last executing test programs: 2m4.538293796s ago: executing program 1 (id=1325): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) setresuid(0x0, 0xee00, 0xffffffffffffffff) r1 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2m4.434852467s ago: executing program 1 (id=1329): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 2m4.350568768s ago: executing program 1 (id=1332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 2m4.303401988s ago: executing program 1 (id=1334): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, 0x0}, 0x20) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) 2m4.144196819s ago: executing program 1 (id=1339): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m4.067321879s ago: executing program 1 (id=1342): socket(0x80000000000000a, 0x2, 0x0) syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = shmget(0x1, 0x10000, 0x1000, &(0x7f0000000000/0x10000)=nil) shmat(r0, &(0x7f000000b000/0x3000)=nil, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') 1m48.663853991s ago: executing program 32 (id=1342): socket(0x80000000000000a, 0x2, 0x0) syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = shmget(0x1, 0x10000, 0x1000, &(0x7f0000000000/0x10000)=nil) shmat(r0, &(0x7f000000b000/0x3000)=nil, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') 1m41.854648502s ago: executing program 3 (id=1612): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) 1m41.546826304s ago: executing program 3 (id=1619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0xca, 0x0, 0x1000}}}}}}, 0x0) 1m41.544209394s ago: executing program 3 (id=1621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x66) 1m41.522570354s ago: executing program 3 (id=1622): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 1m41.454551634s ago: executing program 3 (id=1624): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m41.410419705s ago: executing program 3 (id=1627): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) 1m35.741500568s ago: executing program 2 (id=1813): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m34.907787844s ago: executing program 2 (id=1829): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m34.835703314s ago: executing program 2 (id=1832): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m34.795504244s ago: executing program 2 (id=1834): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1m34.620122415s ago: executing program 2 (id=1841): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 1m34.619537135s ago: executing program 2 (id=1842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) sendto$inet6(r0, &(0x7f0000000580)='\a', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) shutdown(r0, 0x1) 1m25.615605139s ago: executing program 33 (id=1627): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) 1m19.118063948s ago: executing program 34 (id=1842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) sendto$inet6(r0, &(0x7f0000000580)='\a', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) shutdown(r0, 0x1) 1m16.281570005s ago: executing program 6 (id=2217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@grpquota}, {@noquota}]}, 0x3, 0x4db, &(0x7f0000000680)="$eJzs3MFvFNUfAPDvbHdpgR8/+uPHj58gSgGNjYktFBQOXjAx8aCJEQ9ybNpKkAUM7UEIkZIYPJN4Nx6NN0286tF48g/AgwcTQ0IMF8DTmtmd6W63s+2uLC1lP59k2/dm3sx7b2be9M17nQ1gYI2lP5KIf0XE7YjY2YguTzDW+PXg3rWZh/euzcRirXb6z6Se7n4az+Tbbc8i46WI0mdJ2w4b5q9cPT9drc5dzuKTCxc+npy/cvWVcxemz86dnbs4dfLk8WNHT7w29WrvlSrIL63X/X2fXtq/960zt96ZKefLR7LfrfXoqNxbMcZWWfdib7t64u1oCScrj9P1dS0MXRvJLutK2v6vVQ+d2egCAeumVqvVhjuvXqy1u7FiCbBpJbHRJQA2Rv6HPn3+zT/r1PV4Itw91XgASuv9IPs01pSjlKWptD3f9tNYRHyw+NeX6SdWG4f47TEVAAAYOD+eynuC7f2/UuxpSffvbA5lNCL+ExG7IuK/EbE7Iv4XUU/7/4h4pj2DJKLRydxZmP/utngz/++yWYTSnb5UtIO0//d6Nre1vP+X9/5idCiL7YjIO8xzR7JjMh6V4Q/PVeeOdtj/ljXyb84RNfqAaf55XzArx51y2wDd7PTCdK/17OTujYh95fb6J+X0xOXTOElE7I2IfT3sd7QlfO7lr/cvRSrL07X2f4vrX1crmNLreT6uSO2riJca538xlp3/Zo7J6vOTkyNRnTsymV4FRwrz+PmXm+92yn/N+n//e/smb5744fSjVntJev63tVz/kc/fNus/mkQkS/O18xG1od7yuPnr5/X9jh1euW7t8198/W9J3q+H8/b1yfTCwuWjEVuSt1cun2pum8fz9Gn9xw8Xt/9d2TbpkXg2ItKL+LmIeD4iDmRlPxgRhyKioGpLfnrjhY86revy+n9s0vrPFt7/lp3/5nx9l4F843TJ0PmDtx92uHl0d/6P10Pj2ZLi+1+y7BbRbUkf7egBAADA5lCK+v/+lyaWwqXSxERjDGh3bCtVL80vHIiIi7ONdwRGo1LKR7oa48GVJB//HG2JT7XFj2Xjxl8Mba3HJ2YuVWc3uvIw4LbX23yyov2n/uhxnBfYhPowjwZsUmu1/z231qkgwLpbpf17BICnXEv7X+yQZNF/ysDTyfM/DK6i9n89vln13QX3DNj8atoyDDTtHwZXOd5bCtdfey582xZ4Gvn7DwOp1/f6ewvUhotXjUTBNwaMPJ5ibC3Ia0MCac+qjzusRER3ibf+kyzyLmDnb3go9bbD4Vi5aihW2yrp4Xsc8kB6VNZMfHZP3y/+/DtR+n3ZfNtsp5UuT3efAhtyOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi7vwMAAP//FgXTQg==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1m16.020963036s ago: executing program 6 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000001cf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x35039c062aff7af0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m15.970481866s ago: executing program 6 (id=2227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) 1m15.4054555s ago: executing program 6 (id=2243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x5400, 0x0) 1m15.34426327s ago: executing program 6 (id=2244): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 1m15.31012843s ago: executing program 6 (id=2248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m15.208705231s ago: executing program 5 (id=2254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = dup(r0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1m15.162476191s ago: executing program 5 (id=2257): r0 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4066, &(0x7f0000008100)="$eJzszzFKw3AUBvAvrcEogSLoJIjFwU3i5pRbdJeewclBxdzEUTyA9/AOjl4hDpJIrYNLQeX3m97Hx3vJP/wR1TgVSZ6XT3tJjufpmuaj3Br6nc+l5jzlbjVJneRq/ebicfP/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FKTlXSbpHu5Ph1yNTbLw3Q3bS7qpDqYJffTlO1Rkf1kfvbN3WnymqRI8pZkMdvsMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/+JyJW1/rethuFtffThJ15Zj2/d9/+PPVsk7u3MsAAAAgACMMskoY+jfCJa+VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//SIAVRg==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/mnt\x00') 1m14.380094976s ago: executing program 5 (id=2276): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) write$selinux_load(0xffffffffffffffff, 0x0, 0x603f) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) 1m14.313407866s ago: executing program 5 (id=2269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m14.071155068s ago: executing program 5 (id=2273): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 1m14.061629548s ago: executing program 5 (id=2283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu~=0||!') 1m0.085214372s ago: executing program 35 (id=2248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 58.984927288s ago: executing program 36 (id=2283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu~=0||!') 9.654934852s ago: executing program 8 (id=4230): socket$kcm(0xa, 0x3, 0x73) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040840) 9.636108383s ago: executing program 8 (id=4232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) getpriority(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 9.597042093s ago: executing program 8 (id=4234): socket(0x2b, 0x80801, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x604ab000) 9.547079283s ago: executing program 8 (id=4238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 9.543525063s ago: executing program 8 (id=4240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9.509122823s ago: executing program 8 (id=4243): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) fcntl$setlease(r2, 0x400, 0x0) 2.642183345s ago: executing program 0 (id=4528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250200000008000800", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2.607894484s ago: executing program 0 (id=4531): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r1, 0x1) 2.543303065s ago: executing program 0 (id=4536): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r0}) 2.466800505s ago: executing program 0 (id=4553): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1830000000000000ec005"], 0x28}}, 0x0) 2.404029926s ago: executing program 0 (id=4547): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.346863816s ago: executing program 0 (id=4552): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2.002328868s ago: executing program 7 (id=4562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x6a1e) 1.965074819s ago: executing program 7 (id=4566): socket$kcm(0x21, 0x2, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000a00), 0xa00, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xd504, &(0x7f0000000280)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.884257519s ago: executing program 7 (id=4568): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r2, 0x3, 0x80}, 0x50) 1.82510919s ago: executing program 7 (id=4570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x5}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 1.82485927s ago: executing program 7 (id=4571): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) 1.456734152s ago: executing program 7 (id=4579): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.282226713s ago: executing program 4 (id=4587): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1.250072913s ago: executing program 4 (id=4589): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 923.807355ms ago: executing program 4 (id=4591): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) 923.346595ms ago: executing program 9 (id=4602): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 907.104535ms ago: executing program 9 (id=4592): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1) 881.839475ms ago: executing program 9 (id=4593): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file7\x00', &(0x7f0000002540), 0x2, &(0x7f0000000200)=ANY=[]) 881.642015ms ago: executing program 4 (id=4594): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r2, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 859.535765ms ago: executing program 9 (id=4595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x743a, 0x217, 0xa5, 0x0, 0x0) 851.682655ms ago: executing program 4 (id=4596): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000580)='./bus\x00', 0x1e, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@nombcache}, {@nolazytime}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000a40)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x20) sendfile(r1, r1, 0x0, 0x800000009) fallocate(r0, 0x3, 0x800, 0x8000c65) 679.288596ms ago: executing program 9 (id=4598): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) 2.08976ms ago: executing program 4 (id=4599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$9p_tcp(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1000, 0x0) 0s ago: executing program 9 (id=4610): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") setns(0xffffffffffffffff, 0x24020000) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x0, 0x0, 0x0, 0x43}, {0x3}, {}, {}, {}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) kernel console output (not intermixed with test programs): (slave bond_slave_1): Releasing backup interface [ 110.361985][ T2224] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 110.371175][ T2224] bond0 (unregistering): Released all slaves [ 110.379702][ T2224] bond1 (unregistering): Released all slaves [ 110.389423][ T2224] bond2 (unregistering): (slave bond3): Releasing backup interface [ 110.397392][ T2224] bond3 (unregistering): left promiscuous mode [ 110.404399][ T2224] bond2 (unregistering): Released all slaves [ 110.416468][ T2224] bond3 (unregistering): Released all slaves [ 110.425080][ T8474] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 110.472803][ T2224] hsr_slave_0: left promiscuous mode [ 110.479341][ T2224] hsr_slave_1: left promiscuous mode [ 110.485241][ T2224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.492941][ T2224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.500699][ T2224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.508218][ T2224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.517976][ T2224] veth1_macvtap: left promiscuous mode [ 110.523618][ T2224] veth0_macvtap: left promiscuous mode [ 110.529266][ T2224] veth1_vlan: left promiscuous mode [ 110.534562][ T2224] veth0_vlan: left promiscuous mode [ 110.609160][ T2224] team0 (unregistering): Port device team_slave_1 removed [ 110.619553][ T2224] team0 (unregistering): Port device team_slave_0 removed [ 110.655455][ T8496] netlink: 'syz.4.2141': attribute type 4 has an invalid length. [ 110.711380][ T7452] lo speed is unknown, defaulting to 1000 [ 110.717149][ T7452] syz2: Port: 1 Link DOWN [ 110.721887][ T8496] netlink: 'syz.4.2141': attribute type 4 has an invalid length. [ 110.741020][ T3375] lo speed is unknown, defaulting to 1000 [ 110.746799][ T3375] syz2: Port: 1 Link ACTIVE [ 110.771685][ T8429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 110.811383][ T8518] macvtap0: refused to change device tx_queue_len [ 110.817848][ T8429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 110.835882][ T8429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 110.848086][ T8429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 110.893046][ T8520] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2154'. [ 110.914034][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.921866][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2158'. [ 110.931885][ T8520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2154'. [ 110.990484][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.999675][ T8546] loop4: detected capacity change from 0 to 128 [ 111.000732][ T3798] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.012994][ T3798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.020751][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.072029][ T2224] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.079153][ T2224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.158740][ T8556] loop5: detected capacity change from 0 to 164 [ 111.200132][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.288561][ T8566] SELinux: failed to load policy [ 111.303779][ T8584] loop4: detected capacity change from 0 to 128 [ 111.436972][ T8429] veth0_vlan: entered promiscuous