last executing test programs: 6.387695425s ago: executing program 0 (id=4799): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x2c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0xe, @random="f8d9c3537204b0b478308bf7aa17"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x53, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567a5"}, {0xdd, 0xed, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9c754eed87a13afba49d41c937e4ca94a08a309610d242d5cbf137de2b925638e09c39b763e4a082166607fd4c968d24976e5be28647bed3b019a2fa62a91151d6aaf1128472357b37ed798d3571d47ec939a465c9cca298e134ee90549d6b48c137137ff93887da8bde8c56ba608687a523e86df18683f"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x22, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.921509646s ago: executing program 0 (id=4803): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x2a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x281, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x16, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x4f, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a"}, {0xdd, 0x52, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567"}, {0xdd, 0x76, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x25, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a4ffd4b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.816471539s ago: executing program 0 (id=4806): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x208, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1e5, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x17, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7ef"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x6b, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a468e407d653243c60d2b68860d62aed527c8ada6bd87dc42f8543857"}, {0xdd, 0x40, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41c"}, {0xdd, 0x6, "6b6f3c179503"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x6, "059d8cb3b112"}, {0xdd, 0x6, "cf80b8f78e71"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.77790201s ago: executing program 0 (id=4807): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200883, &(0x7f0000001400), 0x0, 0x559e, &(0x7f0000006bc0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_clone(0xaca80400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000100)={0x9, 0x0, 0x201b, 0xc2fd, 0xffffffff, {0x7, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) tgkill(r2, r1, 0x1d) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 4.832862643s ago: executing program 0 (id=4822): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x524, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4f8, 0x2, [@TCA_BPF_ACT={0x4f4, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x19c, 0x5, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x81, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64e"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xdc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x65, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x17c, 0x13, 0x0, 0x0, {{0x7}, {0x154, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648b"}}, @TCA_IPT_TARG={0x3d, 0x6, {0x8, 'security\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x524}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.289527806s ago: executing program 0 (id=4823): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5bc, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x404, 0x2, [@TCA_BPF_ACT={0x400, 0x1, [@m_xt={0xac, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x79, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xe, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x9b6, 0x7, 0x4, 0x5}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x120, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xe5, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437cedd6c47eeb235ad519ca418c057a0c2e2efdad1db459ffde7207d4b45"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xcc, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x7c, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x49, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd9061a328ed0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x174, 0x1, [@m_simple={0x78, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4b, 0x6, "d35262dd0c45c89a36560c0300000000000000c4e5b36b25696b1c64c4f2c071726e7e7a6f7e44147f5eedb77cb5622cdc82c44a5868091abd00003861db1e4cc0646efeac3d23"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf8, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ')&%!J*).,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40}}, @TCA_DEF_DATA={0x11, 0x3, '/dev/ttynull\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x0, 0x37, 0x80000000}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x69, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a9c4c25107289c2b66110cdb18b8d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.167260929s ago: executing program 32 (id=4823): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5bc, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x404, 0x2, [@TCA_BPF_ACT={0x400, 0x1, [@m_xt={0xac, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x79, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xe, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x9b6, 0x7, 0x4, 0x5}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x120, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xe5, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437cedd6c47eeb235ad519ca418c057a0c2e2efdad1db459ffde7207d4b45"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xcc, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x7c, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x49, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd9061a328ed0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x174, 0x1, [@m_simple={0x78, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4b, 0x6, "d35262dd0c45c89a36560c0300000000000000c4e5b36b25696b1c64c4f2c071726e7e7a6f7e44147f5eedb77cb5622cdc82c44a5868091abd00003861db1e4cc0646efeac3d23"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf8, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ')&%!J*).,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40}}, @TCA_DEF_DATA={0x11, 0x3, '/dev/ttynull\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x0, 0x37, 0x80000000}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x69, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a9c4c25107289c2b66110cdb18b8d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.71963669s ago: executing program 3 (id=4834): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x524, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4f8, 0x2, [@TCA_BPF_ACT={0x4f4, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x19c, 0x5, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x81, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64e"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xdc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x65, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x17c, 0x13, 0x0, 0x0, {{0x7}, {0x154, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648b"}}, @TCA_IPT_TARG={0x3d, 0x6, {0x8, 'security\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x524}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.673091621s ago: executing program 3 (id=4835): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="b768eb20", 0x4}], 0x1, 0x0, 0x0, 0x8010}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000280)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20, 0x76}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040850) 3.560782144s ago: executing program 3 (id=4836): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x56ce, &(0x7f0000000000)={0x0, 0x12bf, 0x8, 0x3, 0x1d0}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000380)) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x266b, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, &(0x7f00000007c0)={0x0, 0xffff, 0x70, &(0x7f0000000740)={0x70}}) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000840)=@ublk_ctrl_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x49f, 0x0, 0x0, '\x00', @start_dev_cmd={r7, 0xffff, 0x0, 0x0, r1}}) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.631473436s ago: executing program 4 (id=4843): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x284, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x268, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x4c, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf"}, {0xdd, 0x52, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567"}, {0xdd, 0x76, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x25, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a4ffd4b"}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.531614569s ago: executing program 4 (id=4844): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f', 0x33) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001}}) 1.942816303s ago: executing program 1 (id=4849): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x2a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x281, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x16, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x4f, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a"}, {0xdd, 0x52, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567"}, {0xdd, 0x76, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x25, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a4ffd4b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.830491496s ago: executing program 1 (id=4850): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x56ce, &(0x7f0000000000)={0x0, 0x12bf, 0x8, 0x3, 0x1d0}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000380)) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x266b, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, &(0x7f00000007c0)={0x0, 0xffff, 0x70, &(0x7f0000000740)={0x70}}) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000840)=@ublk_ctrl_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x49f, 0x0, 0x0, '\x00', @start_dev_cmd={r5, 0xffff, 0x0, 0x0, r0}}) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.431511215s ago: executing program 4 (id=4851): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x208, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1e5, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x17, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7ef"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x6b, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a468e407d653243c60d2b68860d62aed527c8ada6bd87dc42f8543857"}, {0xdd, 0x40, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41c"}, {0xdd, 0x6, "6b6f3c179503"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x6, "059d8cb3b112"}, {0xdd, 0x6, "cf80b8f78e71"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.27949176s ago: executing program 2 (id=4852): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x260, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x239, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x16, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x6, "ccff396922e1"}, {0xdd, 0x53, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567a5"}, {0xdd, 0x76, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x25, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a4ffd4b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.216877221s ago: executing program 4 (id=4853): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x2c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0xe, @random="f8d9c3537204b0b478308bf7aa17"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x53, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567a5"}, {0xdd, 0xed, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9c754eed87a13afba49d41c937e4ca94a08a309610d242d5cbf137de2b925638e09c39b763e4a082166607fd4c968d24976e5be28647bed3b019a2fa62a91151d6aaf1128472357b37ed798d3571d47ec939a465c9cca298e134ee90549d6b48c137137ff93887da8bde8c56ba608687a523e86df18683f"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x22, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.204851241s ago: executing program 2 (id=4854): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x284, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x268, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x4c, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf"}, {0xdd, 0x52, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567"}, {0xdd, 0x76, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x25, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a4ffd4b"}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.178452682s ago: executing program 4 (id=4855): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1ee4ae3861a5059b8a5000000090780000d86384d7a3ccdbe9ab862acdc4a461016be7e0e8a6dc9b6ee627248aad1c7b83ca77798e6f562e831a17c902ffdfaa537e63ee82081ffbdc7d094dc678a6207724d020342d5873b36d6e7a7af2cd35318dafb6fb6b4a54eea2230493f4bc74fcb3b9cc14ba4acb"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f', 0x33) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001}}) 1.077352474s ago: executing program 3 (id=4856): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x524, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4f8, 0x2, [@TCA_BPF_ACT={0x4f4, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x19c, 0x5, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x81, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64e"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xdc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x65, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x17c, 0x13, 0x0, 0x0, {{0x7}, {0x154, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648b"}}, @TCA_IPT_TARG={0x3d, 0x6, {0x8, 'security\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x524}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 943.846987ms ago: executing program 1 (id=4857): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000035d423452b3c4c97e0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r1, 0x1, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x1, 0x0, @val=@perf_event={0x9}}, 0x18) syz_socket_connect_nvme_tcp() openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") (async) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000035d423452b3c4c97e0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r1, 0x1, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x1, 0x0, @val=@perf_event={0x9}}, 0x18) (async) syz_socket_connect_nvme_tcp() (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) (async) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) (async) write$UHID_INPUT(r2, &(0x7f0000000540)={0x8, {"8720bce73d11ba93931ad6d80deb1c1d18b8fca0e4a2bafcf305a92451f355a7442405dc7aabf57816117a75a3f8996fc2daf2b353aea19c0adee3c7a5cc81b2047b2fa49574734e0b865df95122b3e39123eaedb860bb9d04e401413c85db09b96af903d0cc1c7ec1546277e211f24d566b360b1bf15db6c11360cb7b213cb3eab516ceb704e3b6de825ca609197cf5bdd5439cd5d10eefd29a5e474b8d9715ef983a233489cda83f83ccebc9cc15ed33de8278312fc3991fa8ecbf6ca68c8bf3c6ecb9fb3716dd5aa31c0f1cace2dd6f2bf775d97b9c644daa8118f488c5a0b17b6b214f4f8e95efe82667b866d97bebef3715b7f1498d79c31e8b1edbdae73bec0df8866b3b0c4c49ede1524dcd3756a08badef3d22dbd51bba21b9b51b92158be4106b7d2199420c1733d712d6ae1a2c39ce954568c8b11616c7ec01b3af9f318f4337e0c82ed8242fe46604a5d26fe26a64bda013636e04d4fc8c3da14b24ba21e6c34f40574946ad4377461d42c9de3c3e5e1fe82bbc25d852cb0f95610c67fab34fa4caf1fe9dc7557ea69d799b9e4c22fa17655109cbb6735a84110e03a45f0020eb209a8a020c141eaa278e686dcccc314817cf153471477a7b62283868d345c13f98fa7e424533289c68b57751e2c79c032902f28172b1c620f85983ad226f98dfe62b836d98fc49dda5c2e62d28984f7249c45f6dc2ff67d211e9e567bcaeca41a3bb3baa2db85496c5eb5429d633a611460b231922ceaa4effda77a487cef657b3d07b8a253476520f7136c2f7c4cdc2d676e244cf72fca8464564a8940962b8e27faae3d7e96017ddc65326244e846e9c8d48f918efd4f9d02df22ccaa8767833a67e45dde2e8a85ab903205b06897d4c335df26afe37cdee6267cebbb7ea5497ff3c369b7b4b647f573cff1a4d62f040d4d0e2656c220059a1f4cb43e2966e6571d767c508950e68a231ee921761db89247e8b44499afab4e0f862719c994ec6d82477ac54596dc8b8936f74ee361ff6590ddf0ec055654f536a8d2099cb7fb907854f277cca4316b62fc749f841a7ceb9c5e2b4e389e0f3945b21505c211c1b89472c588ccc7dbf44c868e0eede8ddac264286a995ee021b8b240e3d16bbdeea0ae40283f7a8d2c6e056e19614992bc007afca31abc3cf2c0eca1e446135b58c65f08ac88d8d62331359cbe4bfbac455c42c96ef5c53aff19b2611eaab9c07ae9d636da6a3da23026ce7ddabae5985308c238669697033b6f44e831c783aa178e3f752642110d7c088ea19d51fc521d491553fe877cfe141e89cb42522e2b1f19f8ffc6cc70c8d2c8845f2f0182a9d2d475ac63514537598c5d53d55566a133d26a2bcfbc90b83c7dbf35a1cfbb827a82fefcc97764eeced41f8e23c3920010f4f7d4348c67f2deeaf1b7af1ab031d1c3d23cc28100dc51195b8ec86ae3624159bcd1f7d38db06f5c0227ed82a538ec30bdb973d3072ea5f8ad9bada22e76875905a95b9336c796980994087fd494c0e12221f2ef6073e6af1b28deb14030be406e12f8ecf861fed8ed153933b95c1fb7332208145ae9c00998f24b898c9f6880076f81c38c8a2654428994c4bb00cc9e02f90484b93c7ca7cb564bd0129869cf93e76cdde9a67571323bacfe8a5a21f9d30fe722ea5753e1b123aaff09dfd1c72dec3d5e9f59c56744ad19c7c0cbb8681211ef9bc540f6c5f54f07a579b6505019538e4bfa9ff05dadb8595ed2b2d591c5d52a07897e1aa34b7aec8b245381b6b9997715dce3460bd43adc86b4d3d5e1d65d40578dc094d2b53599468916a2a82a97445890697e8307eda529456d86c0e5011b91cd429068be73c387d16b1110a7690dcd40cfe73968218ae4c224d09538136ab0f8851a0026292dd4ff8e9c4530499dbd32762a1577652020590fe9832223f681ccebf65af93e725b4fd4e567e38caed4911a2e897179e029166762cca87109e0a3ad43d894255aff81aaa07bdf2b387f11e5ab8216e4b89563ce99e4cc36022819db6762131682c05ae22080027f97c0f90e88887d706ea6ac4e3b14909ce202989f7378c86258d3883bb58e9eed7c2c3ef567c443cf09ed3ecdbe128880e9264f350f3545de80dd09ea411506eb173b150687a944e9cbe9dd419d970ab720f314f101cfd6168c0ab1d3eccee09d29b11f5f891832e5361cef5bea18548de9898feaf6dcd7dc420ccb783ff1ebb5bdab490abf509d5f437f094bee0f0c71e171bb0fa406c78be41ce5d319c7696da0d1a3d6700cb8d544de06d0526f82f3cb9e99848f85a340cf04829a68a65519f684323c47f881e7c117933c05a320575fb5033713dc241e1b0f9f9ec0677604043fa83a464c6c9da52f94428bc39cd21b98f3f895c7aaf496f8c5210e07f7c422fa8a18b455784d493b1d799a54a20a93f1a9b917207bc8f9fb4514cf4283125f6e8cbff3b6015d2714d355dab888a3723569ba9d331b8f9f1c85a79c52faf55dd3cdc5a74171f2dd0a382be31424ed0e029268e739ccefe8d4c8af08ca834715c04dd958467df0de4dd5693bffdfcf39eef215257e68398bb0d240ab046be3d9e4298047a394313b15bfa10a05c716bc472963ae0bca8aea67d38b02a8a98486be55011a7841a41199f0bab4f024aac42d9237a92642521ccdf4a8797c07c64b5b081807967249691571095a4ea770aac4c6c2a4066b446e9383a54cad0d2e24a084ea717bfdaf03dd346f34f97ae0b4fcc5c33a6c769a72a4be3088bb0c3a8f4d0f1d0d0d2ccb14ef07afa5312aed46efe58172ae93eaa8991002e17de051de250bd84288995