  207.194045][ T7458] System zones: 
[  207.201653][ T7471] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  207.205299][ T7462] loop1: p1 start 134217728 is beyond EOD, 
[  207.217651][ T7458] 0-7
[  207.217727][ T7471] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  207.224240][ T7458] 
[  207.237382][ T7462] truncated
[  207.244298][ T7462] loop1: p2 size 591360 extends beyond EOD, truncated
[  207.305800][ T7471] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1001: Corrupt directory, running e2fsck is recommended
[  207.329364][ T7462] loop1: p5 size 591360 extends beyond EOD, truncated
[  207.344414][ T7471] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  207.353265][ T7471] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1001: corrupted in-inode xattr: e_name out of bounds
[  207.354046][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1002'.
[  207.397823][ T7458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.414017][ T7475] team0: Device ipip0 is up. Set it down before adding it as a team port
[  207.433047][ T7471] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  207.433424][ T7471] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1001: couldn't read orphan inode 15 (err -117)
[  207.443318][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  207.443340][    C0] EXT4-fs (loop6): initial error at time 1773806969: ext4_iget_extra_inode:5025: inode 15
[  207.443382][    C0] EXT4-fs (loop6): last error at time 1773806969: ext4_iget_extra_inode:5025: inode 15
[  207.489200][ T7471] loop6: lost filesystem error report for type 5 error -117
[  207.519045][ T7471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.546887][ T7453] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.996: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  207.604324][ T7453] EXT4-fs (loop7): Remounting filesystem read-only
[  207.696063][ T7043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.729812][ T7192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.757771][ T7487] loop6: detected capacity change from 0 to 512
[  207.849340][   T28] audit: type=1400 audit(1773806969.623:1300): avc:  denied  { ioctl } for  pid=7461 comm="syz.1.999" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  207.930281][ T7487] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  207.985431][   T28] audit: type=1400 audit(1773806969.735:1301): avc:  denied  { getopt } for  pid=7491 comm="syz.2.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  208.184319][ T7499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1012'.
[  208.198269][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1013'.
[  208.213342][ T7504] loop7: detected capacity change from 0 to 512
[  208.307489][ T7504] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  208.337223][ T7504] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  208.362091][ T7504] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  208.392007][ T7504] System zones: 0-2, 18-18, 34-35
[  208.399561][ T7504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  208.432614][   T28] audit: type=1400 audit(1773806970.165:1302): avc:  denied  { watch watch_reads } for  pid=7503 comm="syz.7.1008" path="/9/file0" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  208.461385][ T7504] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.1008: path /9/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  208.489060][ T7504] FAULT_INJECTION: forcing a failure.
[  208.489060][ T7504] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.527776][ T7504] CPU: 1 UID: 0 PID: 7504 Comm: syz.7.1008 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  208.527811][ T7504] Tainted: [W]=WARN
[  208.527818][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  208.527830][ T7504] Call Trace:
[  208.527836][ T7504]  <TASK>
[  208.527842][ T7504]  __dump_stack+0x1d/0x30
[  208.527881][ T7504]  dump_stack_lvl+0x95/0xd0
[  208.527903][ T7504]  dump_stack+0x15/0x1b
[  208.527925][ T7504]  should_fail_ex+0x263/0x280
[  208.527972][ T7504]  should_fail+0xb/0x20
[  208.527994][ T7504]  should_fail_usercopy+0x1a/0x20
[  208.528018][ T7504]  _copy_to_user+0x20/0xa0
[  208.528089][ T7504]  simple_read_from_buffer+0xb5/0x130
[  208.528111][ T7504]  proc_fail_nth_read+0x10e/0x150
[  208.528221][ T7504]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  208.528365][ T7504]  vfs_read+0x1ab/0x7f0
[  208.528393][ T7504]  ? __rcu_read_unlock+0x4e/0x70
[  208.528413][ T7504]  ? __fget_files+0x184/0x1c0
[  208.528501][ T7504]  ? mutex_lock+0x57/0x90
[  208.528544][ T7504]  ksys_read+0xdc/0x1a0
[  208.528578][ T7504]  __x64_sys_read+0x40/0x50
[  208.528649][ T7504]  x64_sys_call+0x2886/0x3020
[  208.528673][ T7504]  do_syscall_64+0x12c/0x370
[  208.528757][ T7504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.528811][ T7504] RIP: 0033:0x7f3ac2bdcfce
[  208.528826][ T7504] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  208.528842][ T7504] RSP: 002b:00007f3ac1676fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  208.528931][ T7504] RAX: ffffffffffffffda RBX: 00007f3ac16776c0 RCX: 00007f3ac2bdcfce
[  208.528954][ T7504] RDX: 000000000000000f RSI: 00007f3ac16770a0 RDI: 0000000000000006
[  208.528969][ T7504] RBP: 00007f3ac1677090 R08: 0000000000000000 R09: 0000000000000000
[  208.528983][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.529096][ T7504] R13: 00007f3ac2e96038 R14: 00007f3ac2e95fa0 R15: 00007ffc5527b1d8
[  208.529120][ T7504]  </TASK>
[  208.808081][ T7192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.044005][   T28] audit: type=1400 audit(1773806970.736:1303): avc:  denied  { associate } for  pid=7530 comm="syz.1.1018" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  209.744595][ T7547] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1024'.