mode [ 111.472773][ T8429] veth1_vlan: entered promiscuous mode [ 111.489843][ T8429] veth0_macvtap: entered promiscuous mode [ 111.496920][ T8429] veth1_macvtap: entered promiscuous mode [ 111.507020][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.515948][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.552907][ T3818] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.566074][ T3798] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.589113][ T3810] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.603705][ T3810] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.705637][ T8625] xt_hashlimit: max too large, truncated to 1048576 [ 111.722426][ T8625] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 111.782096][ T8632] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 111.788634][ T8632] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.796139][ T8632] vhci_hcd vhci_hcd.0: Device attached [ 111.825777][ T8638] vhci_hcd: connection closed [ 111.825952][ T3798] vhci_hcd: stop threads [ 111.834945][ T3798] vhci_hcd: release socket [ 111.839349][ T3798] vhci_hcd: disconnect device [ 111.889420][ T8647] ALSA: seq fatal error: cannot create timer (-19) [ 111.912373][ T8597] syz.4.2173: attempt to access beyond end of device [ 111.912373][ T8597] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 111.925894][ T8597] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 111.935165][ T8584] syz.4.2173: attempt to access beyond end of device [ 111.935165][ T8584] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 111.948605][ T8584] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 111.957764][ T8597] syz.4.2173: attempt to access beyond end of device [ 111.957764][ T8597] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 111.971206][ T8597] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 112.076261][ T8663] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 112.084142][ T8663] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2204'. [ 112.203303][ T8679] SELinux: policydb version 4376 does not match my version range 15-35 [ 112.220751][ T8679] SELinux: failed to load policy [ 112.243018][ T8683] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2214'. [ 112.268439][ T8687] loop6: detected capacity change from 0 to 512 [ 112.275208][ T8687] EXT4-fs: Ignoring removed nobh option [ 112.300992][ T8687] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2217: iget: bad i_size value: 38620345925642 [ 112.318205][ T8687] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2217: couldn't read orphan inode 15 (err -117) [ 112.336921][ T8687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.431781][ T8687] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 112.442717][ T8687] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2217: bg 0: block 5: invalid block bitmap [ 112.479614][ T8296] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.753754][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.788849][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.127117][ T8742] loop7: detected capacity change from 0 to 4096 [ 113.167868][ T8742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.232058][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.452039][ T8777] bond1 (unregistering): Released all slaves [ 113.607562][ T8779] loop5: detected capacity change from 0 to 32768 [ 113.643212][ T8795] loop7: detected capacity change from 0 to 128 [ 113.671030][ T8779] loop5: p1 p3 < > [ 114.036968][ T8795] syz.7.2265: attempt to access beyond end of device [ 114.036968][ T8795] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 114.050403][ T8795] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 114.059132][ T8797] syz.7.2265: attempt to access beyond end of device [ 114.059132][ T8797] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 114.072622][ T8797] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 114.181485][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.198672][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.409721][ T8812] netlink: 'syz.0.2271': attribute type 2 has an invalid length. [ 114.417602][ T8812] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2271'. [ 114.641690][ T8825] bond2 (unregistering): Released all slaves [ 128.300769][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.470724][ T8832] netlink: 'syz.7.2280': attribute type 10 has an invalid length. [ 128.510740][ T8832] team0: Port device dummy0 added [ 128.682176][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.694048][ T3805] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.707486][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.728652][ T8838] lo speed is unknown, defaulting to 1000 [ 128.743821][ T3805] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.809564][ T3805] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.864429][ T3805] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.920522][ T8838] chnl_net:caif_netlink_parms(): no params data found [ 129.025190][ T8838] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.032323][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.046008][ T8838] bridge_slave_0: entered allmulticast mode [ 129.081597][ T8838] bridge_slave_0: entered promiscuous mode [ 129.098760][ T8838] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.105956][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.113302][ T8838] bridge_slave_1: entered allmulticast mode [ 129.119865][ T8838] bridge_slave_1: entered promiscuous mode [ 129.129774][ T3805] bridge_slave_1: left allmulticast mode [ 129.135478][ T3805] bridge_slave_1: left promiscuous mode [ 129.141173][ T3805] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.169191][ T3805] bridge_slave_0: left allmulticast mode [ 129.174903][ T3805] bridge_slave_0: left promiscuous mode [ 129.180715][ T3805] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.264383][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 129.264398][ T29] audit: type=1400 audit(129.244:2414): avc: denied { create } for pid=8862 comm="syz.0.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.303312][ T3805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.320748][ T29] audit: type=1326 audit(129.274:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.7.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 129.343764][ T29] audit: type=1326 audit(129.274:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.7.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 129.366739][ T29] audit: type=1326 audit(129.274:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.7.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 129.389739][ T29] audit: type=1326 audit(129.274:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.7.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 129.412592][ T29] audit: type=1326 audit(129.274:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.7.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 129.435403][ T29] audit: type=1326 audit(129.274:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.7.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 129.458230][ T29] audit: type=1326 audit(129.274:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.7.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 129.481076][ T29] audit: type=1326 audit(129.274:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.7.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 129.503916][ T29] audit: type=1326 audit(129.274:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.7.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 129.543635][ T3805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.560710][ T3805] bond0 (unregistering): Released all slaves [ 129.626687][ T3805] hsr_slave_0: left promiscuous mode [ 129.635475][ T8879] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 129.635475][ T8879] program syz.7.2295 not setting count and/or reply_len properly [ 129.652430][ T3805] hsr_slave_1: left promiscuous mode [ 129.657988][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.665467][ T3805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.676988][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.684476][ T3805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.695552][ T3805] veth1_macvtap: left promiscuous mode [ 129.704776][ T3805] veth0_macvtap: left promiscuous mode [ 129.710298][ T3805] veth1_vlan: left promiscuous mode [ 129.715849][ T3805] veth0_vlan: left promiscuous mode [ 129.769032][ T3805] team0 (unregistering): Port device team_slave_1 removed [ 129.779416][ T3805] team0 (unregistering): Port device team_slave_0 removed [ 129.814083][ T8838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.824430][ T8838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.871358][ T8838] team0: Port device team_slave_0 added [ 129.879795][ T8838] team0: Port device team_slave_1 added [ 129.931704][ T8838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.938673][ T8838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.964923][ T8838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.001127][ T8838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.008080][ T8838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.034061][ T8838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.062998][ T8874] lo speed is unknown, defaulting to 1000 [ 130.127384][ T8838] hsr_slave_0: entered promiscuous mode [ 130.134689][ T8838] hsr_slave_1: entered promiscuous mode [ 130.182863][ T8916] SELinux: failed to load policy [ 130.212544][ T8874] chnl_net:caif_netlink_parms(): no params data found [ 130.338902][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.346150][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.366790][ T8874] bridge_slave_0: entered allmulticast mode [ 130.377261][ T8874] bridge_slave_0: entered promiscuous mode [ 130.385828][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.392919][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.400147][ T8874] bridge_slave_1: entered allmulticast mode [ 130.406710][ T8874] bridge_slave_1: entered promiscuous mode [ 130.443143][ T8874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.454072][ T8838] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 130.464022][ T8874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.474801][ T8838] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 130.478794][ T8953] loop4: detected capacity change from 0 to 512 [ 130.488624][ T8953] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 130.511330][ T8838] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 130.529824][ T3805] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.543575][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.551144][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.558572][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.566060][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.573875][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.581296][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.588711][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.596154][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.603655][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.611170][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.620145][ T3375] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 130.621523][ T8874] team0: Port device team_slave_0 added [ 130.635520][ T8838] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 130.649753][ T8874] team0: Port device team_slave_1 added [ 130.665711][ T3805] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.682043][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.689012][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.714940][ T8874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.727412][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.734452][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.760481][ T8874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.795441][ T8972] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2326'. [ 130.809961][ T8970] bridge0: entered allmulticast mode [ 130.824947][ T8970] pim6reg: entered allmulticast mode [ 130.844145][ T3805] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.870329][ T8838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.889195][ T8874] hsr_slave_0: entered promiscuous mode [ 130.895714][ T8874] hsr_slave_1: entered promiscuous mode [ 130.902087][ T8874] debugfs: 'hsr0' already exists in 'hsr' [ 130.907829][ T8874] Cannot create hsr debugfs directory [ 130.917040][ T3805] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.939874][ T8838] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.971408][ T3818] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.978495][ T3818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.003965][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.011479][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.172624][ T3805] bond1 (unregistering): (slave geneve2): Releasing active interface [ 131.252861][ T3805] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 131.261874][ T3805] bond0 (unregistering): Released all slaves [ 131.270351][ T3805] bond1 (unregistering): Released all slaves [ 131.289158][ T8998] macvtap0: refused to change device tx_queue_len [ 131.327257][ T8874] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 131.344301][ T8874] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 131.364623][ T8838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.379987][ T3805] hsr_slave_0: left promiscuous mode [ 131.390783][ T3805] hsr_slave_1: left promiscuous mode [ 131.398425][ T3805] veth1_macvtap: left promiscuous mode [ 131.404190][ T3805] veth0_macvtap: left promiscuous mode [ 131.409700][ T3805] veth1_vlan: left promiscuous mode [ 131.415089][ T3805] veth0_vlan: left promiscuous mode [ 131.505863][ T8874] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 131.522899][ T8874] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 131.546956][ T3797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.563395][ T3797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.593430][ T3797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.608443][ T3797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.666357][ T8874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.688295][ T8874] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.718900][ T3797] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.725983][ T3797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.735759][ T3797] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.742845][ T3797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.766946][ T8838] veth0_vlan: entered promiscuous mode [ 131.806738][ T8838] veth1_vlan: entered promiscuous mode [ 131.840141][ T8838] veth0_macvtap: entered promiscuous mode [ 131.866110][ T8838] veth1_macvtap: entered promiscuous mode [ 131.885386][ T8838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.904895][ T8838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.925720][ T3805] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.943360][ T3805] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.958011][ T3851] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.978229][ T3851] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.989891][ T8874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.998998][ T9041] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 132.007348][ T9041] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 132.039960][ T9045] loop8: detected capacity change from 0 to 128 [ 132.074849][ T8984] syz.7.2337 (8984) used greatest stack depth: 7496 bytes left [ 132.123971][ T9055] netlink: 'syz.7.2348': attribute type 1 has an invalid length. [ 132.131812][ T9055] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2348'. [ 132.222080][ T9069] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 132.234805][ T9074] team_slave_0: entered promiscuous mode [ 132.240607][ T9074] team_slave_1: entered promiscuous mode [ 132.246271][ T9074] dummy0: entered promiscuous mode [ 132.252865][ T9074] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.266502][ T8874] veth0_vlan: entered promiscuous mode [ 132.295570][ T8874] veth1_vlan: entered promiscuous mode [ 132.321288][ T9074] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 132.361905][ T8874] veth0_macvtap: entered promiscuous mode [ 132.369650][ T8874] veth1_macvtap: entered promiscuous mode [ 132.380598][ T8874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.419927][ T8874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.433009][ T3797] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.455271][ T3797] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.504815][ T3797] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.513956][ T3797] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.644986][ T9119] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2372'. [ 132.654241][ T9119] 0{X: renamed from gretap0 (while UP) [ 132.661997][ T9119] 0{X: entered allmulticast mode [ 132.667727][ T9119] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 132.742106][ T9045] syz.8.2278: attempt to access beyond end of device [ 132.742106][ T9045] loop8: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 132.755592][ T9045] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 132.781269][ T9133] sd 0:0:1:0: device reset [ 132.799479][ T9056] syz.8.2278: attempt to access beyond end of device [ 132.799479][ T9056] loop8: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 132.812945][ T9056] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 132.862743][ T3837] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.870860][ T9144] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.910469][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2386'. [ 132.949975][ T9150] netlink: 'syz.4.2387': attribute type 21 has an invalid length. [ 132.998535][ T9150] netlink: 'syz.4.2387': attribute type 1 has an invalid length. [ 133.006355][ T9150] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2387'. [ 133.197124][ T9181] hub 9-0:1.0: USB hub found [ 133.203223][ T9181] hub 9-0:1.0: 8 ports detected [ 133.296234][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'. [ 133.330235][ T9208] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2405'. [ 133.344975][ T9198] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2405'. [ 133.407823][ T9220] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2417'. [ 133.422392][ T9218] rdma_op ffff8881271e0580 conn xmit_rdma 0000000000000000 [ 133.509102][ T9234] netlink: 'syz.8.2422': attribute type 1 has an invalid length. [ 133.520277][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2423'. [ 133.587658][ T9245] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 133.615709][ T9249] netlink: 'syz.0.2439': attribute type 1 has an invalid length. [ 133.629188][ T9249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.787893][ T9284] program syz.4.2446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.896179][ T9293] loop8: detected capacity change from 0 to 128 [ 134.163354][ T9324] vhci_hcd: invalid port number 96 [ 134.168552][ T9324] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 134.249738][ T9338] lo speed is unknown, defaulting to 1000 [ 134.309561][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 134.309576][ T29] audit: type=1400 audit(134.284:2660): avc: denied { read } for pid=9349 comm="syz.4.2476" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.338605][ T29] audit: type=1400 audit(134.284:2661): avc: denied { open } for pid=9349 comm="syz.4.2476" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.362913][ T29] audit: type=1326 audit(134.344:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.7.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f141b2b5e67 code=0x7ffc0000 [ 134.385891][ T29] audit: type=1326 audit(134.344:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.7.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f141b25b099 code=0x7ffc0000 [ 134.408864][ T29] audit: type=1326 audit(134.344:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.7.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 134.431642][ T29] audit: type=1326 audit(134.344:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.7.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 134.463366][ T29] audit: type=1400 audit(134.384:2666): avc: denied { ioctl } for pid=9349 comm="syz.4.2476" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.487721][ T29] audit: type=1326 audit(134.434:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.7.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 134.510588][ T29] audit: type=1326 audit(134.434:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.7.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 134.534166][ T29] audit: type=1326 audit(134.494:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.7.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 134.789716][ T9392] SELinux: security_context_str_to_sid (p [ 134.789716][ T9392] aۡy#L/ [ 134.789716][ T9392] ŖR3$B?M'!CpS;W1?{ &~*5&,+2r' [ 134.789716][ T9392] %Jxb%uvoxl?Ah,H޼[Z$<޶B㕬s3~)tbnL"6iY+E2uC`s6) failed with errno=-22 [ 134.890894][ T9391] Falling back ldisc for ttyS3. [ 135.050961][ T9411] xt_hashlimit: max too large, truncated to 1048576 [ 135.304116][ T9435] loop9: detected capacity change from 0 to 128 [ 135.446266][ T9455] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 135.739275][ T9489] tipc: Started in network mode [ 135.744212][ T9489] tipc: Node identity ac14140f, cluster identity 4711 [ 135.764951][ T9489] tipc: New replicast peer: 255.255.255.83 [ 135.770901][ T9489] tipc: Enabled bearer , priority 10 [ 135.887657][ T9508] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 135.969041][ T9527] __nla_validate_parse: 11 callbacks suppressed [ 135.969092][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2559'. [ 136.004472][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2559'. [ 136.017832][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2562'. [ 136.246162][ T9582] bridge0: entered allmulticast mode [ 136.264718][ T9582] pim6reg: entered allmulticast mode [ 136.576530][ T9635] lo speed is unknown, defaulting to 1000 [ 136.900851][ T3394] tipc: Node number set to 2886997007 [ 136.927316][ T9663] netlink: 'syz.0.2619': attribute type 6 has an invalid length. [ 136.935114][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2619'. [ 137.020933][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 137.104634][ T9688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9688 comm=syz.8.2629 [ 137.121015][ T9692] netlink: 'syz.4.2631': attribute type 6 has an invalid length. [ 137.128800][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2631'. [ 137.224033][ T9713] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 137.315667][ T9726] netlink: 'syz.8.2645': attribute type 6 has an invalid length. [ 137.323470][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2645'. [ 137.681137][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2670'. [ 137.711816][ T9788] loop7: detected capacity change from 0 to 512 [ 137.720433][ T9788] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 137.751405][ T9788] EXT4-fs (loop7): 1 truncate cleaned up [ 137.764237][ T9788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.924274][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.062295][ T9846] loop4: detected capacity change from 0 to 128 [ 138.186971][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2703'. [ 138.204472][ T9865] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2707'. [ 138.214423][ T9865] IPVS: Error connecting to the multicast addr [ 138.261306][ T9875] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2720'. [ 138.283935][ T1069] kernel write not supported for file bpf-prog (pid: 1069 comm: kworker/0:2) [ 138.512822][ T9908] program syz.7.2726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.530895][ T9911] vlan2: entered allmulticast mode [ 138.853151][ T9944] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 139.205683][ T9965] loop9: detected capacity change from 0 to 764 [ 139.213542][ T9965] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 139.223317][ T9965] program syz.9.2750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.252886][ T9971] sch_tbf: peakrate 9 is lower than or equals to rate 6829859379779001161 ! [ 139.397864][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 139.397880][ T29] audit: type=1326 audit(139.374:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 139.445533][ T29] audit: type=1326 audit(139.374:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 139.468399][ T29] audit: type=1326 audit(139.414:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 139.491097][ T29] audit: type=1326 audit(139.414:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 139.513885][ T29] audit: type=1326 audit(139.414:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.4.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 139.544032][ T29] audit: type=1400 audit(139.524:3141): avc: denied { watch watch_reads } for pid=9996 comm="syz.9.2766" path="/62/file1" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 139.679563][ T29] audit: type=1326 audit(139.654:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.9.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 139.702542][ T29] audit: type=1326 audit(139.654:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.9.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 139.725518][ T29] audit: type=1326 audit(139.654:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.9.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fdacbd810 code=0x7ffc0000 [ 139.748404][ T29] audit: type=1326 audit(139.654:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.9.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9fdacc07f7 code=0x7ffc0000 [ 139.832166][T10030] bond1: option ad_user_port_key: invalid value (1136) [ 139.839145][T10030] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 139.848092][T10030] bond1 (unregistering): Released all slaves [ 139.899263][T10045] netlink: 'syz.0.2788': attribute type 10 has an invalid length. [ 139.917906][T10045] team0 (unregistering): Port device team_slave_0 removed [ 139.933025][T10045] team0 (unregistering): Port device team_slave_1 removed [ 139.946142][ T7455] kernel write not supported for file task/143/attr/prev (pid: 7455 comm: kworker/1:11) [ 140.109468][T10071] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.234344][ T7455] kernel write not supported for file task/192/attr/prev (pid: 7455 comm: kworker/1:11) [ 140.261520][T10091] bond1: option ad_user_port_key: invalid value (1136) [ 140.268576][T10091] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 140.276500][T10091] bond1 (unregistering): Released all slaves [ 140.433801][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.442730][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.488865][T10113] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.749952][T10134] loop4: detected capacity change from 0 to 128 [ 140.870052][T10152] loop8: detected capacity change from 0 to 512 [ 140.877424][T10152] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 140.888649][T10152] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 141.016667][ T3813] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 141.089549][T10180] __nla_validate_parse: 7 callbacks suppressed [ 141.089567][T10180] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2850'. [ 141.108542][T10180] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2850'. [ 141.248962][T10201] macvtap0: refused to change device tx_queue_len [ 141.314493][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 141.418838][T10229] netlink: 'syz.9.2872': attribute type 4 has an invalid length. [ 141.437902][T10229] netlink: 'syz.9.2872': attribute type 4 has an invalid length. [ 141.494823][T10244] loop8: detected capacity change from 0 to 512 [ 141.533328][T10244] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.594160][ T8838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.673733][T10280] netlink: 'syz.8.2895': attribute type 21 has an invalid length. [ 141.684024][T10280] netlink: 'syz.8.2895': attribute type 6 has an invalid length. [ 141.691839][T10280] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2895'. [ 