cf11062a7e078b48df3031ccf9788dc5c5ca9be74d0bae3c023831b143cb317d32403ea1e8b6888fc1e76ae3427bb57f3b337ec59ace594bcad08101af165a93b95942304c499666649ae5fc15221a9d5c367898bf8daec5cfc77e45ada684d7226c97e915234845509281938b58d82140e440001b610f1de51d24db10cf2f49673c8a870220c5fca789aaf56d1f18fceaec26ddd89948e4d5ce48d1b50db0b796e0b29dfc1cd0af050db45fef4de73b556358eb1fb4603651bf4cf86124266aec478de72b5591eeea0e0af29f13906e2cbe8b04e379e661ab258d335cff342bb787874109f0aaed8d929d19ea2b14dfccf968a7056fa4a2171782b2d79f39655023cd516a602d53f06e25d1eb467a7b56b91af230e567cb8cc9b3d631c0425818cf1eb49376d8cfe59167bb1dce7a8aecbea25f926832dabf6a88f6389a008a02fd0b187ad4ff028ad57c1273b6d2da236dba8f34747acc6d5d66d5277547fd0e996bc6443807d5e916631818df6f7ed8eac711ae34c29e228d6edc17a26805f1f4770e316dafe00e0e43a35ead9e2dd6b3c78b03ba654758ac574089d4ee16d1c842ca8dc6964c73c4efab299b8159629414bd5e32db0e4d4795b8da1890faecb15d698b6c25dc0ac45577d91ddcc50169703e11a5edda5acf5e2caa132dd187bbca3643e5b492b47448f7d5b12455e896d20ed8da6d0fa33e142d93515fbb71140a0e5bffd6bf5e6383bcf34e53805e886e121c3b330f9df8bcccf9ab216aa92a001e31d893731b5915e78cf939e97264a21730543a81c4c683489be08b2bd9ed399ca2b5170749adc2901121d8bb13a40d292058da0cf4db93004b0d5c91fb39983896bfbd59fcaf2a605da53b1dc7aa80a8d1e2641a0e2ad7b6e35a5c91cf079cbfd836c494758d70a157dd11a33970ca11cc9aa96ab08f1ff2c9a931478718e413c4aa20c9d23ea87c7294624a5d5a50f2582c9c5613e20a8d51ae72b3c60a7d39e096782ba0ceeb2111b249e1ef3cb178ca8a8a0ae92faf7646f86734019be0825ee792955405c4cb3bc31018cdbe8992cf9cca9a510d460df59668bb46ab24ce2bb989721d579df37b8a8cb51ed9ff19b2bc26287e9b5be4e119a94fd7dc7f8977be1a2d1da8fb4bd08a094e29243ee388184a3e98988c72e6b124e170f9a5ac17eb41b81451e07d63a0c0481542844f0c57572e2edc60aa3f5a8728ded0f567895dacda6b1abd8e56b578b35b062bd92e0e8b4a13b0755c20a00d53dcd66f141fbaa259bb65e5e5755de5395061673f180b0173ff0e83b94b586724a0348934e6cbad24403ca183a99c7364b531a828983f668e274913dfe1ba9170e3c910952a6002857c770a236cb11d5b9e9d1c2b6eb3249ab90fab02c389b84bd6663af2d67a6a88193cd2fe13d5263df7d916f44cb42eeb41bb564ea029e9f1d10079176965e94e5f30a87fa986efdb4f5b6872f0f6c7c6c9a310781c0c8579767c337a85d88830fcd41324f2bdeebaa9481a912f659874fc7bc5a56f0e6b8109e36a72d93caafeb2e18052241b171d7843088e8684eaf4f6288f83dec36c316c2f40e03ee316b581a28963e882ead5b13cf31192cc5d4ad317d7a729782021dd5b245da1b171969339a802455a998fb87efdaf785a3c67204eae71d5f089bf169a0e09e43f124b21c1ae94db14137ac8bd6db98dc0c8920fe33cec81063e7e9e5d7a4ed84589632d41a971852cd8591b6461f2879e7a00b0542dfd8db952dc533b4cf4523347aa2839b0f2dfe52ce1bc9078079d7fe52b17292fac97552cad46ebecdb9e6d8e0129ea27c8e30264374c3202d14405cbfd3069cdfa1e1c4ab5d5cc85491979226895a4d4222a55fe74a627e50e051fe371509c4a6a2d59f1e04689da7978c1faec8ab136f1687f17293f83863a1fa3d6fc0c08ef85e89cc65db89d0124480ff7084c842bfb0e5b887b0b5b38f39c651b8540ed977a8d91c2b2b220c67acfbce97ae3de63b82132c649561c4eac75ebe00a2f2fbc9ec37a3c0a896e2b058aba1250c910bc122296489ef1aae90a614b5d3117827bddff624ce25bbe14f7073aab33acbd7193a209b98984ca26984d539fad13a29dca218270a52f8a8881ad29f835669649a35b62e2b34dba6a650f53b746b8abe30c5b3719dd2645c56ec33aa43557b8bcd9490ab9d1eeff04751b04fbb54a4dba1983747347f06cd72d31468b48743a8d3aab3b67d942f1e7f40c3e13db7830b7a7abd2a1c4dad12abb886f980cae338a6e3f4397e9b95d7e173da7bd3ca7d0ffd71b4270f829b8aaef9ff8e2263ca478991cd87815a92110022b1fd6b0bb6d0c380783d4fef74ed5cedc2496086964028a386c4c6c0accc1e5d05831e5e6a973c2b69cc3c03cb09f27e920eaa2fbbf81e0a9da87b45d81ecb19a75af087948948ae58ed7b4be328b17ed77f0eee3a0e66460da380e2f5edfb7b364757e5b84649b1bd23b96e4a917d849befa22e6cba4e324bb0229241d29f0ebe991287415181fa3d512095d4bc45e9411aed9185740ce106eb1d28a840f533f8bccb42894a54ddf7789583f593deccaa46828f6f3cf3f365bcd9ebc625f5ecbbb474b9ca2381ae40e17cb148ff64a2743e84c153933978cd8c45e6552e8b83b6d9abf25cdd021b36bf0eed5a6291c84bbb8e726dfa9e2e98f89bd2a2c89eee56bf622900aae96a5579e5dd23e7a297b4d886c658f9f269df6087b26dc5cdadebfa5f6a4a3ce3fe43a5c82f5d5464aa7cb44bc972daadc41ddb60353b2eaaecbb02ce6abeb457a7d602840515eb634b1817dfb9ca53392e66e09d30ff736278cf90d41cc7b2b63f6338cfa3ee5c99f74acef594cbf3c95ddd22b81a333459db439c92952935a685d60c58b875f22a4bafe3a5a3930374ab5fc7413b436462599f152c66b843530206d510d90af7b168ddacf79619a385747990", 0x1000}}, 0x1006) (async) 824.6323ms ago: executing program 2 (id=4858): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newspdinfo={0x34, 0x24, 0x200, 0x70bd25, 0x25dfdbfd, 0xff, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x68}}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008804}, 0x800) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r1, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) 765.819932ms ago: executing program 1 (id=4859): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x2a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x281, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x16, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x4f, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a"}, {0xdd, 0x52, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567"}, {0xdd, 0x76, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x25, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a4ffd4b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 765.313942ms ago: executing program 3 (id=4860): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="21d3e203820faef6000000cd3292eaecaa7854c7bee77eeb", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 616.788475ms ago: executing program 2 (id=4861): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4fc, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4d0, 0x2, [@TCA_BPF_ACT={0x4cc, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x19c, 0x5, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x81, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64e"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x134, 0x13, 0x0, 0x0, {{0x7}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}, @TCA_IPT_TARG={0x3d, 0x6, {0x8, 'security\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 616.267125ms ago: executing program 1 (id=4862): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x208, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1e5, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x17, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7ef"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x6b, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a468e407d653243c60d2b68860d62aed527c8ada6bd87dc42f8543857"}, {0xdd, 0x40, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41c"}, {0xdd, 0x6, "6b6f3c179503"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x6, "059d8cb3b112"}, {0xdd, 0x6, "cf80b8f78e71"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 557.341777ms ago: executing program 1 (id=4863): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x260, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x239, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x16, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x6, "ccff396922e1"}, {0xdd, 0x53, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567a5"}, {0xdd, 0x76, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x25, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a4ffd4b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 540.603657ms ago: executing program 2 (id=4864): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x2c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0xe, @random="f8d9c3537204b0b478308bf7aa17"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x53, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567a5"}, {0xdd, 0xed, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9c754eed87a13afba49d41c937e4ca94a08a309610d242d5cbf137de2b925638e09c39b763e4a082166607fd4c968d24976e5be28647bed3b019a2fa62a91151d6aaf1128472357b37ed798d3571d47ec939a465c9cca298e134ee90549d6b48c137137ff93887da8bde8c56ba608687a523e86df18683f"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x22, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 517.793968ms ago: executing program 3 (id=4865): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f', 0x33) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001}}) 364.800922ms ago: executing program 2 (id=4866): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x56ce, &(0x7f0000000000)={0x0, 0x12bf, 0x8, 0x3, 0x1d0}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000380)) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x266b, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, &(0x7f00000007c0)={0x0, 0xffff, 0x70, &(0x7f0000000740)={0x70}}) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000840)=@ublk_ctrl_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x49f, 0x0, 0x0, '\x00', @start_dev_cmd={r7, 0xffff, 0x0, 0x0, r1}}) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 0s ago: executing program 4 (id=4867): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x56ce, &(0x7f0000000000)={0x0, 0x12bf, 0x8, 0x3, 0x1d0}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000380)) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x266b, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, &(0x7f00000007c0)={0x0, 0xffff, 0x70, &(0x7f0000000740)={0x70}}) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000840)=@ublk_ctrl_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x49f, 0x0, 0x0, '\x00', @start_dev_cmd={r5, 0xffff, 0x0, 0x0, r0}}) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): teback_tmp:0kB kernel_stack:9092kB pagetables:2564kB sec_pagetables:0kB all_unreclaimable? no [ 622.065648][T16040] Node 0 DMA free:3076864kB boost:0kB min:20660kB low:25824kB high:30988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 622.067896][T16042] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.4066: iget: bad i_size value: 2533274857506816 [ 622.069894][T16040] lowmem_reserve[]: 0 0 3550 3550 3550 [ 622.073050][T16040] Node 0 Normal free:2637188kB boost:0kB min:24392kB low:30488kB high:36584kB reserved_highatomic:0KB active_anon:44244kB inactive_anon:0kB active_file:58284kB inactive_file:9344kB unevictable:3072kB writepending:1092kB present:5242880kB managed:3639884kB mlocked:0kB bounce:0kB free_pcp:6208kB local_pcp:4252kB free_cma:0kB [ 622.078604][T16040] lowmem_reserve[]: 0 0 0 0 0 [ 622.079456][T16040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 622.079576][T16042] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.4066: iget: bad i_size value: 2533274857506816 [ 622.081874][T16040] Node 0 Normal: 767*4kB (UME) 1077*8kB (UME) 796*16kB (UME) 187*32kB (UM) 337*64kB (UME) 151*128kB (UME) 87*256kB (UME) 64*512kB (ME) 50*1024kB (UME) 29*2048kB (UM) 586*4096kB (UM) = 2637188kB [ 622.087723][T16040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 622.089206][T16042] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.4066: iget: bad i_size value: 2533274857506816 [ 622.089852][T16040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 622.093959][T16040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 622.095606][T16040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 622.097158][T16040] 23874 total pagecache pages [ 622.098012][T16040] 0 pages in swap cache [ 622.098779][T16040] Free swap = 124484kB [ 622.099597][T16040] Total swap = 124996kB [ 622.100600][T16040] 2097152 pages RAM [ 622.101334][T16040] 0 pages HighMem/MovableOnly [ 622.102182][T16040] 417133 pages reserved [ 622.103035][T16040] 8192 pages cma reserved [ 622.103748][T16040] 0 pages hwpoisoned [ 622.193632][T12820] EXT4-fs (loop1): unmounting filesystem. [ 622.216065][ T4387] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 622.230369][ T4387] (NULL device *): queue 0 connect admin queue failed (-111). [ 622.231753][ T4387] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 622.236006][ T4387] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 622.312871][T16063] overlayfs: missing 'lowerdir' [ 622.339201][T12477] EXT4-fs (loop0): unmounting filesystem. [ 622.531426][T16072] loop3: detected capacity change from 0 to 1024 [ 622.575530][T16072] Invalid ELF header len 10 [ 622.959382][T16080] loop3: detected capacity change from 0 to 16 [ 622.962634][T16080] erofs: (device loop3): mounted with root inode @ nid 36. [ 623.036498][T16056] mmap: syz.4.4079 (16056) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 623.263834][T16084] syz.3.4090: attempt to access beyond end of device [ 623.263834][T16084] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 623.269094][T16084] syz.3.4090: attempt to access beyond end of device [ 623.269094][T16084] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 623.272898][T16084] syz.3.4090: attempt to access beyond end of device [ 623.272898][T16084] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 623.507515][T16092] loop1: detected capacity change from 0 to 1024 [ 623.514691][T16092] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 623.516816][T16092] EXT4-fs (loop1): orphan cleanup on readonly fs [ 623.531884][T16092] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.4091: Invalid inode table block 0 in block_group 0 [ 623.544036][T16092] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 623.549820][T16092] EXT4-fs error (device loop1): ext4_quota_write:7253: inode #3: comm syz.1.4091: mark_inode_dirty error [ 623.556125][T16092] Quota error (device loop1): write_blk: dquota write failed [ 623.557381][T16092] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 623.559050][T16092] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.4091: Failed to acquire dquot type 0 [ 623.575642][T16098] __nla_validate_parse: 9 callbacks suppressed [ 623.575653][T16098] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4096'. [ 623.595687][T16092] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.4091: Invalid inode table block 0 in block_group 0 [ 623.617862][T16092] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 623.626965][T16092] EXT4-fs error (device loop1): ext4_ext_truncate:4475: inode #15: comm syz.1.4091: mark_inode_dirty error [ 623.644780][T16092] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.4091: Invalid inode table block 0 in block_group 0 [ 623.662745][T16092] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 623.666061][T16102] loop4: detected capacity change from 0 to 136 [ 623.672996][T16092] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 623.680359][T16103] FAULT_INJECTION: forcing a failure. [ 623.680359][T16103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.683479][T16092] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.4091: Invalid inode table block 0 in block_group 0 [ 623.689463][T16103] CPU: 1 PID: 16103 Comm: syz.0.4097 Not tainted syzkaller #0 [ 623.690739][T16103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 623.692419][T16103] Call trace: [ 623.693001][T16103] dump_backtrace+0x1c4/0x1f0 [ 623.693828][T16103] show_stack+0x2c/0x3c [ 623.694571][T16103] __dump_stack+0x30/0x40 [ 623.695347][T16103] dump_stack_lvl+0xf4/0x15c [ 623.696160][T16103] dump_stack+0x1c/0x5c [ 623.696879][T16103] should_fail_ex+0x3cc/0x524 [ 623.697706][T16103] should_fail+0x14/0x24 [ 623.698441][T16103] should_fail_usercopy+0x20/0x30 [ 623.699361][T16103] copy_msghdr_from_user+0xc4/0x4e0 [ 623.700264][T16103] __sys_sendmsg+0x230/0x374 [ 623.701056][T16103] __arm64_sys_sendmsg+0x80/0x94 [ 623.701885][T16103] invoke_syscall+0x98/0x290 [ 623.702700][T16103] el0_svc_common+0x13c/0x258 [ 623.703511][T16103] do_el0_svc+0x5c/0x134 [ 623.704253][T16103] el0_svc+0x58/0x128 [ 623.704950][T16103] el0t_64_sync_handler+0x84/0xf0 [ 623.705829][T16103] el0t_64_sync+0x18c/0x190 [ 623.707772][T16092] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 623.712732][T16092] EXT4-fs error (device loop1): ext4_truncate:4325: inode #15: comm syz.1.4091: mark_inode_dirty error [ 623.717184][T16092] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 623.719012][T16092] EXT4-fs (loop1): 1 truncate cleaned up [ 623.720533][T16092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 623.724755][T13992] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 623.827674][T12820] EXT4-fs (loop1): unmounting filesystem. [ 623.839988][T16107] loop0: detected capacity change from 0 to 16 [ 623.841861][T16107] erofs: (device loop0): mounted with root inode @ nid 36. [ 623.873596][T16111] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4100'. [ 623.897844][T16113] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4103'. [ 623.944940][T16116] loop4: detected capacity change from 0 to 256 [ 623.946528][T16116] exfat: Deprecated parameter 'utf8' [ 624.094064][T16119] syz.0.4101: attempt to access beyond end of device [ 624.094064][T16119] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 624.096607][T16119] syz.0.4101: attempt to access beyond end of device [ 624.096607][T16119] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 624.099133][T16119] syz.0.4101: attempt to access beyond end of device [ 624.099133][T16119] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 624.685939][T16109] overlayfs: missing 'lowerdir' [ 624.692401][T13563] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 624.719735][T13563] (NULL device *): queue 0 connect admin queue failed (-111). [ 624.731202][T13563] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 624.767171][T13563] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 624.792914][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4102'. [ 624.847126][T16116] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 624.859612][T16130] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4108'. [ 625.391078][T16142] FAULT_INJECTION: forcing a failure. [ 625.391078][T16142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.418441][T16141] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4113'. [ 625.428478][T16142] CPU: 0 PID: 16142 Comm: syz.1.4111 Not tainted syzkaller #0 [ 625.429868][T16142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 625.431522][T16142] Call trace: [ 625.432087][T16142] dump_backtrace+0x1c4/0x1f0 [ 625.432970][T16142] show_stack+0x2c/0x3c [ 625.433746][T16142] __dump_stack+0x30/0x40 [ 625.434530][T16142] dump_stack_lvl+0xf4/0x15c [ 625.435342][T16142] dump_stack+0x1c/0x5c [ 625.436072][T16142] should_fail_ex+0x3cc/0x524 [ 625.436903][T16142] should_fail+0x14/0x24 [ 625.437638][T16142] should_fail_usercopy+0x20/0x30 [ 625.438540][T16142] copy_msghdr_from_user+0xc4/0x4e0 [ 625.439468][T16142] __sys_sendmsg+0x230/0x374 [ 625.440326][T16142] __arm64_sys_sendmsg+0x80/0x94 [ 625.441211][T16142] invoke_syscall+0x98/0x290 [ 625.442017][T16142] el0_svc_common+0x13c/0x258 [ 625.442911][T16142] do_el0_svc+0x5c/0x134 [ 625.443610][T16142] el0_svc+0x58/0x128 [ 625.444421][T16142] el0t_64_sync_handler+0x84/0xf0 [ 625.445365][T16142] el0t_64_sync+0x18c/0x190 [ 