[  210.028086][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'.
[  210.050267][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1029'.
[  210.093905][ T7569] program syz.1.1035 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  210.113288][ T7569] loop1: detected capacity change from 0 to 512
[  210.192526][ T7574] loop2: detected capacity change from 0 to 128
[  210.450349][ T7583] loop7: detected capacity change from 0 to 256
[  210.485939][ T7583] FAT-fs (loop7): Directory bread(block 1285) failed
[  210.493569][ T7583] FAT-fs (loop7): Directory bread(block 1286) failed
[  210.500876][ T7583] FAT-fs (loop7): Directory bread(block 1287) failed
[  210.508364][ T7583] FAT-fs (loop7): Directory bread(block 1288) failed
[  210.724343][ T7583] FAT-fs (loop7): Directory bread(block 1285) failed
[  210.733995][ T7583] FAT-fs (loop7): Directory bread(block 1286) failed
[  210.744905][ T7583] FAT-fs (loop7): Directory bread(block 1287) failed
[  210.756810][ T7583] FAT-fs (loop7): Directory bread(block 1288) failed
[  210.896730][ T7585] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  210.990270][ T7585] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  211.023038][ T7583] usb usb1: usbfs: process 7583 (syz.7.1032) did not claim interface 0 before use
[  211.132603][ T3363] IPVS: starting estimator thread 0...
[  211.179034][ T7599] bridge0: port 3(macvlan2) entered blocking state
[  211.186081][   T28] audit: type=1400 audit(1773806972.737:1304): avc:  denied  { create } for  pid=7584 comm="syz.6.1038" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[  211.209182][ T7599] bridge0: port 3(macvlan2) entered disabled state
[  211.217636][ T7599] macvlan2: entered allmulticast mode
[  211.228917][ T7599] bridge0: entered allmulticast mode
[  211.236180][ T7595] IPVS: using max 2592 ests per chain, 129600 per kthread
[  211.247474][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'.
[  211.258578][ T7599] macvlan2: left allmulticast mode
[  211.264402][ T7599] bridge0: left allmulticast mode
[  211.306231][ T7607] set_capacity_and_notify: 2 callbacks suppressed
[  211.306258][ T7607] loop1: detected capacity change from 0 to 1024
[  211.325456][ T7607] EXT4-fs: Ignoring removed orlov option
[  211.463479][ T7602] EXT4-fs (loop2): 1 orphan inode deleted
[  211.475305][ T7607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.489566][ T3444] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  211.501691][ T7602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.519691][ T3444] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1
[  211.546030][ T3444] loop2: lost filesystem error report for type 5 error -117
[  211.546281][ T7602] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.589076][ T7602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.610105][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.729023][ T7043] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  211.914651][ T7631] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  211.927143][ T3392] IPVS: starting estimator thread 0...
[  211.936082][ T7629] xfrm1: entered promiscuous mode
[  211.961573][ T7634] loop5: detected capacity change from 0 to 512
[  211.975521][ T7630] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1047'.
[  211.999581][   T28] audit: type=1400 audit(1773806973.476:1305): avc:  denied  { bind } for  pid=7627 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  212.182860][ T7634] EXT4-fs: Ignoring removed nomblk_io_submit option
[  212.230901][ T7632] IPVS: using max 2592 ests per chain, 129600 per kthread
[  212.323031][ T7634] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1048: corrupted inode contents
[  212.382436][ T7634] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  212.400845][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  212.417758][    C0] EXT4-fs (loop5): initial error at time 1773806973: ext4_do_update_inode:5569: inode 15
[  212.427977][    C0] EXT4-fs (loop5): last error at time 1773806973: ext4_do_update_inode:5569: inode 15
[  212.523553][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'.