141.715693][T10285] loop7: detected capacity change from 0 to 1024 [ 141.722503][T10285] EXT4-fs: Ignoring removed orlov option [ 141.733703][T10285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.747768][T10287] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.798662][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.946535][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2909'. [ 141.956229][T10311] bridge_slave_1: left allmulticast mode [ 141.962006][T10311] bridge_slave_1: left promiscuous mode [ 141.967816][T10311] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.977314][T10311] bridge_slave_0: left promiscuous mode [ 141.983067][T10311] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.015494][T10311] bridge0 (unregistering): left allmulticast mode [ 142.261354][T10335] infiniband syz0: set active [ 142.266103][T10335] infiniband syz0: added veth1_vlan [ 142.277548][T10335] RDS/IB: syz0: added [ 142.281765][T10335] smc: adding ib device syz0 with port count 1 [ 142.287988][T10335] smc: ib device syz0 port 1 has no pnetid [ 142.613676][ T8429] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 142.624622][ T8429] CPU: 1 UID: 0 PID: 8429 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.624647][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.624660][ T8429] Call Trace: [ 142.624709][ T8429] [ 142.624716][ T8429] __dump_stack+0x1d/0x30 [ 142.624737][ T8429] dump_stack_lvl+0xe8/0x140 [ 142.624890][ T8429] dump_stack+0x15/0x1b [ 142.624910][ T8429] dump_header+0x81/0x220 [ 142.624930][ T8429] oom_kill_process+0x342/0x400 [ 142.624975][ T8429] out_of_memory+0x979/0xb80 [ 142.625022][ T8429] try_charge_memcg+0x610/0xa10 [ 142.625057][ T8429] charge_memcg+0x51/0xc0 [ 142.625122][ T8429] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 142.625149][ T8429] __read_swap_cache_async+0x17b/0x2d0 [ 142.625188][ T8429] swap_cluster_readahead+0x262/0x3c0 [ 142.625218][ T8429] swapin_readahead+0xde/0x6f0 [ 142.625241][ T8429] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 142.625308][ T8429] ? css_rstat_updated+0xb7/0x240 [ 142.625355][ T8429] ? __rcu_read_unlock+0x4f/0x70 [ 142.625383][ T8429] ? __rcu_read_unlock+0x4f/0x70 [ 142.625409][ T8429] ? swap_cache_get_folio+0x277/0x280 [ 142.625428][ T8429] do_swap_page+0x2ae/0x2370 [ 142.625528][ T8429] ? _raw_spin_unlock+0x26/0x50 [ 142.625554][ T8429] ? finish_task_switch+0xad/0x2b0 [ 142.625600][ T8429] ? __pfx_default_wake_function+0x10/0x10 [ 142.625631][ T8429] handle_mm_fault+0x9a5/0x2be0 [ 142.625701][ T8429] ? vma_start_read+0x141/0x1f0 [ 142.625733][ T8429] do_user_addr_fault+0x630/0x1080 [ 142.625753][ T8429] ? fpregs_restore_userregs+0xe2/0x1d0 [ 142.625786][ T8429] ? switch_fpu_return+0xe/0x20 [ 142.625832][ T8429] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.625861][ T8429] exc_page_fault+0x62/0xa0 [ 142.625973][ T8429] asm_exc_page_fault+0x26/0x30 [ 142.625991][ T8429] RIP: 0033:0x7f141b2f1845 [ 142.626017][ T8429] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6d 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 142.626036][ T8429] RSP: 002b:00007fffa26c4268 EFLAGS: 00010246 [ 142.626057][ T8429] RAX: 0000000000000000 RBX: 0000000000000115 RCX: 00007f141b2f1843 [ 142.626085][ T8429] RDX: 00007fffa26c4280 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.626098][ T8429] RBP: 00007fffa26c42ec R08: 0000000021520498 R09: 0000000000000000 [ 142.626112][ T8429] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 142.626125][ T8429] R13: 00000000000927c0 R14: 0000000000022a79 R15: 00007fffa26c4340 [ 142.626141][ T8429] [ 142.626147][ T8429] memory: usage 307200kB, limit 307200kB, failcnt 325 [ 142.876532][ T8429] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 142.884428][ T8429] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 142.891703][ T8429] Memory cgroup stats for /syz7: [ 142.891978][ T8429] cache 0 [ 142.900183][ T8429] rss 0 [ 142.903002][ T8429] shmem 0 [ 142.905953][ T8429] mapped_file 0 [ 142.909401][ T8429] dirty 0 [ 142.910583][T10372] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2936'. [ 142.912429][ T8429] writeback 0 [ 142.924614][ T8429] workingset_refault_anon 127 [ 142.929280][ T8429] workingset_refault_file 0 [ 142.933796][ T8429] swap 192512 [ 142.933982][T10372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2936'. [ 142.937144][ T8429] swapcached 4096 [ 142.937153][ T8429] pgpgin 16868 [ 142.953104][ T8429] pgpgout 16867 [ 142.956565][ T8429] pgfault 25150 [ 142.960016][ T8429] pgmajfault 58 [ 142.963492][ T8429] inactive_anon 4096 [ 142.967809][ T8429] active_anon 0 [ 142.971298][ T8429] inactive_file 0 [ 142.974918][ T8429] active_file 0 [ 142.978366][ T8429] unevictable 0 [ 142.981846][ T8429] hierarchical_memory_limit 314572800 [ 142.987249][ T8429] hierarchical_memsw_limit 9223372036854771712 [ 142.993480][ T8429] total_cache 0 [ 142.996972][ T8429] total_rss 0 [ 143.000238][ T8429] total_shmem 0 [ 143.003772][ T8429] total_mapped_file 0 [ 143.007764][ T8429] total_dirty 0 [ 143.011218][ T8429] total_writeback 0 [ 143.014998][ T8429] total_workingset_refault_anon 127 [ 143.020189][ T8429] total_workingset_refault_file 0 [ 143.025505][ T8429] total_swap 192512 [ 143.029297][ T8429] total_swapcached 4096 [ 143.033580][ T8429] total_pgpgin 16868 [ 143.037456][ T8429] total_pgpgout 16867 [ 143.041491][ T8429] total_pgfault 25150 [ 143.045448][ T8429] total_pgmajfault 58 [ 143.049404][ T8429] total_inactive_anon 4096 [ 143.053819][ T8429] total_active_anon 0 [ 143.057796][ T8429] total_inactive_file 0 [ 143.061968][ T8429] total_active_file 0 [ 143.065943][ T8429] total_unevictable 0 [ 143.070502][ T8429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2908,pid=10312,uid=0 [ 143.085172][ T8429] Memory cgroup out of memory: Killed process 10312 (syz.7.2908) total-vm:93824kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 143.219746][T10391] loop8: detected capacity change from 0 to 1024 [ 143.258596][T10391] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.265558][T10391] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.301367][T10391] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.2945: bad orphan inode 11 [ 143.332274][T10391] ext4_test_bit(bit=10, block=4) = 1 [ 143.337687][T10391] is_bad_inode(inode)=0 [ 143.341969][T10391] NEXT_ORPHAN(inode)=3254779904 [ 143.346905][T10391] max_ino=32 [ 143.350121][T10391] i_nlink=0 [ 143.360299][T10391] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.2945: lblock 2 mapped to illegal pblock 2 (length 1) [ 143.381813][T10391] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.2945: lblock 0 mapped to illegal pblock 48 (length 1) [ 143.402422][T10391] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.2945: Failed to acquire dquot type 0 [ 143.430879][T10391] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 143.455611][T10391] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.2945: mark_inode_dirty error [ 143.468063][T10407] loop4: detected capacity change from 0 to 2048 [ 143.474676][T10391] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 143.485419][T10391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.519944][ T8838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.532008][ T8838] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 143.557878][ T8838] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 143.568150][ T8838] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 143.581135][T10418] netlink: 'syz.4.2959': attribute type 39 has an invalid length. [ 143.700371][T10431] loop4: detected capacity change from 0 to 256 [ 143.850621][T10449] loop4: detected capacity change from 0 to 1024 [ 143.870532][T10451] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 143.886528][T10449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.937413][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.996364][T10473] SELinux: policydb version 4376 does not match my version range 15-35 [ 144.005352][T10473] SELinux: failed to load policy [ 144.013805][T10475] netlink: 'syz.8.2983': attribute type 1 has an invalid length. [ 144.021557][T10475] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2983'. [ 144.144334][T10502] loop8: detected capacity change from 0 to 512 [ 144.151378][T10502] EXT4-fs: Ignoring removed nobh option [ 144.164586][T10502] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.2995: iget: bad i_size value: 38620345925642 [ 144.183214][T10502] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2995: couldn't read orphan inode 15 (err -117) [ 144.197383][T10502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.221896][T10502] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2995: bg 0: block 5: invalid block bitmap [ 144.268375][ T8838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.312444][T10524] 9p: Unknown access argument : -22 [ 144.352152][T10534] block device autoloading is deprecated and will be removed. [ 144.408239][T10544] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 144.425880][T10542] loop8: detected capacity change from 0 to 4096 [ 144.432420][T10544] SELinux: failed to load policy [ 144.440067][T10542] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.508896][ T8838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.524863][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 144.524877][ T29] audit: type=1400 audit(144.504:3385): avc: denied { read } for pid=10558 comm="syz.0.3022" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.554821][ T29] audit: type=1400 audit(144.504:3386): avc: denied { open } for pid=10558 comm="syz.0.3022" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.585580][ T29] audit: type=1400 audit(144.554:3387): avc: denied { ioctl } for pid=10558 comm="syz.0.3022" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.629014][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3024'. [ 144.637460][ T29] audit: type=1400 audit(144.604:3388): avc: denied { ioctl } for pid=10561 comm="syz.4.3023" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.685071][ T29] audit: type=1326 audit(144.664:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.8.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03cd9efc9 code=0x7ffc0000 [ 144.708333][ T29] audit: type=1326 audit(144.674:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.8.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc03cd9efc9 code=0x7ffc0000 [ 144.731100][ T29] audit: type=1326 audit(144.674:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.8.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03cd9efc9 code=0x7ffc0000 [ 144.754501][ T29] audit: type=1326 audit(144.674:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.8.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03cd9efc9 code=0x7ffc0000 [ 144.777474][ T29] audit: type=1326 audit(144.674:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.8.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc03cd9efc9 code=0x7ffc0000 [ 144.800450][ T29] audit: type=1326 audit(144.674:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.8.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03cd9efc9 code=0x7ffc0000 [ 144.940899][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 145.021881][T10604] tipc: Enabled bearer , priority 0 [ 145.030946][T10598] loop4: detected capacity change from 0 to 8192 [ 145.038585][T10604] tipc: Disabling bearer [ 145.061102][T10613] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3048'. [ 145.085573][T10598] loop4: p1 < > p2 < > p3 p4 < > [ 145.090639][T10598] loop4: partition table partially beyond EOD, truncated [ 145.098080][T10598] loop4: p1 start 67108864 is beyond EOD, truncated [ 145.105956][T10598] loop4: p3 start 100859904 is beyond EOD, truncated [ 145.108051][T10615] atomic_op ffff88812d5b1128 conn xmit_atomic 0000000000000000 [ 145.147452][T10620] netlink: 'syz.0.3051': attribute type 1 has an invalid length. [ 145.221528][T10631] netlink: 'syz.7.3065': attribute type 1 has an invalid length. [ 145.261773][T10637] netlink: 'syz.8.3058': attribute type 2 has an invalid length. [ 145.467539][T10656] loop4: detected capacity change from 0 to 4096 [ 145.488050][T10656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.570352][T10659] SELinux: failed to load policy [ 145.576570][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.771652][T10698] loop9: detected capacity change from 0 to 4096 [ 145.800923][T10698] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.873823][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.213654][T10736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.222716][T10736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.851495][T10752] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 146.851495][T10752] program syz.4.3114 not setting count and/or reply_len properly [ 146.894845][T10758] hub 9-0:1.0: USB hub found [ 146.902034][T10758] hub 9-0:1.0: 8 ports detected [ 147.115234][T10785] loop9: detected capacity change from 0 to 512 [ 147.173067][T10785] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 147.419073][ T7455] hid_parser_main: 17 callbacks suppressed [ 147.419092][ T7455] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.432458][ T7455] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.439878][ T7455] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.447324][ T7455] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.463262][ T7455] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.470729][ T7455] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.478114][ T7455] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.485539][ T7455] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.493014][ T7455] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.500491][ T7455] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.529136][T10823] __nla_validate_parse: 10 callbacks suppressed [ 147.529150][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3145'. [ 147.575979][ T7455] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 147.681992][T10850] loop7: detected capacity change from 0 to 512 [ 147.689758][T10850] EXT4-fs: Ignoring removed nobh option [ 147.699415][T10850] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.3161: iget: bad i_size value: 38620345925642 [ 