625.525233][T16148] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4115'. [ 625.607880][T16153] loop4: detected capacity change from 0 to 16 [ 625.609613][T16153] erofs: (device loop4): mounted with root inode @ nid 36. [ 625.653440][T16155] erofs: (device loop0): mounted with root inode @ nid 36. [ 626.325000][T16160] syz.0.4119: attempt to access beyond end of device [ 626.325000][T16160] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 626.483804][T16159] syz.4.4117: attempt to access beyond end of device [ 626.483804][T16159] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 626.487226][T16160] syz.0.4119: attempt to access beyond end of device [ 626.487226][T16160] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 626.683336][T16159] syz.4.4117: attempt to access beyond end of device [ 626.683336][T16159] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 626.686859][T16160] syz.0.4119: attempt to access beyond end of device [ 626.686859][T16160] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 626.853415][T16159] syz.4.4117: attempt to access beyond end of device [ 626.853415][T16159] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 627.069019][ T4387] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 627.072390][ T4387] (NULL device *): queue 0 connect admin queue failed (-111). [ 627.074166][ T4387] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 627.079287][ T4387] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 627.159106][T16165] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.4120'. [ 627.278569][T16175] overlayfs: missing 'lowerdir' [ 627.357237][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4123'. [ 627.628840][T16196] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4131'. [ 627.675684][T16198] FAULT_INJECTION: forcing a failure. [ 627.675684][T16198] name failslab, interval 1, probability 0, space 0, times 0 [ 627.698589][T16198] CPU: 0 PID: 16198 Comm: syz.3.4132 Not tainted syzkaller #0 [ 627.699931][T16198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 627.701797][T16198] Call trace: [ 627.702392][T16198] dump_backtrace+0x1c4/0x1f0 [ 627.703276][T16198] show_stack+0x2c/0x3c [ 627.704045][T16198] __dump_stack+0x30/0x40 [ 627.704838][T16198] dump_stack_lvl+0xf4/0x15c [ 627.705681][T16198] dump_stack+0x1c/0x5c [ 627.706463][T16198] should_fail_ex+0x3cc/0x524 [ 627.707313][T16198] __should_failslab+0xc0/0x11c [ 627.708184][T16198] should_failslab+0x10/0x28 [ 627.708985][T16198] __kmem_cache_alloc_node+0x7c/0x318 [ 627.709971][T16198] __kmalloc_node_track_caller+0xb8/0x174 [ 627.710975][T16198] memdup_user_nul+0x5c/0x228 [ 627.711810][T16198] proc_simple_write+0xc8/0x14c [ 627.712691][T16198] proc_reg_write+0x184/0x2d4 [ 627.713546][T16198] vfs_write+0x2a8/0x7c8 [ 627.714303][T16198] ksys_write+0x12c/0x228 [ 627.715079][T16198] __arm64_sys_write+0x7c/0x90 [ 627.715930][T16198] invoke_syscall+0x98/0x290 [ 627.716785][T16198] el0_svc_common+0x13c/0x258 [ 627.717617][T16198] do_el0_svc+0x5c/0x134 [ 627.718395][T16198] el0_svc+0x58/0x128 [ 627.719151][T16198] el0t_64_sync_handler+0x84/0xf0 [ 627.720028][T16198] el0t_64_sync+0x18c/0x190 [ 627.865162][T16204] set_capacity_and_notify: 1 callbacks suppressed [ 627.865172][T16204] loop1: detected capacity change from 0 to 16 [ 627.868368][T16204] erofs: (device loop1): mounted with root inode @ nid 36. [ 628.219496][T16208] syz.1.4135: attempt to access beyond end of device [ 628.219496][T16208] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 628.224071][T16208] syz.1.4135: attempt to access beyond end of device [ 628.224071][T16208] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 628.228423][T16208] syz.1.4135: attempt to access beyond end of device [ 628.228423][T16208] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 628.353802][T16214] loop0: detected capacity change from 0 to 16 [ 628.355867][T16214] erofs: (device loop0): mounted with root inode @ nid 36. [ 628.468380][T16216] syz.0.4139: attempt to access beyond end of device [ 628.468380][T16216] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 628.471016][T16216] syz.0.4139: attempt to access beyond end of device [ 628.471016][T16216] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 628.670660][T16221] loop3: detected capacity change from 0 to 32768 [ 628.672358][T16231] FAULT_INJECTION: forcing a failure. [ 628.672358][T16231] name failslab, interval 1, probability 0, space 0, times 0 [ 628.675750][T16233] __nla_validate_parse: 1 callbacks suppressed [ 628.675758][T16233] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.4146'. [ 628.676120][T16231] CPU: 0 PID: 16231 Comm: syz.4.4145 Not tainted syzkaller #0 [ 628.680104][T16231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 628.681994][T16231] Call trace: [ 628.682640][T16231] dump_backtrace+0x1c4/0x1f0 [ 628.683535][T16231] show_stack+0x2c/0x3c [ 628.684297][T16231] __dump_stack+0x30/0x40 [ 628.685083][T16231] dump_stack_lvl+0xf4/0x15c [ 628.685952][T16231] dump_stack+0x1c/0x5c [ 628.686729][T16231] should_fail_ex+0x3cc/0x524 [ 628.687546][T16231] __should_failslab+0xc0/0x11c [ 628.688397][T16231] should_failslab+0x10/0x28 [ 628.689205][T16231] __kmem_cache_alloc_node+0x7c/0x318 [ 628.690161][T16231] __kmalloc+0xc4/0x180 [ 628.690863][T16231] tomoyo_realpath_from_path+0xc4/0x508 [ 628.691854][T16231] tomoyo_path_number_perm+0x1c4/0x540 [ 628.692831][T16231] tomoyo_file_ioctl+0x2c/0x3c [ 628.693685][T16231] security_file_ioctl+0x80/0xbc [ 628.694590][T16231] __arm64_sys_ioctl+0xa8/0x1c8 [ 628.695484][T16231] invoke_syscall+0x98/0x290 [ 628.696301][T16231] el0_svc_common+0x13c/0x258 [ 628.697166][T16231] do_el0_svc+0x5c/0x134 [ 628.697941][T16231] el0_svc+0x58/0x128 [ 628.698644][T16231] el0t_64_sync_handler+0x84/0xf0 [ 628.699564][T16231] el0t_64_sync+0x18c/0x190 [ 628.708839][T16236] netlink: 'syz.2.4147': attribute type 1 has an invalid length. [ 628.715697][T16235] netlink: 'syz.2.4147': attribute type 1 has an invalid length. [ 628.718332][T16231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 628.737605][T16235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.741075][T16235] bond1: (slave bond2): making interface the new active one [ 628.747115][T16235] bond1: (slave bond2): Enslaving as an active interface with an up link [ 628.747771][T13759] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 628.773398][T16235] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 628.777725][T16235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4147'. [ 628.779602][T16235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 629.070600][T16258] overlayfs: missing 'lowerdir' [ 629.122856][ T4436] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 629.128083][ T4436] (NULL device *): queue 0 connect admin queue failed (-111). [ 629.129378][ T4436] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 629.130540][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4152'. [ 629.130669][ T4436] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 629.161047][T16266] netlink: 'syz.3.4157': attribute type 72 has an invalid length. [ 629.303848][T16272] loop3: detected capacity change from 0 to 512 [ 629.349011][T16272] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 629.425191][T16272] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 629.463492][T16272] EXT4-fs (loop3): orphan cleanup on readonly fs [ 629.565870][T16272] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 629.573646][T16272] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 629.580937][T16272] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.4160: Failed to acquire dquot type 1 [ 629.593787][T16272] EXT4-fs (loop3): Remounting filesystem read-only [ 629.598313][T16272] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4160: bg 0: block 40: padding at end of block bitmap is not set [ 629.602347][T16272] EXT4-fs (loop3): Remounting filesystem read-only [ 629.607529][T16272] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 629.610844][T16272] EXT4-fs (loop3): Remounting filesystem read-only [ 629.612445][T16272] EXT4-fs (loop3): 1 truncate cleaned up [ 629.614334][T16272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 629.766611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 629.768800][T16286] FAULT_INJECTION: forcing a failure. [ 629.768800][T16286] name failslab, interval 1, probability 0, space 0, times 0 [ 629.771269][T16286] CPU: 0 PID: 16286 Comm: syz.0.4165 Not tainted syzkaller #0 [ 629.772548][T16286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 629.774223][T16286] Call trace: [ 629.774817][T16286] dump_backtrace+0x1c4/0x1f0 [ 629.775638][T16286] show_stack+0x2c/0x3c [ 629.776396][T16286] __dump_stack+0x30/0x40 [ 629.777143][T16286] dump_stack_lvl+0xf4/0x15c [ 629.777971][T16286] dump_stack+0x1c/0x5c [ 629.778646][T16286] should_fail_ex+0x3cc/0x524 [ 629.779444][T16286] __should_failslab+0xc0/0x11c [ 629.780335][T16286] should_failslab+0x10/0x28 [ 629.781177][T16286] __kmem_cache_alloc_node+0x7c/0x318 [ 629.782125][T16286] __kmalloc_node+0xc8/0x184 [ 629.782953][T16286] kvmalloc_node+0x88/0x1d4 [ 629.783753][T16286] proc_sys_call_handler+0x328/0x69c [ 629.784695][T16286] proc_sys_write+0x2c/0x3c [ 629.785505][T16286] vfs_write+0x3c8/0x7c8 [ 629.786293][T16286] ksys_write+0x12c/0x228 [ 629.787144][T16286] __arm64_sys_write+0x7c/0x90 [ 629.788008][T16286] invoke_syscall+0x98/0x290 [ 629.788877][T16286] el0_svc_common+0x13c/0x258 [ 629.789738][T16286] do_el0_svc+0x5c/0x134 [ 629.790479][T16286] el0_svc+0x58/0x128 [ 629.791198][T16286] el0t_64_sync_handler+0x84/0xf0 [ 629.792061][T16286] el0t_64_sync+0x18c/0x190 [ 629.941765][T16293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4169'. [ 629.956083][T16294] netlink: 'syz.0.4168': attribute type 72 has an invalid length. [ 629.972000][T16296] loop4: detected capacity change from 0 to 16 [ 629.974786][T16296] erofs: (device loop4): mounted with root inode @ nid 36. [ 629.986909][T16293] bridge0: port 1(dummy0) entered blocking state [ 629.988356][T16293] bridge0: port 1(dummy0) entered disabled state [ 629.990226][T16293] device dummy0 entered promiscuous mode [ 629.995006][T16293] netlink: 'syz.1.4169': attribute type 10 has an invalid length. [ 629.996227][T16293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4169'. [ 629.998617][T16293] bridge0: port 1(dummy0) entered blocking state [ 629.999664][T16293] bridge0: port 1(dummy0) entered forwarding state [ 630.001441][T16293] bridge0: port 1(dummy0) entered disabled state [ 630.038707][T13522] EXT4-fs (loop3): unmounting filesystem. [ 630.175214][T16309] loop1: detected capacity change from 0 to 256 [ 630.180146][T16309] exfat: Deprecated parameter 'utf8' [ 630.189588][T16309] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 631.171905][T16328] (syz.4.4179,16328,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 631.173647][T16328] (syz.4.4179,16328,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 631.256569][T14762] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 631.295582][T14762] (NULL device *): queue 0 connect admin queue failed (-111). [ 631.297004][T14762] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 631.298539][T14762] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 631.337879][T16330] netlink: 'syz.1.4182': attribute type 72 has an invalid length. [ 631.435795][T16332] FAULT_INJECTION: forcing a failure. [ 631.435795][T16332] name failslab, interval 1, probability 0, space 0, times 0 [ 631.438422][T16332] CPU: 0 PID: 16332 Comm: syz.1.4184 Not tainted syzkaller #0 [ 631.439818][T16332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 631.441512][T16332] Call trace: [ 631.442069][T16332] dump_backtrace+0x1c4/0x1f0 [ 631.442857][T16332] show_stack+0x2c/0x3c [ 631.443562][T16332] __dump_stack+0x30/0x40 [ 631.444288][T16332] dump_stack_lvl+0xf4/0x15c [ 631.445022][T16332] dump_stack+0x1c/0x5c [ 631.445741][T16332] should_fail_ex+0x3cc/0x524 [ 631.446548][T16332] __should_failslab+0xc0/0x11c [ 631.447395][T16332] should_failslab+0x10/0x28 [ 631.448221][T16332] kmem_cache_alloc+0x88/0x310 [ 631.449058][T16332] mpol_new+0x154/0x2d0 [ 631.449740][T16332] __arm64_sys_mbind+0x4c4/0x854 [ 631.450608][T16332] invoke_syscall+0x98/0x290 [ 631.451379][T16332] el0_svc_common+0x13c/0x258 [ 631.452190][T16332] do_el0_svc+0x5c/0x134 [ 631.452932][T16332] el0_svc+0x58/0x128 [ 631.453644][T16332] el0t_64_sync_handler+0x84/0xf0 [ 631.454539][T16332] el0t_64_sync+0x18c/0x190 [ 631.609880][T16319] FAULT_INJECTION: forcing a failure. [ 631.609880][T16319] name failslab, interval 1, probability 0, space 0, times 0 [ 631.612494][T16319] CPU: 0 PID: 16319 Comm: syz.3.4177 Not tainted syzkaller #0 [ 631.613844][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 631.615686][T16319] Call trace: [ 631.616270][T16319] dump_backtrace+0x1c4/0x1f0 [ 631.617136][T16319] show_stack+0x2c/0x3c [ 631.617895][T16319] __dump_stack+0x30/0x40 [ 631.618651][T16319] dump_stack_lvl+0xf4/0x15c [ 631.619455][T16319] dump_stack+0x1c/0x5c [ 631.620199][T16319] should_fail_ex+0x3cc/0x524 [ 631.621018][T16319] __should_failslab+0xc0/0x11c [ 631.621870][T16319] should_failslab+0x10/0x28 [ 631.622649][T16319] kmem_cache_alloc+0x88/0x310 [ 631.623528][T16319] taskstats_exit+0x124/0x7c4 [ 631.624369][T16319] do_exit+0x4c4/0x19ac [ 631.625121][T16319] do_group_exit+0x198/0x238 [ 631.625950][T16319] get_signal+0x11f4/0x133c [ 631.626779][T16319] do_notify_resume+0x364/0x2c84 [ 631.627659][T16319] el0_svc+0x98/0x128 [ 631.628388][T16319] el0t_64_sync_handler+0x84/0xf0 [ 631.629212][T16319] el0t_64_sync+0x18c/0x190 [ 631.645000][T16337] loop1: detected capacity change from 0 to 1024 [ 631.660669][T16337] EXT4-fs: Ignoring removed oldalloc option [ 631.662052][T16337] EXT4-fs: Ignoring removed bh option [ 631.787731][T16337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 631.802021][T16337] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.4185: lblock 3 mapped to illegal pblock 3 (length 3) [ 631.820343][T16346] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.4188'. [ 631.822505][T16337] EXT4-fs (loop1): Remounting filesystem read-only [ 631.826689][T16337] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.4185: lblock 3 mapped to illegal pblock 3 (length 1) [ 631.842799][T16337] EXT4-fs (loop1): Remounting filesystem read-only [ 631.844133][T16337] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.4185: lblock 3 mapped to illegal pblock 3 (length 1) [ 631.852790][T16337] EXT4-fs (loop1): Remounting filesystem read-only [ 631.854108][T16337] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.4185: lblock 3 mapped to illegal pblock 3 (length 1) [ 631.864785][T16337] EXT4-fs (loop1): Remounting filesystem read-only [ 631.866078][T16337] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.4185: lblock 3 mapped to illegal pblock 3 (length 1) [ 631.871700][T16337] EXT4-fs (loop1): Remounting filesystem read-only [ 631.883698][T16336] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.4185: lblock 3 mapped to illegal pblock 3 (length 1) [ 631.893190][T16336] EXT4-fs (loop1): Remounting filesystem read-only [ 631.894609][T16336] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.4185: lblock 3 mapped to illegal pblock 3 (length 1) [ 631.903020][T16336] EXT4-fs (loop1): Remounting filesystem read-only [ 631.907584][T16337] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.4185: lblock 3 mapped to illegal pblock 3 (length 1) [ 631.917703][T16337] EXT4-fs (loop1): Remounting filesystem read-only [ 631.920117][T16337] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.4185: lblock 3 mapped to illegal pblock 3 (length 1) [ 631.927567][T16337] EXT4-fs (loop1): Remounting filesystem read-only [ 631.930025][T16336] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.4185: lblock 3 mapped to illegal pblock 3 (length 1) [ 632.004478][T16356] loop0: detected capacity change from 0 to 16 [ 632.006498][T16356] erofs: (device loop0): mounted with root inode @ nid 36. [ 632.139302][T16357] bio_check_eod: 4 callbacks suppressed [ 632.139314][T16357] syz.0.4192: attempt to access beyond end of device [ 632.139314][T16357] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 632.142931][T16357] syz.0.4192: attempt to access beyond end of device [ 632.142931][T16357] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 632.145484][T16357] syz.0.4192: attempt to access beyond end of device [ 632.145484][T16357] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 632.402197][T16365] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4194'. [ 632.515796][T16369] loop3: detected capacity change from 0 to 256 [ 632.542963][T16369] exfat: Deprecated parameter 'utf8' [ 632.546341][T16369] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 632.678023][T16372] FAULT_INJECTION: forcing a failure. [ 632.678023][T16372] name failslab, interval 1, probability 0, space 0, times 0 [ 632.680456][T16372] CPU: 1 PID: 16372 Comm: syz.4.4196 Not tainted syzkaller #0 [ 632.681668][T16372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 632.683315][T16372] Call trace: [ 632.683862][T16372] dump_backtrace+0x1c4/0x1f0 [ 632.684799][T16372] show_stack+0x2c/0x3c [ 632.685585][T16372] __dump_stack+0x30/0x40 [ 632.686407][T16372] dump_stack_lvl+0xf4/0x15c [ 632.687209][T16372] dump_stack+0x1c/0x5c [ 632.687944][T16372] should_fail_ex+0x3cc/0x524 [ 632.688791][T16372] __should_failslab+0xc0/0x11c [ 632.689717][T16372] should_failslab+0x10/0x28 [ 632.690576][T16372] kmem_cache_alloc+0x88/0x310 [ 632.691372][T16372] mas_alloc_nodes+0x284/0x758 [ 632.692141][T16372] mas_preallocate+0x13c/0x310 [ 632.692950][T16372] __vma_adjust+0x26c/0x16fc [ 632.693732][T16372] vma_merge+0x5e4/0xa80 [ 632.694469][T16372] mbind_range+0x3c4/0x6f8 [ 632.695216][T16372] __arm64_sys_mbind+0x678/0x854 [ 632.696058][T16372] invoke_syscall+0x98/0x290 [ 632.696867][T16372] el0_svc_common+0x13c/0x258 [ 632.697675][T16372] do_el0_svc+0x5c/0x134 [ 632.698490][T16372] el0_svc+0x58/0x128 [ 632.699233][T16372] el0t_64_sync_handler+0x84/0xf0 [ 632.700100][T16372] el0t_64_sync+0x18c/0x190 [ 633.237358][T16379] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4199'. [ 633.315789][T16362] loop2: detected capacity change from 0 to 65536 [ 633.362641][ T9] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 633.366234][ T9] (NULL device *): queue 0 connect admin queue failed (-111). [ 633.367532][ T9] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 633.368830][ T9] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 633.404728][T16362] XFS (loop2): Mounting V5 Filesystem [ 633.465173][T16362] XFS (loop2): Ending clean mount [ 633.572314][T16403] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4205'. [ 633.657495][T16406] openvswitch: netlink: Missing key (keys=40, expected=100) [ 633.659110][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4206'. [ 633.730646][T16362] overlayfs: unrecognized mount option "smackfsroot=workdir" or missing value [ 633.819665][T16408] overlayfs: missing 'lowerdir' [ 633.833628][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4204'. [ 633.899513][T13857] XFS (loop2): Unmounting Filesystem [ 633.956669][T16419] loop0: detected capacity change from 0 to 16 [ 633.958481][T16419] erofs: (device loop0): mounted with root inode @ nid 36. [ 634.079428][T16420] syz.0.4210: attempt to access beyond end of device [ 634.079428][T16420] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 634.081992][T16420] syz.0.4210: attempt to access beyond end of device [ 634.081992][T16420] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 634.085059][T16420] syz.0.4210: attempt to access beyond end of device [ 634.085059][T16420] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 634.185685][T16424] FAULT_INJECTION: forcing a failure. [ 634.185685][T16424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.197718][T16424] CPU: 0 PID: 16424 Comm: syz.3.4211 Not tainted syzkaller #0 [ 634.199103][T16424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 634.200945][T16424] Call trace: [ 634.201513][T16424] dump_backtrace+0x1c4/0x1f0 [ 634.201647][T16426] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.4212'. [ 634.202330][T16424] show_stack+0x2c/0x3c [ 634.204657][T16424] __dump_stack+0x30/0x40 [ 634.205416][T16424] dump_stack_lvl+0xf4/0x15c [ 634.206244][T16424] dump_stack+0x1c/0x5c [ 634.206970][T16424] should_fail_ex+0x3cc/0x524 [ 634.207809][T16424] should_fail+0x14/0x24 [ 634.208590][T16424] should_fail_usercopy+0x20/0x30 [ 634.209504][T16424] strncpy_from_user+0x48/0x59c [ 634.210323][T16424] __arm64_sys_request_key+0x110/0x384 [ 634.211297][T16424] invoke_syscall+0x98/0x290 [ 634.212029][T16424] el0_svc_common+0x13c/0x258 [ 634.212846][T16424] do_el0_svc+0x5c/0x134 [ 634.213599][T16424] el0_svc+0x58/0x128 [ 634.214277][T16424] el0t_64_sync_handler+0x84/0xf0 [ 634.215155][T16424] el0t_64_sync+0x18c/0x190 [ 634.400896][T16436] loop2: detected capacity change from 0 to 256 [ 634.402641][T16436] exfat: Deprecated parameter 'utf8' [ 634.407710][T16436] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 634.427156][T16438] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4217'. [ 634.538146][T16442] loop3: detected capacity change from 0 to 128 [ 635.043408][T16450] FAULT_INJECTION: forcing a failure. [ 635.043408][T16450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.052586][T16450] CPU: 0 PID: 16450 Comm: syz.3.4220 Not tainted syzkaller #0 [ 635.053962][T16450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 635.055682][T16450] Call trace: [ 635.056252][T16450] dump_backtrace+0x1c4/0x1f0 [ 635.057109][T16450] show_stack+0x2c/0x3c [ 635.057895][T16450] __dump_stack+0x30/0x40 [ 635.058662][T16450] dump_stack_lvl+0xf4/0x15c [ 635.059487][T16450] dump_stack+0x1c/0x5c [ 635.060241][T16450] should_fail_ex+0x3cc/0x524 [ 635.061090][T16450] should_fail+0x14/0x24 [ 635.061858][T16450] should_fail_usercopy+0x20/0x30 [ 635.062752][T16450] copy_msghdr_from_user+0xc4/0x4e0 [ 635.063656][T16450] __sys_sendmsg+0x230/0x374 [ 635.064498][T16450] __arm64_sys_sendmsg+0x80/0x94 [ 635.065365][T16450] invoke_syscall+0x98/0x290 [ 635.066156][T16450] el0_svc_common+0x13c/0x258 [ 635.066960][T16450] do_el0_svc+0x5c/0x134 [ 635.067777][T16450] el0_svc+0x58/0x128 [ 635.068464][T16450] el0t_64_sync_handler+0x84/0xf0 [ 635.069326][T16450] el0t_64_sync+0x18c/0x190 [ 635.123047][ T4334] Bluetooth: hci1: command 0x0406 tx timeout [ 635.235073][T16452] loop0: detected capacity change from 0 to 32768 [ 635.291002][T16452] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.4221 (16452) [ 635.337589][T16452] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 635.343802][T16452] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 635.345500][T16452] BTRFS info (device loop0): doing ref verification [ 635.346703][T16452] BTRFS info (device loop0): turning off barriers [ 635.360317][T16452] BTRFS info (device loop0): max_inline at 6 [ 635.361459][T16452] BTRFS info (device loop0): using free space tree [ 635.442727][ T9] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 635.455626][ T9] (NULL device *): queue 0 connect admin queue failed (-111). [ 635.457005][ T9] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 635.458404][ T9] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 635.606061][T16497] FAULT_INJECTION: forcing a failure. [ 635.606061][T16497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.630054][T16497] CPU: 1 PID: 16497 Comm: syz.3.4231 Not tainted syzkaller #0 [ 635.631497][T16497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 635.633505][T16497] Call trace: [ 635.634162][T16497] dump_backtrace+0x1c4/0x1f0 [ 635.635090][T16497] show_stack+0x2c/0x3c [ 635.635932][T16497] __dump_stack+0x30/0x40 [ 635.636843][T16497] dump_stack_lvl+0xf4/0x15c [ 635.637750][T16497] dump_stack+0x1c/0x5c [ 635.638540][T16497] should_fail_ex+0x3cc/0x524 [ 635.639437][T16497] should_fail+0x14/0x24 [ 635.640226][T16497] should_fail_usercopy+0x20/0x30 [ 635.641141][T16497] copy_msghdr_from_user+0xc4/0x4e0 [ 635.642239][T16497] __sys_sendmsg+0x230/0x374 [ 635.643191][T16497] __arm64_sys_sendmsg+0x80/0x94 [ 635.644024][T16497] invoke_syscall+0x98/0x290 [ 635.644820][T16497] el0_svc_common+0x13c/0x258 [ 635.645604][T16497] do_el0_svc+0x5c/0x134 [ 635.646283][T16497] el0_svc+0x58/0x128 [ 635.646955][T16497] el0t_64_sync_handler+0x84/0xf0 [ 635.647807][T16497] el0t_64_sync+0x18c/0x190 [ 635.661458][T16498] loop2: detected capacity change from 0 to 16 [ 635.664140][T16498] erofs: (device loop2): mounted with root inode @ nid 36. [ 635.781169][T12477] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 635.796361][T16499] syz.2.4232: attempt to access beyond end of device [ 635.796361][T16499] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 635.799766][T16499] syz.2.4232: attempt to access beyond end of device [ 635.799766][T16499] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 635.802371][T16499] syz.2.4232: attempt to access beyond end of device [ 635.802371][T16499] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 635.836438][T16501] loop3: detected capacity change from 0 to 256 [ 636.059201][T16515] loop3: detected capacity change from 0 to 128 [ 636.060753][T16517] jffs2: notice: (16517) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 636.064669][T13759] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop0 scanned by udevd (13759) [ 636.068983][T16515] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 636.080704][T16515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.164358][T16521] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4238'. [ 636.320933][T16527] loop0: detected capacity change from 0 to 4096 [ 636.354314][T16530] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 636.432005][T16535] Invalid ELF header magic: != ELF [ 636.547106][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4244'. [ 636.664454][T16549] MTD: Couldn't look up './dev/mtdblock0': -2 [ 636.666565][T16550] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.4249'. [ 636.713092][T16545] FAULT_INJECTION: forcing a failure. [ 636.713092][T16545] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 636.715233][T16545] CPU: 1 PID: 16545 Comm: syz.3.4243 Not tainted syzkaller #0 [ 636.716494][T16545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 636.718196][T16545] Call trace: [ 636.718764][T16545] dump_backtrace+0x1c4/0x1f0 [ 636.719527][T16545] show_stack+0x2c/0x3c [ 636.720235][T16545] __dump_stack+0x30/0x40 [ 636.721028][T16545] dump_stack_lvl+0xf4/0x15c [ 636.721877][T16545] dump_stack+0x1c/0x5c [ 636.722648][T16545] should_fail_ex+0x3cc/0x524 [ 636.723482][T16545] should_fail_alloc_page+0x74/0xb8 [ 636.724381][T16545] prepare_alloc_pages+0x1b8/0x4f0 [ 636.725283][T16545] __alloc_pages+0x134/0x544 [ 636.726119][T16545] __folio_alloc+0x1c/0x44 [ 636.726900][T16545] vma_alloc_folio+0x37c/0x8ac [ 636.727732][T16545] shmem_alloc_and_acct_folio+0x3bc/0x948 [ 636.728687][T16545] shmem_get_folio_gfp+0xedc/0x2038 [ 636.729595][T16545] shmem_fault+0x170/0x564 [ 636.730382][T16545] __do_fault+0x11c/0x3d8 [ 636.731165][T16545] handle_mm_fault+0x13a0/0x3018 [ 636.732085][T16545] do_page_fault+0x310/0x99c [ 636.732881][T16545] do_translation_fault+0x94/0xc8 [ 636.733769][T16545] do_mem_abort+0x70/0x198 [ 636.734543][T16545] el1_abort+0x3c/0x5c [ 636.735332][T16545] el1h_64_sync_handler+0x50/0xac [ 636.736192][T16545] el1h_64_sync+0x64/0x68 [ 636.737013][T16545] __sys_socketpair+0x14c/0x6d8 [ 636.737858][T16545] __arm64_sys_socketpair+0xa0/0xbc [ 636.738693][T16545] invoke_syscall+0x98/0x290 [ 636.739499][T16545] el0_svc_common+0x13c/0x258 [ 636.740274][T16545] do_el0_svc+0x5c/0x134 [ 636.741026][T16545] el0_svc+0x58/0x128 [ 636.741728][T16545] el0t_64_sync_handler+0x84/0xf0 [ 636.742572][T16545] el0t_64_sync+0x18c/0x190 [ 636.904404][T16568] jffs2: notice: (16568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 637.083675][T16579] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.4262'. [ 637.166332][T16584] jffs2: notice: (16584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 637.244820][T16593] jffs2: notice: (16593) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 637.329914][T16601] loop1: detected capacity change from 0 to 8 [ 637.346800][T16601] unable to read fragment index table [ 637.399766][T16607] MTD: Couldn't look up './dev/mtdblock0': -2 [ 637.477710][T16610] netlink: 'syz.2.4274': attribute type 72 has an invalid length. [ 637.522591][T14428] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 637.525109][T14428] (NULL device *): queue 0 connect admin queue failed (-111). [ 637.526599][T14428] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 637.528244][T14428] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 637.537422][T16614] overlayfs: missing 'lowerdir' [ 637.555977][T16606] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 637.565649][T16606] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 637.672663][T16606] REISERFS (device loop1): using ordered data mode [ 637.675036][T16606] reiserfs: using flush barriers [ 637.678103][T16606] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 637.686775][T16606] REISERFS (device loop1): checking transaction log (loop1) [ 637.699059][T16606] REISERFS (device loop1): Using r5 hash to sort names [ 637.701458][T16606] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 637.740646][T16624] MTD: Couldn't look up './dev/mtdblock0': -2 [ 637.755969][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4272'. [ 637.885801][T16634] jffs2: notice: (16634) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 637.887525][T16633] MTD: Couldn't look up './dev/mtdblock0': -2 [ 637.901096][T16634] FAULT_INJECTION: forcing a failure. [ 637.901096][T16634] name failslab, interval 1, probability 0, space 0, times 0 [ 637.904035][T16634] CPU: 0 PID: 16634 Comm: syz.2.4282 Not tainted syzkaller #0 [ 637.905251][T16634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 637.907033][T16634] Call trace: [ 637.907637][T16634] dump_backtrace+0x1c4/0x1f0 [ 637.908512][T16634] show_stack+0x2c/0x3c [ 637.909280][T16634] __dump_stack+0x30/0x40 [ 637.910074][T16634] dump_stack_lvl+0xf4/0x15c [ 637.910902][T16634] dump_stack+0x1c/0x5c [ 637.911690][T16634] should_fail_ex+0x3cc/0x524 [ 637.912555][T16634] __should_failslab+0xc0/0x11c [ 637.913474][T16634] should_failslab+0x10/0x28 [ 637.914344][T16634] kmem_cache_alloc+0x88/0x310 [ 637.915196][T16634] getname_flags+0xb8/0x458 [ 637.916201][T16634] getname+0x28/0x38 [ 637.916909][T16634] do_sys_openat2+0xdc/0x3fc [ 637.917771][T16634] __arm64_sys_openat+0x11c/0x150 [ 637.918843][T16634] invoke_syscall+0x98/0x290 [ 637.919748][T16634] el0_svc_common+0x13c/0x258 [ 637.920638][T16634] do_el0_svc+0x5c/0x134 [ 637.921414][T16634] el0_svc+0x58/0x128 [ 637.922145][T16634] el0t_64_sync_handler+0x84/0xf0 [ 637.923118][T16634] el0t_64_sync+0x18c/0x190 [ 637.977983][T16637] netlink: 'syz.4.4285': attribute type 72 has an invalid length. [ 638.121425][T16646] 9pnet_fd: Insufficient options for proto=fd [ 638.226447][T16653] jffs2: notice: (16653) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 638.567796][T16673] set_capacity_and_notify: 1 callbacks suppressed [ 638.567806][T16673] loop2: detected capacity change from 0 to 512 [ 638.604602][T16673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 638.651396][T16673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 638.781794][T16690] netlink: 'syz.2.4294': attribute type 2 has an invalid length. [ 638.801393][T16690] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4294'. [ 638.830278][T16695] netlink: 'syz.1.4298': attribute type 72 has an invalid length. [ 639.040597][T13857] EXT4-fs (loop2): unmounting filesystem. [ 639.077372][T16712] FAULT_INJECTION: forcing a failure. [ 639.077372][T16712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.079825][T16712] CPU: 0 PID: 16712 Comm: syz.0.4303 Not tainted syzkaller #0 [ 639.081015][T16712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 639.082825][T16712] Call trace: [ 639.083420][T16712] dump_backtrace+0x1c4/0x1f0 [ 639.084282][T16712] show_stack+0x2c/0x3c [ 639.084992][T16712] __dump_stack+0x30/0x40 [ 639.085735][T16712] dump_stack_lvl+0xf4/0x15c [ 639.086613][T16712] dump_stack+0x1c/0x5c [ 639.087374][T16712] should_fail_ex+0x3cc/0x524 [ 639.088206][T16712] should_fail+0x14/0x24 [ 639.088919][T16712] should_fail_usercopy+0x20/0x30 [ 639.089831][T16712] __arm64_sys_io_uring_setup+0xf0/0x2e8 [ 639.090923][T16712] invoke_syscall+0x98/0x290 [ 639.091727][T16712] el0_svc_common+0x13c/0x258 [ 639.092587][T16712] do_el0_svc+0x5c/0x134 [ 639.093343][T16712] el0_svc+0x58/0x128 [ 639.094046][T16712] el0t_64_sync_handler+0x84/0xf0 [ 639.094894][T16712] el0t_64_sync+0x18c/0x190 [ 639.182401][T16726] jffs2: notice: (16726) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 639.199985][T16726] FAULT_INJECTION: forcing a failure. [ 639.199985][T16726] name failslab, interval 1, probability 0, space 0, times 0 [ 639.202498][T16726] CPU: 1 PID: 16726 Comm: syz.2.4305 Not tainted syzkaller #0 [ 639.203904][T16726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 639.205786][T16726] Call trace: [ 639.206375][T16726] dump_backtrace+0x1c4/0x1f0 [ 639.207295][T16726] show_stack+0x2c/0x3c [ 639.207959][T16726] __dump_stack+0x30/0x40 [ 639.208665][T16726] dump_stack_lvl+0xf4/0x15c [ 639.209459][T16726] dump_stack+0x1c/0x5c [ 639.210188][T16726] should_fail_ex+0x3cc/0x524 [ 639.211134][T16726] __should_failslab+0xc0/0x11c [ 639.211951][T16726] should_failslab+0x10/0x28 [ 639.212688][T16726] kmem_cache_alloc+0x88/0x310 [ 639.213546][T16726] getname_flags+0xb8/0x458 [ 639.214280][T16726] __arm64_sys_unlinkat+0xb4/0xfc [ 639.215113][T16726] invoke_syscall+0x98/0x290 [ 639.215954][T16726] el0_svc_common+0x13c/0x258 [ 639.216756][T16726] do_el0_svc+0x5c/0x134 [ 639.217513][T16726] el0_svc+0x58/0x128 [ 639.218207][T16726] el0t_64_sync_handler+0x84/0xf0 [ 639.219129][T16726] el0t_64_sync+0x18c/0x190 [ 639.354181][T16739] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 639.365210][T16738] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4309'. [ 639.431133][T16744] jffs2: notice: (16744) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 639.431387][T16743] loop1: detected capacity change from 0 to 16 [ 639.436193][T16743] erofs: (device loop1): mounted with root inode @ nid 36. [ 639.605376][T16748] syz.1.4311: attempt to access beyond end of device [ 639.605376][T16748] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 639.608091][T16748] syz.1.4311: attempt to access beyond end of device [ 639.608091][T16748] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 639.610391][T16748] syz.1.4311: attempt to access beyond end of device [ 639.610391][T16748] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 639.613444][ T5121] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 639.622792][ T5121] (NULL device *): queue 0 connect admin queue failed (-111). [ 639.624357][ T5121] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 639.625720][ T5121] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 639.799644][T16754] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4314'. [ 639.841850][T16734] loop2: detected capacity change from 0 to 32768 [ 639.848555][T16756] jffs2: notice: (16756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 639.861104][T16734] jfs: Unrecognized mount option "roman" or missing value [ 639.861555][T16756] FAULT_INJECTION: forcing a failure. [ 639.861555][T16756] name failslab, interval 1, probability 0, space 0, times 0 [ 639.872676][T16756] CPU: 0 PID: 16756 Comm: syz.0.4315 Not tainted syzkaller #0 [ 639.874058][T16756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 639.875855][T16756] Call trace: [ 639.876465][T16756] dump_backtrace+0x1c4/0x1f0 [ 639.877296][T16756] show_stack+0x2c/0x3c [ 639.878068][T16756] __dump_stack+0x30/0x40 [ 639.878853][T16756] dump_stack_lvl+0xf4/0x15c [ 639.879642][T16756] dump_stack+0x1c/0x5c [ 639.880355][T16756] should_fail_ex+0x3cc/0x524 [ 639.881172][T16756] __should_failslab+0xc0/0x11c [ 639.882066][T16756] should_failslab+0x10/0x28 [ 639.882871][T16756] kmem_cache_alloc+0x88/0x310 [ 639.883732][T16756] getname_flags+0xb8/0x458 [ 639.884671][T16756] getname+0x28/0x38 [ 639.885453][T16756] do_sys_openat2+0xdc/0x3fc [ 639.886320][T16756] __arm64_sys_openat+0x11c/0x150 [ 639.887266][T16756] invoke_syscall+0x98/0x290 [ 639.888076][T16756] el0_svc_common+0x13c/0x258 [ 639.888837][T16756] do_el0_svc+0x5c/0x134 [ 639.889532][T16756] el0_svc+0x58/0x128 [ 639.890236][T16756] el0t_64_sync_handler+0x84/0xf0 [ 639.891122][T16756] el0t_64_sync+0x18c/0x190 [ 640.036355][T16761] netlink: 5236 bytes leftover after parsing attributes in process `syz.0.4317'. [ 640.111132][T16771] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4322'. [ 640.153909][T16776] FAULT_INJECTION: forcing a failure. [ 640.153909][T16776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.156381][T16776] CPU: 0 PID: 16776 Comm: syz.3.4323 Not tainted syzkaller #0 [ 640.157738][T16776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 640.159316][T16776] Call trace: [ 640.159883][T16776] dump_backtrace+0x1c4/0x1f0 [ 640.160654][T16776] show_stack+0x2c/0x3c [ 640.161361][T16776] __dump_stack+0x30/0x40 [ 640.162246][T16776] dump_stack_lvl+0xf4/0x15c [ 640.163194][T16776] dump_stack+0x1c/0x5c [ 640.163999][T16776] should_fail_ex+0x3cc/0x524 [ 640.164845][T16776] should_fail+0x14/0x24 [ 