[  212.543797][ T7634] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  212.609730][ T7634] loop5: lost filesystem error report for type 5 error -117
[  212.643444][ T7634] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1048: corrupted inode contents
[  212.706468][ T7634] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  212.713422][ T7634] EXT4-fs error (device loop5): ext4_evict_inode:303: inode #15: comm syz.5.1048: mark_inode_dirty error
[  212.804162][ T7650] loop1: detected capacity change from 0 to 128
[  212.815414][ T7634] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  212.815861][ T7634] EXT4-fs (loop5): 1 orphan inode deleted
[  212.990387][ T7634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.073069][   T28] audit: type=1400 audit(1773806974.505:1306): avc:  denied  { getopt } for  pid=7653 comm="syz.6.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  213.237841][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.570934][ T7669] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.267089][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1060'.
[  214.352495][ T7676] loop1: detected capacity change from 0 to 512
[  214.420664][ T7676] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  214.481782][ T7674] loop5: detected capacity change from 0 to 8192
[  214.545144][ T7669] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.576685][ T3563]  loop5: p1 < > p2 p4 < p5 >
[  214.582666][ T3563] loop5: partition table partially beyond EOD, truncated
[  214.590548][ T3563] loop5: p1 start 134217728 is beyond EOD, truncated
[  214.603519][ T3563] loop5: p2 size 591360 extends beyond EOD, truncated
[  214.612439][ T7676] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1061: bg 0: block 104: invalid block bitmap
[  214.613356][ T3563] loop5: p5 size 591360 extends beyond EOD, truncated
[  214.631358][ T7676] loop1: lost filesystem error report for type 5 error -117
[  214.645880][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  214.660971][    C1] EXT4-fs (loop1): initial error at time 1773806975: ext4_validate_block_bitmap:432
[  214.668464][ T7676] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  214.671350][    C1] EXT4-fs (loop1): last error at time 1773806975: ext4_validate_block_bitmap:432
[  214.730751][ T7674]  loop5: p1 < > p2 p4 < p5 >
[  214.737282][ T7674] loop5: partition table partially beyond EOD, truncated
[  214.746537][ T7674] loop5: p1 start 134217728 is beyond EOD, truncated
[  214.752867][ T7676] loop1: lost filesystem error report for type 5 error -117
[  214.755108][ T7674] loop5: p2 size 591360 extends beyond EOD, 
[  214.759928][ T7676] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1061: invalid indirect mapped block 1 (level 1)
[  214.765547][ T7674] truncated
[  214.767270][ T7674] loop5: p5 size 591360 extends beyond EOD, truncated
[  214.868387][ T7669] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.887360][ T7676] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  214.894802][ T7676] EXT4-fs (loop1): 1 truncate cleaned up
[  214.957573][ T7676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.989369][ T7692] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1064'.
[  215.097432][ T7676] FAULT_INJECTION: forcing a failure.
[  215.097432][ T7676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.121425][ T7676] CPU: 1 UID: 0 PID: 7676 Comm: syz.1.1061 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  215.121458][ T7676] Tainted: [W]=WARN
[  215.121464][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  215.121534][ T7676] Call Trace:
[  215.121541][ T7676]  <TASK>
[  215.121602][ T7676]  __dump_stack+0x1d/0x30
[  215.121627][ T7676]  dump_stack_lvl+0x95/0xd0
[  215.121651][ T7676]  dump_stack+0x15/0x1b
[  215.121675][ T7676]  should_fail_ex+0x263/0x280
[  215.121818][ T7676]  should_fail+0xb/0x20
[  215.121838][ T7676]  should_fail_usercopy+0x1a/0x20
[  215.121870][ T7676]  _copy_to_user+0x20/0xa0
[  215.121901][ T7676]  simple_read_from_buffer+0xb5/0x130
[  215.121990][ T7676]  proc_fail_nth_read+0x10e/0x150
[  215.122017][ T7676]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  215.122080][ T7676]  vfs_read+0x1ab/0x7f0
[  215.122122][ T7676]  ? __rcu_read_unlock+0x4e/0x70
[  215.122145][ T7676]  ? __fget_files+0x184/0x1c0
[  215.122246][ T7676]  ? mutex_lock+0x57/0x90
[  215.122280][ T7676]  ksys_read+0xdc/0x1a0
[  215.122310][ T7676]  __x64_sys_read+0x40/0x50
[  215.122325][ T7676]  x64_sys_call+0x2886/0x3020
[  215.122425][ T7676]  do_syscall_64+0x12c/0x370
[  215.122448][ T7676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.122472][ T7676] RIP: 0033:0x7fa322a5cfce
[  215.122503][ T7676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  215.122519][ T7676] RSP: 002b:00007fa3214f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  215.122538][ T7676] RAX: ffffffffffffffda RBX: 00007fa3214f76c0 RCX: 00007fa322a5cfce
[  215.122552][ T7676] RDX: 000000000000000f RSI: 00007fa3214f70a0 RDI: 0000000000000005
[  215.122564][ T7676] RBP: 00007fa3214f7090 R08: 0000000000000000 R09: 0000000000000000
[  215.122649][ T7676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.122664][ T7676] R13: 00007fa322d16038 R14: 00007fa322d15fa0 R15: 00007ffe1fced738