147.721795][T10850] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3161: couldn't read orphan inode 15 (err -117) [ 147.740703][T10851] SELinux: failed to load policy [ 147.741958][T10850] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.843663][T10850] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3161: bg 0: block 5: invalid block bitmap [ 147.923675][T10870] macvtap0: refused to change device tx_queue_len [ 147.962592][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.625217][T10902] loop4: detected capacity change from 0 to 1024 [ 148.678702][T10912] loop9: detected capacity change from 0 to 512 [ 148.685076][T10902] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 148.696001][T10902] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 148.699849][T10912] EXT4-fs: Ignoring removed nobh option [ 148.713718][T10912] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.3186: iget: bad i_size value: 38620345925642 [ 148.726745][T10912] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3186: couldn't read orphan inode 15 (err -117) [ 148.739121][T10912] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.753247][T10902] JBD2: no valid journal superblock found [ 148.758966][T10902] EXT4-fs (loop4): Could not load journal inode [ 148.774042][T10902] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 148.808973][T10912] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3186: bg 0: block 5: invalid block bitmap [ 148.865354][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.954495][T10860] syz.0.3164 (10860) used greatest stack depth: 7240 bytes left [ 149.083245][T10942] netlink: 'syz.0.3209': attribute type 21 has an invalid length. [ 149.098791][T10946] sd 0:0:1:0: device reset [ 149.107761][T10942] netlink: 'syz.0.3209': attribute type 1 has an invalid length. [ 149.115575][T10942] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3209'. [ 149.457476][T10993] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3217'. [ 149.472711][T10986] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3217'. [ 149.568273][T11007] loop8: detected capacity change from 0 to 1024 [ 149.576760][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 149.576832][ T29] audit: type=1326 audit(149.554:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.7.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 149.580710][T11007] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.586236][ T29] audit: type=1326 audit(149.564:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.7.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 149.605979][T11007] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 149.610751][T11007] JBD2: no valid journal superblock found [ 149.655017][T11007] EXT4-fs (loop8): Could not load journal inode [ 149.665168][ T29] audit: type=1326 audit(149.594:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.7.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 149.688106][ T29] audit: type=1326 audit(149.594:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.7.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 149.710999][ T29] audit: type=1326 audit(149.594:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.7.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 149.733963][ T29] audit: type=1326 audit(149.594:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.7.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 149.740272][T11015] netlink: 'syz.0.3228': attribute type 4 has an invalid length. [ 149.756859][ T29] audit: type=1326 audit(149.594:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.7.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 149.756891][ T29] audit: type=1326 audit(149.594:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.7.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 149.756985][ T29] audit: type=1326 audit(149.594:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.7.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 149.833631][ T29] audit: type=1326 audit(149.604:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.7.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 149.838431][T11015] netlink: 'syz.0.3228': attribute type 4 has an invalid length. [ 149.891038][T11007] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 150.376333][T11035] loop4: detected capacity change from 0 to 128 [ 150.610582][T11038] loop8: detected capacity change from 0 to 32768 [ 150.662807][T11038] loop8: p1 p2 p3 < p5 p6 > [ 150.669671][T11038] loop8: p2 size 16775168 extends beyond EOD, truncated [ 150.686356][T11038] loop8: p5 start 4294970168 is beyond EOD, truncated [ 150.778960][T11058] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3245'. [ 150.861861][T11075] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3257'. [ 150.910335][T11081] lo speed is unknown, defaulting to 1000 [ 150.981130][T11094] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3266'. [ 151.036531][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3272'. [ 151.121589][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 151.209438][T11127] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3279'. [ 151.265474][T11135] xt_hashlimit: max too large, truncated to 1048576 [ 151.533183][T11164] loop7: detected capacity change from 0 to 128 [ 151.551364][T11167] SELinux: security_context_str_to_sid (af, priority 10 [ 152.393509][T11236] loop7: detected capacity change from 0 to 128 [ 152.546590][T11250] loop7: detected capacity change from 0 to 1024 [ 152.610741][T11250] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.621763][T11250] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 152.641530][T11250] JBD2: no valid journal superblock found [ 152.647300][T11250] EXT4-fs (loop7): Could not load journal inode [ 152.672447][T11250] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 153.079222][T11276] loop8: detected capacity change from 0 to 128 [ 153.190696][ T3406] tipc: Node number set to 2886997007 [ 153.417279][T11292] loop9: detected capacity change from 0 to 1024 [ 153.434985][T11292] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 153.446100][T11292] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 153.463465][T11292] JBD2: no valid journal superblock found [ 153.469209][T11292] EXT4-fs (loop9): Could not load journal inode [ 153.497518][T11292] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 153.575560][T11308] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 153.600853][T11307] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 153.703681][T11316] loop9: detected capacity change from 0 to 128 [ 153.783034][T11332] __nla_validate_parse: 4 callbacks suppressed [ 153.783048][T11332] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3374'. [ 153.892570][T11346] vlan2: entered allmulticast mode [ 154.031785][T11357] program syz.0.3389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.126410][T11368] loop8: detected capacity change from 0 to 1024 [ 154.158009][T11368] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 154.168978][T11368] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 154.211106][T11368] JBD2: no valid journal superblock found [ 154.216872][T11368] EXT4-fs (loop8): Could not load journal inode [ 154.261129][T11368] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 154.482214][T11290] syz.4.3366 (11290) used greatest stack depth: 6376 bytes left [ 154.586079][T11393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3403'. [ 154.612691][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 154.612707][ T29] audit: type=1400 audit(154.594:4154): avc: denied { watch watch_reads } for pid=11395 comm="syz.7.3404" path="/233/file1" dev="tmpfs" ino=1210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 154.642609][ T29] audit: type=1400 audit(154.604:4155): avc: denied { read write } for pid=11397 comm="syz.9.3407" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.665401][ T29] audit: type=1400 audit(154.604:4156): avc: denied { open } for pid=11397 comm="syz.9.3407" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.688014][ T29] audit: type=1400 audit(154.604:4157): avc: denied { ioctl } for pid=11397 comm="syz.9.3407" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.729369][T11405] loop4: detected capacity change from 0 to 164 [ 154.737787][ T29] audit: type=1400 audit(154.714:4158): avc: denied { mount } for pid=11404 comm="syz.4.3409" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 154.771362][ T29] audit: type=1400 audit(154.744:4159): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 155.116906][T11411] sd 0:0:1:0: device reset [ 155.516874][T11429] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3417'. [ 155.660709][ T29] audit: type=1326 audit(155.604:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.0.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 155.683718][ T29] audit: type=1326 audit(155.624:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.7.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 155.706680][ T29] audit: type=1326 audit(155.624:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.7.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 155.729757][ T29] audit: type=1326 audit(155.624:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11439 comm="syz.7.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141b2befc9 code=0x7ffc0000 [ 155.829300][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3426'. [ 155.865573][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3426'. [ 155.891294][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3426'. [ 155.900538][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3426'. [ 156.163225][T11486] loop7: detected capacity change from 0 to 512 [ 156.174018][T11486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.209649][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.229142][T11497] loop7: detected capacity change from 0 to 164 [ 156.337750][T11509] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 156.337750][T11509] program syz.0.3456 not setting count and/or reply_len properly [ 156.405735][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.416424][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.869123][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3470'. [ 156.871646][T11519] sd 0:0:1:0: device reset [ 156.971865][T11522] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3473'. [ 156.994798][T11525] lo speed is unknown, defaulting to 1000 [ 157.304616][T11548] loop7: detected capacity change from 0 to 128 [ 157.639613][T11514] syz.0.3459 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 157.653816][T11514] CPU: 0 UID: 0 PID: 11514 Comm: syz.0.3459 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.653924][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.653938][T11514] Call Trace: [ 157.653946][T11514] [ 157.653954][T11514] __dump_stack+0x1d/0x30 [ 157.653979][T11514] dump_stack_lvl+0xe8/0x140 [ 157.653999][T11514] dump_stack+0x15/0x1b [ 157.654058][T11514] dump_header+0x81/0x220 [ 157.654075][T11514] oom_kill_process+0x342/0x400 [ 157.654105][T11514] out_of_memory+0x979/0xb80 [ 157.654150][T11514] try_charge_memcg+0x610/0xa10 [ 157.654186][T11514] obj_cgroup_charge_pages+0xa6/0x150 [ 157.654210][T11514] __memcg_kmem_charge_page+0x9f/0x170 [ 157.654249][T11514] __alloc_frozen_pages_noprof+0x188/0x360 [ 157.654291][T11514] alloc_pages_mpol+0xb3/0x260 [ 157.654320][T11514] alloc_pages_noprof+0x90/0x130 [ 157.654411][T11514] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 157.654449][T11514] __kvmalloc_node_noprof+0x483/0x670 [ 157.654486][T11514] ? ip_set_alloc+0x24/0x30 [ 157.654614][T11514] ? ip_set_alloc+0x24/0x30 [ 157.654646][T11514] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 157.654785][T11514] ip_set_alloc+0x24/0x30 [ 157.654869][T11514] hash_netiface_create+0x282/0x740 [ 157.654908][T11514] ? __pfx_hash_netiface_create+0x10/0x10 [ 157.654940][T11514] ip_set_create+0x3cc/0x970 [ 157.654968][T11514] ? __nla_parse+0x40/0x60 [ 157.655054][T11514] nfnetlink_rcv_msg+0x4c6/0x590 [ 157.655119][T11514] netlink_rcv_skb+0x123/0x220 [ 157.655175][T11514] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 157.655211][T11514] nfnetlink_rcv+0x167/0x16c0 [ 157.655299][T11514] ? kmem_cache_free+0xe4/0x3d0 [ 157.655359][T11514] ? __kfree_skb+0x109/0x150 [ 157.655393][T11514] ? nlmon_xmit+0x4f/0x60 [ 157.655419][T11514] ? consume_skb+0x49/0x150 [ 157.655451][T11514] ? nlmon_xmit+0x4f/0x60 [ 157.655538][T11514] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 157.655577][T11514] ? __dev_queue_xmit+0x1200/0x2000 [ 157.655662][T11514] ? __dev_queue_xmit+0x182/0x2000 [ 157.655743][T11514] ? ref_tracker_free+0x37d/0x3e0 [ 157.655777][T11514] ? __netlink_deliver_tap+0x4dc/0x500 [ 157.655847][T11514] netlink_unicast+0x5c0/0x690 [ 157.655905][T11514] netlink_sendmsg+0x58b/0x6b0 [ 157.655924][T11514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.656006][T11514] __sock_sendmsg+0x145/0x180 [ 157.656029][T11514] ____sys_sendmsg+0x31e/0x4e0 [ 157.656067][T11514] ___sys_sendmsg+0x17b/0x1d0 [ 157.656110][T11514] __x64_sys_sendmsg+0xd4/0x160 [ 157.656187][T11514] x64_sys_call+0x191e/0x3000 [ 157.656209][T11514] do_syscall_64+0xd2/0x200 [ 157.656231][T11514] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.656353][T11514] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.656389][T11514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.656412][T11514] RIP: 0033:0x7f7efbd7efc9 [ 157.656426][T11514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.656471][T11514] RSP: 002b:00007f7efa7e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.656556][T11514] RAX: ffffffffffffffda RBX: 00007f7efbfd5fa0 RCX: 00007f7efbd7efc9 [ 157.656570][T11514] RDX: 00000000000088a4 RSI: 00002000000008c0 RDI: 0000000000000003 [ 157.656585][T11514] RBP: 00007f7efbe01f91 R08: 0000000000000000 R09: 0000000000000000 [ 157.656599][T11514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.656614][T11514] R13: 00007f7efbfd6038 R14: 00007f7efbfd5fa0 R15: 00007ffe8724a118 [ 157.656632][T11514] [ 157.656637][T11514] memory: usage 307200kB, limit 307200kB, failcnt 1339 [ 158.002292][T11514] memory+swap: usage 307588kB, limit 9007199254740988kB, failcnt 0 [ 158.010609][T11514] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 158.018037][T11514] Memory cgroup stats for /syz0: [ 158.018359][T11514] cache 0 [ 158.026271][T11514] rss 0 [ 158.029093][T11514] shmem 0 [ 158.032012][T11514] mapped_file 0 [ 158.035443][T11514] dirty 0 [ 158.038348][T11514] writeback 0 [ 158.041633][T11514] workingset_refault_anon 1892 [ 158.046541][T11514] workingset_refault_file 535 [ 158.051206][T11514] swap 397312 [ 158.054541][T11514] swapcached 4096 [ 158.058187][T11514] pgpgin 140982 [ 158.061747][T11514] pgpgout 140981 [ 158.065318][T11514] pgfault 197832 [ 158.068934][T11514] pgmajfault 314 [ 158.072494][T11514] inactive_anon 0 [ 158.076104][T11514] active_anon 4096 [ 158.079883][T11514] inactive_file 0 [ 158.083516][T11514] active_file 0 [ 158.087062][T11514] unevictable 0 [ 158.090504][T11514] hierarchical_memory_limit 314572800 [ 158.096257][T11514] hierarchical_memsw_limit 9223372036854771712 [ 158.102707][T11514] total_cache 0 [ 158.106149][T11514] total_rss 0 [ 158.109406][T11514] total_shmem 0 [ 158.112858][T11514] total_mapped_file 0 [ 158.116811][T11514] total_dirty 0 [ 158.120280][T11514] total_writeback 0 [ 158.124071][T11514] total_workingset_refault_anon 1892 [ 158.129416][T11514] total_workingset_refault_file 535 [ 158.134610][T11514] total_swap 397312 [ 158.138389][T11514] total_swapcached 4096 [ 158.142558][T11514] total_pgpgin 140982 [ 158.146512][T11514] total_pgpgout 140981 [ 158.150548][T11514] total_pgfault 197832 [ 158.154654][T11514] total_pgmajfault 314 [ 158.158696][T11514] total_inactive_anon 0 [ 158.162877][T11514] total_active_anon 4096 [ 158.167099][T11514] total_inactive_file 0 [ 158.171233][T11514] total_active_file 0 [ 158.175182][T11514] total_unevictable 0 [ 158.179133][T11514] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3459,pid=11513,uid=0 [ 158.193835][T11514] Memory cgroup out of memory: Killed process 11513 (syz.0.3459) total-vm:96136kB, anon-rss:1132kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 158.345791][T11553] xt_hashlimit: max too large, truncated to 1048576 [ 158.351795][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3476'. [ 158.383159][T11558] sd 0:0:1:0: device reset [ 158.449369][T11569] xt_hashlimit: max too large, truncated to 1048576 [ 158.502376][T11570] SELinux: security_context_str_to_sid (*[p+NEACLqunm2^I [ 158.502376][T11570] +~ Äz$nXm,sC n)p85s'j&2 EePPw%}_Xkضa(BpZ$R Je!M i1Z9O^#4Y5E}eDX ]JȀChfG4O|=01M47Q-z+ɘm٣3[7?@) failed with errno=-22 [ 159.036199][T11554] syz.4.3488 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 159.050427][T11554] CPU: 1 UID: 0 PID: 11554 Comm: syz.4.3488 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.050444][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.050452][T11554] Call Trace: [ 159.050456][T11554] [ 159.050511][T11554] __dump_stack+0x1d/0x30 [ 159.050526][T11554] dump_stack_lvl+0xe8/0x140 [ 159.050602][T11554] dump_stack+0x15/0x1b [ 159.050612][T11554] dump_header+0x81/0x220 [ 159.050622][T11554] oom_kill_process+0x342/0x400 [ 159.050677][T11554] out_of_memory+0x979/0xb80 [ 159.050707][T11554] try_charge_memcg+0x610/0xa10 [ 159.050750][T11554] obj_cgroup_charge_pages+0xa6/0x150 [ 159.050767][T11554] __memcg_kmem_charge_page+0x9f/0x170 [ 159.050779][T11554] __alloc_frozen_pages_noprof+0x188/0x360 [ 159.050878][T11554] alloc_pages_mpol+0xb3/0x260 [ 159.050903][T11554] alloc_pages_noprof+0x90/0x130 [ 159.050925][T11554] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 159.050973][T11554] __kvmalloc_node_noprof+0x483/0x670 [ 159.050991][T11554] ? ip_set_alloc+0x24/0x30 [ 159.051008][T11554] ? ip_set_alloc+0x24/0x30 [ 159.051046][T11554] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 159.051063][T11554] ip_set_alloc+0x24/0x30 [ 159.051079][T11554] hash_netiface_create+0x282/0x740 [ 159.051118][T11554] ? __pfx_hash_netiface_create+0x10/0x10 [ 159.051143][T11554] ip_set_create+0x3cc/0x970 [ 159.051175][T11554] ? __nla_parse+0x40/0x60 [ 159.051188][T11554] nfnetlink_rcv_msg+0x4c6/0x590 [ 159.051212][T11554] netlink_rcv_skb+0x123/0x220 [ 159.051311][T11554] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 159.051328][T11554] nfnetlink_rcv+0x167/0x16c0 [ 159.051342][T11554] ? kmem_cache_free+0xe4/0x3d0 [ 159.051360][T11554] ? __kfree_skb+0x109/0x150 [ 159.051439][T11554] ? nlmon_xmit+0x4f/0x60 [ 159.051453][T11554] ? consume_skb+0x49/0x150 [ 159.051545][T11554] ? nlmon_xmit+0x4f/0x60 [ 159.051558][T11554] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 159.051587][T11554] ? __dev_queue_xmit+0x1200/0x2000 [ 159.051629][T11554] ? __dev_queue_xmit+0x182/0x2000 [ 159.051702][T11554] ? ref_tracker_free+0x37d/0x3e0 [ 159.051723][T11554] ? __netlink_deliver_tap+0x4dc/0x500 [ 159.051742][T11554] netlink_unicast+0x5c0/0x690 [ 159.051779][T11554] netlink_sendmsg+0x58b/0x6b0 [ 159.051791][T11554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.051802][T11554] __sock_sendmsg+0x145/0x180 [ 159.051816][T11554] ____sys_sendmsg+0x31e/0x4e0 [ 159.051835][T11554] ___sys_sendmsg+0x17b/0x1d0 [ 159.051925][T11554] __x64_sys_sendmsg+0xd4/0x160 [ 159.051937][T11554] x64_sys_call+0x191e/0x3000 [ 159.051951][T11554] do_syscall_64+0xd2/0x200 [ 159.052015][T11554] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.052031][T11554] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.052049][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.052138][T11554] RIP: 0033:0x7f35736eefc9 [ 159.052149][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.052185][T11554] RSP: 002b:00007f3572157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.052197][T11554] RAX: ffffffffffffffda RBX: 00007f3573945fa0 RCX: 00007f35736eefc9 [ 159.052205][T11554] RDX: 00000000000088a4 RSI: 00002000000008c0 RDI: 0000000000000003 [ 159.052212][T11554] RBP: 00007f3573771f91 R08: 0000000000000000 R09: 0000000000000000 [ 159.052219][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.052227][T11554] R13: 00007f3573946038 R14: 00007f3573945fa0 R15: 00007ffc7ca9d3b8 [ 159.052237][T11554] [ 159.389901][T11554] memory: usage 307200kB, limit 307200kB, failcnt 1562 [ 159.396769][T11554] memory+swap: usage 307600kB, limit 9007199254740988kB, failcnt 0 [ 159.404683][T11554] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 159.412018][T11554] Memory cgroup stats for /syz4: [ 159.427966][T11554] cache 0 [ 159.435873][T11554] rss 0 [ 159.438623][T11554] shmem 0 [ 159.441574][T11554] mapped_file 0 [ 159.445021][T11554] dirty 0 [ 159.447957][T11554] writeback 0 [ 159.448530][T11583] __nla_validate_parse: 2 callbacks suppressed [ 159.448543][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3487'. [ 159.451289][T11554] workingset_refault_anon 154 [ 159.451299][T11554] workingset_refault_file 892 [ 159.451307][T11554] swap 409600 [ 159.478981][T11554] swapcached 0 [ 159.482376][T11554] pgpgin 165201 [ 159.485828][T11554] pgpgout 165201 [ 159.489366][T11554] pgfault 175400 [ 159.492994][T11554] pgmajfault 93 [ 159.496486][T11554] inactive_anon 0 [ 159.500104][T11554] active_anon 0 [ 159.503594][T11554] inactive_file 0 [ 159.507222][T11554] active_file 0 [ 159.510738][T11554] unevictable 0 [ 159.514195][T11554] hierarchical_memory_limit 314572800 [ 159.519555][T11554] hierarchical_memsw_limit 9223372036854771712 [ 159.525704][T11554] total_cache 0 [ 159.529144][T11554] total_rss 0 [ 159.532426][T11554] total_shmem 0 [ 159.535854][T11554] total_mapped_file 0 [ 159.539806][T11554] total_dirty 0 [ 159.543281][T11554] total_writeback 0 [ 159.547162][T11554] total_workingset_refault_anon 154 [ 159.552371][T11554] total_workingset_refault_file 892 [ 159.557590][T11554] total_swap 409600 [ 159.561394][T11554] total_swapcached 0 [ 159.565350][T11554] total_pgpgin 165202 [ 159.569371][T11554] total_pgpgout 165202 [ 159.573952][T11554] total_pgfault 175403 [ 159.577990][T11554] total_pgmajfault 93 [ 159.582055][T11554] total_inactive_anon 0 [ 159.586228][T11554] total_active_anon 0 [ 159.590246][T11554] total_inactive_file 0 [ 159.594408][T11554] total_active_file 0 [ 159.598386][T11554] total_unevictable 0 [ 159.602372][T11554] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3488,pid=11551,uid=0 [ 159.617008][T11554] Memory cgroup out of memory: Killed process 11551 (syz.4.3488) total-vm:96136kB, anon-rss:1136kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 159.634705][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3487'. [ 159.685364][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 159.685429][ T29] audit: type=1400 audit(159.664:4499): avc: denied { lock } for pid=11590 comm="+\{]" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=33131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 159.728318][ T29] audit: type=1400 audit(159.704:4500): avc: denied { execute } for pid=11592 comm="syz.8.3493" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.749033][ T29] audit: type=1400 audit(159.704:4501): avc: denied { execute_no_trans } for pid=11592 comm="syz.8.3493" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.810912][ T29] audit: type=1400 audit(159.774:4502): avc: denied { listen } for pid=11599 comm="syz.8.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.830026][ T29] audit: type=1400 audit(159.774:4503): avc: denied { create } for pid=11599 comm="syz.8.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.856877][T11602] bridge0: entered allmulticast mode [ 159.858120][ T29] audit: type=1400 audit(159.834:4504): avc: denied { create } for pid=11601 comm="syz.8.3497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 159.865496][T11602] pim6reg: entered allmulticast mode [ 159.882061][ T29] audit: type=1400 audit(159.834:4505): avc: denied { ioctl } for pid=11601 comm="syz.8.3497" path="socket:[33146]" dev="sockfs" ino=33146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 159.968525][ T29] audit: type=1400 audit(159.944:4506): avc: denied { bind } for pid=11609 comm="syz.9.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.987556][ T29] audit: type=1400 audit(159.944:4507): avc: denied { name_bind } for pid=11609 comm="syz.9.3501" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 160.008824][ T29] audit: type=1400 audit(159.944:4508): avc: denied { node_bind } for pid=11609 comm="syz.9.3501" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 160.046811][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 160.088608][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3506'. [ 160.102822][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3506'. [ 160.213492][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3519'. [ 160.243950][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3523'. [ 160.296732][T11665] lo speed is unknown, defaulting to 1000 [ 160.320082][T11668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11668 comm=syz.9.3526 [ 160.409207][T11680] bridge0: entered allmulticast mode [ 160.417349][T11680] pim6reg: entered allmulticast mode [ 160.513659][T11694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11694 comm=syz.7.3540 [ 161.027036][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3542'. [ 161.149373][T11728] loop4: detected capacity change from 0 to 512 [ 161.158910][T11728] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.182013][T11731] loop7: detected capacity change from 0 to 128 [ 161.196992][T11728] EXT4-fs (loop4): 1 truncate cleaned up [ 161.209675][T11728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.314400][T11741] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3561'. [ 161.315964][ T1069] kernel write not supported for file bpf-prog (pid: 1069 comm: kworker/0:2) [ 161.342109][T11741] IPVS: Error connecting to the multicast addr [ 161.408805][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3566'. [ 161.587552][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.591284][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 161.654682][T11764] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 162.652669][T11824] loop8: detected capacity change from 0 to 764 [ 162.661557][T11824] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 162.692594][T11824] program syz.8.3593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.605364][T11905] loop4: detected capacity change from 0 to 1024 [ 163.612565][T11905] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 163.623551][T11905] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 163.635278][T11905] JBD2: no valid journal superblock found [ 163.641128][T11905] EXT4-fs (loop4): Could not load journal inode [ 163.652397][T11905] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 163.975484][T11933] SELinux: failed to load policy [ 164.350557][T12001] netlink: 'syz.7.3673': attribute type 10 has an invalid length. [ 164.363295][T12001] team_slave_0: left promiscuous mode [ 164.368727][T12001] team_slave_1: left promiscuous mode [ 164.374277][T12001] dummy0: left promiscuous mode [ 164.392770][T12001] team0 (unregistering): Port device team_slave_0 removed [ 164.402214][T12001] team0 (unregistering): Port device team_slave_1 removed [ 164.413068][T12001] team0 (unregistering): Port device dummy0 removed [ 164.690815][T12014] lo speed is unknown, defaulting to 1000 [ 165.363185][T12054] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.514036][T12077] __nla_validate_parse: 6 callbacks suppressed [ 165.514060][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3706'. [ 165.605729][T12077] bridge_slave_1: left allmulticast mode [ 165.611418][T12077] bridge_slave_1: left promiscuous mode [ 165.617362][T12077] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.680067][T12077] bridge_slave_0: left allmulticast mode [ 165.685852][T12077] bridge_slave_0: left promiscuous mode [ 165.691760][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.717543][T12077] bridge0 (unregistering): left allmulticast mode [ 165.842636][T12086] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3721'. [ 165.851865][T12086] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3721'. [ 165.937577][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 165.937592][ T29] audit: type=1326 audit(165.914:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.9.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 165.987322][ T29] audit: type=1326 audit(165.914:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.9.