640.165634][T16776] should_fail_usercopy+0x20/0x30 [ 640.166550][T16776] iovec_from_user+0xcc/0x60c [ 640.167451][T16776] __import_iovec+0x80/0x4d4 [ 640.168286][T16776] import_iovec+0x88/0xa4 [ 640.169183][T16776] do_writev+0x1d0/0x3d0 [ 640.169545][T16779] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4325'. [ 640.170018][T16776] __arm64_sys_writev+0x80/0x94 [ 640.172592][T16776] invoke_syscall+0x98/0x290 [ 640.173407][T16776] el0_svc_common+0x13c/0x258 [ 640.174273][T16776] do_el0_svc+0x5c/0x134 [ 640.175019][T16776] el0_svc+0x58/0x128 [ 640.175771][T16776] el0t_64_sync_handler+0x84/0xf0 [ 640.176721][T16776] el0t_64_sync+0x18c/0x190 [ 640.214589][T16782] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4327'. [ 640.249178][T16786] FAULT_INJECTION: forcing a failure. [ 640.249178][T16786] name failslab, interval 1, probability 0, space 0, times 0 [ 640.251475][T16786] CPU: 0 PID: 16786 Comm: syz.0.4328 Not tainted syzkaller #0 [ 640.252826][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 640.254567][T16786] Call trace: [ 640.255187][T16786] dump_backtrace+0x1c4/0x1f0 [ 640.256044][T16786] show_stack+0x2c/0x3c [ 640.256820][T16786] __dump_stack+0x30/0x40 [ 640.257622][T16786] dump_stack_lvl+0xf4/0x15c [ 640.258395][T16786] dump_stack+0x1c/0x5c [ 640.259087][T16786] should_fail_ex+0x3cc/0x524 [ 640.259897][T16786] __should_failslab+0xc0/0x11c [ 640.260761][T16786] should_failslab+0x10/0x28 [ 640.261567][T16786] kmem_cache_alloc+0x88/0x310 [ 640.262386][T16786] getname_flags+0xb8/0x458 [ 640.263218][T16786] getname+0x28/0x38 [ 640.263913][T16786] do_sys_openat2+0xdc/0x3fc [ 640.264702][T16786] __arm64_sys_openat+0x11c/0x150 [ 640.265562][T16786] invoke_syscall+0x98/0x290 [ 640.266343][T16786] el0_svc_common+0x13c/0x258 [ 640.267114][T16786] do_el0_svc+0x5c/0x134 [ 640.267841][T16786] el0_svc+0x58/0x128 [ 640.268516][T16786] el0t_64_sync_handler+0x84/0xf0 [ 640.269428][T16786] el0t_64_sync+0x18c/0x190 [ 640.442611][T16796] overlayfs: missing 'lowerdir' [ 640.493210][T16792] loop0: detected capacity change from 0 to 4096 [ 640.514601][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4329'. [ 641.113994][T16792] ntfs: (device loop0): parse_options(): The show_sys_files option requires a boolean argument. [ 641.244784][T16803] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4334'. [ 641.333738][T16805] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4336'. [ 641.359045][T16809] capability: warning: `syz.1.4337' uses deprecated v2 capabilities in a way that may be insecure [ 641.391560][T16811] FAULT_INJECTION: forcing a failure. [ 641.391560][T16811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.394032][T16811] CPU: 0 PID: 16811 Comm: syz.3.4338 Not tainted syzkaller #0 [ 641.395335][T16811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 641.396916][T16811] Call trace: [ 641.397448][T16811] dump_backtrace+0x1c4/0x1f0 [ 641.398251][T16811] show_stack+0x2c/0x3c [ 641.398968][T16811] __dump_stack+0x30/0x40 [ 641.399749][T16811] dump_stack_lvl+0xf4/0x15c [ 641.400566][T16811] dump_stack+0x1c/0x5c [ 641.401418][T16811] should_fail_ex+0x3cc/0x524 [ 641.402270][T16811] should_fail+0x14/0x24 [ 641.403022][T16811] should_fail_usercopy+0x20/0x30 [ 641.403881][T16811] __arm64_sys_io_uring_setup+0xf0/0x2e8 [ 641.404812][T16811] invoke_syscall+0x98/0x290 [ 641.405626][T16811] el0_svc_common+0x13c/0x258 [ 641.406445][T16811] do_el0_svc+0x5c/0x134 [ 641.407175][T16811] el0_svc+0x58/0x128 [ 641.407872][T16811] el0t_64_sync_handler+0x84/0xf0 [ 641.408801][T16811] el0t_64_sync+0x18c/0x190 [ 641.448926][T13759] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 641.454103][T16792] loop0: detected capacity change from 0 to 8 [ 641.459552][T16816] loop1: detected capacity change from 0 to 16 [ 641.461571][T16816] erofs: (device loop1): mounted with root inode @ nid 36. [ 641.463947][T16813] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4339'. [ 641.512736][T16792] SQUASHFS error: zlib decompression failed, data probably corrupt [ 641.514194][T16792] SQUASHFS error: Failed to read block 0x9b: -5 [ 641.515268][T16792] SQUASHFS error: Unable to read metadata cache entry [99] [ 641.516522][T16792] SQUASHFS error: Unable to read inode 0x127 [ 641.576420][T16821] Cannot find add_set index 0 as target [ 641.633773][T16827] syz.1.4341: attempt to access beyond end of device [ 641.633773][T16827] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 641.636442][T16827] syz.1.4341: attempt to access beyond end of device [ 641.636442][T16827] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 641.638909][T16827] syz.1.4341: attempt to access beyond end of device [ 641.638909][T16827] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 641.758610][T14299] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 641.764520][T14299] (NULL device *): queue 0 connect admin queue failed (-111). [ 641.790404][T14299] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 641.865596][T14299] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 641.990327][T16844] overlayfs: missing 'lowerdir' [ 642.076071][T16846] fuse: Bad value for 'fd' [ 642.714819][T16849] jffs2: notice: (16849) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 642.881654][T16868] jffs2: notice: (16868) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 642.937303][T16868] FAULT_INJECTION: forcing a failure. [ 642.937303][T16868] name failslab, interval 1, probability 0, space 0, times 0 [ 642.939585][T16868] CPU: 1 PID: 16868 Comm: syz.3.4358 Not tainted syzkaller #0 [ 642.940850][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 642.942582][T16868] Call trace: [ 642.943104][T16868] dump_backtrace+0x1c4/0x1f0 [ 642.943894][T16868] show_stack+0x2c/0x3c [ 642.944622][T16868] __dump_stack+0x30/0x40 [ 642.945393][T16868] dump_stack_lvl+0xf4/0x15c [ 642.946171][T16868] dump_stack+0x1c/0x5c [ 642.946868][T16868] should_fail_ex+0x3cc/0x524 [ 642.947662][T16868] __should_failslab+0xc0/0x11c [ 642.948534][T16868] should_failslab+0x10/0x28 [ 642.949304][T16868] kmem_cache_alloc+0x88/0x310 [ 642.950074][T16868] getname_flags+0xb8/0x458 [ 642.950864][T16868] __arm64_sys_unlinkat+0xb4/0xfc [ 642.951701][T16868] invoke_syscall+0x98/0x290 [ 642.952481][T16868] el0_svc_common+0x13c/0x258 [ 642.953311][T16868] do_el0_svc+0x5c/0x134 [ 642.954022][T16868] el0_svc+0x58/0x128 [ 642.954736][T16868] el0t_64_sync_handler+0x84/0xf0 [ 642.955615][T16868] el0t_64_sync+0x18c/0x190 [ 643.123400][T16889] netlink: 'syz.2.4368': attribute type 72 has an invalid length. [ 643.151943][T16890] loop0: detected capacity change from 0 to 16 [ 643.153955][T16890] erofs: (device loop0): mounted with root inode @ nid 36. [ 643.217624][T16890] syz.0.4366: attempt to access beyond end of device [ 643.217624][T16890] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 643.220340][T16890] syz.0.4366: attempt to access beyond end of device [ 643.220340][T16890] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 643.223986][T16890] syz.0.4366: attempt to access beyond end of device [ 643.223986][T16890] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 643.265048][T16895] jffs2: notice: (16895) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 643.420289][T16907] overlayfs: missing 'lowerdir' [ 643.922663][T14039] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 644.024701][T14039] (NULL device *): queue 0 connect admin queue failed (-111). [ 644.026113][T14039] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 644.027469][T14039] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 644.194682][T16923] MTD: Couldn't look up './dev/mtdblock0': -2 [ 644.227268][T16922] jffs2: notice: (16922) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 644.302810][T16929] loop0: detected capacity change from 0 to 16 [ 644.306405][T16929] erofs: (device loop0): mounted with root inode @ nid 36. [ 644.375772][T16927] 0: reclassify loop, rule prio 0, protocol 03 [ 644.481116][T16937] syz.0.4376: attempt to access beyond end of device [ 644.481116][T16937] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 644.809447][T16942] netlink: 'syz.4.4379': attribute type 72 has an invalid length. [ 645.313821][T16958] overlayfs: missing 'lowerdir' [ 645.448336][T16961] __nla_validate_parse: 8 callbacks suppressed [ 645.448357][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4383'. [ 646.240642][ T9] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 646.252008][ T9] (NULL device *): queue 0 connect admin queue failed (-111). [ 646.266119][ T9] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 646.267630][ T9] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 646.271955][T16972] loop3: detected capacity change from 0 to 8192 [ 646.280103][T16981] overlayfs: missing 'lowerdir' [ 646.282628][T16980] netlink: 'syz.2.4391': attribute type 72 has an invalid length. [ 646.301058][T16978] netlink: 'syz.1.4390': attribute type 6 has an invalid length. [ 646.313765][T16972] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 646.316034][T16972] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 646.330083][T16972] REISERFS (device loop3): using ordered data mode [ 646.331343][T16972] reiserfs: using flush barriers [ 646.335663][T16972] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 646.338711][T16972] REISERFS (device loop3): checking transaction log (loop3) [ 646.393018][T16972] REISERFS (device loop3): Using r5 hash to sort names [ 646.481827][T16972] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 646.482749][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4390'. [ 646.485176][T16988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4390'. [ 646.511635][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4388'. [ 646.513634][T16989] fuse: Bad value for 'fd' [ 646.565877][T16995] jffs2: notice: (16995) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 646.573613][T16996] loop0: detected capacity change from 0 to 16 [ 646.575529][T16996] erofs: (device loop0): mounted with root inode @ nid 36. [ 646.746425][T17001] bio_check_eod: 2 callbacks suppressed [ 646.746446][T17001] syz.0.4395: attempt to access beyond end of device [ 646.746446][T17001] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 646.751638][T17001] syz.0.4395: attempt to access beyond end of device [ 646.751638][T17001] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 646.756273][T17001] syz.0.4395: attempt to access beyond end of device [ 646.756273][T17001] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 647.025209][T16992] openvswitch: netlink: Missing key (keys=40, expected=100) [ 647.027474][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4394'. [ 647.610633][T17024] jffs2: notice: (17024) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 647.689812][T17029] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4403'. [ 647.811185][T17039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4407'. [ 647.825234][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4407'. [ 647.975471][T17040] overlayfs: missing 'lowerdir' [ 648.261624][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4404'. [ 648.358085][T14039] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 648.539893][T14039] (NULL device *): queue 0 connect admin queue failed (-111). [ 648.605895][T14039] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 648.607428][T14039] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 648.691786][T17049] jffs2: notice: (17049) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 648.824851][T17054] loop1: detected capacity change from 0 to 16 [ 648.826916][T17054] erofs: (device loop1): mounted with root inode @ nid 36. [ 648.928056][T17050] loop2: detected capacity change from 0 to 8192 [ 648.940634][T17050] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 648.942907][T17050] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 649.003760][T17064] syz.1.4410: attempt to access beyond end of device [ 649.003760][T17064] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 649.008458][T17064] syz.1.4410: attempt to access beyond end of device [ 649.008458][T17064] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 649.012853][T17064] syz.1.4410: attempt to access beyond end of device [ 649.012853][T17064] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 649.227525][T17050] REISERFS (device loop2): using ordered data mode [ 649.236531][T17050] reiserfs: using flush barriers [ 649.247098][T17050] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 649.266730][T17050] REISERFS (device loop2): checking transaction log (loop2) [ 649.270140][T17050] REISERFS (device loop2): Using r5 hash to sort names [ 649.278011][T17050] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 649.299353][T17070] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4415'. [ 649.340354][T17072] jffs2: notice: (17072) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 649.355043][T17072] FAULT_INJECTION: forcing a failure. [ 649.355043][T17072] name failslab, interval 1, probability 0, space 0, times 0 [ 649.364301][T17072] CPU: 1 PID: 17072 Comm: syz.0.4416 Not tainted syzkaller #0 [ 649.365756][T17072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 649.367701][T17072] Call trace: [ 649.368340][T17072] dump_backtrace+0x1c4/0x1f0 [ 649.369235][T17072] show_stack+0x2c/0x3c [ 649.370017][T17072] __dump_stack+0x30/0x40 [ 649.370808][T17072] dump_stack_lvl+0xf4/0x15c [ 649.371641][T17072] dump_stack+0x1c/0x5c [ 649.372353][T17072] should_fail_ex+0x3cc/0x524 [ 649.373134][T17072] __should_failslab+0xc0/0x11c [ 649.373943][T17072] should_failslab+0x10/0x28 [ 649.374710][T17072] kmem_cache_alloc+0x88/0x310 [ 649.375546][T17072] getname_flags+0xb8/0x458 [ 649.376351][T17072] __arm64_sys_unlinkat+0xb4/0xfc [ 649.377249][T17072] invoke_syscall+0x98/0x290 [ 649.378038][T17072] el0_svc_common+0x13c/0x258 [ 649.378867][T17072] do_el0_svc+0x5c/0x134 [ 649.379614][T17072] el0_svc+0x58/0x128 [ 649.380304][T17072] el0t_64_sync_handler+0x84/0xf0 [ 649.381153][T17072] el0t_64_sync+0x18c/0x190 [ 649.504898][T17068] openvswitch: netlink: Missing key (keys=40, expected=100) [ 649.551968][T17079] MTD: Couldn't look up './dev/mtdblock0': -2 [ 649.973277][T17097] FAULT_INJECTION: forcing a failure. [ 649.973277][T17097] name failslab, interval 1, probability 0, space 0, times 0 [ 649.975735][T17097] CPU: 1 PID: 17097 Comm: syz.1.4423 Not tainted syzkaller #0 [ 649.977001][T17097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 649.978825][T17097] Call trace: [ 649.979571][T17097] dump_backtrace+0x1c4/0x1f0 [ 649.980428][T17097] show_stack+0x2c/0x3c [ 649.981125][T17097] __dump_stack+0x30/0x40 [ 649.981859][T17097] dump_stack_lvl+0xf4/0x15c [ 649.982661][T17097] dump_stack+0x1c/0x5c [ 649.983350][T17097] should_fail_ex+0x3cc/0x524 [ 649.984163][T17097] __should_failslab+0xc0/0x11c [ 649.984984][T17097] should_failslab+0x10/0x28 [ 649.985768][T17097] __kmem_cache_alloc_node+0x7c/0x318 [ 649.986691][T17097] __kmalloc_node+0xc8/0x184 [ 649.987463][T17097] kvmalloc_node+0x88/0x1d4 [ 649.988256][T17097] traverse+0xe0/0x4c4 [ 649.988995][T17097] seq_lseek+0x130/0x204 [ 649.989697][T17097] full_proxy_llseek+0x104/0x1e4 [ 649.990564][T17097] __arm64_sys_lseek+0x13c/0x1c0 [ 649.991426][T17097] invoke_syscall+0x98/0x290 [ 649.992216][T17097] el0_svc_common+0x13c/0x258 [ 649.993033][T17097] do_el0_svc+0x5c/0x134 [ 649.993767][T17097] el0_svc+0x58/0x128 [ 649.994404][T17097] el0t_64_sync_handler+0x84/0xf0 [ 649.995206][T17097] el0t_64_sync+0x18c/0x190 [ 650.218434][T17103] overlayfs: missing 'lowerdir' [ 650.912706][ T62] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 650.918130][ T62] (NULL device *): queue 0 connect admin queue failed (-111). [ 650.919406][ T62] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 650.922932][ T62] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 650.970843][T17112] __nla_validate_parse: 2 callbacks suppressed [ 650.970855][T17112] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4427'. [ 651.120968][T17119] loop3: detected capacity change from 0 to 16 [ 651.123334][T17119] erofs: (device loop3): mounted with root inode @ nid 36. [ 651.237056][T17116] loop0: detected capacity change from 0 to 8192 [ 651.297121][T17126] syz.3.4431: attempt to access beyond end of device [ 651.297121][T17126] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 651.301771][T17126] syz.3.4431: attempt to access beyond end of device [ 651.301771][T17126] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 651.306289][T17126] syz.3.4431: attempt to access beyond end of device [ 651.306289][T17126] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 651.519726][T17116] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 651.522766][T17123] loop1: detected capacity change from 0 to 764 [ 651.527627][T17123] Symlink component flag not implemented [ 651.528735][T17123] Symlink component flag not implemented [ 651.532063][T17116] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 651.542772][T17116] REISERFS (device loop0): using ordered data mode [ 651.544169][T17116] reiserfs: using flush barriers [ 651.556036][T17116] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 651.571860][T17116] REISERFS (device loop0): checking transaction log (loop0) [ 651.579085][T17116] REISERFS (device loop0): Using r5 hash to sort names [ 651.588128][T17116] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 651.631772][T17132] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 652.373832][T17155] loop0: detected capacity change from 0 to 16 [ 652.376188][T17155] erofs: (device loop0): mounted with root inode @ nid 36. [ 652.436720][T17142] openvswitch: netlink: Missing key (keys=40, expected=100) [ 652.447194][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4438'. [ 652.547519][T17160] syz.0.4448: attempt to access beyond end of device [ 652.547519][T17160] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 652.553014][T17160] syz.0.4448: attempt to access beyond end of device [ 652.553014][T17160] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 652.558679][T17160] syz.0.4448: attempt to access beyond end of device [ 652.558679][T17160] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 652.962707][ T5379] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 652.965107][ T5379] (NULL device *): queue 0 connect admin queue failed (-111). [ 652.967490][ T5379] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 652.970707][ T5379] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 653.004251][T17162] overlayfs: missing 'lowerdir' [ 653.038830][T17167] FAULT_INJECTION: forcing a failure. [ 653.038830][T17167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.041196][T17167] CPU: 1 PID: 17167 Comm: syz.2.4446 Not tainted syzkaller #0 [ 