[  215.122684][ T7676]  </TASK>
[  215.395243][ T7669] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.483867][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.543435][  T309] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.579457][  T309] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.607090][ T3444] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.682889][ T3444] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.700015][ T7711] loop2: detected capacity change from 0 to 1024
[  215.709994][ T7711] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  215.776228][ T7718] loop7: detected capacity change from 0 to 128
[  215.992645][ T7731] loop2: detected capacity change from 0 to 512
[  216.006204][ T7731] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  216.058222][ T7731] EXT4-fs error (device loop2): __ext4_iget:5378: inode #11: block 2: comm syz.2.1072: invalid block
[  216.112250][ T7731] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  216.112522][ T7731] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1072: couldn't read orphan inode 11 (err -117)
[  216.123390][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  216.123410][    C1] EXT4-fs (loop2): initial error at time 1773806977: __ext4_iget:5378: inode 11: block 2
[  216.123445][    C1] EXT4-fs (loop2): last error at time 1773806977: __ext4_iget:5378: inode 11: block 2
[  216.201421][ T7731] loop2: lost filesystem error report for type 5 error -117
[  216.202674][ T7731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.515913][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.559802][ T7772] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  216.559802][ T7772] The task syz.5.1075 (7772) triggered the difference, watch for misbehavior.
[  216.584947][   T28] audit: type=1326 audit(1773806977.798:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  216.649285][   T28] audit: type=1326 audit(1773806977.798:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  216.708190][   T28] audit: type=1326 audit(1773806977.798:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  216.734927][   T28] audit: type=1326 audit(1773806977.798:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  216.818198][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1080'.
[  216.823751][   T28] audit: type=1326 audit(1773806977.798:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  216.861561][   T28] audit: type=1326 audit(1773806977.798:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  216.890172][   T28] audit: type=1326 audit(1773806977.798:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  216.919938][   T28] audit: type=1326 audit(1773806977.817:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  216.956549][ T7789] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1081'.
[  217.105093][   T28] audit: type=1326 audit(1773806977.817:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  217.132252][   T28] audit: type=1326 audit(1773806977.826:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb19773c799 code=0x7ffc0000
[  217.348395][ T7791] loop6: detected capacity change from 0 to 2048
[  217.357863][ T7791] EXT4-fs: Ignoring removed oldalloc option
[  217.511425][ T7791] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  217.520917][ T7791] System zones: 0-7
[  217.529940][ T7791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.549922][ T7791] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.1082: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  217.606917][ T7793] loop1: detected capacity change from 0 to 2048
[  217.695052][ T7791] EXT4-fs (loop6): Remounting filesystem read-only
[  217.730411][ T7793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.912992][ T7835] loop5: detected capacity change from 0 to 128
[  217.953002][ T7043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.210824][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.334945][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1092'.
[  218.543830][ T7865] loop6: detected capacity change from 0 to 1024
[  218.600926][ T7865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  218.641751][ T7865] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.862566][ T7879] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1096: bg 0: block 112: padding at end of block bitmap is not set
[  219.145359][ T6123] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 6)
[  219.201324][ T6123] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  219.237278][ T6123] EXT4-fs (loop6): This should not happen!! Data will be lost
[  219.237278][ T6123] 
[  219.275499][ T7879] EXT4-fs error (device loop6): ext4_ext_remove_space:2954: inode #15: comm syz.6.1096: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  219.296546][ T7879] EXT4-fs error (device loop6) in ext4_setattr:5983: Corrupt filesystem
[  219.320341][ T7043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  219.452337][ T7902] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7019 sclass=netlink_xfrm_socket pid=7902 comm=syz.7.1101
[  219.478571][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1101'.