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 166.010426][ T29] audit: type=1326 audit(165.914:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.9.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 166.033489][ T29] audit: type=1326 audit(165.924:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.9.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 166.120805][ T29] audit: type=1400 audit(166.094:4634): avc: denied { write } for pid=12108 comm="syz.0.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 166.123217][T12111] loop9: detected capacity change from 0 to 1024 [ 166.158746][T12111] EXT4-fs: Ignoring removed orlov option [ 166.173315][T12111] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.293262][ T29] audit: type=1400 audit(166.274:4635): avc: denied { execute } for pid=12127 comm="syz.8.3740" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 166.324348][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.427809][T12143] loop9: detected capacity change from 0 to 2048 [ 166.563373][T12150] loop8: detected capacity change from 0 to 1024 [ 166.590675][ T29] audit: type=1400 audit(166.564:4636): avc: denied { write } for pid=12157 comm="syz.9.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.610572][T12150] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 166.621608][T12150] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 166.642470][ T29] audit: type=1400 audit(166.624:4637): avc: denied { accept } for pid=12159 comm="syz.4.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 166.661424][T12150] JBD2: no valid journal superblock found [ 166.667382][T12150] EXT4-fs (loop8): Could not load journal inode [ 166.695197][T12150] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 166.744935][T12171] loop9: detected capacity change from 0 to 256 [ 166.755976][ T29] audit: type=1326 audit(166.734:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12173 comm="syz.8.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03cd9efc9 code=0x7ffc0000 [ 166.778990][ T29] audit: type=1326 audit(166.734:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12173 comm="syz.8.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03cd9efc9 code=0x7ffc0000 [ 166.955602][T12197] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 166.970927][T12197] SELinux: failed to load policy [ 167.090786][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3767'. [ 167.359501][T12233] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 167.367246][T12233] SELinux: failed to load policy [ 167.438511][T12245] 9p: Unknown access argument : -22 [ 167.593839][T12264] SELinux: failed to load policy [ 167.689795][T12288] tipc: Enabled bearer , priority 0 [ 167.697865][T12288] tipc: Disabling bearer [ 167.745941][T12297] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3808'. [ 167.802903][T12310] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3813'. [ 167.811948][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3813'. [ 167.856186][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3816'. [ 167.865898][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3816'. [ 167.995103][T12329] loop7: detected capacity change from 0 to 8192 [ 168.120918][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3829'. [ 168.765982][T12355] tipc: Started in network mode [ 168.770992][T12355] tipc: Node identity da5b3d9721ec, cluster identity 4711 [ 168.778386][T12355] tipc: Enabled bearer , priority 0 [ 168.787262][T12355] tipc: Disabling bearer [ 168.963457][T12395] tipc: Enabled bearer , priority 0 [ 168.972343][T12395] tipc: Disabling bearer [ 169.047679][T12410] loop7: detected capacity change from 0 to 512 [ 169.056112][T12410] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.3862: inode has both inline data and extents flags [ 169.070091][T12410] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3862: couldn't read orphan inode 15 (err -117) [ 169.082622][T12410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.118411][ T8429] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.155147][T12419] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 169.173756][T12423] netlink: 'syz.7.3868': attribute type 6 has an invalid length. [ 169.218340][T12428] loop7: detected capacity change from 0 to 512 [ 169.238925][T12428] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.254117][T12428] EXT4-fs (loop7): mount failed [ 169.599235][T12438] lo speed is unknown, defaulting to 1000 [ 169.617908][T12443] tipc: Started in network mode [ 169.622924][T12443] tipc: Node identity 9e839c33c2d4, cluster identity 4711 [ 169.630085][T12443] tipc: Enabled bearer , priority 0 [ 169.651395][T12443] tipc: Disabling bearer [ 169.754499][T12455] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 169.830174][T12461] loop8: detected capacity change from 0 to 512 [ 169.871821][T12461] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.886617][T12461] EXT4-fs (loop8): mount failed [ 169.916416][T12475] loop8: detected capacity change from 0 to 512 [ 169.946388][T12475] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3889: inode has both inline data and extents flags [ 169.963949][T12475] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3889: couldn't read orphan inode 15 (err -117) [ 169.976953][T12475] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.057160][T12484] tipc: Enabled bearer , priority 0 [ 170.065426][T12484] tipc: Disabling bearer [ 170.074856][ T8838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.125293][T12491] loop7: detected capacity change from 0 to 1024 [ 170.132267][T12491] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 170.143297][T12491] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 170.154951][T12491] JBD2: no valid journal superblock found [ 170.160740][T12491] EXT4-fs (loop7): Could not load journal inode [ 170.177512][T12491] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 170.204134][T12493] lo speed is unknown, defaulting to 1000 [ 170.791444][T12503] loop9: detected capacity change from 0 to 512 [ 170.807527][T12509] __nla_validate_parse: 6 callbacks suppressed [ 170.807593][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3905'. [ 170.815260][T12503] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.822982][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3905'. [ 170.823000][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3905'. [ 170.823141][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3905'. [ 170.838226][T12503] EXT4-fs (loop9): mount failed [ 170.846729][T12509] netlink: 'syz.8.3905': attribute type 6 has an invalid length. [ 170.929104][ T3851] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.973081][T12519] loop9: detected capacity change from 0 to 512 [ 170.982291][T12519] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.3907: inode has both inline data and extents flags [ 170.996978][T12519] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3907: couldn't read orphan inode 15 (err -117) [ 171.013225][T12519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.040161][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.073098][T12533] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 171.082605][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 171.082619][ T29] audit: type=1400 audit(171.064:4838): avc: denied { relabelto } for pid=12531 comm="syz.7.3914" name="memfd:" dev="hugetlbfs" ino=36634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 171.115054][ T29] audit: type=1400 audit(171.064:4839): avc: denied { associate } for pid=12531 comm="syz.7.3914" name="memfd:" dev="hugetlbfs" ino=36634 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 171.175662][ T29] audit: type=1326 audit(171.154:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 171.199190][ T29] audit: type=1326 audit(171.154:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 171.216969][T12541] netlink: 'syz.4.3916': attribute type 12 has an invalid length. [ 171.222223][ T29] audit: type=1326 audit(171.154:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 171.252727][ T29] audit: type=1326 audit(171.154:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 171.275713][ T29] audit: type=1326 audit(171.154:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 171.298614][ T29] audit: type=1326 audit(171.154:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 171.321465][ T29] audit: type=1326 audit(171.154:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 171.345162][ T29] audit: type=1326 audit(171.154:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 171.376866][T12540] capability: warning: `' uses 32-bit capabilities (legacy support in use) [ 172.940752][ T3775] Bluetooth: hci0: command 0x1003 tx timeout [ 172.946848][ T3587] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.642860][T12565] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 173.697666][ T3375] IPVS: starting estimator thread 0... [ 173.790866][T12572] IPVS: using max 2928 ests per chain, 146400 per kthread [ 173.991855][T12623] sd 0:0:1:0: device reset [ 174.096742][T12634] netlink: 'syz.0.3962': attribute type 3 has an invalid length. [ 174.236534][T12648] serio: Serial port ptm0 [ 174.611011][T12697] lo speed is unknown, defaulting to 1000 [ 174.623968][T12699] SELinux: policydb version 0 does not match my version range 15-35 [ 174.652386][T12699] SELinux: failed to load policy [ 174.809323][T12722] SELinux: policydb version -2036594179 does not match my version range 15-35 [ 174.828462][T12722] SELinux: failed to load policy [ 175.034246][T12746] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 175.088303][T12755] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4016'. [ 175.111146][T12757] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4017'. [ 175.140544][T12762] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4018'. [ 175.149809][T12762] tipc: Enabling of bearer rejected, failed to enable media [ 175.331597][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4034'. [ 175.784024][T12838] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.846408][T12849] loop9: detected capacity change from 0 to 512 [ 175.863031][T12849] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 175.875136][T12855] loop7: detected capacity change from 0 to 256 [ 175.892746][T12838] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.930352][T12849] EXT4-fs (loop9): 1 truncate cleaned up [ 175.936598][T12849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.952422][T12838] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.975794][T12864] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4065'. [ 176.021197][T12838] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.155129][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4069'. [ 176.165617][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.191886][ T3818] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.211077][ T3837] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.229402][ T3837] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.278773][ T3837] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.357518][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 176.357533][ T29] audit: type=1400 audit(176.334:4978): avc: denied { write } for pid=12888 comm="syz.9.4076" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.496673][ T29] audit: type=1400 audit(176.474:4979): avc: denied { write } for pid=12895 comm="syz.7.4080" path="socket:[38310]" dev="sockfs" ino=38310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 176.570820][ T29] audit: type=1400 audit(176.524:4980): avc: denied { setopt } for pid=12899 comm="syz.0.4081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.610962][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4084'. [ 176.635218][ T29] audit: type=1400 audit(176.614:4981): avc: denied { mount } for pid=12908 comm="syz.0.4086" name="/" dev="gadgetfs" ino=3808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 176.841805][ T29] audit: type=1326 audit(176.824:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 176.864839][ T29] audit: type=1326 audit(176.824:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 176.897016][ T29] audit: type=1326 audit(176.864:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 176.919963][ T29] audit: type=1326 audit(176.864:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 176.943267][ T29] audit: type=1326 audit(176.864:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 176.967260][ T29] audit: type=1326 audit(176.934:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 177.011668][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4101'. [ 177.053124][T12946] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12946 comm=syz.4.4103 [ 177.065903][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4101'. [ 177.242201][T12969] netlink: 'syz.9.4114': attribute type 3 has an invalid length. [ 177.371189][T12985] loop7: detected capacity change from 0 to 8192 [ 177.431706][T12996] loop0: detected capacity change from 0 to 2048 [ 177.452054][T12996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.501215][T12996] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.4126: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 177.536705][T13010] loop7: detected capacity change from 0 to 1024 [ 177.550679][T13010] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 177.561689][T13010] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 177.578711][T13010] JBD2: no valid journal superblock found [ 177.585155][T13010] EXT4-fs (loop7): Could not load journal inode [ 177.628737][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.711585][T13043] atomic_op ffff888104384928 conn xmit_atomic 0000000000000000 [ 177.803982][T13061] tipc: New replicast peer: 255.255.255.255 [ 177.810168][T13061] tipc: Enabled bearer , priority 10 [ 177.829960][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'. [ 177.839090][T13061] tipc: Disabling bearer [ 177.863133][T13069] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 177.878823][T13075] loop0: detected capacity change from 0 to 128 [ 177.879053][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4162'. [ 177.906623][T13075] FAT-fs (loop0): Directory bread(block 32) failed [ 177.936983][T13075] FAT-fs (loop0): Directory