653.042441][T17167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 653.044268][T17167] Call trace: [ 653.044857][T17167] dump_backtrace+0x1c4/0x1f0 [ 653.045674][T17167] show_stack+0x2c/0x3c [ 653.046419][T17167] __dump_stack+0x30/0x40 [ 653.047222][T17167] dump_stack_lvl+0xf4/0x15c [ 653.048041][T17167] dump_stack+0x1c/0x5c [ 653.048785][T17167] should_fail_ex+0x3cc/0x524 [ 653.049594][T17167] should_fail+0x14/0x24 [ 653.050325][T17167] should_fail_usercopy+0x20/0x30 [ 653.051163][T17167] copy_msghdr_from_user+0xc4/0x4e0 [ 653.052106][T17167] __sys_sendmsg+0x230/0x374 [ 653.052926][T17167] __arm64_sys_sendmsg+0x80/0x94 [ 653.053767][T17167] invoke_syscall+0x98/0x290 [ 653.054480][T17167] el0_svc_common+0x13c/0x258 [ 653.055235][T17167] do_el0_svc+0x5c/0x134 [ 653.056007][T17167] el0_svc+0x58/0x128 [ 653.056654][T17167] el0t_64_sync_handler+0x84/0xf0 [ 653.057578][T17167] el0t_64_sync+0x18c/0x190 [ 653.068672][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4443'. [ 653.175255][T17173] overlayfs: missing 'lowerdir' [ 653.480924][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 654.019756][T17184] loop2: detected capacity change from 0 to 512 [ 654.044746][T17184] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 654.148569][T17184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 654.150421][T17184] EXT4-fs (loop2): orphan cleanup on readonly fs [ 654.155855][T17184] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4450: bg 0: block 361: padding at end of block bitmap is not set [ 654.162844][T17184] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 654.164462][T17184] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.4450: attempt to clear invalid blocks 33619980 len 1 [ 654.166741][T17184] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4450: invalid indirect mapped block 1811939328 (level 0) [ 654.169290][T17184] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4450: invalid indirect mapped block 2185560079 (level 1) [ 654.173308][T17184] EXT4-fs (loop2): 1 truncate cleaned up [ 654.174322][T17184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 654.176724][T17184] EXT4-fs (loop2): unmounting filesystem. [ 655.109379][T17203] FAULT_INJECTION: forcing a failure. [ 655.109379][T17203] name failslab, interval 1, probability 0, space 0, times 0 [ 655.111726][T17203] CPU: 0 PID: 17203 Comm: syz.0.4456 Not tainted syzkaller #0 [ 655.112919][T17203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 655.114664][T17203] Call trace: [ 655.115221][T17203] dump_backtrace+0x1c4/0x1f0 [ 655.116093][T17203] show_stack+0x2c/0x3c [ 655.116838][T17203] __dump_stack+0x30/0x40 [ 655.117630][T17203] dump_stack_lvl+0xf4/0x15c [ 655.118522][T17203] dump_stack+0x1c/0x5c [ 655.119246][T17203] should_fail_ex+0x3cc/0x524 [ 655.120092][T17203] __should_failslab+0xc0/0x11c [ 655.120950][T17203] should_failslab+0x10/0x28 [ 655.121748][T17203] __kmem_cache_alloc_node+0x7c/0x318 [ 655.122690][T17203] __kmalloc+0xc4/0x180 [ 655.123450][T17203] sock_kmalloc+0xb0/0x158 [ 655.124229][T17203] alg_setkey+0x68/0x294 [ 655.125025][T17203] alg_setsockopt+0x26c/0x36c [ 655.125829][T17203] __sys_setsockopt+0x2fc/0x50c [ 655.126680][T17203] __arm64_sys_setsockopt+0xc0/0xdc [ 655.127585][T17203] invoke_syscall+0x98/0x290 [ 655.128283][T17203] el0_svc_common+0x13c/0x258 [ 655.129071][T17203] do_el0_svc+0x5c/0x134 [ 655.129764][T17203] el0_svc+0x58/0x128 [ 655.130492][T17203] el0t_64_sync_handler+0x84/0xf0 [ 655.131381][T17203] el0t_64_sync+0x18c/0x190 [ 655.635885][T17184] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 655.657060][ T4387] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 655.661004][ T4387] (NULL device *): queue 0 connect admin queue failed (-111). [ 655.662962][ T4387] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 655.664345][ T4387] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 655.784686][T17211] loop3: detected capacity change from 0 to 8 [ 656.401689][T17225] overlayfs: failed to decode file handle (len=-6, type=0, flags=0, err=-22) [ 657.152073][T17259] loop0: detected capacity change from 0 to 16 [ 657.157999][T17259] erofs: (device loop0): mounted with root inode @ nid 36. [ 657.219320][T17259] syz.0.4478: attempt to access beyond end of device [ 657.219320][T17259] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 657.222064][T17259] syz.0.4478: attempt to access beyond end of device [ 657.222064][T17259] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 657.224657][T17259] syz.0.4478: attempt to access beyond end of device [ 657.224657][T17259] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 657.278533][T17269] loop1: detected capacity change from 0 to 16 [ 657.280530][T17269] erofs: (device loop1): mounted with root inode @ nid 36. [ 657.460074][T17280] syz.1.4480: attempt to access beyond end of device [ 657.460074][T17280] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 657.465152][T17280] syz.1.4480: attempt to access beyond end of device [ 657.465152][T17280] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 657.470135][T17280] syz.1.4480: attempt to access beyond end of device [ 657.470135][T17280] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 657.691802][T14039] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 657.695664][T14039] (NULL device *): queue 0 connect admin queue failed (-111). [ 657.697167][T14039] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 657.698534][T14039] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 657.975902][T17252] overlayfs: unrecognized mount option "smackfsroot=workdir" or missing value [ 658.158776][T17307] overlayfs: missing 'lowerdir' [ 658.266159][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4491'. [ 658.312513][T17324] loop1: detected capacity change from 0 to 16 [ 658.315510][T17324] erofs: (device loop1): mounted with root inode @ nid 36. [ 658.371849][T17331] syz.1.4502: attempt to access beyond end of device [ 658.371849][T17331] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 658.374581][T17331] syz.1.4502: attempt to access beyond end of device [ 658.374581][T17331] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 658.377072][T17331] syz.1.4502: attempt to access beyond end of device [ 658.377072][T17331] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 659.763106][ T4884] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 659.767758][ T4884] (NULL device *): queue 0 connect admin queue failed (-111). [ 659.770196][ T4884] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 659.777292][ T4884] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 659.989086][T17417] overlayfs: missing 'lowerdir' [ 660.067260][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4538'. [ 661.017563][T17442] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4548'. [ 661.381866][T17436] loop1: detected capacity change from 0 to 65536 [ 661.395588][T17468] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.4557'. [ 661.411448][T17436] XFS (loop1): Mounting V5 Filesystem [ 661.445271][T17436] XFS (loop1): Ending clean mount [ 661.584381][T17436] overlayfs: unrecognized mount option "smackfsroot=workdir" or missing value [ 661.602251][T12820] XFS (loop1): Unmounting Filesystem [ 661.690368][T17480] overlayfs: missing 'lowerdir' [ 661.769732][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4559'. [ 662.461616][T17486] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4563'. [ 662.467344][T17489] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4562'. [ 662.642383][T17498] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4568'. [ 662.672728][T13563] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 662.687155][T13563] (NULL device *): queue 0 connect admin queue failed (-111). [ 662.688575][T13563] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 662.689947][T13563] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 662.727001][T17506] loop0: detected capacity change from 0 to 512 [ 662.728579][T17506] EXT4-fs: Ignoring removed oldalloc option [ 662.797158][T17506] EXT4-fs (loop0): 1 truncate cleaned up [ 662.798580][T17506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 662.824176][T17511] loop2: detected capacity change from 0 to 16 [ 662.826029][T17511] erofs: (device loop2): mounted with root inode @ nid 36. [ 662.867835][T17506] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.4571: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 662.885651][T17506] EXT4-fs (loop0): Remounting filesystem read-only [ 662.907934][T12477] EXT4-fs (loop0): unmounting filesystem. [ 663.001597][T17519] syz.2.4572: attempt to access beyond end of device [ 663.001597][T17519] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 663.011814][T17519] syz.2.4572: attempt to access beyond end of device [ 663.011814][T17519] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 663.014711][T17520] overlayfs: missing 'lowerdir' [ 663.021373][T17519] syz.2.4572: attempt to access beyond end of device [ 663.021373][T17519] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 663.071047][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4564'. [ 663.073494][T17525] fuse: Bad value for 'fd' [ 663.550372][T17534] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4576'. [ 663.645584][T17538] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4577'. [ 663.755016][T17545] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4581'. [ 663.861947][T17546] overlayfs: missing 'lowerdir' [ 663.997625][T17549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4580'. [ 664.722663][T13563] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 664.727782][T13563] (NULL device *): queue 0 connect admin queue failed (-111). [ 664.729057][T13563] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 664.730361][T13563] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 664.820307][T17564] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4588'. [ 664.916073][T17565] FAULT_INJECTION: forcing a failure. [ 664.916073][T17565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.918312][T17565] CPU: 1 PID: 17565 Comm: syz.2.4586 Not tainted syzkaller #0 [ 664.919548][T17565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 664.921164][T17565] Call trace: [ 664.921700][T17565] dump_backtrace+0x1c4/0x1f0 [ 664.922430][T17565] show_stack+0x2c/0x3c [ 664.923197][T17565] __dump_stack+0x30/0x40 [ 664.923952][T17565] dump_stack_lvl+0xf4/0x15c [ 664.924750][T17565] dump_stack+0x1c/0x5c [ 664.925482][T17565] should_fail_ex+0x3cc/0x524 [ 664.926288][T17565] should_fail+0x14/0x24 [ 664.927021][T17565] should_fail_usercopy+0x20/0x30 [ 664.927887][T17565] copy_msghdr_from_user+0xc4/0x4e0 [ 664.928862][T17565] __sys_sendmsg+0x230/0x374 [ 664.929682][T17565] __arm64_sys_sendmsg+0x80/0x94 [ 664.930524][T17565] invoke_syscall+0x98/0x290 [ 664.931476][T17565] el0_svc_common+0x13c/0x258 [ 664.932371][T17565] do_el0_svc+0x5c/0x134 [ 664.933115][T17565] el0_svc+0x58/0x128 [ 664.933817][T17565] el0t_64_sync_handler+0x84/0xf0 [ 664.934679][T17565] el0t_64_sync+0x18c/0x190 [ 665.336112][T17586] loop0: detected capacity change from 0 to 16 [ 665.337848][T17586] erofs: (device loop0): mounted with root inode @ nid 36. [ 665.508844][T17593] syz.0.4597: attempt to access beyond end of device [ 665.508844][T17593] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 665.516510][T17593] syz.0.4597: attempt to access beyond end of device [ 665.516510][T17593] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 665.526680][T17593] syz.0.4597: attempt to access beyond end of device [ 665.526680][T17593] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 666.079676][T17609] overlayfs: missing 'lowerdir' [ 666.150710][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4601'. [ 666.802675][T14428] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 666.823373][T14428] (NULL device *): queue 0 connect admin queue failed (-111). [ 666.824793][T14428] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 666.829400][T14428] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 667.168642][T17624] loop2: detected capacity change from 0 to 512 [ 667.259510][T17624] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.4609: inode has both inline data and extents flags [ 667.262056][T17624] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.4609: couldn't read orphan inode 15 (err -117) [ 667.267835][T17624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 667.799055][T17648] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.4619'. [ 667.995993][T17661] overlayfs: missing 'lowerdir' [ 668.079749][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4620'. [ 668.690247][T13857] EXT4-fs (loop2): unmounting filesystem. [ 668.858994][T17671] loop3: detected capacity change from 0 to 16 [ 668.866285][T17671] erofs: (device loop3): mounted with root inode @ nid 36. [ 668.932286][T14039] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 668.939348][T14039] (NULL device *): queue 0 connect admin queue failed (-111). [ 668.940744][T14039] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 668.957161][T14039] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 669.075908][T17682] syz.3.4627: attempt to access beyond end of device [ 669.075908][T17682] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 669.084614][T17682] syz.3.4627: attempt to access beyond end of device [ 669.084614][T17682] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 669.089740][T17683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.091371][T17683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.119808][T17682] syz.3.4627: attempt to access beyond end of device [ 669.119808][T17682] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 669.207071][T17692] overlayfs: missing 'lowerdir' [ 669.262078][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4624'. [ 669.264317][T17695] fuse: Bad value for 'fd' [ 669.803413][T17704] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4634'. [ 670.678078][T17722] overlayfs: missing 'lowerdir' [ 670.756413][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4641'. [ 671.618449][T17733] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4645'. [ 671.647950][ T4914] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 671.658720][ T4914] (NULL device *): queue 0 connect admin queue failed (-111). [ 671.662388][ T4914] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 671.667292][ T4914] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 671.699150][T17739] loop3: detected capacity change from 0 to 16 [ 671.701184][T17739] erofs: (device loop3): mounted with root inode @ nid 36. [ 671.871348][T17745] syz.3.4649: attempt to access beyond end of device [ 671.871348][T17745] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 671.876474][T17745] syz.3.4649: attempt to access beyond end of device [ 671.876474][T17745] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 671.880557][T17745] syz.3.4649: attempt to access beyond end of device [ 671.880557][T17745] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 672.562082][T17769] FAULT_INJECTION: forcing a failure. [ 672.562082][T17769] name failslab, interval 1, probability 0, space 0, times 0 [ 672.573330][T17769] CPU: 0 PID: 17769 Comm: syz.1.4653 Not tainted syzkaller #0 [ 672.574655][T17769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 672.576346][T17769] Call trace: [ 672.576927][T17769] dump_backtrace+0x1c4/0x1f0 [ 672.577791][T17769] show_stack+0x2c/0x3c [ 672.578564][T17769] __dump_stack+0x30/0x40 [ 672.579332][T17769] dump_stack_lvl+0xf4/0x15c [ 672.580206][T17769] dump_stack+0x1c/0x5c [ 672.580974][T17769] should_fail_ex+0x3cc/0x524 [ 672.581859][T17769] __should_failslab+0xc0/0x11c [ 672.582744][T17769] should_failslab+0x10/0x28 [ 672.583654][T17769] kmem_cache_alloc_node+0x8c/0x344 [ 672.584620][T17769] __alloc_skb+0x128/0x728 [ 672.585467][T17769] tcp_stream_alloc_skb+0x48/0x2d8 [ 672.586386][T17769] tcp_sendmsg_locked+0x900/0x3164 [ 672.587329][T17769] tcp_sendmsg+0x40/0x64 [ 672.588119][T17769] inet_sendmsg+0x154/0x27c [ 672.588925][T17769] __sys_sendto+0x324/0x440 [ 672.589773][T17769] __arm64_sys_sendto+0xe4/0x104 [ 672.590669][T17769] invoke_syscall+0x98/0x290 [ 672.591480][T17769] el0_svc_common+0x13c/0x258 [ 672.592453][T17769] do_el0_svc+0x5c/0x134 [ 672.593276][T17769] el0_svc+0x58/0x128 [ 672.594002][T17769] el0t_64_sync_handler+0x84/0xf0 [ 672.594890][T17769] el0t_64_sync+0x18c/0x190 [ 672.675524][T17775] netlink: 'syz.2.4657': attribute type 12 has an invalid length. [ 672.677276][T17775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4657'. [ 672.698217][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4657'. [ 672.804938][T17777] overlayfs: missing 'lowerdir' [ 673.594866][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4659'. [ 673.692614][ T4824] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 673.695073][ T4824] (NULL device *): queue 0 connect admin queue failed (-111). [ 673.696433][ T4824] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 673.697937][ T4824] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 673.980677][T17806] loop1: detected capacity change from 0 to 16 [ 673.985651][T17806] erofs: (device loop1): mounted with root inode @ nid 36. [ 674.156311][T17814] syz.1.4670: attempt to access beyond end of device [ 674.156311][T17814] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 674.161397][T17814] syz.1.4670: attempt to access beyond end of device [ 674.161397][T17814] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 674.165235][T17814] syz.1.4670: attempt to access beyond end of device [ 674.165235][T17814] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 675.627819][T17816] overlayfs: missing 'lowerdir' [ 675.724562][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4672'. [ 675.958655][T17813] loop0: detected capacity change from 0 to 128 [ 676.032998][T17822] loop1: detected capacity change from 0 to 1024 [ 676.043901][ T4846] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 676.053192][ T4846] (NULL device *): queue 0 connect admin queue failed (-111). [ 676.054223][T17813] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 676.054528][ T4846] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 676.057789][ T4846] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 676.139487][T17828] overlayfs: missing 'lowerdir' [ 676.141519][T17822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.194233][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4671'. [ 677.106769][T17863] loop1: detected capacity change from 0 to 128 [ 677.121383][T17863] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 677.473719][T17863] FAULT_INJECTION: forcing a failure. [ 677.473719][T17863] name