[  219.492986][ T7904] loop5: detected capacity change from 0 to 164
[  219.625823][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811abdfc00: rx timeout, send abort
[  220.105975][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1105'.
[  220.145313][ T7917] loop1: detected capacity change from 0 to 128
[  220.160397][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a630c00: rx timeout, send abort
[  220.175437][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811abdfc00: abort rx timeout. Force session deactivation
[  220.182824][ T7913] loop7: detected capacity change from 0 to 2048
[  220.259232][ T7913] EXT4-fs: Ignoring removed oldalloc option
[  220.274543][ T7920] netlink: 'syz.6.1108': attribute type 7 has an invalid length.
[  220.350942][ T7913] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  220.363287][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1108'.
[  220.429726][ T7913] System zones: 0-7
[  220.461870][ T7929] loop2: detected capacity change from 0 to 512
[  220.579908][ T7913] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.617073][ T7929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  220.671791][ T7929] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  220.707685][ T7907] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.1103: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  220.708811][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a630c00: abort rx timeout. Force session deactivation
[  220.759030][ T7907] EXT4-fs (loop7): Remounting filesystem read-only
[  220.777491][ T7944] loop5: detected capacity change from 0 to 512
[  220.830483][ T7944] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1112: bg 0: block 248: padding at end of block bitmap is not set
[  220.887202][ T7944] loop5: lost filesystem error report for type 5 error -117
[  220.887643][ T7944] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1112: Failed to acquire dquot type 1
[  220.901003][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  220.901030][    C1] EXT4-fs (loop5): last error at time 1773806981: ext4_validate_block_bitmap:441
[  220.997310][ T7944] loop5: lost filesystem error report for type 5 error -117
[  220.997919][ T7944] EXT4-fs (loop5): 1 truncate cleaned up
[  221.024786][ T7947] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1109: Failed to acquire dquot type 0
[  221.038664][ T7944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.072415][ T7944] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.479577][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  221.514008][ T4823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.531898][ T7192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.914806][ T7962] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1116'.
[  222.070305][ T7966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=7966 comm=syz.6.1119
[  222.176831][ T7964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1121'.
[  222.306132][ T3413] IPVS: starting estimator thread 0...
[  222.446987][ T7971] loop1: detected capacity change from 0 to 512
[  222.471512][ T7967] IPVS: using max 2592 ests per chain, 129600 per kthread
[  222.673749][ T7981] EXT4-fs: Ignoring removed nomblk_io_submit option
[  222.743999][ T7981] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.1125: corrupted inode contents
[  222.903202][   T28] kauditd_printk_skb: 1332 callbacks suppressed
[  222.903248][   T28] audit: type=1400 audit(1773806983.682:2645): avc:  denied  { read } for  pid=7979 comm="syz.7.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  222.968576][ T7981] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  222.984632][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  223.003334][    C0] EXT4-fs (loop2): initial error at time 1773806983: ext4_do_update_inode:5569: inode 15
[  223.015418][    C0] EXT4-fs (loop2): last error at time 1773806983: ext4_do_update_inode:5569: inode 15
[  223.135325][ T7986] 8021q: adding VLAN 0 to HW filter on device bond1
[  223.221320][ T7981] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  223.350332][ T7981] loop2: lost filesystem error report for type 5 error -117
[  223.351178][ T7981] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.1125: corrupted inode contents
[  223.566994][ T7995] netlink: 'syz.6.1129': attribute type 32 has an invalid length.
[  223.732455][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1129'.
