last executing test programs: 3.479998643s ago: executing program 1 (id=3331): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x208, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/128, 0x80}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc0) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 2.700606458s ago: executing program 2 (id=3346): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000340)="dab21893738567132a3dc52e13cbf903e064055d98736be7e2ee9668845fa45220f1a5c9687c01274d5268f23e30e8b99f7eceb0422b7a608243bb44e1bb", 0x3e}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad628fdf1055f9a162c4bdcf92299f9fd91255c5feb4a3c84e667fde0ac41804910f4d0d27537c7a", 0x4e}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16c3c64ebcecade0b529986f4cfbcfa9c1c7138091b2ba9da4c7af757ac4d7990bfb36460a2eaaa3b786e6a14e457460793e0fdd4bdc6ef20050bc1ae8a5de6e0f84a007c740a9d6f1169a9b196652b0ee3e9d2dd06ceed86138dc7ea8d0b6008006a35b3b12ceb214a1bce15b331645838c46f05e795480581f4c0139875a430447", 0xbb}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 2.699561258s ago: executing program 2 (id=3347): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7fffffff, 0x2, 0x200}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000017000000000000000000000018120000", @ANYRES8=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000004c0)={'veth1_to_team\x00', {0x2, 0x0, @remote}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8}, {0xe, 0x3}, {0x6}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x30, 0x30, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000280)=""/47, 0x4f, 0x2f, 0x0, 0xbb}, 0x28) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xfffffbc2}}, './file0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x6602, 0x300000, 0x200, 0xd395eb426034d7cc, r1, 0x5, '\x00', r4, r6, 0x2, 0x4, 0x4, 0x5, @value=r7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r11}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000003c0)={@remote, 0x39}) shutdown(r0, 0x1) 2.543235161s ago: executing program 1 (id=3349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000e207000700e00000020800020005000000080008"], 0x34}}, 0x0) 2.457025443s ago: executing program 2 (id=3350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000a00)=@gcm_128={{0x303}, "000008000000049e", "0014ffff00000000000010d200001c00", "91b890f4", "bc0f590600000031"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a", 0xf, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 2.441414023s ago: executing program 2 (id=3352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kfree\x00', r0, 0x0, 0x20000000003}, 0x18) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) unshare(0x2000400) fsmount(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) 2.353412245s ago: executing program 2 (id=3353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5c00ffff", 0x4, 0x0, 0x0, 0x2}]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) 1.819727455s ago: executing program 1 (id=3361): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) fcntl$setpipe(r2, 0x407, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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") 1.771184066s ago: executing program 3 (id=3362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000a00)=@gcm_128={{0x303}, "000008000000049e", "0014ffff00000000000010d200001c00", "91b890f4", "bc0f590600000031"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a", 0xf, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 1.770804906s ago: executing program 3 (id=3363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8f6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.718389917s ago: executing program 1 (id=3364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000680), 0x8, 0xb3, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r3], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8a, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x18) mincore(&(0x7f0000048000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/26) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f0000000400)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x29, 0x0, &(0x7f00000010c0)) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000140)=0x2, 0x3) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r12 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r12, &(0x7f0000000000)='\x00', 0x22, 0x1100) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a318b0000001400038008000140000000000800024000000000140000001000010000000000000000000000000a"], 0x88}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r13, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1.718147567s ago: executing program 3 (id=3365): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0xfff0, &(0x7f0000000080)={&(0x7f0000005bc0)=ANY=[@ANYBLOB="3c00000010000b00"/20, @ANYRES32=0x0, @ANYBLOB="f2240000000000001c0012800b0001006d616373656300000c000280050003"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.657325028s ago: executing program 3 (id=3366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB], 0x44}}, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc044) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r9, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x1, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x28, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000007740)={0x1400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 1.455727872s ago: executing program 2 (id=3369): getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x9, [0x2, 0xd8d1, 0x5, 0x8, 0xb3, 0x9, 0x8, 0xb6d9, 0x9]}, &(0x7f0000000180)=0x16) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4c844) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.249404046s ago: executing program 4 (id=3374): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x5, 0x7ffc0204}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) mlockall(0x2) 1.236710997s ago: executing program 4 (id=3375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kfree\x00', r0, 0x0, 0x20000000003}, 0x18) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) unshare(0x2000400) fsmount(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) 1.153303048s ago: executing program 4 (id=3377): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) syz_read_part_table(0x4079, &(0x7f0000008100)="$eJzs079KwlEUB/CjQ0EtFj3A3SKQ+PknySkqGhrMwamxwkIQg7RwaekReoseqQfoOQzMIH7lYEFBfD7Tufd7z+UsZ/XlaT8iCo+3g944cooRMZlWe8WIQkTUZ0kh/3R41eufnXf7b13FfMzCSnPu7x9mxdLif26uRZykiFgZPW8c/mQ6/onlrdOPx8nU5/3+nuODVmoftVLWaFQ7lWp6V0u17OuOLMvmJL9tvdS5HKe77s2wdz1IO9u1cmpfjFJlt5wqzWb9r8cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3USnRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAAD//9PYIT4=") timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(r1, &(0x7f0000000140)) write$cgroup_int(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000340)=0x0) io_cancel(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8001, r0, &(0x7f0000000380)="ef32a3809c7b4eec139845e8d92fb267ae25ed26a602ee492b1fd0df0aa71fda36d427453006717cd58490903937315b0bab07b1aaaffa58c9e64f5dd2c09eed6e1e0580d442771e5786d0d2b1138825d878a7caadf1290ed82be101de43a9ff4dd69f6fb8ca459e119e32442c7ebf807dd1c073d2c77229bfdec383b5a3afab5108e5de4f36", 0x86, 0x2, 0x0, 0x2, r0}, &(0x7f00000004c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000040000000c00000000", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='cachefiles_mark_inactive\x00', r4}, 0x18) r5 = socket(0xa, 0x4, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x701) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f50014060100000000000000000000fffffe8000000000000000000000000000aa00004e2200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 688.532137ms ago: executing program 1 (id=3379): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 558.459849ms ago: executing program 4 (id=3380): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000007c0)=0x10) 557.52594ms ago: executing program 3 (id=3381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r2, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) socket(0x10, 0x3, 0x0) r3 = socket(0x2, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r5, 0x6d}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000007c0)=0x10) 498.879211ms ago: executing program 1 (id=3383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x8, 0x20, 0x88b, 0x70c3, {{0x2c, 0x4, 0x1, 0x4, 0xb0, 0x68, 0x0, 0x8, 0x2f, 0x0, @loopback, @local, {[@ssrr={0x89, 0xb, 0x2b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x39}]}, @ra={0x94, 0x4, 0x1}, @end, @generic={0x94, 0x5, "f4c974"}, @timestamp_prespec={0x44, 0x14, 0xab, 0x3, 0x1, [{@multicast2, 0x9}, {@remote, 0xfffff70e}]}, @lsrr={0x83, 0xb, 0xd2, [@local, @rand_addr=0x64010101]}, @generic={0x82, 0xc, "5856ac8e7e5b7e7df30b"}, @timestamp_addr={0x44, 0x34, 0xa3, 0x1, 0x3, [{@multicast1, 0x5}, {@multicast1, 0x4c708ae}, {@local, 0x2}, {@rand_addr=0x64010102, 0x3}, {@rand_addr=0x64010101, 0xb2}, {@loopback, 0x2}]}, @ssrr={0x89, 0x27, 0xfc, [@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x800, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xb}}}, 0x24}}, 0x800) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x4) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000001540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="5e54cd59", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf25170000004800018014000200626f6e645f736c6176655f30000000000800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014000180080003000200000008000300010000001400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000200001800800030002000000140002006970766c616e31000000000000000000780001801400020067726530000000000000000000000000140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000048000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f6d616376746170000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="4000018008000100", @ANYRES32=r7, @ANYBLOB="1400020064756d6d79300000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="080003000200000008000300010000000800030002000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x800}, 0x44010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0xffa8) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r12 = socket$igmp6(0xa, 0x3, 0x2) r13 = socket$kcm(0x2, 0xa, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) stat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000200)=@nullb, r14, &(0x7f0000000400)='./file1\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r12, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 486.379221ms ago: executing program 4 (id=3384): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xbfb}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb5a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001380)={'#! ', '', [], 0xa, "9483dfd6ac"}, 0x9) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 448.703682ms ago: executing program 0 (id=3386): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10, 0x14}, 0x4000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) syz_io_uring_setup(0x4e0, 0x0, &(0x7f0000000040), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r3) socket(0x11, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) 348.229494ms ago: executing program 4 (id=3387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5c00ffff", 0x4, 0x0, 0x0, 0x2}]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) 206.951856ms ago: executing program 0 (id=3388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 177.771287ms ago: executing program 0 (id=3389): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000020000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 108.683488ms ago: executing program 0 (id=3390): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 84.653919ms ago: executing program 3 (id=3391): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) syz_read_part_table(0x4079, &(0x7f0000008100)="$eJzs079KwlEUB/CjQ0EtFj3A3SKQ+PknySkqGhrMwamxwkIQg7RwaekReoseqQfoOQzMIH7lYEFBfD7Tufd7z+UsZ/XlaT8iCo+3g944cooRMZlWe8WIQkTUZ0kh/3R41eufnXf7b13FfMzCSnPu7x9mxdLif26uRZykiFgZPW8c/mQ6/onlrdOPx8nU5/3+nuODVmoftVLWaFQ7lWp6V0u17OuOLMvmJL9tvdS5HKe77s2wdz1IO9u1cmpfjFJlt5wqzWb9r8cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3USnRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAAD//9PYIT4=") timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(r1, &(0x7f0000000140)) write$cgroup_int(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000340)=0x0) io_cancel(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8001, r0, &(0x7f0000000380)="ef32a3809c7b4eec139845e8d92fb267ae25ed26a602ee492b1fd0df0aa71fda36d427453006717cd58490903937315b0bab07b1aaaffa58c9e64f5dd2c09eed6e1e0580d442771e5786d0d2b1138825d878a7caadf1290ed82be101de43a9ff4dd69f6fb8ca459e119e32442c7ebf807dd1c073d2c77229bfdec383b5a3afab5108e5de4f36", 0x86, 0x2, 0x0, 0x2, r0}, &(0x7f00000004c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000040000000c00000000", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='cachefiles_mark_inactive\x00', r4}, 0x18) r5 = socket(0xa, 0x4, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x701) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f50014060100000000000000000000fffffe8000000000000000000000000000aa00004e2200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 29.25432ms ago: executing program 0 (id=3392): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x5, 0x7ffc0204}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) mlockall(0x2) 0s ago: executing program 0 (id=3393): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)={0x3b, 0x8, 0x1, 0x7, 0x0, [@loopback, @empty, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x48) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x9, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x2}}]}, 0x48}}, 0x4040014) kernel console output (not intermixed with test programs): [ T2226] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.204682][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 169.215274][T11358] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3050: casefold flag without casefold feature [ 169.228271][T11358] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3050: couldn't read orphan inode 15 (err -117) [ 169.247359][T11358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.259964][T11327] hsr_slave_0: entered promiscuous mode [ 169.266022][T11327] hsr_slave_1: entered promiscuous mode [ 169.271826][T11327] debugfs: 'hsr0' already exists in 'hsr' [ 169.277567][T11327] Cannot create hsr debugfs directory [ 169.349830][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.350313][ T419] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.398794][ T419] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.436434][ T419] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.456258][T11327] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.480662][T11365] loop3: detected capacity change from 0 to 512 [ 169.498947][T11365] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3052: casefold flag without casefold feature [ 169.515369][T11365] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3052: couldn't read orphan inode 15 (err -117) [ 169.529316][T11365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.556467][T11327] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.568248][T10503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.604726][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.612408][T11377] loop3: detected capacity change from 0 to 512 [ 169.620397][T11327] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.633637][T11377] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 169.641828][T11377] System zones: 1-12 [ 169.647036][T11377] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3057: Directory hole found for htree index block 0 [ 169.659784][T11377] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 169.669228][T11377] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3057: Directory hole found for htree index block 0 [ 169.683871][T11327] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.704697][T11377] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 169.724975][T11377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.785885][T10503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.841789][T11380] loop4: detected capacity change from 0 to 8192 [ 169.849635][T11380] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.166701][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3061'. [ 170.244759][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 170.288297][T11327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.297721][T11327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.309374][T11327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.319547][T11327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.422881][T11327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.595401][T11327] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.613964][T11327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.624416][T11327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.644665][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.679527][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.686616][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.751594][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3063'. [ 170.829100][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.836184][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.093174][T11327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.217372][T11327] veth0_vlan: entered promiscuous mode [ 171.233676][T11327] veth1_vlan: entered promiscuous mode [ 171.271754][T11327] veth0_macvtap: entered promiscuous mode [ 171.280828][T11327] veth1_macvtap: entered promiscuous mode [ 171.284702][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 171.293822][T11424] loop0: detected capacity change from 0 to 128 [ 171.294302][T11327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.313761][T11327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.354795][ T1017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.364041][ T1017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.373127][ T1017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.398173][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.485695][T11437] loop0: detected capacity change from 0 to 1024 [ 171.492567][T11437] EXT4-fs: Ignoring removed oldalloc option [ 171.498594][T11437] EXT4-fs: Ignoring removed i_version option [ 171.506178][T11437] EXT4-fs: Ignoring removed orlov option [ 171.512344][T11437] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 171.543945][T11439] FAULT_INJECTION: forcing a failure. [ 171.543945][T11439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.557140][T11439] CPU: 0 UID: 0 PID: 11439 Comm: syz.1.3073 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.557163][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.557175][T11439] Call Trace: [ 171.557181][T11439] [ 171.557188][T11439] __dump_stack+0x1d/0x30 [ 171.557217][T11439] dump_stack_lvl+0xe8/0x140 [ 171.557239][T11439] dump_stack+0x15/0x1b [ 171.557252][T11439] should_fail_ex+0x265/0x280 [ 171.557272][T11439] should_fail+0xb/0x20 [ 171.557289][T11439] should_fail_usercopy+0x1a/0x20 [ 171.557393][T11439] _copy_from_user+0x1c/0xb0 [ 171.557466][T11439] sg_write+0x1ed/0x750 [ 171.557502][T11439] vfs_writev+0x406/0x8b0 [ 171.557607][T11439] ? __pfx_sg_write+0x10/0x10 [ 171.557637][T11439] do_writev+0xe7/0x210 [ 171.557712][T11439] __x64_sys_writev+0x45/0x50 [ 171.557812][T11439] x64_sys_call+0x1e9a/0x2ff0 [ 171.557837][T11439] do_syscall_64+0xd2/0x200 [ 171.557864][T11439] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.557890][T11439] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.557959][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.558045][T11439] RIP: 0033:0x7f57f39feba9 [ 171.558062][T11439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.558104][T11439] RSP: 002b:00007f57f245f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 171.558125][T11439] RAX: ffffffffffffffda RBX: 00007f57f3c45fa0 RCX: 00007f57f39feba9 [ 171.558139][T11439] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 171.558153][T11439] RBP: 00007f57f245f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.558167][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.558179][T11439] R13: 00007f57f3c46038 R14: 00007f57f3c45fa0 R15: 00007fff56edd088 [ 171.558294][T11439] [ 171.746213][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 171.795255][T11437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.876304][T11445] loop1: detected capacity change from 0 to 512 [ 171.905211][T11445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 171.914560][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 171.920842][ T29] audit: type=1326 audit(1758250039.522:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a48eba9 code=0x7fc00000 [ 171.933527][T11445] System zones: [ 171.944408][ T29] audit: type=1326 audit(1758250039.522:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd1a48eba9 code=0x7fc00000 [ 171.944442][ T29] audit: type=1326 audit(1758250039.522:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a48eba9 code=0x7fc00000 [ 171.948001][T11445] 1-12 [ 171.971402][ T29] audit: type=1326 audit(1758250039.522:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a48eba9 code=0x7fc00000 [ 171.994812][T11445] [ 171.997519][ T29] audit: type=1326 audit(1758250039.522:9613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a48eba9 code=0x7fc00000 [ 172.046805][ T29] audit: type=1326 audit(1758250039.532:9614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a48eba9 code=0x7fc00000 [ 172.050745][T11445] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3075: Directory hole found for htree index block 0 [ 172.070283][ T29] audit: type=1326 audit(1758250039.532:9615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a48eba9 code=0x7fc00000 [ 172.106146][ T29] audit: type=1326 audit(1758250039.532:9616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a48eba9 code=0x7fc00000 [ 172.124852][T11445] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 172.129705][ T29] audit: type=1326 audit(1758250039.532:9617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a48eba9 code=0x7fc00000 [ 172.161321][ T29] audit: type=1326 audit(1758250039.532:9618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.0.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1a48eba9 code=0x7fc00000 [ 172.192259][T11445] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3075: Directory hole found for htree index block 0 [ 172.207413][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.215449][T11445] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 172.225009][T11445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.247930][T11443] loop3: detected capacity change from 0 to 32768 [ 172.279530][T11327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.319328][T11462] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 172.326700][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 172.439454][T11469] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.451412][T11456] loop2: detected capacity change from 0 to 32768 [ 172.476795][T11472] loop4: detected capacity change from 0 to 512 [ 172.492120][T11472] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 172.504641][T11472] EXT4-fs (loop4): Remounting filesystem read-only [ 172.511272][T11472] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 172.521694][T11472] EXT4-fs (loop4): 1 orphan inode deleted [ 172.527786][T11472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.548300][T11472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.588851][T11472] sch_fq: defrate 4294967295 ignored. [ 172.639412][T11467] lo speed is unknown, defaulting to 1000 [ 172.739155][T11492] loop2: detected capacity change from 0 to 128 [ 172.746979][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 172.804697][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 172.846021][T11495] loop2: detected capacity change from 0 to 1024 [ 172.864492][T11495] EXT4-fs: Ignoring removed oldalloc option [ 172.870514][T11495] EXT4-fs: Ignoring removed i_version option [ 172.876721][T11495] EXT4-fs: Ignoring removed orlov option [ 172.893039][T11467] chnl_net:caif_netlink_parms(): no params data found [ 172.894691][T11495] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 172.929516][T11495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.938341][T11502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3087'. [ 172.962070][T11467] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.969184][T11467] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.976375][T11467] bridge_slave_0: entered allmulticast mode [ 172.982883][T11467] bridge_slave_0: entered promiscuous mode [ 172.990081][T11467] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.997197][T11467] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.004517][T11467] bridge_slave_1: entered allmulticast mode [ 173.011082][T11467] bridge_slave_1: entered promiscuous mode [ 173.026763][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'. [ 173.045345][T11467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.059091][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.066372][T11467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.096590][T11511] loop2: detected capacity change from 0 to 512 [ 173.104030][T11467] team0: Port device team_slave_0 added [ 173.112078][T11511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 173.116026][T11467] team0: Port device team_slave_1 added [ 173.126568][T11511] System zones: 1-12 [ 173.130613][T11511] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3090: Directory hole found for htree index block 0 [ 173.153908][T11511] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 173.185641][T11467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.192589][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.213810][T11516] loop3: detected capacity change from 0 to 8192 [ 173.218713][T11467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.225997][T11511] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3090: Directory hole found for htree index block 0 [ 173.248196][T11511] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 173.258167][T11511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.274449][T11467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.274764][T11516] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.281612][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.318036][T11467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.343507][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.364697][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 173.372364][T11518] loop2: detected capacity change from 0 to 512 [ 173.392599][T11467] hsr_slave_0: entered promiscuous mode [ 173.398797][T11518] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3093: casefold flag without casefold feature [ 173.413328][T11467] hsr_slave_1: entered promiscuous mode [ 173.419375][T11467] debugfs: 'hsr0' already exists in 'hsr' [ 173.425135][T11467] Cannot create hsr debugfs directory [ 173.434455][T11518] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3093: couldn't read orphan inode 15 (err -117) [ 173.505155][T11518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.539204][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.560158][T11467] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.580193][T11523] IPVS: stopping master sync thread 11524 ... [ 173.586519][T11524] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 173.613304][T11523] loop2: detected capacity change from 0 to 2048 [ 173.636368][T11467] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.666302][T11516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 173.675122][T11516] FAT-fs (loop3): Filesystem has been set read-only [ 173.682158][T11516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 173.691644][T11516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 173.706314][T11467] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.731351][T11523] loop2: unable to read partition table [ 173.738289][T11523] loop2: partition table beyond EOD, truncated [ 173.744542][T11523] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 173.766313][T11467] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.805005][T11526] loop2: detected capacity change from 0 to 1024 [ 173.826072][T10503] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 173.844774][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.875605][T11467] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.884335][T11467] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.885996][T11530] netlink: 'syz.3.3096': attribute type 1 has an invalid length. [ 173.897086][T11530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.904043][T11534] rdma_op ffff8881278cad80 conn xmit_rdma 0000000000000000 [ 173.913310][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'. [ 174.033784][T11530] bond1 (unregistering): Released all slaves [ 174.040145][T11467] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.054018][T11469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.064285][T11467] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.404841][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 174.552316][T11467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.561690][T11467] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.565958][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.575906][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.588517][T11561] FAULT_INJECTION: forcing a failure. [ 174.588517][T11561] name failslab, interval 1, probability 0, space 0, times 0 [ 174.595416][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.601317][T11561] CPU: 0 UID: 0 PID: 11561 Comm: syz.3.3105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.601428][T11561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 174.601510][T11561] Call Trace: [ 174.601518][T11561] [ 174.601526][T11561] __dump_stack+0x1d/0x30 [ 174.601553][T11561] dump_stack_lvl+0xe8/0x140 [ 174.601579][T11561] dump_stack+0x15/0x1b [ 174.601662][T11561] should_fail_ex+0x265/0x280 [ 174.601693][T11561] should_failslab+0x8c/0xb0 [ 174.601725][T11561] kmem_cache_alloc_node_noprof+0x57/0x320 [ 174.601815][T11561] ? __alloc_skb+0x101/0x320 [ 174.601844][T11561] __alloc_skb+0x101/0x320 [ 174.601889][T11561] netlink_alloc_large_skb+0xba/0xf0 [ 174.601920][T11561] netlink_sendmsg+0x3cf/0x6b0 [ 174.601978][T11561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.602011][T11561] __sock_sendmsg+0x145/0x180 [ 174.602098][T11561] sock_write_iter+0x165/0x1b0 [ 174.602177][T11561] do_iter_readv_writev+0x499/0x540 [ 174.602214][T11561] vfs_writev+0x2df/0x8b0 [ 174.602286][T11561] do_writev+0xe7/0x210 [ 174.602343][T11561] __x64_sys_writev+0x45/0x50 [ 174.602375][T11561] x64_sys_call+0x1e9a/0x2ff0 [ 174.602401][T11561] do_syscall_64+0xd2/0x200 [ 174.602468][T11561] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.602548][T11561] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 174.602627][T11561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.602652][T11561] RIP: 0033:0x7fd08304eba9 [ 174.602670][T11561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.602754][T11561] RSP: 002b:00007fd081aaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 174.602776][T11561] RAX: ffffffffffffffda RBX: 00007fd083295fa0 RCX: 00007fd08304eba9 [ 174.602791][T11561] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000006 [ 174.602805][T11561] RBP: 00007fd081aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 174.602834][T11561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.602850][T11561] R13: 00007fd083296038 R14: 00007fd083295fa0 R15: 00007fff4ca329d8 [ 174.602874][T11561] [ 174.817106][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.825601][T11563] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3106'. [ 174.845052][T11563] 0ªX¹¦D: renamed from gretap0 (while UP) [ 174.852390][T11563] 0ªX¹¦D: entered allmulticast mode [ 174.858504][T11563] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 174.882500][T11467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.892942][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 174.955292][T11577] loop3: detected capacity change from 0 to 512 [ 174.964011][T11577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 174.968040][T11467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.979635][T11577] System zones: 1-12 [ 174.987635][T11577] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3110: Directory hole found for htree index block 0 [ 175.000390][T11577] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 175.009392][T11577] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3110: Directory hole found for htree index block 0 [ 175.031030][T11577] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 175.039629][T11577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.055730][T11590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3113'. [ 175.083963][T11594] 9pnet_fd: Insufficient options for proto=fd [ 175.089047][T11467] veth0_vlan: entered promiscuous mode [ 175.099941][T11467] veth1_vlan: entered promiscuous mode [ 175.106156][T10503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.115662][T11467] veth0_macvtap: entered promiscuous mode [ 175.134916][T11594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.157996][T11601] loop4: detected capacity change from 0 to 512 [ 175.161545][T11467] veth1_macvtap: entered promiscuous mode [ 175.167366][T11601] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3116: casefold flag without casefold feature [ 175.179984][T11467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.191278][T11601] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3116: couldn't read orphan inode 15 (err -117) [ 175.196971][T11467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.215852][T11604] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3117'. [ 175.217620][ T419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.235431][ T419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.245055][T11601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.248434][T11606] Invalid ELF header magic: != ELF [ 175.268271][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.277801][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.289576][T10890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.318974][T11610] syz_tun: refused to change device tx_queue_len [ 175.351245][T11616] sch_fq: defrate 4294967295 ignored. [ 175.355441][T11617] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3122'. [ 175.387763][T11619] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.399031][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3124'. [ 175.399918][T11623] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.437249][T11619] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.444738][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 175.476691][T11623] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.516518][T11619] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.556366][T11623] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.575122][T11628] loop0: detected capacity change from 0 to 32768 [ 175.596695][T11619] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.636831][T11623] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.681783][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.693439][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.708435][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.719709][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.745115][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.762100][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.779550][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.791082][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.810484][T11632] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.856642][T11632] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.878048][T11469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.901323][T11642] loop2: detected capacity change from 0 to 1024 [ 175.917845][T11632] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.927835][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 175.935533][T11642] ext3: Bad value for 'mb_optimize_scan' [ 175.956785][T11645] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3134'. [ 175.969701][T11469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.989651][T11638] loop0: detected capacity change from 0 to 32768 [ 175.997229][T11646] FAULT_INJECTION: forcing a failure. [ 175.997229][T11646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.010400][T11646] CPU: 1 UID: 0 PID: 11646 Comm: syz.2.3133 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.010429][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.010443][T11646] Call Trace: [ 176.010452][T11646] [ 176.010459][T11646] __dump_stack+0x1d/0x30 [ 176.010564][T11646] dump_stack_lvl+0xe8/0x140 [ 176.010585][T11646] dump_stack+0x15/0x1b [ 176.010599][T11646] should_fail_ex+0x265/0x280 [ 176.010628][T11646] should_fail+0xb/0x20 [ 176.010698][T11646] should_fail_usercopy+0x1a/0x20 [ 176.010728][T11646] _copy_from_user+0x1c/0xb0 [ 176.010763][T11646] __copy_msghdr+0x244/0x300 [ 176.010796][T11646] ___sys_sendmsg+0x109/0x1d0 [ 176.010895][T11646] __x64_sys_sendmsg+0xd4/0x160 [ 176.010933][T11646] x64_sys_call+0x191e/0x2ff0 [ 176.010959][T11646] do_syscall_64+0xd2/0x200 [ 176.010989][T11646] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 176.011044][T11646] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.011211][T11646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.011331][T11646] RIP: 0033:0x7fed813ceba9 [ 176.011348][T11646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.011417][T11646] RSP: 002b:00007fed7fe16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.011435][T11646] RAX: ffffffffffffffda RBX: 00007fed81616090 RCX: 00007fed813ceba9 [ 176.011446][T11646] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 176.011456][T11646] RBP: 00007fed7fe16090 R08: 0000000000000000 R09: 0000000000000000 [ 176.011467][T11646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.011477][T11646] R13: 00007fed81616128 R14: 00007fed81616090 R15: 00007ffccec3da78 [ 176.011503][T11646] [ 176.024384][T11632] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.097882][ T419] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.097915][ T419] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.102614][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.117535][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.238718][T11656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3136'. [ 176.297154][T11658] loop1: detected capacity change from 0 to 1024 [ 176.332368][T11658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.380394][T11327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.406980][T11667] netlink: 'syz.0.3140': attribute type 3 has an invalid length. [ 176.432527][T11669] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.454533][T11669] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.484682][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 176.506430][T11669] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.508672][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3144'. [ 176.528139][T11673] loop3: detected capacity change from 0 to 8192 [ 176.529018][T11673] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.557411][T11669] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.680847][T11682] loop0: detected capacity change from 0 to 1024 [ 176.688004][T11682] EXT4-fs: Ignoring removed oldalloc option [ 176.688022][T11682] EXT4-fs: Ignoring removed i_version option [ 176.688162][T11682] EXT4-fs: Ignoring removed orlov option [ 176.688621][T11682] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 176.707415][T11686] sch_fq: defrate 4294967295 ignored. [ 176.769374][T11693] netlink: 'syz.2.3152': attribute type 64 has an invalid length. [ 176.922168][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 176.922183][ T29] audit: type=1326 audit(1758250044.532:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd083045b67 code=0x7ffc0000 [ 176.951994][ T29] audit: type=1326 audit(1758250044.532:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd082feada9 code=0x7ffc0000 [ 176.975543][ T29] audit: type=1326 audit(1758250044.532:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd08304eba9 code=0x7ffc0000 [ 177.000139][T11703] lo speed is unknown, defaulting to 1000 [ 177.003715][ T29] audit: type=1326 audit(1758250044.582:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd083045b67 code=0x7ffc0000 [ 177.029413][ T29] audit: type=1326 audit(1758250044.582:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd082feada9 code=0x7ffc0000 [ 177.030003][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3155'. [ 177.052887][ T29] audit: type=1326 audit(1758250044.582:9958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd08304eba9 code=0x7ffc0000 [ 177.053008][ T29] audit: type=1326 audit(1758250044.582:9959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd083045b67 code=0x7ffc0000 [ 177.108728][ T29] audit: type=1326 audit(1758250044.582:9960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd082feada9 code=0x7ffc0000 [ 177.132261][ T29] audit: type=1326 audit(1758250044.582:9961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd08304eba9 code=0x7ffc0000 [ 177.150110][T11703] chnl_net:caif_netlink_parms(): no params data found [ 177.155644][ T29] audit: type=1326 audit(1758250044.592:9962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd083045b67 code=0x7ffc0000 [ 177.207911][T11703] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.215006][T11703] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.222243][T11703] bridge_slave_0: entered allmulticast mode [ 177.229406][T11703] bridge_slave_0: entered promiscuous mode [ 177.240046][ T37] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.252777][T11703] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.259892][T11703] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.267163][T11703] bridge_slave_1: entered allmulticast mode [ 177.273919][T11703] bridge_slave_1: entered promiscuous mode [ 177.287287][T11703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.297911][ T37] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.300136][T11726] loop0: detected capacity change from 0 to 512 [ 177.315208][T11703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.326146][T11726] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 177.338978][T11726] EXT4-fs (loop0): Remounting filesystem read-only [ 177.345538][T11726] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 177.355761][T11726] EXT4-fs (loop0): 1 orphan inode deleted [ 177.362714][ T37] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.376448][T11703] team0: Port device team_slave_0 added [ 177.383360][T11703] team0: Port device team_slave_1 added [ 177.399952][T11703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.406933][T11703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.432885][T11703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.444271][T11703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.451304][T11703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.452657][T11729] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.477209][T11703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.508532][ T37] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.523058][T11703] hsr_slave_0: entered promiscuous mode [ 177.528703][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 177.536495][T11703] hsr_slave_1: entered promiscuous mode [ 177.542410][T11703] debugfs: 'hsr0' already exists in 'hsr' [ 177.548243][T11703] Cannot create hsr debugfs directory [ 177.630490][ T37] bridge_slave_1: left allmulticast mode [ 177.636209][ T37] bridge_slave_1: left promiscuous mode [ 177.641850][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.650029][ T37] bridge_slave_0: left allmulticast mode [ 177.655742][ T37] bridge_slave_0: left promiscuous mode [ 177.661413][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.748835][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.759481][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.769422][ T37] bond0 (unregistering): Released all slaves [ 177.781566][T11734] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 177.793486][T11732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.827689][ T37] tipc: Disabling bearer [ 177.832727][ T37] tipc: Left network mode [ 177.840989][ T37] hsr_slave_0: left promiscuous mode [ 177.848465][ T37] hsr_slave_1: left promiscuous mode [ 177.856917][ T37] veth1_macvtap: left promiscuous mode [ 177.862416][ T37] veth0_macvtap: left promiscuous mode [ 