failslab, interval 1, probability 0, space 0, times 0 [ 677.476166][T17863] CPU: 0 PID: 17863 Comm: syz.1.4686 Not tainted syzkaller #0 [ 677.477430][T17863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 677.479215][T17863] Call trace: [ 677.479799][T17863] dump_backtrace+0x1c4/0x1f0 [ 677.480640][T17863] show_stack+0x2c/0x3c [ 677.481378][T17863] __dump_stack+0x30/0x40 [ 677.482130][T17863] dump_stack_lvl+0xf4/0x15c [ 677.482927][T17863] dump_stack+0x1c/0x5c [ 677.483643][T17863] should_fail_ex+0x3cc/0x524 [ 677.484485][T17863] __should_failslab+0xc0/0x11c [ 677.485392][T17863] should_failslab+0x10/0x28 [ 677.486193][T17863] kmem_cache_alloc+0x88/0x310 [ 677.487200][T17863] getname_flags+0xb8/0x458 [ 677.488024][T17863] __arm64_sys_unlinkat+0xb4/0xfc [ 677.488992][T17863] invoke_syscall+0x98/0x290 [ 677.489808][T17863] el0_svc_common+0x13c/0x258 [ 677.490624][T17863] do_el0_svc+0x5c/0x134 [ 677.491347][T17863] el0_svc+0x58/0x128 [ 677.492066][T17863] el0t_64_sync_handler+0x84/0xf0 [ 677.492940][T17863] el0t_64_sync+0x18c/0x190 [ 677.690217][T17872] overlayfs: missing 'lowerdir' [ 677.765850][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4687'. [ 678.092597][ T4846] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 678.100039][ T4846] (NULL device *): queue 0 connect admin queue failed (-111). [ 678.112250][ T4846] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 678.153654][ T4846] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 678.371467][T17877] loop1: detected capacity change from 0 to 128 [ 678.406447][T17877] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 678.759117][T17900] loop1: detected capacity change from 0 to 16 [ 678.761165][T17900] erofs: (device loop1): mounted with root inode @ nid 36. [ 679.545394][T17908] syz.1.4701: attempt to access beyond end of device [ 679.545394][T17908] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 679.735886][T17908] syz.1.4701: attempt to access beyond end of device [ 679.735886][T17908] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 679.896260][T17908] syz.1.4701: attempt to access beyond end of device [ 679.896260][T17908] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 680.059308][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.060559][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.392499][T14299] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 680.394786][T14299] (NULL device *): queue 0 connect admin queue failed (-111). [ 680.395965][T14299] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 680.397218][T14299] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 680.446035][T17918] loop2: detected capacity change from 0 to 764 [ 680.451517][T17915] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4703'. [ 680.502387][T17918] FAULT_INJECTION: forcing a failure. [ 680.502387][T17918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.505364][T17918] CPU: 1 PID: 17918 Comm: syz.2.4705 Not tainted syzkaller #0 [ 680.506699][T17918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 680.508575][T17918] Call trace: [ 680.509219][T17918] dump_backtrace+0x1c4/0x1f0 [ 680.510089][T17918] show_stack+0x2c/0x3c [ 680.510845][T17918] __dump_stack+0x30/0x40 [ 680.511527][T17918] dump_stack_lvl+0xf4/0x15c [ 680.512366][T17918] dump_stack+0x1c/0x5c [ 680.513106][T17918] should_fail_ex+0x3cc/0x524 [ 680.513957][T17918] should_fail+0x14/0x24 [ 680.514668][T17918] should_fail_usercopy+0x20/0x30 [ 680.515546][T17918] do_handle_open+0xcc/0x8e8 [ 680.516317][T17918] __arm64_sys_open_by_handle_at+0x80/0x94 [ 680.517339][T17918] invoke_syscall+0x98/0x290 [ 680.518142][T17918] el0_svc_common+0x13c/0x258 [ 680.518156][T17924] netlink: 'syz.0.4707': attribute type 10 has an invalid length. [ 680.518936][T17918] do_el0_svc+0x5c/0x134 [ 680.520258][T17924] team0: Device batadv0 is up. Set it down before adding it as a team port [ 680.521008][T17918] el0_svc+0x58/0x128 [ 680.523155][T17918] el0t_64_sync_handler+0x84/0xf0 [ 680.524036][T17918] el0t_64_sync+0x18c/0x190 [ 680.780571][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4706'. [ 681.385116][T17933] binder: 17932:17933 tried to acquire reference to desc 0, got 1 instead [ 681.386946][T17933] binder: 17932:17933 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 681.409872][T17933] binder: 17933 RLIMIT_NICE not set [ 681.439975][T17933] binder: 17933 RLIMIT_NICE not set [ 681.486311][T16508] binder: release 17932:17940 transaction 7 out, still active [ 681.487861][T16508] binder: undelivered TRANSACTION_COMPLETE [ 681.489831][T17941] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4712'. [ 681.498506][T16508] binder: release 17932:17933 transaction 7 in, still active [ 681.499887][T16508] binder: send failed reply for transaction 7, target dead [ 681.583632][T17947] loop2: detected capacity change from 0 to 16 [ 681.585515][T17947] erofs: (device loop2): mounted with root inode @ nid 36. [ 682.069945][T17957] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.4717'. [ 682.523897][T17955] syz.2.4714: attempt to access beyond end of device [ 682.523897][T17955] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 682.663283][T17955] syz.2.4714: attempt to access beyond end of device [ 682.663283][T17955] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 682.853383][T17955] syz.2.4714: attempt to access beyond end of device [ 682.853383][T17955] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 683.073322][ T11] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 683.086802][ T11] (NULL device *): queue 0 connect admin queue failed (-111). [ 683.090225][ T11] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 683.092889][ T11] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 683.229270][T17972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4721'. [ 683.256946][T17972] loop6: detected capacity change from 0 to 8 [ 683.259119][T17975] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.4724'. [ 683.260183][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 683.262426][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.264389][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 683.266007][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.278363][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 683.279941][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.285552][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 683.287147][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.289573][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 683.291160][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.293299][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 683.294826][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.302607][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 683.304332][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.313873][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 683.315549][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.316053][T17979] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.4725'. [ 683.318712][T17972] ldm_validate_partition_table(): Disk read failed. [ 683.326564][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 683.328264][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.332741][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 683.334300][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.350972][T17972] Dev loop6: unable to read RDB block 0 [ 683.354081][T17972] loop6: unable to read partition table [ 683.355200][T17972] loop6: partition table beyond EOD, truncated [ 683.356280][T17972] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 683.359241][T17984] FAULT_INJECTION: forcing a failure. [ 683.359241][T17984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.361250][T17984] CPU: 0 PID: 17984 Comm: syz.2.4726 Not tainted syzkaller #0 [ 683.362565][T17984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 683.364417][T17984] Call trace: [ 683.365047][T17984] dump_backtrace+0x1c4/0x1f0 [ 683.365885][T17984] show_stack+0x2c/0x3c [ 683.366646][T17984] __dump_stack+0x30/0x40 [ 683.367476][T17984] dump_stack_lvl+0xf4/0x15c [ 683.368329][T17984] dump_stack+0x1c/0x5c [ 683.369122][T17984] should_fail_ex+0x3cc/0x524 [ 683.370083][T17984] should_fail+0x14/0x24 [ 683.370878][T17984] should_fail_usercopy+0x20/0x30 [ 683.371786][T17984] copy_msghdr_from_user+0xc4/0x4e0 [ 683.372714][T17984] __sys_sendmsg+0x230/0x374 [ 683.373552][T17984] __arm64_sys_sendmsg+0x80/0x94 [ 683.374482][T17984] invoke_syscall+0x98/0x290 [ 683.375324][T17984] el0_svc_common+0x13c/0x258 [ 683.376148][T17984] do_el0_svc+0x5c/0x134 [ 683.376855][T17984] el0_svc+0x58/0x128 [ 683.377549][T17984] el0t_64_sync_handler+0x84/0xf0 [ 683.378454][T17984] el0t_64_sync+0x18c/0x190 [ 683.446132][T13761] ldm_validate_partition_table(): Disk read failed. [ 683.447610][T13761] Dev loop6: unable to read RDB block 0 [ 683.454772][T13761] loop6: unable to read partition table [ 683.455827][T13761] loop6: partition table beyond EOD, truncated [ 683.467685][T17989] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.4730'. [ 685.065769][T17980] loop0: detected capacity change from 0 to 4096 [ 685.067359][T17980] ntfs3: Unknown parameter 'cgroup.controllers' [ 685.642478][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4729'. [ 686.043104][ T5379] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 686.045860][ T5379] (NULL device *): queue 0 connect admin queue failed (-111). [ 686.050121][ T5379] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 686.051652][ T5379] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 686.597954][T18014] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.4736'. [ 686.711612][T18021] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4739'. [ 686.787521][T18025] netlink: 'syz.0.4741': attribute type 72 has an invalid length. [ 686.976587][T18040] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.4748'. [ 687.360069][T18051] netlink: 'syz.3.4751': attribute type 72 has an invalid length. [ 687.593004][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4749'. [ 687.952774][T18058] FAULT_INJECTION: forcing a failure. [ 687.952774][T18058] name failslab, interval 1, probability 0, space 0, times 0 [ 687.955973][T18064] netlink: 'syz.3.4755': attribute type 72 has an invalid length. [ 687.958149][T18058] CPU: 1 PID: 18058 Comm: syz.1.4753 Not tainted syzkaller #0 [ 687.959546][T18058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 687.961426][T18058] Call trace: [ 687.962114][T18058] dump_backtrace+0x1c4/0x1f0 [ 687.962985][T18058] show_stack+0x2c/0x3c [ 687.963852][T18058] __dump_stack+0x30/0x40 [ 687.964760][T18058] dump_stack_lvl+0xf4/0x15c [ 687.965696][T18058] dump_stack+0x1c/0x5c [ 687.966490][T18058] should_fail_ex+0x3cc/0x524 [ 687.967370][T18058] __should_failslab+0xc0/0x11c [ 687.968246][T18058] should_failslab+0x10/0x28 [ 687.969088][T18058] __kmem_cache_alloc_node+0x7c/0x318 [ 687.970076][T18058] __kmalloc+0xc4/0x180 [ 687.970844][T18058] tomoyo_realpath_from_path+0xc4/0x508 [ 687.971818][T18058] tomoyo_path_number_perm+0x1c4/0x540 [ 687.972762][T18058] tomoyo_file_ioctl+0x2c/0x3c [ 687.973574][T18058] security_file_ioctl+0x80/0xbc [ 687.974396][T18058] __arm64_sys_ioctl+0xa8/0x1c8 [ 687.975250][T18058] invoke_syscall+0x98/0x290 [ 687.976089][T18058] el0_svc_common+0x13c/0x258 [ 687.976900][T18058] do_el0_svc+0x5c/0x134 [ 687.977612][T18058] el0_svc+0x58/0x128 [ 687.978279][T18058] el0t_64_sync_handler+0x84/0xf0 [ 687.979282][T18058] el0t_64_sync+0x18c/0x190 [ 688.088513][ T9] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 688.091000][ T9] (NULL device *): queue 0 connect admin queue failed (-111). [ 688.092323][ T9] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 688.119873][ T9] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 688.151562][T18058] ERROR: Out of memory at tomoyo_realpath_from_path. [ 688.661618][T18082] netlink: 'syz.3.4762': attribute type 72 has an invalid length. [ 688.727043][T18091] netlink: 'syz.4.4765': attribute type 72 has an invalid length. [ 689.176598][T18100] netlink: 'syz.3.4767': attribute type 72 has an invalid length. [ 689.356412][T18121] netlink: 'syz.3.4776': attribute type 72 has an invalid length. [ 689.384282][T18116] overlayfs: missing 'lowerdir' [ 689.420081][T18127] netlink: 'syz.3.4778': attribute type 72 has an invalid length. [ 689.425099][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4772'. [ 689.458080][T18129] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4779'. [ 689.461519][T18130] overlayfs: missing 'lowerdir' [ 689.493593][T18134] FAULT_INJECTION: forcing a failure. [ 689.493593][T18134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.498202][T18134] CPU: 1 PID: 18134 Comm: syz.2.4780 Not tainted syzkaller #0 [ 689.499448][T18134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 689.499768][T18135] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4781'. [ 689.501160][T18134] Call trace: [ 689.501169][T18134] dump_backtrace+0x1c4/0x1f0 [ 689.504160][T18134] show_stack+0x2c/0x3c [ 689.504917][T18134] __dump_stack+0x30/0x40 [ 689.505803][T18134] dump_stack_lvl+0xf4/0x15c [ 689.506588][T18134] dump_stack+0x1c/0x5c [ 689.507331][T18134] should_fail_ex+0x3cc/0x524 [ 689.508116][T18134] should_fail+0x14/0x24 [ 689.508829][T18134] should_fail_usercopy+0x20/0x30 [ 689.509741][T18134] copy_msghdr_from_user+0xc4/0x4e0 [ 689.510661][T18134] __sys_sendmsg+0x230/0x374 [ 689.511587][T18134] __arm64_sys_sendmsg+0x80/0x94 [ 689.512471][T18134] invoke_syscall+0x98/0x290 [ 689.513287][T18134] el0_svc_common+0x13c/0x258 [ 689.514082][T18134] do_el0_svc+0x5c/0x134 [ 689.514826][T18134] el0_svc+0x58/0x128 [ 689.515660][T18134] el0t_64_sync_handler+0x84/0xf0 [ 689.516742][T18134] el0t_64_sync+0x18c/0x190 [ 689.540447][T18137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4763'. [ 690.019941][T18155] netlink: 'syz.0.4787': attribute type 72 has an invalid length. [ 690.071006][T18156] delete_channel: no stack [ 690.134283][T18161] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4790'. [ 690.162619][ T4437] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 690.165041][ T4437] (NULL device *): queue 0 connect admin queue failed (-111). [ 690.166407][ T4437] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 690.167752][ T4437] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 690.177562][T18167] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4793'. [ 690.821773][T18191] overlayfs: missing 'lowerdir' [ 690.894832][T18201] FAULT_INJECTION: forcing a failure. [ 690.894832][T18201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.897685][T18201] CPU: 0 PID: 18201 Comm: syz.3.4805 Not tainted syzkaller #0 [ 690.898972][T18201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 690.900696][T18201] Call trace: [ 690.901298][T18201] dump_backtrace+0x1c4/0x1f0 [ 690.902086][T18201] show_stack+0x2c/0x3c [ 690.902861][T18201] __dump_stack+0x30/0x40 [ 690.903604][T18201] dump_stack_lvl+0xf4/0x15c [ 690.904408][T18201] dump_stack+0x1c/0x5c [ 690.905112][T18201] should_fail_ex+0x3cc/0x524 [ 690.905899][T18201] should_fail+0x14/0x24 [ 690.906663][T18201] should_fail_usercopy+0x20/0x30 [ 690.907538][T18201] copy_from_sockptr+0x70/0x1a8 [ 690.908389][T18201] rds_setsockopt+0x5ac/0xaa0 [ 690.909222][T18201] __sys_setsockopt+0x2fc/0x50c [ 690.910077][T18201] __arm64_sys_setsockopt+0xc0/0xdc [ 690.911040][T18201] invoke_syscall+0x98/0x290 [ 690.911930][T18201] el0_svc_common+0x13c/0x258 [ 690.912744][T18201] do_el0_svc+0x5c/0x134 [ 690.913510][T18201] el0_svc+0x58/0x128 [ 690.914195][T18201] el0t_64_sync_handler+0x84/0xf0 [ 690.915088][T18201] el0t_64_sync+0x18c/0x190 [ 691.049578][T18204] loop0: detected capacity change from 0 to 32768 [ 691.086411][T18204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.4807 (18204) [ 691.115267][T18204] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 691.121175][T18204] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 691.126258][T18204] BTRFS info (device loop0): using free space tree [ 691.287305][T18228] netlink: 'syz.3.4815': attribute type 72 has an invalid length. [ 691.356051][T18204] BTRFS info (device loop0): enabling ssd optimizations [ 691.400738][T18204] Bluetooth: MGMT ver 1.22 [ 691.719709][T18258] loop3: detected capacity change from 0 to 16 [ 691.721589][T18258] erofs: (device loop3): mounted with root inode @ nid 36. [ 691.893969][T18260] syz.3.4821: attempt to access beyond end of device [ 691.893969][T18260] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 691.896685][T18260] syz.3.4821: attempt to access beyond end of device [ 691.896685][T18260] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 691.916119][T18260] syz.3.4821: attempt to access beyond end of device [ 691.916119][T18260] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 692.037949][T18256] loop2: detected capacity change from 0 to 32768 [ 692.095272][T18256] XFS (loop2): Mounting V5 Filesystem [ 692.121448][T18256] XFS (loop2): Ending clean mount [ 692.242693][ T62] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 692.247662][ T62] (NULL device *): queue 0 connect admin queue failed (-111). [ 692.248969][ T62] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 692.250323][ T62] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 692.257662][T18244] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 692.495502][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.550736][T18272] netlink: 'syz.4.4826': attribute type 72 has an invalid length. [ 692.625761][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.646531][T18277] __nla_validate_parse: 8 callbacks suppressed [ 692.646543][T18277] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4828'. [ 692.692295][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 692.696641][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 692.704024][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 692.706739][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 692.712679][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 692.717196][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 692.833730][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.841439][T18285] overlayfs: missing 'lowerdir' [ 692.895211][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4830'. [ 692.899251][T18294] FAULT_INJECTION: forcing a failure. [ 692.899251][T18294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.912859][T18294] CPU: 1 PID: 18294 Comm: syz.1.4832 Not tainted syzkaller #0 [ 692.914261][T18294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 692.916000][T18294] Call trace: [ 692.916595][T18294] dump_backtrace+0x1c4/0x1f0 [ 692.917447][T18294] show_stack+0x2c/0x3c [ 692.918228][T18294] __dump_stack+0x30/0x40 [ 692.918997][T18294] dump_stack_lvl+0xf4/0x15c [ 692.919806][T18294] dump_stack+0x1c/0x5c [ 692.920527][T18294] should_fail_ex+0x3cc/0x524 [ 692.921348][T18294] should_fail+0x14/0x24 [ 692.922065][T18294] should_fail_usercopy+0x20/0x30 [ 692.922960][T18294] copy_msghdr_from_user+0xc4/0x4e0 [ 692.923896][T18294] __sys_sendmsg+0x230/0x374 [ 692.924706][T18294] __arm64_sys_sendmsg+0x80/0x94 [ 692.925549][T18294] invoke_syscall+0x98/0x290 [ 692.926333][T18294] el0_svc_common+0x13c/0x258 [ 692.927171][T18294] do_el0_svc+0x5c/0x134 [ 692.927901][T18294] el0_svc+0x58/0x128 [ 692.928626][T18294] el0t_64_sync_handler+0x84/0xf0 [ 692.929718][T18294] el0t_64_sync+0x18c/0x190 [ 692.962207][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.008288][T18278] macsec0 speed is unknown, defaulting to 1000 [ 693.267181][T18278] chnl_net:caif_netlink_parms(): no params data found [ 693.548513][T18278] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.551397][T18278] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.555732][T18278] device bridge_slave_0 entered promiscuous mode [ 693.601466][T18329] overlayfs: missing 'lowerdir' [ 693.614893][T18278] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.616217][T18278] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.617871][T18278] device bridge_slave_1 entered promiscuous mode [ 693.633759][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4836'. [ 693.855715][T18278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.858402][T18278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.937423][T18278] team0: Port device team_slave_0 added [ 693.939653][T18278] team0: Port device team_slave_1 added [ 693.966089][T18278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.967375][T18278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.971842][T18278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.971872][T18349] netlink: 'syz.4.4841': attribute type 72 has an invalid length. [ 694.124600][T18278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.125977][T18278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.130321][T18278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.255598][T18278] device hsr_slave_0 entered promiscuous mode [ 694.276084][T18278] device hsr_slave_1 entered promiscuous mode [ 694.322717][T18278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 694.323081][ T4914] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 694.324038][T18278] Cannot create hsr debugfs directory [ 694.339530][ T4914] (NULL device *): queue 0 connect admin queue failed (-111). [ 694.340803][ T4914] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 694.342000][ T4914] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 694.575562][ T4387] nvme nvme2: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 694.577743][ T4387] (NULL device *): queue 0 connect admin queue failed (-111). [ 694.579074][ T4387] nvme nvme2: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 694.580354][ T4387] nvme nvme2: NVME-FC{1}: Reconnect attempt in 2 seconds [ 694.581894][T18370] nvme nvme2: NVME-FC{1}: new ctrl: NQN "n" [ 694.632375][T18278] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 694.693997][T18278] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 694.696732][T13857] XFS (loop2): Unmounting Filesystem [ 694.700256][T18377] FAULT_INJECTION: forcing a failure. [ 694.700256][T18377] name failslab, interval 1, probability 0, space 0, times 0 [ 694.702495][T18377] CPU: 0 PID: 18377 Comm: syz.1.4847 Not tainted syzkaller #0 [ 694.703844][T18377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 694.705545][T18377] Call trace: [ 694.706090][T18377] dump_backtrace+0x1c4/0x1f0 [ 694.706915][T18377] show_stack+0x2c/0x3c [ 694.707647][T18377] __dump_stack+0x30/0x40 [ 694.708398][T18377] dump_stack_lvl+0xf4/0x15c [ 694.709221][T18377] dump_stack+0x1c/0x5c [ 694.709923][T18377] should_fail_ex+0x3cc/0x524 [ 694.710722][T18377] __should_failslab+0xc0/0x11c [ 694.711573][T18377] should_failslab+0x10/0x28 [ 694.712389][T18377] __kmem_cache_alloc_node+0x7c/0x318 [ 694.713360][T18377] __kmalloc_node_track_caller+0xb8/0x174 [ 694.714369][T18377] memdup_user_nul+0x5c/0x228 [ 694.715326][T18377] nvmf_dev_write+0xf0/0x2104 [ 694.716267][T18377] vfs_write+0x2a8/0x7c8 [ 694.717119][T18377] ksys_write+0x12c/0x228 [ 694.718001][T18377] __arm64_sys_write+0x7c/0x90 [ 694.718913][T18377] invoke_syscall+0x98/0x290 [ 694.719832][T18377] el0_svc_common+0x13c/0x258 [ 694.720681][T18377] do_el0_svc+0x5c/0x134 [ 694.721417][T18377] el0_svc+0x58/0x128 [ 694.722133][T18377] el0t_64_sync_handler+0x84/0xf0 [ 694.723047][T18377] el0t_64_sync+0x18c/0x190 [ 694.811512][T18278] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 694.812986][ T4338] Bluetooth: hci2: command 0x0409 tx timeout [ 695.000567][T18278] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 695.010161][T18388] overlayfs: missing 'lowerdir' [ 695.049064][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4850'. [ 695.456479][T18401] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4852'. [ 695.775889][T18426] loop1: detected capacity change from 0 to 128 [ 695.791012][T18426] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 695.819628][T18426] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 695.850781][T18278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.867133][T18426] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 695.878218][T18278] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.897763][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 695.899571][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 695.901953][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 695.904456][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 695.906098][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.907342][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.987869][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 695.996209][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 695.998230][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 695.999743][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.001032][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.002836][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 696.005973][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 696.026757][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 696.029279][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 696.038872][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 696.046360][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 696.063840][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 696.070200][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 696.077529][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 696.104233][T18278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.106478][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 696.116596][T14428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 696.118441][T14428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 696.168986][ T9] device hsr_slave_0 left promiscuous mode [ 696.208809][T18457] loop3: detected capacity change from 0 to 16 [ 696.210415][T18451] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4863'. [ 696.210670][T18457] erofs: (device loop3): mounted with root inode @ nid 36. [ 696.280803][ T9] device hsr_slave_1 left promiscuous mode [ 696.342762][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.344195][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.350507][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.351877][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.397901][T18469] syz.3.4865: attempt to access beyond end of device [ 696.397901][T18469] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 696.402597][ T62] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 696.404994][ T62] (NULL device *): queue 0 connect admin queue failed (-111). [ 696.406359][ T62] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 696.407703][ T62] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 696.413542][T18469] syz.3.4865: attempt to access beyond end of device [ 696.413542][T18469] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 696.425198][T18469] syz.3.4865: attempt to access beyond end of device [ 696.425198][T18469] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 696.432814][ T9] device veth1_macvtap left promiscuous mode [ 696.433847][ T9] device veth0_macvtap left promiscuous mode [ 696.434878][ T9] device veth1_vlan left promiscuous mode [ 696.435915][ T9] device veth0_vlan left promiscuous mode [ 696.642908][T14428] nvme nvme2: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 696.645769][T14428] (NULL device *): queue 0 connect admin queue failed (-111). [ 696.647281][T14428] nvme nvme2: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 696.648781][T14428] nvme nvme2: NVME-FC{1}: Reconnect attempt in 2 seconds [ 696.711259][T18477] overlayfs: missing 'lowerdir' [ 696.844249][T18481] overlayfs: missing 'lowerdir' [ 696.893000][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 698.482739][ T62] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 698.485781][ T62] (NULL device *): queue 0 connect admin queue failed (-111). [ 698.487141][ T62] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 698.488576][ T62] nvme nvme1: NVME-FC{0}: Reconnect attempt in 2 seconds [ 698.685457][ T9] team0 (unregistering): Port device team_slave_1 removed [ 698.723147][T14428] nvme nvme2: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 698.725373][T14428] (NULL device *): queue 0 connect admin queue failed (-111). [ 698.726657][T14428] nvme nvme2: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 698.727975][T14428] nvme nvme2: NVME-FC{1}: Reconnect attempt in 2 seconds [ 698.863436][ T9] team0 (unregistering): Port device team_slave_0 removed [ 698.972585][ T4342] Bluetooth: hci2: command 0x040f tx timeout [ 699.023001][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.223125][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.562967][ T4387] nvme nvme1: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn." [ 700.565732][ T4387] (NULL device *): queue 0 connect admin queue failed (-111). [ 700.566926][ T4387] nvme nvme1: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 700.568807][ T4387] nvme nvme1: NVME-FC{0}: Max reconnect attempts (300) reached. [ 700.571764][T14428] nvme nvme1: Removing ctrl: NQN "nqn." [ 700.576527][T14428] ------------[ cut here ]------------ [ 700.577511][T14428] WARNING: CPU: 0 PID: 14428 at block/blk-mq.c:4133 blk_mq_release+0xf0/0x27c [ 700.578984][T14428] Modules linked in: [ 700.579711][T14428] CPU: 0 PID: 14428 Comm: kworker/u4:24 Not tainted syzkaller #0 [ 700.581247][T14428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 700.583079][T14428] Workqueue: nvme-delete-wq nvme_delete_ctrl_work [ 700.584374][T14428] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 700.585800][T14428] pc : blk_mq_release+0xf0/0x27c [ 700.586680][T14428] lr : blk_mq_release+0xf0/0x27c [ 700.587537][T14428] sp : ffff800022967840 [ 700.588306][T14428] x29: ffff8000229678b0 x28: 0000000000000000 x27: 1ffff00002b73fc4 [ 700.589722][T14428] x26: 1fffe00019f8c20e x25: 1fffe00019f8c215 x24: 0000000000000001 [ 700.591155][T14428] x23: dfff800000000000 x22: ffff70000452cf08 x21: ffff800022967840 [ 700.592553][T14428] x20: ffff0000cfacb2a8 x19: ffff0000cfc60f70 x18: 1fffe00033e7277e [ 700.593886][T14428] x17: ffff80000bfdc9bc x16: ffff800011b90080 x15: 0000000000000000 [ 700.595261][T14428] x14: 0000000000000406 x13: 0000000000ff0100 x12: ffff800017d39100 [ 700.596727][T14428] x11: ff0080000a7ce740 x10: 0000000000000000 x9 : ffff80000a7ce740 [ 700.598268][T14428] x8 : ffff0000d6e75400 x7 : ffff800011aa7e88 x6 : 0000000000000000 [ 700.599764][T14428] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 700.601276][T14428] x2 : 0000000000000008 x1 : ffff800011ceedc0 x0 : ffff0000cfacb000 [ 700.602739][T14428] Call trace: [ 700.603304][T14428] blk_mq_release+0xf0/0x27c [ 700.604101][T14428] blk_release_queue+0x108/0x1b0 [ 700.604966][T14428] kobject_put+0x2a8/0x41c [ 700.605763][T14428] blk_put_queue+0x20/0x30 [ 700.606535][T14428] nvme_free_ctrl+0xc4/0x46c [ 700.607298][T14428] device_release+0x94/0x1b4 [ 700.608089][T14428] kobject_put+0x2a8/0x41c [ 700.608885][T14428] put_device+0x28/0x40 [ 700.609610][T14428] nvme_do_delete_ctrl+0x1d8/0x1f4 [ 700.610496][T14428] nvme_delete_ctrl_work+0x20/0x30 [ 700.611356][T14428] process_one_work+0x7e4/0x13bc [ 700.612207][T14428] worker_thread+0x8cc/0xfe8 [ 700.613008][T14428] kthread+0x254/0x2e0 [ 700.613768][T14428] ret_from_fork+0x10/0x20 [ 700.614511][T14428] irq event stamp: 2529004 [ 700.615293][T14428] hardirqs last enabled at (2529003): [] kasan_quarantine_put+0xc4/0x200 [ 700.617038][T14428] hardirqs last disabled at (2529004): [] el1_dbg+0x24/0x80 [ 700.618554][T14428] softirqs last enabled at (2528408): [] handle_softirqs+0xb1c/0xc90 [ 700.620209][T14428] softirqs last disabled at (2528377): [] __do_softirq+0x14/0x20 [ 700.621806][T14428] ---[ end trace 0000000000000000 ]--- [ 700.754051][ T9] bond0 (unregistering): Released all slaves [ 700.802860][ T4437] nvme nvme2: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 700.805148][ T4437] (NULL device *): queue 0 connect admin queue failed (-111). [ 700.806368][ T4437] nvme nvme2: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 700.807698][ T4437] nvme nvme2: NVME-FC{1}: Reconnect attempt in 2 seconds [ 700.884551][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 700.895028][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4867'. [ 700.989284][T18278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.990990][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.992416][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 701.043519][ T4342] Bluetooth: hci2: command 0x0419 tx timeout [ 701.114968][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 701.116893][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 701.129856][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 701.131676][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.145175][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 701.147592][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 701.151214][T18278] device veth0_vlan entered promiscuous mode [ 701.154877][T18278] device veth1_vlan entered promiscuous mode [ 701.162308][T18278] device veth0_macvtap entered promiscuous mode [ 701.166758][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 701.168661][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 701.170497][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 701.172099][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.177625][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 701.180725][T18278] device veth1_macvtap entered promiscuous mode [ 701.188764][T18278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.190592][T18278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.192175][T18278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.194465][T18278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.196192][T18278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.197832][T18278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.199396][T18278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.201088][T18278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.203716][T18278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.205811][T18278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.208211][T18278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.209402][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 701.210882][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 701.212473][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.218014][T18278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.219697][T18278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.221173][T18278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.223285][T18278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.225067][T18278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.226983][T18278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.228671][T18278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.233152][T18278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.235028][T18278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.236955][T18278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.246741][T18278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.248798][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 701.250722][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.255489][T18278] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.257306][T18278] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.258937][T18278] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.260513][T18278] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.295250][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.296734][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.298045][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 701.316636][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.318211][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.319668][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 702.882684][ T5121] nvme nvme2: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 702.885003][ T5121] (NULL device *): queue 0 connect admin queue failed (-111). [ 702.886621][ T5121] nvme nvme2: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 702.888035][ T5121] nvme nvme2: NVME-FC{1}: Reconnect attempt in 2 seconds [ 704.962849][ T4387] nvme nvme2: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 704.966131][ T4387] (NULL device *): queue 0 connect admin queue failed (-111). [ 704.967466][ T4387] nvme nvme2: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 704.968818][ T4387] nvme nvme2: NVME-FC{1}: Reconnect attempt in 2 seconds [ 707.046074][ T5121] nvme nvme2: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 707.048351][ T5121] (NULL device *): queue 0 connect admin queue failed (-111). [ 707.049582][ T5121] nvme nvme2: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 707.050828][ T5121] nvme nvme2: NVME-FC{1}: Reconnect attempt in 2 seconds [ 709.122746][ T5121] nvme nvme2: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 709.125132][ T5121] (NULL device *): queue 0 connect admin queue failed (-111). [ 709.126520][ T5121] nvme nvme2: NVME-FC{1}: reset: Reconnect attempt failed (-111) [ 709.127813][ T5121] nvme nvme2: NVME-FC{1}: Reconnect attempt in 2 seconds