[  223.748178][ T7981] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  223.748359][ T7981] EXT4-fs error (device loop2): ext4_evict_inode:303: inode #15: comm syz.2.1125: mark_inode_dirty error
[  224.530730][ T7998] set_capacity_and_notify: 1 callbacks suppressed
[  224.530750][ T7998] loop5: detected capacity change from 0 to 256
[  224.545803][ T7998] vfat: Unknown parameter 'shoPtname'
[  224.576647][ T8000] loop6: detected capacity change from 0 to 512
[  224.616274][ T7995] bond1: Setting coupled_control to off (0)
[  224.644787][ T8000] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  224.703221][ T7981] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  224.703657][ T7981] EXT4-fs (loop2): 1 orphan inode deleted
[  224.750765][ T8000] EXT4-fs (loop6): 1 truncate cleaned up
[  224.777996][ T8000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.801809][ T7981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.072055][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.284448][ T7043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.451821][   T28] audit: type=1400 audit(1773806987.021:2646): avc:  denied  { lock } for  pid=8023 comm="syz.2.1137" path="socket:[21513]" dev="sockfs" ino=21513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  226.490563][  T309] Bluetooth: hci0: Frame reassembly failed (-84)
[  226.548219][ T8033] loop2: detected capacity change from 0 to 128
[  226.922104][ T8040] netlink: 'syz.5.1143': attribute type 30 has an invalid length.
[  226.968757][ T8040] lo speed is unknown, defaulting to 1000
[  226.997984][ T8040] lo speed is unknown, defaulting to 1000
[  227.025056][ T8040] lo speed is unknown, defaulting to 1000
[  227.129077][ T8040] infiniband syU×: set down
[  227.135632][ T3363] lo speed is unknown, defaulting to 1000
[  227.151660][ T8040] infiniband syU×: added lo
[  227.211833][ T8040] RDS/IB: syU×: added
[  227.228912][ T8040] smc: adding ib device syU× with port count 1
[  227.246744][ T8040] smc:    ib device syU× port 1 has no pnetid
[  227.266742][ T3363] lo speed is unknown, defaulting to 1000
[  227.285932][ T8040] lo speed is unknown, defaulting to 1000
[  227.513562][ T8040] lo speed is unknown, defaulting to 1000
[  227.679815][ T8040] lo speed is unknown, defaulting to 1000
[  227.917962][ T8050] loop6: detected capacity change from 0 to 2048
[  227.941968][ T8040] lo speed is unknown, defaulting to 1000
[  227.955845][ T8058] loop1: detected capacity change from 0 to 2048
[  227.969711][ T8050] EXT4-fs: Ignoring removed oldalloc option
[  228.036435][ T8058] EXT4-fs: Ignoring removed oldalloc option
[  228.171910][ T8040] lo speed is unknown, defaulting to 1000
[  228.229445][ T8050] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  228.244395][ T8058] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  228.269226][ T8050] System zones: 0-7
[  228.279221][ T8050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.304941][ T8058] System zones: 0-7
[  228.315791][ T8058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.333017][ T8040] lo speed is unknown, defaulting to 1000
[  228.363774][ T8046] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.1144: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  228.437086][ T8046] EXT4-fs (loop6): Remounting filesystem read-only
[  228.482886][ T8040] lo speed is unknown, defaulting to 1000
[  228.506835][ T7043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.517269][ T8047] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1145: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  228.561370][ T8047] EXT4-fs (loop1): Remounting filesystem read-only
[  228.650745][ T8029] Bluetooth: hci0: command 0x1003 tx timeout
[  228.650823][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  228.747483][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.065409][ T8125] cgroup: No subsys list or none specified
[  229.142452][   T28] audit: type=1400 audit(1773806989.462:2647): avc:  denied  { mounton } for  pid=8117 comm="syz.7.1154" path="/39/file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  230.461775][ T8146] loop1: detected capacity change from 0 to 1024
[  230.537580][ T8146] EXT4-fs: inline encryption not supported
[  230.635166][ T8146] EXT4-fs: Ignoring removed bh option
[  230.709104][ T8146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.838739][ T8146] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.1157: Allocating blocks 449-513 which overlap fs metadata
[  230.942373][   T28] audit: type=1400 audit(1773806991.221:2648): avc:  denied  { write } for  pid=8144 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  231.055331][   T28] audit: type=1400 audit(1773806991.258:2649): avc:  denied  { read } for  pid=8144 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  231.083801][ T8146] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.1157: Allocating blocks 497-513 which overlap fs metadata
[  231.154313][ T8146] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.1157: Allocating blocks 497-513 which overlap fs metadata
[  231.168819][   T28] audit: type=1400 audit(1773806991.296:2650): avc:  denied  { ioctl } for  pid=8144 comm="syz.1.1157" path="socket:[21607]" dev="sockfs" ino=21607 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  231.207291][ T8146] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.1157: Allocating blocks 497-513 which overlap fs metadata
[  231.222383][   T28] audit: type=1400 audit(1773806991.380:2651): avc:  denied  { map } for  pid=8144 comm="syz.1.1157" path="/260/file1/blkio.bfq.io_serviced_recursive" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  231.245250][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1158'.