177.868362][ T37] veth1_vlan: left promiscuous mode [ 177.873624][ T37] veth0_vlan: left promiscuous mode [ 178.203508][T11703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.214491][T11703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.224285][T11703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.233950][T11703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.245377][ T37] IPVS: stop unused estimator thread 0... [ 178.261852][ T37] ------------[ cut here ]------------ [ 178.267364][ T37] WARNING: CPU: 0 PID: 37 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 178.276803][ T37] Modules linked in: [ 178.280735][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.289329][T11703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.290489][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.302972][T11703] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.307158][ T37] Workqueue: netns cleanup_net [ 178.318535][ T37] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 178.324101][ T37] Code: 48 8d bb 30 0e 00 00 e8 35 ac bc fc 48 8b bb 30 0e 00 00 e8 c9 2c c9 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c8 ee a1 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 ba ee a1 fc 90 0f 0b 90 4c 89 f7 e8 fe [ 178.329488][T11703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.343786][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 178.343804][ T37] RAX: ffffffff84b60a88 RBX: ffff88810befaf80 RCX: ffff8881002d1080 [ 178.354139][T11703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.360217][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810befbd80 [ 178.360234][ T37] RBP: ffffffff86c8b980 R08: 0001ffff86847f7f R09: 0000000000000000 [ 178.360246][ T37] R10: ffffc90000143be8 R11: 0001c90000143be8 R12: ffffffff86c8b9a0 [ 178.360257][ T37] R13: ffff88810befafa8 R14: ffff88810befbd80 R15: ffff88810befaf80 [ 178.391965][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.394752][ T37] FS: 0000000000000000(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 178.402722][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.410692][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.429527][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.433840][ T37] CR2: 0000000000000032 CR3: 0000000006834000 CR4: 00000000003506f0 [ 178.433859][ T37] Call Trace: [ 178.440476][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.447472][ T37] [ 178.447480][ T37] xfrm_net_exit+0x2d/0x60 [ 178.473329][ T37] ops_undo_list+0x27b/0x410 [ 178.478019][ T37] cleanup_net+0x2de/0x4d0 [ 178.482529][ T37] process_scheduled_works+0x4cb/0x9d0 [ 178.488073][ T37] worker_thread+0x582/0x770 [ 178.492768][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 178.498673][ T37] kthread+0x489/0x510 [ 178.502819][ T37] ? finish_task_switch+0xad/0x2b0 [ 178.507962][ T37] ? __pfx_worker_thread+0x10/0x10 [ 178.513168][ T37] ? __pfx_kthread+0x10/0x10 [ 178.517848][ T37] ret_from_fork+0x11f/0x1b0 [ 178.522480][ T37] ? __pfx_kthread+0x10/0x10 [ 178.524909][T11703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.527092][ T37] ret_from_fork_asm+0x1a/0x30 [ 178.527120][ T37] [ 178.527178][ T37] ---[ end trace 0000000000000000 ]--- [ 178.547972][ T37] ------------[ cut here ]------------ [ 178.553441][ T37] WARNING: CPU: 0 PID: 37 at net/xfrm/xfrm_state.c:3310 xfrm_state_fini+0x1b9/0x1f0 [ 178.562912][ T37] Modules linked in: [ 178.566907][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 178.573801][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.585119][ T37] Tainted: [W]=WARN [ 178.588916][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.599023][ T37] Workqueue: netns cleanup_net [ 178.603858][ T37] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0 [ 178.609487][ T37] Code: ab bc fc 4d 8b 3e e9 06 ff ff ff e8 a1 ee a1 fc 90 0f 0b 90 4c 89 f7 e8 e5 ab bc fc 4d 8b 3e e9 24 ff ff ff e8 88 ee a1 fc 90 <0f> 0b 90 4c 89 f7 e8 cc ab bc fc 4d 8b 3e e9 42 ff ff ff e8 6f ee [ 178.629143][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 178.635262][ T37] RAX: ffffffff84b60ac8 RBX: ffff88810befaf80 RCX: ffff8881002d1080 [ 178.643246][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881153cb840 [ 178.651265][ T37] RBP: 0000000000000040 R08: 000188810befbd9f R09: 0000000000000000 [ 178.659306][ T37] R10: ffff8881153cb8c0 R11: 00018881153cb8bf R12: ffffffff86c8b9a0 [ 178.667388][ T37] R13: ffff88810befafa8 R14: ffff88810befbd98 R15: ffff8881153cb840 [ 178.675391][ T37] FS: 0000000000000000(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 178.684396][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.691020][ T37] CR2: 0000000000000032 CR3: 0000000006834000 CR4: 00000000003506f0 [ 178.699041][ T37] Call Trace: [ 178.702327][ T37] [ 178.705338][ T37] xfrm_net_exit+0x2d/0x60 [ 178.709756][ T37] ops_undo_list+0x27b/0x410 [ 178.714357][ T37] cleanup_net+0x2de/0x4d0 [ 178.718845][ T37] process_scheduled_works+0x4cb/0x9d0 [ 178.724336][ T37] worker_thread+0x582/0x770 [ 178.729035][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 178.734881][ T37] kthread+0x489/0x510 [ 178.738959][ T37] ? finish_task_switch+0xad/0x2b0 [ 178.744102][ T37] ? __pfx_worker_thread+0x10/0x10 [ 178.747811][T11703] veth0_vlan: entered promiscuous mode [ 178.749247][ T37] ? __pfx_kthread+0x10/0x10 [ 178.759271][ T37] ret_from_fork+0x11f/0x1b0 [ 178.760418][T11703] veth1_vlan: entered promiscuous mode [ 178.763864][ T37] ? __pfx_kthread+0x10/0x10 [ 178.773911][ T37] ret_from_fork_asm+0x1a/0x30 [ 178.778745][ T37] [ 178.781765][ T37] ---[ end trace 0000000000000000 ]--- [ 178.781937][T11703] veth0_macvtap: entered promiscuous mode [ 178.788187][ T37] ------------[ cut here ]------------ [ 178.798424][ T37] WARNING: CPU: 0 PID: 37 at net/xfrm/xfrm_state.c:3312 xfrm_state_fini+0x1d2/0x1f0 [ 178.805540][T11703] veth1_macvtap: entered promiscuous mode [ 178.807893][ T37] Modules linked in: [ 178.817494][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.821093][T11703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.828840][ T37] Tainted: [W]=WARN [ 178.828849][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.828866][ T37] Workqueue: netns cleanup_net [ 178.828890][ T37] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0 [ 178.842774][T11703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.850001][ T37] Code: ab bc fc 4d 8b 3e e9 24 ff ff ff e8 88 ee a1 fc 90 0f 0b 90 4c 89 f7 e8 cc ab bc fc 4d 8b 3e e9 42 ff ff ff e8 6f ee a1 fc 90 <0f> 0b 90 4c 89 f7 e8 b3 ab bc fc 4d 8b 3e e9 60 ff ff ff 66 66 2e [ 178.861368][ T2226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.867557][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 178.901946][ T37] RAX: ffffffff84b60ae1 RBX: ffff88810befaf80 RCX: ffff8881002d1080 [ 178.909928][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881153cb800 [ 178.917928][ T37] RBP: 0000000000000040 R08: 000188810befbd97 R09: 0000000000000000 [ 178.925977][ T37] R10: ffff8881153cb880 R11: 00018881153cb87f R12: ffffffff86c8b9a0 [ 178.933963][ T37] R13: ffff88810befafa8 R14: ffff88810befbd90 R15: ffff8881153cb800 [ 178.942063][ T37] FS: 0000000000000000(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 178.951027][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.957688][ T37] CR2: 0000000000000032 CR3: 0000000006834000 CR4: 00000000003506f0 [ 178.965741][ T37] Call Trace: [ 178.969023][ T37] [ 178.971955][ T37] xfrm_net_exit+0x2d/0x60 [ 178.976386][ T37] ops_undo_list+0x27b/0x410 [ 178.980982][ T37] cleanup_net+0x2de/0x4d0 [ 178.985456][ T37] process_scheduled_works+0x4cb/0x9d0 [ 178.990928][ T37] worker_thread+0x582/0x770 [ 178.995535][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 179.001440][ T37] kthread+0x489/0x510 [ 179.005538][ T37] ? finish_task_switch+0xad/0x2b0 [ 179.010636][ T37] ? __pfx_worker_thread+0x10/0x10 [ 179.015798][ T37] ? __pfx_kthread+0x10/0x10 [ 179.020420][ T37] ret_from_fork+0x11f/0x1b0 [ 179.025090][ T37] ? __pfx_kthread+0x10/0x10 [ 179.029706][ T37] ret_from_fork_asm+0x1a/0x30 [ 179.034524][ T37] [ 179.037561][ T37] ---[ end trace 0000000000000000 ]--- [ 179.049214][ T2226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.064762][ T2226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.075356][ T2226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.207034][T11866] __nla_validate_parse: 1 callbacks suppressed [ 179.207051][T11866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3165'. [ 179.240278][T11868] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.287342][T11868] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.307319][T11732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.387561][T11732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.448114][T11732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.511538][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.522810][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.536181][ T2226] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.547144][ T2226] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.600134][T11874] loop0: detected capacity change from 0 to 512 [ 179.604680][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 179.607799][T11874] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.625633][T11874] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 179.625633][T11874] [ 179.636394][T11874] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 179.949187][T11878] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 179.972389][T11882] loop3: detected capacity change from 0 to 128 [ 180.222580][T11893] loop3: detected capacity change from 0 to 512 [ 180.230553][T11893] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3175: casefold flag without casefold feature [ 180.243454][T11893] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3175: couldn't read orphan inode 15 (err -117) [ 180.261861][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.273676][ T2226] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.285200][ T2226] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.297432][ T3442] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.316814][T11897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3176'. [ 180.333745][T11899] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.350766][T11901] netlink: 'syz.3.3178': attribute type 1 has an invalid length. [ 180.363287][T11901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.374305][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3178'. [ 180.385840][T11901] bond1 (unregistering): Released all slaves [ 180.395368][T11899] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.446186][T11899] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.506514][T11899] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.532291][T11909] loop0: detected capacity change from 0 to 1024 [ 180.539036][T11909] EXT4-fs: Ignoring removed oldalloc option [ 180.545063][T11909] EXT4-fs: Ignoring removed i_version option [ 180.551127][T11909] EXT4-fs: Ignoring removed orlov option [ 180.557533][T11909] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 180.591978][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.603009][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.613520][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.624065][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.644690][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 180.696605][T11913] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 180.733257][T11918] bridge0: entered promiscuous mode [ 180.738726][T11918] macsec1: entered promiscuous mode [ 180.745234][T11918] bridge0: port 3(macsec1) entered blocking state [ 180.751763][T11918] bridge0: port 3(macsec1) entered disabled state [ 180.758423][T11918] macsec1: entered allmulticast mode [ 180.763813][T11918] bridge0: entered allmulticast mode [ 180.769611][T11918] macsec1: left allmulticast mode [ 180.774687][T11918] bridge0: left allmulticast mode [ 180.780628][T11918] bridge0: left promiscuous mode [ 180.844116][T11927] 9pnet_fd: Insufficient options for proto=fd [ 180.874838][T11927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.900364][T11868] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.504981][T11942] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 181.551837][T11949] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3194'. [ 181.577597][T11951] loop3: detected capacity change from 0 to 512 [ 181.585486][T11951] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3195: casefold flag without casefold feature [ 181.598571][T11951] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3195: couldn't read orphan inode 15 (err -117) [ 181.671656][T11961] loop3: detected capacity change from 0 to 512 [ 181.679368][T11961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 181.687380][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 181.694532][T11961] System zones: 1-12 [ 181.700267][T11961] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3199: Directory hole found for htree index block 0 [ 181.713714][T11963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3198'. [ 181.725235][T11961] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 181.733565][T11961] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3199: Directory hole found for htree index block 0 [ 181.748059][T11961] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 181.774305][T11965] loop1: detected capacity change from 0 to 512 [ 181.786169][T11965] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 181.797613][T11965] System zones: 1-12 [ 181.801618][T11965] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3200: Directory hole found for htree index block 0 [ 181.816327][T11965] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 181.824897][T11965] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3200: Directory hole found for htree index block 0 [ 181.826174][T11972] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.838347][T11965] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 181.866939][T11973] FAULT_INJECTION: forcing a failure. [ 181.866939][T11973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.880213][T11973] CPU: 1 UID: 0 PID: 11973 Comm: syz.0.3202 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.880308][T11973] Tainted: [W]=WARN [ 181.880316][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.880333][T11973] Call Trace: [ 181.880339][T11973] [ 181.880347][T11973] __dump_stack+0x1d/0x30 [ 181.880381][T11973] dump_stack_lvl+0xe8/0x140 [ 181.880400][T11973] dump_stack+0x15/0x1b [ 181.880418][T11973] should_fail_ex+0x265/0x280 [ 181.880445][T11973] should_fail+0xb/0x20 [ 181.880524][T11973] should_fail_usercopy+0x1a/0x20 [ 181.880662][T11973] _copy_from_iter+0xd2/0xe80 [ 181.880698][T11973] ? alloc_pages_mpol+0x201/0x250 [ 181.880740][T11973] copy_page_from_iter+0x178/0x2a0 [ 181.880810][T11973] tun_get_user+0x679/0x2680 [ 181.880921][T11973] ? ref_tracker_alloc+0x1f2/0x2f0 [ 181.880957][T11973] tun_chr_write_iter+0x15e/0x210 [ 181.880981][T11973] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 181.881002][T11973] vfs_write+0x527/0x960 [ 181.881035][T11973] ksys_write+0xda/0x1a0 [ 181.881108][T11973] __x64_sys_write+0x40/0x50 [ 181.881207][T11973] x64_sys_call+0x27fe/0x2ff0 [ 181.881347][T11973] do_syscall_64+0xd2/0x200 [ 181.881380][T11973] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 181.881403][T11973] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.881477][T11973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.881556][T11973] RIP: 0033:0x7f7df4aad65f [ 181.881606][T11973] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 181.881627][T11973] RSP: 002b:00007f7df34f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 181.881648][T11973] RAX: ffffffffffffffda RBX: 00007f7df4cf6090 RCX: 00007f7df4aad65f [ 181.881662][T11973] RDX: 0000000000000066 RSI: 0000200000000b80 RDI: 00000000000000c8 [ 181.881672][T11973] RBP: 00007f7df34f6090 R08: 0000000000000000 R09: 0000000000000000 [ 181.881682][T11973] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 181.881724][T11973] R13: 00007f7df4cf6128 R14: 00007f7df4cf6090 R15: 00007ffed5e61b98 [ 181.881746][T11973] [ 182.097240][T11972] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.136712][T11978] loop1: detected capacity change from 0 to 128 [ 182.136967][T11972] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.201593][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 182.201618][ T29] audit: type=1326 audit(1758250049.812:10190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.1.3207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57f39feba9 code=0x0 [ 182.233447][T11972] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.251988][T11985] 9pnet_fd: Insufficient options for proto=fd [ 182.275706][T11985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.300512][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.314365][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.325768][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.337545][ T2226] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.479639][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 182.724882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 183.036369][T12000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3212'. [ 183.080209][T12007] loop0: detected capacity change from 0 to 512 [ 183.083133][T12004] bond1: entered promiscuous mode [ 183.091658][T12004] bond1: entered allmulticast mode [ 183.093580][T12007] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3215: casefold flag without casefold feature [ 183.097078][T12004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.111772][T12007] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3215: couldn't read orphan inode 15 (err -117) [ 183.130367][T12004] bond1 (unregistering): Released all slaves [ 183.167569][T12013] loop0: detected capacity change from 0 to 2048 [ 183.174472][T12013] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 183.190298][T12013] loop0: detected capacity change from 0 to 128 [ 183.212668][T12013] syz.0.3216: attempt to access beyond end of device [ 183.212668][T12013] loop0: rw=34817, sector=121, nr_sectors = 120 limit=128 [ 183.243392][T12019] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.274025][ T51] kworker/u8:3: attempt to access beyond end of device [ 183.274025][ T51] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 183.326304][T12019] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.379797][T12019] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.409434][T11868] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.426252][T12019] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.456462][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.472609][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.476412][T12028] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 183.481189][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.499007][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.515733][T12028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.530325][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3222'. [ 183.541967][T12028] bond1 (unregistering): Released all slaves [ 183.558665][ T29] audit: type=1326 audit(1758250051.172:10191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.2.3223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3ccd3eba9 code=0x0 [ 183.609023][T12034] 9pnet_fd: Insufficient options for proto=fd [ 183.635389][T12034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.652051][T12036] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.672488][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 183.681439][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 183.705852][T12036] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.736357][T12036] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.764674][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 183.796881][T12036] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.164199][ T29] audit: type=1326 audit(1758250051.772:10192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.0.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df4aaeba9 code=0x7ffc0000 [ 184.188006][ T29] audit: type=1326 audit(1758250051.772:10193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.0.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df4aaeba9 code=0x7ffc0000 [ 184.211785][ T29] audit: type=1326 audit(1758250051.782:10194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.0.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df4aaeba9 code=0x7ffc0000 [ 184.224796][T12043] bridge0: entered promiscuous mode [ 184.235710][ T29] audit: type=1326 audit(1758250051.782:10195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.0.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df4aaeba9 code=0x7ffc0000 [ 184.242732][T12043] macsec1: entered promiscuous mode [ 184.264390][ T29] audit: type=1326 audit(1758250051.782:10196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.0.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df4aaeba9 code=0x7ffc0000 [ 184.271207][T12043] bridge0: port 3(macsec1) entered blocking state [ 184.293393][ T29] audit: type=1326 audit(1758250051.782:10197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.0.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df4aaeba9 code=0x7ffc0000 [ 184.293440][ T29] audit: type=1326 audit(1758250051.782:10198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.0.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df4aaeba9 code=0x7ffc0000 [ 184.299889][T12043] bridge0: port 3(macsec1) entered disabled state [ 184.323446][ T29] audit: type=1326 audit(1758250051.782:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.0.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df4aaeba9 code=0x7ffc0000 [ 184.348014][T12043] macsec1: entered allmulticast mode [ 184.382446][T12043] bridge0: entered allmulticast mode [ 184.391677][T12043] macsec1: left allmulticast mode [ 184.396765][T12043] bridge0: left allmulticast mode [ 184.402467][T12043] bridge0: left promiscuous mode [ 184.489374][T12050] FAULT_INJECTION: forcing a failure. [ 184.489374][T12050] name failslab, interval 1, probability 0, space 0, times 0 [ 184.502077][T12050] CPU: 1 UID: 0 PID: 12050 Comm: syz.0.3230 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 184.502101][T12050] Tainted: [W]=WARN [ 184.502106][T12050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.502127][T12050] Call Trace: [ 184.502131][T12050] [ 184.502136][T12050] __dump_stack+0x1d/0x30 [ 184.502151][T12050] dump_stack_lvl+0xe8/0x140 [ 184.502246][T12050] dump_stack+0x15/0x1b [ 184.502258][T12050] should_fail_ex+0x265/0x280 [ 184.502276][T12050] should_failslab+0x8c/0xb0 [ 184.502384][T12050] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 184.502488][T12050] ? sock_alloc_inode+0x34/0xa0 [ 184.502513][T12050] ? __pfx_sock_alloc_inode+0x10/0x10 [ 184.502536][T12050] sock_alloc_inode+0x34/0xa0 [ 184.502655][T12050] alloc_inode+0x40/0x170 [ 184.502717][T12050] __sock_create+0x122/0x5b0 [ 184.502733][T12050] __sys_socket+0xb0/0x180 [ 184.502748][T12050] __x64_sys_socket+0x3f/0x50 [ 184.502770][T12050] x64_sys_call+0x1147/0x2ff0 [ 184.502850][T12050] do_syscall_64+0xd2/0x200 [ 184.502875][T12050] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.502920][T12050] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 184.502955][T12050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.502976][T12050] RIP: 0033:0x7f7df4ab0ac7 [ 184.502989][T12050] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.503003][T12050] RSP: 002b:00007f7df3515fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 184.503017][T12050] RAX: ffffffffffffffda RBX: 00007f7df4cf5fa0 RCX: 00007f7df4ab0ac7 [ 184.503050][T12050] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 184.503059][T12050] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 184.503068][T12050] R10: 0000200000000200 R11: 0000000000000286 R12: 0000000000000001 [ 184.503077][T12050] R13: 00007f7df4cf6038 R14: 00007f7df4cf5fa0 R15: 00007ffed5e61b98 [ 184.503093][T12050] [ 184.503099][T12050] socket: no more sockets [ 184.709936][ T3442] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.725933][ T3442] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.747491][ T3442] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.759138][ T3442] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.804732][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 185.321950][T12062] loop2: detected capacity change from 0 to 512 [ 185.328543][T12062] vfat: Invalid gid '0x00000000ffffffff' [ 185.335728][T12062] FAULT_INJECTION: forcing a failure. [ 185.335728][T12062] name failslab, interval 1, probability 0, space 0, times 0 [ 185.348497][T12062] CPU: 1 UID: 0 PID: 12062 Comm: syz.2.3234 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.348521][T12062] Tainted: [W]=WARN [ 185.348525][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.348535][T12062] Call Trace: [ 185.348539][T12062] [ 185.348545][T12062] __dump_stack+0x1d/0x30 [ 185.348640][T12062] dump_stack_lvl+0xe8/0x140 [ 185.348708][T12062] dump_stack+0x15/0x1b [ 185.348720][T12062] should_fail_ex+0x265/0x280 [ 185.348790][T12062] should_failslab+0x8c/0xb0 [ 185.348810][T12062] __kmalloc_cache_node_noprof+0x54/0x320 [ 185.348884][T12062] ? __get_vm_area_node+0x106/0x1d0 [ 185.348907][T12062] __get_vm_area_node+0x106/0x1d0 [ 185.348932][T12062] __vmalloc_node_range_noprof+0x273/0xe00 [ 185.349011][T12062] ? copy_process+0x399/0x2000 [ 185.349035][T12062] ? __rcu_read_unlock+0x4f/0x70 [ 185.349055][T12062] __vmalloc_node_noprof+0x89/0xc0 [ 185.349130][T12062] ? copy_process+0x399/0x2000 [ 185.349149][T12062] ? copy_process+0x399/0x2000 [ 185.349206][T12062] dup_task_struct+0x449/0x6a0 [ 185.349226][T12062] ? _parse_integer+0x27/0x40 [ 185.349324][T12062] copy_process+0x399/0x2000 [ 185.349348][T12062] ? kstrtouint+0x76/0xc0 [ 185.349366][T12062] ? kstrtouint_from_user+0x9f/0xf0 [ 185.349386][T12062] ? __rcu_read_unlock+0x4f/0x70 [ 185.349481][T12062] kernel_clone+0x16c/0x5c0 [ 185.349501][T12062] ? vfs_write+0x7e8/0x960 [ 185.349520][T12062] __x64_sys_clone+0xe6/0x120 [ 185.349547][T12062] x64_sys_call+0x119c/0x2ff0 [ 185.349587][T12062] do_syscall_64+0xd2/0x200 [ 185.349612][T12062] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.349630][T12062] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.349666][T12062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.349683][T12062] RIP: 0033:0x7fb3ccd3eba9 [ 185.349694][T12062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.349708][T12062] RSP: 002b:00007fb3cb7a6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 185.349770][T12062] RAX: ffffffffffffffda RBX: 00007fb3ccf85fa0 RCX: 00007fb3ccd3eba9 [ 185.349779][T12062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002180200 [ 185.349789][T12062] RBP: 00007fb3cb7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.349799][T12062] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 185.349815][T12062] R13: 00007fb3ccf86038 R14: 00007fb3ccf85fa0 R15: 00007ffcba147fe8 [ 185.349832][T12062] [ 185.349850][T12062] syz.2.3234: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 185.608923][T12062] CPU: 1 UID: 0 PID: 12062 Comm: syz.2.3234 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.608959][T12062] Tainted: [W]=WARN [ 185.608966][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.608980][T12062] Call Trace: [ 185.608986][T12062] [ 185.608994][T12062] __dump_stack+0x1d/0x30 [ 185.609055][T12062] dump_stack_lvl+0xe8/0x140 [ 185.609072][T12062] dump_stack+0x15/0x1b [ 185.609087][T12062] warn_alloc+0x12b/0x1a0 [ 185.609174][T12062] __vmalloc_node_range_noprof+0x297/0xe00 [ 185.609215][T12062] ? __rcu_read_unlock+0x4f/0x70 [ 185.609240][T12062] __vmalloc_node_noprof+0x89/0xc0 [ 185.609345][T12062] ? copy_process+0x399/0x2000 [ 185.609367][T12062] ? copy_process+0x399/0x2000 [ 185.609395][T12062] dup_task_struct+0x449/0x6a0 [ 185.609467][T12062] ? _parse_integer+0x27/0x40 [ 185.609491][T12062] copy_process+0x399/0x2000 [ 185.609590][T12062] ? kstrtouint+0x76/0xc0 [ 185.609609][T12062] ? kstrtouint_from_user+0x9f/0xf0 [ 185.609640][T12062] ? __rcu_read_unlock+0x4f/0x70 [ 185.609662][T12062] kernel_clone+0x16c/0x5c0 [ 185.609757][T12062] ? vfs_write+0x7e8/0x960 [ 185.609786][T12062] __x64_sys_clone+0xe6/0x120 [ 185.609829][T12062] x64_sys_call+0x119c/0x2ff0 [ 185.609852][T12062] do_syscall_64+0xd2/0x200 [ 185.609890][T12062] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.609910][T12062] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.609949][T12062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.609973][T12062] RIP: 0033:0x7fb3ccd3eba9 [ 185.609989][T12062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.610006][T12062] RSP: 002b:00007fb3cb7a6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 185.610073][T12062] RAX: ffffffffffffffda RBX: 00007fb3ccf85fa0 RCX: 00007fb3ccd3eba9 [ 185.610085][T12062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002180200 [ 185.610097][T12062] RBP: 00007fb3cb7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.610115][T12062] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 185.610125][T12062] R13: 00007fb3ccf86038 R14: 00007fb3ccf85fa0 R15: 00007ffcba147fe8 [ 185.610144][T12062] [ 185.610178][T12062] Mem-Info: [ 185.699886][T12067] __nla_validate_parse: 1 callbacks suppressed [ 185.699904][T12067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3236'. [ 185.703880][T12062] active_anon:6991 inactive_anon:4 isolated_anon:0 [ 185.703880][T12062] active_file:20799 inactive_file:2502 isolated_file:0 [ 185.703880][T12062] unevictable:0 dirty:0 writeback:0 [ 185.703880][T12062] slab_reclaimable:3444 slab_unreclaimable:28304 [ 185.703880][T12062] mapped:32193 shmem:3046 pagetables:1177 [ 185.703880][T12062] sec_pagetables:0 bounce:0 [ 185.703880][T12062] kernel_misc_reclaimable:0 [ 185.703880][T12062] free:1876076 free_pcp:3028 free_cma:0 [ 185.844677][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 185.848278][T12062] Node 0 active_anon:27964kB inactive_anon:16kB active_file:83196kB inactive_file:10008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128772kB dirty:0kB writeback:0kB shmem:12184kB kernel_stack:4048kB pagetables:4708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 185.928200][T12062] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.956886][T12062] lowmem_reserve[]: 0 2883 7862 7862 [ 185.962270][T12062] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 185.992336][T12062] lowmem_reserve[]: 0 0 4978 4978 [ 185.997446][T12062] Node 0 Normal free:4539656kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27964kB inactive_anon:16kB active_file:83196kB inactive_file:10008kB unevictable:0kB writepending:92kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:8540kB local_pcp:2544kB free_cma:0kB [ 186.029382][T12062] lowmem_reserve[]: 0 0 0 0 [ 186.033961][T12062] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 186.046701][T12062] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 186.062884][T12062] Node 0 Normal: 172*4kB (UE) 205*8kB (UE) 279*16kB (UME) 482*32kB (UME) 305*64kB (UME) 208*128kB (UME) 122*256kB (UM) 56*512kB (UME) 58*1024kB (UME) 49*2048kB (UM) 1038*4096kB (UME) = 4539656kB [ 186.082291][T12062] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 186.091655][T12062] 26347 total pagecache pages [ 186.096343][T12062] 4 pages in swap cache [ 186.100483][T12062] Free swap = 124980kB [ 186.104687][T12062] Total swap = 124996kB [ 186.108875][T12062] 2097051 pages RAM [ 186.112662][T12062] 0 pages HighMem/MovableOnly [ 186.117333][T12062] 80446 pages reserved [ 186.161736][T12071] loop2: detected capacity change from 0 to 1024 [ 186.169430][T12071] EXT4-fs: Ignoring removed oldalloc option [ 186.175392][T12071] EXT4-fs: Ignoring removed i_version option [ 186.182731][T12071] EXT4-fs: Ignoring removed orlov option [ 186.196791][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.209126][T12071] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 186.226576][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.239838][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.248515][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.259397][T12078] bridge0: entered promiscuous mode [ 186.269634][T12078] macsec1: entered promiscuous mode [ 186.276027][T12078] bridge0: port 3(macsec1) entered blocking state [ 186.282532][T12078] bridge0: port 3(macsec1) entered disabled state [ 186.289257][T12078] macsec1: entered allmulticast mode [ 186.294555][T12078] bridge0: entered allmulticast mode [ 186.322672][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 186.333741][T12085] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3243'. [ 186.342816][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 186.353792][T12078] macsec1: left allmulticast mode [ 186.358917][T12078] bridge0: left allmulticast mode [ 186.366793][T12085] random: crng reseeded on system resumption [ 186.373000][T12078] bridge0: left promiscuous mode [ 186.379144][T12085] Restarting kernel threads ... [ 186.386096][T12085] Done restarting kernel threads. [ 186.445578][T12089] loop4: detected capacity change from 0 to 512 [ 186.453926][T12089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 186.463328][T12089] System zones: 1-12 [ 186.467740][T12089] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.3244: Directory hole found for htree index block 0 [ 186.488725][T12089] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 186.500344][T12089] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.3244: Directory hole found for htree index block 0 [ 186.513197][T12089] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 186.581907][T12101] loop2: detected capacity change from 0 to 1024 [ 186.588769][T12101] EXT4-fs: Ignoring removed oldalloc option [ 186.594747][T12101] EXT4-fs: Ignoring removed i_version option [ 186.600814][T12101] EXT4-fs: Ignoring removed orlov option [ 186.607080][T12101] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 186.626716][T12099] loop4: detected capacity change from 0 to 512 [ 186.634462][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 186.644277][T12099] EXT4-fs (loop4): orphan cleanup on readonly fs [ 186.652815][T12099] EXT4-fs warning (device loop4): ext4_xattr_inode_get:556: inode #11: comm syz.4.3248: EA inode hash validation failed [ 186.667476][T12099] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 186.680676][T12099] ------------[ cut here ]------------ [ 186.686216][T12099] EA inode 11 ref_count=-1 [ 186.686502][T12099] WARNING: CPU: 0 PID: 12099 at fs/ext4/xattr.c:1048 ext4_xattr_inode_update_ref+0x33e/0x3f0 [ 186.701277][T12099] Modules linked in: [ 186.705368][T12099] CPU: 0 UID: 0 PID: 12099 Comm: syz.4.3248 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 186.716950][T12099] Tainted: [W]=WARN [ 186.720762][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.730869][T12099] RIP: 0010:ext4_xattr_inode_update_ref+0x33e/0x3f0 [ 186.737504][T12099] Code: e8 57 ec b7 ff c6 05 1a 76 19 05 01 90 49 8d 7e 40 e8 26 f9 b7 ff 49 8b 76 40 48 c7 c7 15 2d 5b 86 4c 89 e2 e8 93 df 66 ff 90 <0f> 0b 90 90 e9 01 ff ff ff e8 b4 3b 9d ff 48 c7 c7 89 33 d4 86 e8 [ 186.757137][T12099] RSP: 0018:ffffc90001cf77c8 EFLAGS: 00010246 [ 186.763191][T12099] RAX: b43fa96bf1602800 RBX: ffff88811940b170 RCX: ffff88810481c200 [ 186.771163][T12099] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 186.779245][T12099] RBP: ffffffffffffffff R08: 0001c90001cf763f R09: 0000000000000000 [ 186.787236][T12099] R10: 00000000ffffffff R11: 0000000000000000 R12: ffffffffffffffff [ 186.795318][T12099] R13: ffff88811940b218 R14: ffff88811940b0d8 R15: 0000000000000001 [ 186.803294][T12099] FS: 00007f74ddbdf6c0(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 186.812283][T12099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.818956][T12099] CR2: ffffffff93000000 CR3: 0000000117b46000 CR4: 00000000003506f0 [ 186.826963][T12099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.835064][T12099] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 186.843107][T12099] Call Trace: [ 186.846407][T12099] [ 186.849392][T12099] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 186.855425][T12099] ? errseq_check+0x2c/0x50 [ 186.859965][T12099] ext4_xattr_delete_inode+0x6b7/0x790 [ 186.865480][T12099] ? ext4_truncate+0x92e/0xae0 [ 186.870283][T12099] ext4_evict_inode+0xa6a/0xd90 [ 186.875180][T12099] ? __pfx_ext4_evict_inode+0x10/0x10 [ 186.880570][T12099] evict+0x2e3/0x550 [ 186.884546][T12099] ? __dquot_initialize+0x146/0x7c0 [ 186.884698][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.896767][T12099] iput+0x447/0x5b0 [ 186.900588][T12099] ext4_process_orphan+0x1a9/0x1c0 [ 186.905818][T12099] ext4_orphan_cleanup+0x6a8/0xa00 [ 186.910932][T12099] ext4_fill_super+0x3260/0x35d0 [ 186.915935][T12099] ? set_blocksize+0x1a8/0x310 [ 186.920717][T12099] ? sb_set_blocksize+0xe3/0x100 [ 186.925771][T12099] ? setup_bdev_super+0x30e/0x370 [ 186.930808][T12099] ? __pfx_ext4_fill_super+0x10/0x10 [ 186.936189][T12099] get_tree_bdev_flags+0x28e/0x300 [ 186.941367][T12099] ? __pfx_ext4_fill_super+0x10/0x10 [ 186.946669][T12099] get_tree_bdev+0x1f/0x30 [ 186.951077][T12099] ext4_get_tree+0x1c/0x30 [ 186.955515][T12099] vfs_get_tree+0x57/0x1d0 [ 186.959961][T12099] do_new_mount+0x207/0x5e0 [ 186.964608][T12099] ? security_capable+0x83/0x90 [ 186.969521][T12099] path_mount+0x4a4/0xb20 [ 186.973877][T12099] ? user_path_at+0x109/0x130 [ 186.978577][T12099] __se_sys_mount+0x28f/0x2e0 [ 186.983256][T12099] __x64_sys_mount+0x67/0x80 [ 186.987866][T12099] x64_sys_call+0x2b4d/0x2ff0 [ 186.992687][T12099] do_syscall_64+0xd2/0x200 [ 186.997242][T12099] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 187.003381][T12099] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 187.009170][T12099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.015093][T12099] RIP: 0033:0x7f74df18034a [ 187.019566][T12099] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.039188][T12099] RSP: 002b:00007f74ddbdee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.047639][T12099] RAX: ffffffffffffffda RBX: 00007f74ddbdeef0 RCX: 00007f74df18034a [ 187.055626][T12099] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f74ddbdeeb0 [ 187.063665][T12099] RBP: 0000200000000180 R08: 00007f74ddbdeef0 R09: 000000000080078b [ 187.071745][T12099] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 187.079733][T12099] R13: 00007f74ddbdeeb0 R14: 0000000000000473 R15: 0000200000000680 [ 187.087720][T12099] [ 187.090815][T12099] ---[ end trace 0000000000000000 ]--- [ 187.096650][T12099] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3248: corrupted inode contents [ 187.109038][T12099] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.3248: mark_inode_dirty error [ 187.115567][ T3442] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.147816][ T3442] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.160780][T12099] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3248: corrupted inode contents [ 187.171455][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.175124][T12099] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.3248: mark_inode_dirty error [ 187.196403][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.231954][T12099] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.3248: mark inode dirty (error -117) [ 187.247469][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 187.247483][ T29] audit: type=1400 audit(1758250054.862:10327): avc: denied { name_bind } for pid=12122 comm="syz.0.3254" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 187.250940][T12099] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 187.253710][ T29] audit: type=1400 audit(1758250054.862:10328): avc: denied { node_bind } for pid=12122 comm="syz.0.3254" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 187.278030][T12099] EXT4-fs (loop4): 1 orphan inode deleted [ 187.326268][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3251'. [ 187.346239][ T29] audit: type=1400 audit(1758250054.962:10329): avc: denied { create } for pid=12125 comm="syz.0.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.367064][T12126] sctp: [Deprecated]: syz.0.3255 (pid 12126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.367064][T12126] Use struct sctp_sack_info instead [ 187.383484][ T29] audit: type=1400 audit(1758250054.982:10330): avc: denied { getopt } for pid=12125 comm="syz.0.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.403208][ T29] audit: type=1400 audit(1758250054.982:10331): avc: denied { setopt } for pid=12125 comm="syz.0.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.428686][ T29] audit: type=1326 audit(1758250055.032:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12100 comm="syz.2.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ccd3eba9 code=0x7fc00000 [ 187.452314][ T29] audit: type=1326 audit(1758250055.032:10333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12100 comm="syz.2.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3ccd3eba9 code=0x7fc00000 [ 187.476010][ T29] audit: type=1326 audit(1758250055.032:10334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12100 comm="syz.2.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ccd3eba9 code=0x7fc00000 [ 187.499660][ T29] audit: type=1326 audit(1758250055.032:10335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12100 comm="syz.2.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ccd3eba9 code=0x7fc00000 [ 187.523504][ T29] audit: type=1326 audit(1758250055.032:10336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12100 comm="syz.2.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ccd3eba9 code=0x7fc00000 [ 187.569157][T12135] FAULT_INJECTION: forcing a failure. [ 187.569157][T12135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.582298][T12135] CPU: 0 UID: 0 PID: 12135 Comm: syz.1.3259 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.582330][T12135] Tainted: [W]=WARN [ 187.582337][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.582350][T12135] Call Trace: [ 187.582357][T12135] [ 187.582364][T12135] __dump_stack+0x1d/0x30 [ 187.582421][T12135] dump_stack_lvl+0xe8/0x140 [ 187.582441][T12135] dump_stack+0x15/0x1b [ 187.582459][T12135] should_fail_ex+0x265/0x280 [ 187.582486][T12135] should_fail+0xb/0x20 [ 187.582512][T12135] should_fail_usercopy+0x1a/0x20 [ 187.582537][T12135] _copy_from_user+0x1c/0xb0 [ 187.582563][T12135] ___sys_sendmsg+0xc1/0x1d0 [ 187.582651][T12135] __x64_sys_sendmsg+0xd4/0x160 [ 187.582685][T12135] x64_sys_call+0x191e/0x2ff0 [ 187.582727][T12135] do_syscall_64+0xd2/0x200 [ 187.582759][T12135] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 187.582834][T12135] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 187.582882][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.582906][T12135] RIP: 0033:0x7f57f39feba9 [ 187.582923][T12135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.582985][T12135] RSP: 002b:00007f57f245f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.583036][T12135] RAX: ffffffffffffffda RBX: 00007f57f3c45fa0 RCX: 00007f57f39feba9 [ 187.583047][T12135] RDX: 0000000040000084 RSI: 0000200000000300 RDI: 0000000000000003 [ 187.583058][T12135] RBP: 00007f57f245f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.583071][T12135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.583084][T12135] R13: 00007f57f3c46038 R14: 00007f57f3c45fa0 R15: 00007fff56edd088 [ 187.583112][T12135] [ 187.768913][T12140] loop2: detected capacity change from 0 to 512 [ 187.780067][T12140] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 187.785082][T12142] capability: warning: `syz.1.3261' uses 32-bit capabilities (legacy support in use) [ 187.798294][T12140] System zones: 1-12 [ 187.804434][T12140] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3260: Directory hole found for htree index block 0 [ 187.819850][T12140] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 187.869970][T12149] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.885153][T12140] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3260: Directory hole found for htree index block 0 [ 187.907562][T12140] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 187.924663][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 187.928830][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3262'. [ 187.952536][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3262'. [ 187.976775][T12149] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.027894][T12149] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.078702][T12149] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.097834][T12162] loop0: detected capacity change from 0 to 128 [ 188.133796][T12164] loop0: detected capacity change from 0 to 512 [ 188.145474][T12164] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3269: casefold flag without casefold feature [ 188.160138][T12164] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3269: couldn't read orphan inode 15 (err -117) [ 188.198127][T12167] loop0: detected capacity change from 0 to 1024 [ 188.204947][T12167] EXT4-fs: Ignoring removed oldalloc option [ 188.210848][T12167] EXT4-fs: Ignoring removed i_version option [ 188.218578][T12167] EXT4-fs: Ignoring removed orlov option [ 188.224720][T12167] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 188.576107][T12178] loop2: detected capacity change from 0 to 32768 [ 188.964667][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 189.034849][T11467] EXT4-fs unmount: 31 callbacks suppressed [ 189.034866][T11467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.094467][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'. [ 189.153341][T12213] loop0: detected capacity change from 0 to 8192 [ 189.194898][T12213] loop0: p1[EZD] p2 p4 [ 189.199220][T12213] loop0: p1 start 150996992 is beyond EOD, truncated [ 189.209248][T12213] loop0: p4 size 281856 extends beyond EOD, truncated [ 189.523098][ T2226] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.576075][T12149] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.685515][T12215] sd 0:0:1:0: device reset [ 189.701555][T12215] loop1: detected capacity change from 0 to 512 [ 189.708292][T12215] EXT4-fs: Ignoring removed bh option [ 189.716887][T12215] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.3285: corrupted inode contents [ 189.729035][T12215] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 189.742549][T12215] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.3285: corrupted inode contents [ 189.770296][T12215] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.3285: mark_inode_dirty error [ 189.783954][T12215] EXT4-fs (loop1): 1 orphan inode deleted [ 189.790122][T12215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.843533][T11327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.879850][T12222] loop1: detected capacity change from 0 to 512 [ 189.910048][T12222] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 189.951691][T12222] EXT4-fs (loop1): Remounting filesystem read-only [ 189.958303][T12222] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 189.971294][T12222] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 189.984235][T12222] EXT4-fs (loop1): 1 orphan inode deleted [ 189.990436][T12222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.004660][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 190.017545][T12222] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.048848][T12222] sch_fq: defrate 4294967295 ignored. [ 190.150647][T12237] loop2: detected capacity change from 0 to 1024 [ 190.157874][T12239] loop1: detected capacity change from 0 to 512 [ 190.176211][T12237] EXT4-fs: Ignoring removed oldalloc option [ 190.182121][T12237] EXT4-fs: Ignoring removed i_version option [ 190.194293][T12239] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3295: invalid block [ 190.215654][T12237] EXT4-fs: Ignoring removed orlov option [ 190.223770][T12239] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3295: invalid indirect mapped block 4294967295 (level 1) [ 190.244490][T12237] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 190.266932][T12239] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3295: invalid indirect mapped block 4294967295 (level 1) [ 190.288308][T12237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.315229][T12239] EXT4-fs (loop1): 2 truncates cleaned up [ 190.335823][T12239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.411532][T11327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.536728][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3297'. [ 190.879636][T12253] netlink: 'syz.0.3299': attribute type 1 has an invalid length. [ 190.893200][T12253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.903395][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3299'. [ 190.914239][T12253] bond1 (unregistering): Released all slaves [ 190.997398][T11703] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.017083][T12262] loop2: detected capacity change from 0 to 128 [ 191.044818][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 191.101228][T12273] loop3: detected capacity change from 0 to 512 [ 191.109013][T12273] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3306: casefold flag without casefold feature [ 191.121882][T12273] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3306: couldn't read orphan inode 15 (err -117) [ 191.134359][T12273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.162684][T10503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.194800][T12278] loop0: detected capacity change from 0 to 512 [ 191.202701][T12278] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 191.211024][T12278] System zones: 1-12 [ 191.211474][T12280] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3309'. [ 191.215241][T12278] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.3308: Directory hole found for htree index block 0 [ 191.217740][T12278] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 191.244853][T12278] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.3308: Directory hole found for htree index block 0 [ 191.245227][T12280] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3309'. [ 191.257931][T12278] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 191.275080][T12278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.310196][T11467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.357523][T12288] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.407150][T12288] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.436149][T12291] netlink: 'syz.1.3312': attribute type 1 has an invalid length. [ 191.444307][T12292] FAULT_INJECTION: forcing a failure. [ 191.444307][T12292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.450615][T12291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.457646][T12292] CPU: 1 UID: 0 PID: 12292 Comm: syz.3.3313 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.457740][T12292] Tainted: [W]=WARN [ 191.457748][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.457763][T12292] Call Trace: [ 191.457770][T12292] [ 191.457778][T12292] __dump_stack+0x1d/0x30 [ 191.457873][T12292] dump_stack_lvl+0xe8/0x140 [ 191.457897][T12292] dump_stack+0x15/0x1b [ 191.457915][T12292] should_fail_ex+0x265/0x280 [ 191.457997][T12292] should_fail_alloc_page+0xf2/0x100 [ 191.458033][T12292] __alloc_frozen_pages_noprof+0xff/0x360 [ 191.458078][T12292] alloc_pages_mpol+0xb3/0x250 [ 191.458117][T12292] alloc_pages_noprof+0x90/0x130 [ 191.458187][T12292] __pmd_alloc+0x47/0x470 [ 191.458263][T12292] handle_mm_fault+0x19d4/0x2c20 [ 191.458348][T12292] do_user_addr_fault+0x636/0x1090 [ 191.458390][T12292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.458446][T12292] exc_page_fault+0x62/0xa0 [ 191.458471][T12292] asm_exc_page_fault+0x26/0x30 [ 191.458487][T12292] RIP: 0033:0x7fd082f10c46 [ 191.458499][T12292] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 191.458540][T12292] RSP: 002b:00007fd081aae4a0 EFLAGS: 00010246 [ 191.458558][T12292] RAX: 0000000000000001 RBX: 00007fd081aae540 RCX: 0000000000000101 [ 191.458573][T12292] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 00007fd081aae5e0 [ 191.458587][T12292] RBP: 0000000000000102 R08: 00007fd07968f000 R09: 0000000000000000 [ 191.458671][T12292] R10: 0000000000000000 R11: 00007fd081aae550 R12: 0000000000000001 [ 191.458706][T12292] R13: 00007fd0830eda00 R14: 0000000000000000 R15: 00007fd081aae5e0 [ 191.458730][T12292] [ 191.458754][T12292] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 191.468568][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3312'. [ 191.480797][T12292] loop3: detected capacity change from 0 to 512 [ 191.660614][T12288] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.673568][T12291] bond1 (unregistering): Released all slaves [ 191.680767][T12292] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.696804][T12292] EXT4-fs (loop3): mount failed [ 191.736449][T12288] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.819028][T12303] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.849687][T12306] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.860588][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.878853][T12303] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.889583][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.899784][T12306] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.913845][ T3442] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.926117][ T3442] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.946891][T12303] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.974486][T12312] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 191.984504][T12312] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 191.990918][T12316] loop0: detected capacity change from 0 to 1024 [ 192.008541][T12316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.021025][T12316] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.032272][T12306] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.034541][T12316] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3321: bg 0: block 393: padding at end of block bitmap is not set [ 192.069049][T11467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.080548][T12303] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.090692][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 192.116462][T12306] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.134412][T12325] loop0: detected capacity change from 0 to 1024 [ 192.141181][T12325] EXT4-fs: Ignoring removed bh option [ 192.148432][T12325] EXT4-fs: inline encryption not supported [ 192.154666][T12325] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.167789][T12325] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 192.179985][ T2226] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.187273][T12325] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3324: lblock 2 mapped to illegal pblock 2 (length 1) [ 192.198134][T12328] netlink: 'syz.2.3325': attribute type 1 has an invalid length. [ 192.210334][T12325] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3324: lblock 0 mapped to illegal pblock 48 (length 1) [ 192.214063][ T2226] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.224969][T12325] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3324: Failed to acquire dquot type 0 [ 192.235439][ T2226] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.253227][T12325] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 192.262736][T12325] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3324: mark_inode_dirty error [ 192.263093][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3325'. [ 192.274600][T12325] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 192.293109][T12328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.293330][T12325] EXT4-fs (loop0): 1 orphan inode deleted [ 192.303428][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.305906][T12325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.322073][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.336909][ T37] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.352022][ T3442] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.369016][T12329] bond1 (unregistering): Released all slaves [ 192.375195][ T37] __quota_error: 357 callbacks suppressed [ 192.375280][ T37] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 192.389540][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 192.408543][ T3442] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.408601][T12332] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 192.417047][ T3442] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.433639][ T29] audit: type=1400 audit(1758250060.042:10691): avc: denied { bind } for pid=12324 comm="syz.0.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.442168][T12332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.453417][ T29] audit: type=1400 audit(1758250060.042:10692): avc: denied { listen } for pid=12324 comm="syz.0.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.467672][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3326'. [ 192.479334][ T29] audit: type=1400 audit(1758250060.042:10693): avc: denied { accept } for pid=12324 comm="syz.0.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.507698][ T29] audit: type=1400 audit(1758250060.042:10694): avc: denied { read write } for pid=12333 comm="syz.3.3327" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 192.532132][ T29] audit: type=1400 audit(1758250060.042:10695): avc: denied { open } for pid=12333 comm="syz.3.3327" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 192.559738][T12332] bond1 (unregistering): Released all slaves [ 192.585371][T11467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.595028][T11467] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 192.608424][T11467] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 192.618081][T11467] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 192.663492][T12348] loop0: detected capacity change from 0 to 512 [ 192.680793][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 192.691636][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 192.720775][T12358] loop0: detected capacity change from 0 to 1024 [ 192.727554][T12358] EXT4-fs: Ignoring removed orlov option [ 192.736487][T12358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.751049][ T29] audit: type=1400 audit(1758250060.362:10696): avc: denied { setattr } for pid=12357 comm="syz.0.3335" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.775719][T12363] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.787807][T11467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.836463][T12363] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.887917][ T29] audit: type=1400 audit(1758250060.502:10697): avc: denied { read append } for pid=12365 comm="syz.0.3338" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.911664][ T29] audit: type=1400 audit(1758250060.502:10698): avc: denied { open } for pid=12365 comm="syz.0.3338" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.913049][T12363] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.947121][T12366] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.954287][T12366] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.964005][ T29] audit: type=1400 audit(1758250060.572:10699): avc: denied { ioctl } for pid=12365 comm="syz.0.3338" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.016361][T12363] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.124682][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 193.163528][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.176788][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.188868][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.199926][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.229223][T12375] bridge0: entered promiscuous mode [ 193.236003][T12375] bridge0: port 3(macvlan2) entered blocking state [ 193.242524][T12375] bridge0: port 3(macvlan2) entered disabled state [ 193.251128][T12375] macvlan2: entered allmulticast mode [ 193.256594][T12375] bridge0: entered allmulticast mode [ 193.262595][T12375] macvlan2: left allmulticast mode [ 193.267754][T12375] bridge0: left allmulticast mode [ 193.274925][T12375] bridge0: left promiscuous mode [ 193.287152][T12380] netlink: 'syz.3.3342': attribute type 1 has an invalid length. [ 193.300329][T12380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.314332][T12380] bond1 (unregistering): Released all slaves [ 193.331292][T12385] FAULT_INJECTION: forcing a failure. [ 193.331292][T12385] name failslab, interval 1, probability 0, space 0, times 0 [ 193.344060][T12385] CPU: 1 UID: 0 PID: 12385 Comm: syz.2.3344 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.344089][T12385] Tainted: [W]=WARN [ 193.344094][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.344104][T12385] Call Trace: [ 193.344108][T12385] [ 193.344114][T12385] __dump_stack+0x1d/0x30 [ 193.344137][T12385] dump_stack_lvl+0xe8/0x140 [ 193.344157][T12385] dump_stack+0x15/0x1b [ 193.344248][T12385] should_fail_ex+0x265/0x280 [ 193.344275][T12385] should_failslab+0x8c/0xb0 [ 193.344302][T12385] kmem_cache_alloc_noprof+0x50/0x310 [ 193.344333][T12385] ? alloc_empty_file+0x76/0x200 [ 193.344390][T12385] alloc_empty_file+0x76/0x200 [ 193.344423][T12385] alloc_file_pseudo+0xc6/0x160 [ 193.344473][T12385] __shmem_file_setup+0x1de/0x210 [ 193.344505][T12385] shmem_file_setup+0x3b/0x50 [ 193.344520][T12385] __se_sys_memfd_create+0x2c3/0x590 [ 193.344596][T12385] __x64_sys_memfd_create+0x31/0x40 [ 193.344620][T12385] x64_sys_call+0x2abe/0x2ff0 [ 193.344708][T12385] do_syscall_64+0xd2/0x200 [ 193.344742][T12385] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 193.344764][T12385] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 193.344813][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.344835][T12385] RIP: 0033:0x7fb3ccd3eba9 [ 193.344851][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.344866][T12385] RSP: 002b:00007fb3cb7a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 193.344920][T12385] RAX: ffffffffffffffda RBX: 0000000000000a02 RCX: 00007fb3ccd3eba9 [ 193.344934][T12385] RDX: 00007fb3cb7a6ef0 RSI: 0000000000000000 RDI: 00007fb3ccdc27e8 [ 193.344948][T12385] RBP: 0000200000003640 R08: 00007fb3cb7a6bb7 R09: 00007fb3cb7a6e40 [ 193.345037][T12385] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000002380 [ 193.345049][T12385] R13: 00007fb3cb7a6ef0 R14: 00007fb3cb7a6eb0 R15: 00002000000023c0 [ 193.345065][T12385] [ 193.350235][T12387] loop4: detected capacity change from 0 to 512 [ 193.421033][T12391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.468152][T12387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.576753][T12387] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.593341][T12395] random: crng reseeded on system resumption [ 193.608690][T12387] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3345: corrupted inode contents [ 193.641222][T12387] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.3345: mark_inode_dirty error [ 193.679519][T12404] loop0: detected capacity change from 0 to 512 [ 193.701053][T12387] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3345: corrupted inode contents [ 193.718489][T12387] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.3345: mark_inode_dirty error [ 193.732306][T12404] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.767917][T12404] EXT4-fs (loop0): mount failed [ 193.874965][T10890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.916265][T12416] FAULT_INJECTION: forcing a failure. [ 193.916265][T12416] name failslab, interval 1, probability 0, space 0, times 0 [ 193.928907][T12416] CPU: 1 UID: 0 PID: 12416 Comm: syz.4.3354 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.928940][T12416] Tainted: [W]=WARN [ 193.928975][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.928988][T12416] Call Trace: [ 193.928995][T12416] [ 193.929002][T12416] __dump_stack+0x1d/0x30 [ 193.929037][T12416] dump_stack_lvl+0xe8/0x140 [ 193.929067][T12416] dump_stack+0x15/0x1b [ 193.929084][T12416] should_fail_ex+0x265/0x280 [ 193.929107][T12416] should_failslab+0x8c/0xb0 [ 193.929188][T12416] kmem_cache_alloc_noprof+0x50/0x310 [ 193.929217][T12416] ? getname_flags+0x80/0x3b0 [ 193.929244][T12416] getname_flags+0x80/0x3b0 [ 193.929269][T12416] user_path_at+0x28/0x130 [ 193.929312][T12416] do_faccessat+0x380/0x800 [ 193.929330][T12416] __x64_sys_faccessat+0x41/0x50 [ 193.929352][T12416] x64_sys_call+0x950/0x2ff0 [ 193.929369][T12416] do_syscall_64+0xd2/0x200 [ 193.929436][T12416] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 193.929457][T12416] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 193.929510][T12416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.929534][T12416] RIP: 0033:0x7f74df17eba9 [ 193.929546][T12416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.929561][T12416] RSP: 002b:00007f74ddbdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 193.929580][T12416] RAX: ffffffffffffffda RBX: 00007f74df3c5fa0 RCX: 00007f74df17eba9 [ 193.929609][T12416] RDX: 0000000000000005 RSI: 0000200000000000 RDI: ffffffffffffffff [ 193.929622][T12416] RBP: 00007f74ddbdf090 R08: 0000000000000000 R09: 0000000000000000 [ 193.929634][T12416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.929674][T12416] R13: 00007f74df3c6038 R14: 00007f74df3c5fa0 R15: 00007fffdf42f738 [ 193.929691][T12416] [ 194.164677][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 194.318516][T12432] loop1: detected capacity change from 0 to 1764 [ 194.344050][T12422] loop4: detected capacity change from 0 to 32768 [ 194.368133][T12440] netlink: 'syz.1.3364': attribute type 13 has an invalid length. [ 194.376066][T12440] netlink: 'syz.1.3364': attribute type 12 has an invalid length. [ 194.446367][T12447] netlink: 'syz.1.3364': attribute type 2 has an invalid length. [ 194.537734][T12451] loop0: detected capacity change from 0 to 512 [ 194.552518][T12451] EXT4-fs (loop0): failed to initialize system zone (-117) [ 194.563545][T12453] loop4: detected capacity change from 0 to 512 [ 194.564725][T12451] EXT4-fs (loop0): mount failed [ 194.575226][T12453] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 194.583271][T12453] System zones: 1-12 [ 194.589197][T12453] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.3367: Directory hole found for htree index block 0 [ 194.602187][T12453] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 194.612153][T12453] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.3367: Directory hole found for htree index block 0 [ 194.626686][T12453] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 194.635442][T12453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.664992][T10890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.676645][T12459] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.697784][T12461] netlink: 'syz.4.3370': attribute type 1 has an invalid length. [ 194.711989][T12461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.730354][T12461] bond2 (unregistering): Released all slaves [ 194.746153][T12459] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.773382][T12466] loop0: detected capacity change from 0 to 2048 [ 194.826962][T12466] loop0: p1 < > p4 [ 194.832275][T12459] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.844505][T12466] loop0: p4 size 8388608 extends beyond EOD, truncated [ 194.886896][T12459] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.046299][T12476] loop4: detected capacity change from 0 to 32768 [ 195.184505][T12482] FAULT_INJECTION: forcing a failure. [ 195.184505][T12482] name failslab, interval 1, probability 0, space 0, times 0 [ 195.197210][T12482] CPU: 0 UID: 0 PID: 12482 Comm: syz.0.3378 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.197260][T12482] Tainted: [W]=WARN [ 195.197266][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.197276][T12482] Call Trace: [ 195.197330][T12482] [ 195.197338][T12482] __dump_stack+0x1d/0x30 [ 195.197437][T12482] dump_stack_lvl+0xe8/0x140 [ 195.197453][T12482] dump_stack+0x15/0x1b [ 195.197466][T12482] should_fail_ex+0x265/0x280 [ 195.197565][T12482] should_failslab+0x8c/0xb0 [ 195.197589][T12482] kmem_cache_alloc_noprof+0x50/0x310 [ 195.197613][T12482] ? alloc_empty_file+0x76/0x200 [ 195.197715][T12482] alloc_empty_file+0x76/0x200 [ 195.197745][T12482] alloc_file_pseudo+0xc6/0x160 [ 195.197780][T12482] __shmem_file_setup+0x1de/0x210 [ 195.197850][T12482] shmem_file_setup+0x3b/0x50 [ 195.197864][T12482] __se_sys_memfd_create+0x2c3/0x590 [ 195.197888][T12482] __x64_sys_memfd_create+0x31/0x40 [ 195.197910][T12482] x64_sys_call+0x2abe/0x2ff0 [ 195.197983][T12482] do_syscall_64+0xd2/0x200 [ 195.198086][T12482] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 195.198114][T12482] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 195.198179][T12482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.198200][T12482] RIP: 0033:0x7f7df4aaeba9 [ 195.198214][T12482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.198247][T12482] RSP: 002b:00007f7df3516d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 195.198270][T12482] RAX: ffffffffffffffda RBX: 0000000000001060 RCX: 00007f7df4aaeba9 [ 195.198361][T12482] RDX: 00007f7df3516dec RSI: 0000000000000000 RDI: 00007f7df4b327e8 [ 195.198373][T12482] RBP: 0000200000000000 R08: 00007f7df3516b07 R09: 0000000000000000 [ 195.198385][T12482] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 195.198399][T12482] R13: 00007f7df3516dec R14: 00007f7df3516df0 R15: 00007ffed5e61b98 [ 195.198423][T12482] [ 195.398474][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 195.430620][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.438277][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.445949][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.460219][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.467817][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.475384][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.482754][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.490219][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.497662][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.505065][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.568125][ T3409] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 195.582181][T12486] sctp: [Deprecated]: syz.3.3381 (pid 12486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.582181][T12486] Use struct sctp_sack_info instead [ 195.627154][T12492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.642359][T12492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.677160][T12498] loop0: detected capacity change from 0 to 512 [ 195.687117][T12498] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 195.712471][T12498] EXT4-fs (loop0): Remounting filesystem read-only [ 195.715245][T12499] SELinux: failed to load policy [ 195.719036][T12498] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 195.734198][T12499] loop1: detected capacity change from 0 to 1024 [ 195.741403][T12498] EXT4-fs (loop0): 1 orphan inode deleted [ 195.748639][T12499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.763199][T12498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.784628][T12498] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.873084][T12498] sch_fq: defrate 4294967295 ignored. [ 195.940904][T12509] loop0: detected capacity change from 0 to 512 [ 195.950603][T12509] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3389: casefold flag without casefold feature [ 195.963935][T12509] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3389: couldn't read orphan inode 15 (err -117) [ 195.978088][T12509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.003620][T11467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.023073][T12513] loop0: detected capacity change from 0 to 512 [ 196.031842][T12513] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3390: casefold flag without casefold feature [ 196.044827][T12513] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3390: couldn't read orphan inode 15 (err -117) [ 196.057377][T12513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.082848][T11467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.164869][ T3382] ================================================================== [ 196.172958][ T3382] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 196.179966][ T3382] [ 196.182273][ T3382] read-write to 0xffff888237d29d64 of 4 bytes by task 23 on cpu 1: [ 196.190146][ T3382] wq_worker_running+0x95/0x120 [ 196.194980][ T3382] schedule_timeout+0xb7/0x170 [ 196.199728][ T3382] msleep+0x50/0x90 [ 196.203525][ T3382] nsim_fib_event_work+0x1ebc/0x21a0 [ 196.208798][ T3382] process_scheduled_works+0x4cb/0x9d0 [ 196.214258][ T3382] worker_thread+0x582/0x770 [ 196.218854][ T3382] kthread+0x489/0x510 [ 196.222911][ T3382] ret_from_fork+0x11f/0x1b0 [ 196.227490][ T3382] ret_from_fork_asm+0x1a/0x30 [ 196.232251][ T3382] [ 196.234563][ T3382] read to 0xffff888237d29d64 of 4 bytes by task 3382 on cpu 0: [ 196.242087][ T3382] kick_pool+0x49/0x2d0 [ 196.246226][ T3382] __queue_work+0x8cb/0xb50 [ 196.250720][ T3382] queue_work_on+0xd1/0x160 [ 196.255206][ T3382] wg_queue_enqueue_per_peer_tx+0x119/0x270 [ 196.261086][ T3382] wg_packet_encrypt_worker+0x9e1/0xb80 [ 196.266615][ T3382] process_scheduled_works+0x4cb/0x9d0 [ 196.272069][ T3382] worker_thread+0x582/0x770 [ 196.276664][ T3382] kthread+0x489/0x510 [ 196.280719][ T3382] ret_from_fork+0x11f/0x1b0 [ 196.285298][ T3382] ret_from_fork_asm+0x1a/0x30 [ 196.290063][ T3382] [ 196.292370][ T3382] value changed: 0x00000000 -> 0x00000001 [ 196.298068][ T3382] [ 196.300391][ T3382] Reported by Kernel Concurrency Sanitizer on: [ 196.306531][ T3382] CPU: 0 UID: 0 PID: 3382 Comm: kworker/0:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 196.317886][ T3382] Tainted: [W]=WARN [ 196.321672][ T3382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.331714][ T3382] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 196.338205][ T3382] ================================================================== [ 196.348485][T12516] loop3: detected capacity change from 0 to 32768 [ 196.404665][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.444741][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.683196][T11327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.460131][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.471109][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.481985][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.490245][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 198.500079][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.524677][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 200.564688][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 201.604670][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 202.644667][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.684687][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 204.724671][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 205.764923][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available