bread(block 33) failed [ 177.943714][T13075] FAT-fs (loop0): Directory bread(block 34) failed [ 177.950455][T13075] FAT-fs (loop0): Directory bread(block 35) failed [ 177.958393][T13075] FAT-fs (loop0): Directory bread(block 36) failed [ 177.965229][T13075] FAT-fs (loop0): Directory bread(block 37) failed [ 178.003910][T13075] FAT-fs (loop0): Directory bread(block 38) failed [ 178.010804][T13075] FAT-fs (loop0): Directory bread(block 39) failed [ 178.017403][T13075] FAT-fs (loop0): Directory bread(block 40) failed [ 178.024970][T13075] FAT-fs (loop0): Directory bread(block 41) failed [ 178.073547][T13100] loop9: detected capacity change from 0 to 512 [ 178.114710][T13100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.142537][T13111] atomic_op ffff88811c09fd28 conn xmit_atomic 0000000000000000 [ 178.172992][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.191533][T13116] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4183'. [ 178.205690][T13116] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4183'. [ 178.299576][T13134] IPv6: Can't replace route, no match found [ 178.700779][T13191] random: crng reseeded on system resumption [ 178.742775][T13195] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4220'. [ 178.809087][T13207] 0X: renamed from caif0 [ 178.815538][T13207] 0X: entered allmulticast mode [ 178.820836][T13207] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 179.256883][T13275] IPv6: Can't replace route, no match found [ 179.914101][T13328] xt_hashlimit: max too large, truncated to 1048576 [ 180.201038][T13379] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 180.230211][T13382] netlink: 'syz.4.4309': attribute type 1 has an invalid length. [ 180.251160][T13386] program syz.7.4305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.711769][T13434] lo speed is unknown, defaulting to 1000 [ 180.946436][T13459] netlink: 'syz.7.4337': attribute type 1 has an invalid length. [ 181.298512][T13477] loop0: detected capacity change from 0 to 256 [ 181.350557][T13485] random: crng reseeded on system resumption [ 181.642569][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 181.642648][ T29] audit: type=1400 audit(181.624:5233): avc: denied { relabelfrom } for pid=13502 comm="syz.7.4355" name="NETLINK" dev="sockfs" ino=40257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.713219][ T29] audit: type=1400 audit(181.654:5234): avc: denied { relabelto } for pid=13502 comm="syz.7.4355" name="NETLINK" dev="sockfs" ino=40257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 181.743242][T13511] loop9: detected capacity change from 0 to 512 [ 181.778154][T13511] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.4359: inode has both inline data and extents flags [ 181.802759][ T29] audit: type=1326 audit(181.734:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="syz.0.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 181.825932][ T29] audit: type=1326 audit(181.734:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="syz.0.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 181.873124][T13511] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.4359: couldn't read orphan inode 15 (err -117) [ 181.885586][T13511] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.915377][ T29] audit: type=1326 audit(181.884:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.4.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 181.938285][ T29] audit: type=1326 audit(181.884:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.4.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 181.961239][ T29] audit: type=1326 audit(181.884:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.4.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 181.984127][ T29] audit: type=1326 audit(181.884:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.4.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 182.007031][ T29] audit: type=1326 audit(181.884:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.4.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35736eefc9 code=0x7ffc0000 [ 182.035286][T13511] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 182.066037][ T29] audit: type=1326 audit(181.894:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="syz.0.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efbd7efc9 code=0x7ffc0000 [ 182.145208][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.188440][T13535] vcan0: entered allmulticast mode [ 182.215995][T13535] pim6reg: left allmulticast mode [ 182.235011][T13535] vcan0: left allmulticast mode [ 182.335908][T13551] __nla_validate_parse: 8 callbacks suppressed [ 182.335973][T13551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4376'. [ 182.430037][T13557] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 182.451215][T13557] vhci_hcd: invalid port number 96 [ 182.456353][T13557] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 182.507616][T13565] netem: change failed [ 182.643981][T13581] loop9: detected capacity change from 0 to 128 [ 182.690166][T13581] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 182.695489][T13586] bond1: entered promiscuous mode [ 182.707512][T13586] bond1: entered allmulticast mode [ 182.720834][T13586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.731421][T13586] bond1 (unregistering): Released all slaves [ 182.811279][ T8874] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.890253][T13602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4400'. [ 182.899319][T13602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4400'. [ 182.954867][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4402'. [ 183.007294][T13612] netlink: 'wg1': attribute type 6 has an invalid length. [ 183.041769][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4406'. [ 183.114082][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4406'. [ 183.202641][T13624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4412'. [ 183.297067][T13642] loop0: detected capacity change from 0 to 128 [ 183.310714][T13635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.385525][T13638] loop9: detected capacity change from 0 to 8192 [ 183.422745][T13648] Timeout policy `syz1' can only be used by L3 protocol number 1 [ 183.454610][T13638] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 1044) [ 183.462850][T13638] FAT-fs (loop9): Filesystem has been set read-only [ 183.682722][T13679] loop9: detected capacity change from 0 to 512 [ 183.689196][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4433'. [ 183.690488][T13679] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 183.723016][T13679] EXT4-fs (loop9): 1 truncate cleaned up [ 183.739235][T13679] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.855459][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.893558][T13695] loop9: detected capacity change from 0 to 512 [ 183.961252][T13695] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 183.980460][T13695] EXT4-fs (loop9): orphan cleanup on readonly fs [ 184.005670][T13695] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.4441: corrupted inode contents [ 184.034819][T13695] EXT4-fs (loop9): Remounting filesystem read-only [ 184.051368][T13695] EXT4-fs (loop9): 1 truncate cleaned up [ 184.057456][ T3851] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 184.068081][ T3851] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 184.130696][ T3851] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 184.190040][T13695] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.280089][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.372591][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4459'. [ 184.413317][T13737] hub 9-0:1.0: USB hub found [ 184.418042][T13737] hub 9-0:1.0: 8 ports detected [ 184.449301][T13730] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 184.464225][ T1069] hid_parser_main: 17 callbacks suppressed [ 184.464244][ T1069] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 184.472291][T13742] loop9: detected capacity change from 0 to 1024 [ 184.477818][ T1069] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 184.492679][ T1069] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 184.497172][T13730] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 184.509192][ T1069] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 184.534863][T13742] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.588271][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.608883][T13752] netlink: 'syz.9.4467': attribute type 3 has an invalid length. [ 184.676712][T13758] sd 0:0:1:0: device reset [ 184.914254][T13784] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.954698][T13795] SELinux: policydb version 0 does not match my version range 15-35 [ 184.973858][T13795] SELinux: failed to load policy [ 185.080169][T13813] SELinux: policydb version -2036594179 does not match my version range 15-35 [ 185.089964][T13813] SELinux: failed to load policy [ 185.182414][T13826] netlink: 168 bytes leftover after parsing attributes in process `syz.9.4511'. [ 185.191638][T13826] tipc: Enabling of bearer rejected, failed to enable media [ 185.330237][T13840] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 185.567925][T13869] loop9: detected capacity change from 0 to 512 [ 185.585902][T13869] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 185.614721][T13869] EXT4-fs (loop9): 1 truncate cleaned up [ 185.628580][T13869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.706854][T13884] serio: Serial port ptm0 [ 185.784469][ T8874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.151632][T13936] atomic_op ffff888159ece528 conn xmit_atomic 0000000000000000 [ 186.223279][ T3818] Bluetooth: hci0: Frame reassembly failed (-84) [ 186.716986][T13984] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.804772][T13984] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.855251][T13984] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.913695][T13984] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.987336][ T3837] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.007133][ T3837] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.026218][ T3818] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.035126][ T3818] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.294715][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 187.294731][ T29] audit: type=1326 audit(187.274:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.9.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 187.328027][ T29] audit: type=1326 audit(187.304:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.9.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 187.351010][ T29] audit: type=1326 audit(187.304:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.9.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 187.373937][ T29] audit: type=1326 audit(187.304:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.9.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 187.396906][ T29] audit: type=1326 audit(187.304:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.9.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 187.401427][T14027] __nla_validate_parse: 7 callbacks suppressed [ 187.401518][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'. [ 187.420057][ T29] audit: type=1326 audit(187.304:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.9.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 187.457936][ T29] audit: type=1326 audit(187.304:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.9.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 187.480815][ T29] audit: type=1326 audit(187.304:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.9.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 187.503689][ T29] audit: type=1326 audit(187.304:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.9.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 187.544741][ T29] audit: type=1326 audit(187.504:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.9.4588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdacbefc9 code=0x7ffc0000 [ 187.567989][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'. [ 187.578244][T14029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14029 comm=syz.9.4590 [ 188.300768][ T3587] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.301331][ T3775] Bluetooth: hci0: command 0x1003 tx timeout [ 188.723304][T14050] loop9: detected capacity change from 0 to 32768 [ 188.780900][ T3406] ================================================================== [ 188.788989][ T3406] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 188.795993][ T3406] [ 188.798293][ T3406] read-write to 0xffff888237d29de4 of 4 bytes by task 7452 on cpu 1: [ 188.806331][ T3406] wq_worker_running+0x95/0x120 [ 188.811159][ T3406] schedule_timeout+0xb7/0x170 [ 188.815906][ T3406] msleep+0x50/0x90 [ 188.819695][ T3406] nsim_fib_event_work+0x42e6/0x4790 [ 188.824957][ T3406] process_scheduled_works+0x4ce/0x9d0 [ 188.830399][ T3406] worker_thread+0x582/0x770 [ 188.834966][ T3406] kthread+0x489/0x510 [ 188.839017][ T3406] ret_from_fork+0x122/0x1b0 [ 188.843590][ T3406] ret_from_fork_asm+0x1a/0x30 [ 188.848331][ T3406] [ 188.850635][ T3406] read to 0xffff888237d29de4 of 4 bytes by task 3406 on cpu 0: [ 188.858147][ T3406] kick_pool+0x49/0x2d0 [ 188.862278][ T3406] __queue_work+0x8cb/0xb50 [ 188.866760][ T3406] queue_work_on+0xd1/0x160 [ 188.871269][ T3406] wg_packet_encrypt_worker+0xc0a/0xe10 [ 188.876806][ T3406] process_scheduled_works+0x4ce/0x9d0 [ 188.882245][ T3406] worker_thread+0x582/0x770 [ 188.886807][ T3406] kthread+0x489/0x510 [ 188.890854][ T3406] ret_from_fork+0x122/0x1b0 [ 188.895420][ T3406] ret_from_fork_asm+0x1a/0x30 [ 188.900170][ T3406] [ 188.902470][ T3406] value changed: 0x00000000 -> 0x00000001 [ 188.908173][ T3406] [ 188.910476][ T3406] Reported by Kernel Concurrency Sanitizer on: [ 188.916637][ T3406] CPU: 0 UID: 0 PID: 3406 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.926422][ T3406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 188.936456][ T3406] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 188.942941][ T3406] ================================================================== [ 194.860786][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!