[  231.402274][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.460442][ T8194] loop7: detected capacity change from 0 to 128
[  231.475156][ T8194] FAT-fs (loop7): bogus sectors per cluster 0
[  231.475176][ T8194] FAT-fs (loop7): Can't find a valid FAT filesystem
[  231.476194][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1164'.
[  231.476465][ T8194] vlan0: entered promiscuous mode
[  231.477206][ T8199] FAULT_INJECTION: forcing a failure.
[  231.477206][ T8199] name failslab, interval 1, probability 0, space 0, times 0
[  231.477238][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: syz.1.1163 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  231.477269][ T8199] Tainted: [W]=WARN
[  231.477277][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  231.477331][ T8199] Call Trace:
[  231.477336][ T8199]  <TASK>
[  231.477344][ T8199]  __dump_stack+0x1d/0x30
[  231.477371][ T8199]  dump_stack_lvl+0x95/0xd0
[  231.477420][ T8199]  dump_stack+0x15/0x1b
[  231.477446][ T8199]  should_fail_ex+0x263/0x280
[  231.477471][ T8199]  should_failslab+0x8c/0xb0
[  231.477492][ T8199]  __kvmalloc_node_noprof+0x155/0x650
[  231.477554][ T8199]  ? rhashtable_init_noprof+0x30c/0x450
[  231.477602][ T8199]  rhashtable_init_noprof+0x30c/0x450
[  231.477628][ T8199]  nf_flow_table_init+0xe2/0x1d0
[  231.477650][ T8199]  nf_tables_newflowtable+0xcb5/0x13c0
[  231.477679][ T8199]  nfnetlink_rcv+0xc1e/0x1720
[  231.477775][ T8199]  netlink_unicast+0x5c0/0x690
[  231.477809][ T8199]  netlink_sendmsg+0x5c8/0x6f0
[  231.477921][ T8199]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.478007][ T8199]  ____sys_sendmsg+0x563/0x5b0
[  231.478038][ T8199]  ___sys_sendmsg+0x195/0x1e0
[  231.478100][ T8199]  __x64_sys_sendmsg+0xd4/0x160
[  231.478135][ T8199]  x64_sys_call+0x194c/0x3020
[  231.478243][ T8199]  do_syscall_64+0x12c/0x370
[  231.478269][ T8199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.478290][ T8199] RIP: 0033:0x7fa322a9c799
[  231.478305][ T8199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.478399][ T8199] RSP: 002b:00007fa3214f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.478417][ T8199] RAX: ffffffffffffffda RBX: 00007fa322d15fa0 RCX: 00007fa322a9c799
[  231.478431][ T8199] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000003
[  231.478443][ T8199] RBP: 00007fa3214f7090 R08: 0000000000000000 R09: 0000000000000000
[  231.478457][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  231.478471][ T8199] R13: 00007fa322d16038 R14: 00007fa322d15fa0 R15: 00007ffe1fced738
[  231.478522][ T8199]  </TASK>
[  231.478533][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'.
[  231.520183][ T8201] x_tables: duplicate underflow at hook 3
[  231.718157][ T8194] loop7: detected capacity change from 0 to 512
[  231.724273][ T8194] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  231.765679][ T8194] loop7: detected capacity change from 0 to 512
[  231.773400][ T8194] EXT4-fs (loop7): 1 orphan inode deleted
[  231.774060][ T8194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.062018][ T7192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.165569][ T8221] loop2: detected capacity change from 0 to 8192
[  232.169118][ T8230] loop1: detected capacity change from 0 to 512
[  232.196214][   T28] audit: type=1400 audit(1773806992.390:2652): avc:  denied  { connect } for  pid=8233 comm="syz.5.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  232.196466][ T8232] loop7: detected capacity change from 0 to 1024
[  232.242893][   T35] ==================================================================
[  232.243467][ T8230] EXT4-fs (loop1): inodes count not valid: 27 vs 32
[  232.256616][   T35] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages
[  232.281238][   T35] 
[  232.284197][   T35] read-write to 0xffff8881005f1838 of 8 bytes by task 8230 on cpu 0:
[  232.298254][   T35]  delete_from_page_cache_batch+0x569/0x750
[  232.305463][   T35]  truncate_inode_pages_range+0x1fe/0x7e0
[  232.312915][   T35]  truncate_inode_pages+0x24/0x30
[  232.319365][   T35]  set_blocksize+0x1ed/0x270
[  232.325028][   T35]  sb_set_blocksize+0x93/0x170
[  232.337618][   T35]  sb_min_blocksize+0x53/0x60
[  232.344469][   T35]  ext4_fill_super+0x39e/0x37c0
[  232.351948][   T35]  get_tree_bdev_flags+0x291/0x300
[  232.360622][   T35]  get_tree_bdev+0x1f/0x30
[  232.366016][   T35]  ext4_get_tree+0x1c/0x30
[  232.373288][   T35]  vfs_get_tree+0x57/0x1d0
[  232.380496][   T35]  do_new_mount+0x288/0x8d0
[  232.388242][   T35]  path_mount+0x4d0/0xbc0
[  232.397647][   T35]  __se_sys_mount+0x28c/0x2e0
[  232.406784][   T35]  __x64_sys_mount+0x67/0x80
[  232.416658][   T35]  x64_sys_call+0x2d61/0x3020
[  232.427051][   T35]  do_syscall_64+0x12c/0x370
[  232.434232][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.444352][   T35] 
[  232.447146][   T35] read to 0xffff8881005f1838 of 8 bytes by task 35 on cpu 1:
[  232.459979][   T35]  nr_blockdev_pages+0x7e/0xd0
[  232.467098][   T35]  si_meminfo+0x87/0xd0
[  232.474089][   T35]  update_defense_level+0x47/0x5d0
[  232.481292][   T35]  defense_work_handler+0x1f/0x80
[  232.489463][   T35]  process_scheduled_works+0x513/0xa10
[  232.497878][   T35]  worker_thread+0x58a/0x780
[  232.504062][   T35]  kthread+0x22a/0x280
[  232.509095][   T35]  ret_from_fork+0x150/0x360
[  232.515110][   T35]  ret_from_fork_asm+0x1a/0x30
[  232.521032][   T35] 
[  232.524165][   T35] value changed: 0x0000000000000003 -> 0x0000000000000000
[  232.533518][   T35] 
[  232.536978][   T35] Reported by Kernel Concurrency Sanitizer on:
[  232.546718][   T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/1:1 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  232.560044][   T35] Tainted: [W]=WARN
[  232.565322][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  232.580483][   T35] Workqueue: events_long defense_work_handler
[  232.588717][   T35] ==================================================================
[  232.605986][ T8232] EXT4-fs: inline encryption not supported
[  232.622642][ T8232] EXT4-fs: Ignoring removed bh option
[  232.623575][ T3563]  loop2: p1 < > p2 p3 < p5 p6 > p4
[  232.653589][ T8232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.672922][ T8232] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1174: Allocating blocks 449-513 which overlap fs metadata
[  232.673571][ T3563] loop2: partition table partially beyond EOD, truncated
[  232.743185][ T3563] loop2: p1 start 100663296 is beyond EOD, truncated
[  232.752943][ T3563] loop2: p2 size 134217732 extends beyond EOD, truncated
[  232.768796][ T3563] loop2: p4 size 14876672 extends beyond EOD, truncated
[  232.783743][ T3563] loop2: p5 size 134217732 extends beyond EOD, truncated
[  232.802457][ T3563] loop2: p6 size 14876672 extends beyond EOD, truncated
[  232.833712][ T8221]  loop2: p1 < > p2 p3 < p5 p6 > p4
[  232.875441][ T8232] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1174: Allocating blocks 497-513 which overlap fs metadata
[  232.903515][ T8221] loop2: partition table partially beyond EOD, truncated
[  232.934378][ T8221] loop2: p1 start 100663296 is beyond EOD, truncated
[  232.946944][ T8221] loop2: p2 size 134217732 extends beyond EOD, truncated
[  232.991800][ T8232] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1174: Allocating blocks 497-513 which overlap fs metadata
[  233.019198][ T8232] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1174: Allocating blocks 497-513 which overlap fs metadata
[  233.043088][ T8221] loop2: p4 size 14876672 extends beyond EOD, truncated
[  233.054242][ T8221] loop2: p5 size 134217732 extends beyond EOD, truncated
[  233.067945][ T8221] loop2: p6 size 14876672 extends beyond EOD, truncated
[  233.180015][ T7192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.233311][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  233.252576][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  233.274803][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  233.293944][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  233.321979][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  233.358138][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  233.358524][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  233.374006][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  233.387228][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  233.409876][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory